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", @nested={0x90, 0x2, [@generic="5b77ec48079f426fd3c8cf88974d9a8b", @typed={0x8, 0x4b, @pid=r3}, @generic="f198b0d2c09916edf0b2adb333160b42fa28e81a15f4dd2f48560707745025e58941e819684d5b4fe47ce9d0f30f91c949f80a7f3741dfdc25ae50aa5f8eba291116039516ac83a9fcecd1d36843ab5287fe9ee5109cf6472d21cb18fa5a81ae2e04e25b4bd1e35265452d5d18d235f9e525cc6e"]}, @typed={0x8, 0x5b, @u32=0x81}, @generic="6f96dfc30969266b59589621eb4b9fbdf75b618dfa1608e3356002d2faab68aa51c354f7307def8351ff27025536a9dde8025bf09f5dba743d3b55fe474331f3d0e7cb85783a8a586b3141c1712cfbec4e9093ec3824997f3c36a2c7bbf0c6b1735a7a70b0ce7f083dc1", @generic="56c994c3186ef3edf557e4381b72f8dbf3bc2cce7977d87a29d196d98c9d067b2cb7a51432a98346c0b5677735767b601cfa19ccf9ca70a0b430e9b3e936031824b47fd7c4487136848b1c60c14636037c576d68e6f63461df57e99ced5b7c506438992944b30c1e86f9850fca55e066c8d865114f3499086448857605efbe9f1802f4deeb974a40240c58cbd5aa", @generic="25a7a0311747638f6a06e32bec09ae7573feda905cb45fc88d866f54d43f96ceac6ef6ca60b96ee6579f71cef06081a4ca7e2276e459138c219083f38226db2c8d8897cfc803b0ec7356990ade2490f91b601c4e4c00e8529e633611d106c0487b1b1627fb121aa2b0aa1ff229f4d421248db9fda1fa14dce848e5ebb6068d44c7e8a0e5e3d5c71b886edb0dc893a9ee", @generic="bae9e30e0210192e8b00426ee8948e14174d4f0b880a2972639d10dc3ac6417c1e5f7682ec7cc5c415d9dc445b8e0210c38c100280157dcd64cbc90f06b0031406c359ee73cb89b811def42d2225d2b0173465bad2ba109151c57ec880ddcd4240978ba00fd899aa5b8e30a7b8814f4f2dcf133311171bea941fa2165ac866867d57c6970eeff9c10d3d020c448c2081838c48863230d032c1dbd2de7bde49653ef7828486e0b1201ffdf442dcf09c6275db298771a4f3c57dd9a8f34a271819", @generic="d57d4d3084c15ee76b1b648bf6fb1255690fbef7bbcc33bc525f05737778b4f6282385e50b21c5", @generic="cc76500df4d277045f39470dee0c3c3722b0ebfcd682338290c5aa310c10d7dae18a7d8b40611d995a7b4b6f4d716e69d5e21fa8048673a408475f15"]}, 0x1364}, 0x1, 0x0, 0x0, 0x40020}, 0x4000) 18:42:16 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @broadcast}, @tcp={{0x0, 0x0, 0x42424242, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 466.033384][T12900] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 466.087219][T12940] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 466.116789][ T5] usb 2-1: new high-speed USB device number 13 using dummy_hcd 18:42:16 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffff2b, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000016003f7f00000000000000000a"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 466.135526][ T17] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 466.273487][T12900] usb 5-1: Using ep0 maxpacket: 8 [ 466.343889][T12940] usb 1-1: Using ep0 maxpacket: 32 [ 466.367816][ T5] usb 2-1: Using ep0 maxpacket: 8 [ 466.393999][T12900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 466.405448][T12900] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 466.419018][T12900] usb 5-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.40 [ 466.428295][T12900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.438777][T12900] usb 5-1: config 0 descriptor?? [ 466.483927][T12940] usb 1-1: New USB device found, idVendor=055d, idProduct=9002, bcdDevice=7c.e5 [ 466.489335][T12900] usbhid 5-1:0.0: can't add hid device: -22 [ 466.493601][T12940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.499521][T12900] usbhid: probe of 5-1:0.0 failed with error -22 [ 466.529436][T12940] usb 1-1: config 0 descriptor?? [ 466.543920][ T5] usb 2-1: New USB device found, idVendor=0c45, idProduct=6040, bcdDevice=93.68 [ 466.553494][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.555912][ T17] usb 6-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a [ 466.570974][ T17] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.582098][ T5] usb 2-1: config 0 descriptor?? [ 466.597396][T12940] pwc: Samsung SNC-35E (v3.0) USB webcam detected. [ 466.606111][ T17] usb 6-1: config 0 descriptor?? [ 466.641071][ T5] gspca_main: sonixj-2.14.0 probing 0c45:6040 [ 466.648441][ T17] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 466.657955][ T17] input: xirlink-cit as /devices/platform/dummy_hcd.5/usb6/6-1/input/input11 [ 466.690557][T12900] usb 5-1: USB disconnect, device number 23 [ 466.783841][T12940] pwc: recv_control_msg error -71 req 06 val 3700 [ 466.804916][T12940] pwc: Failed to set LED on/off time (-71) [ 466.824257][T12940] pwc: send_video_command error -71 [ 466.829771][T12940] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 466.837979][T12940] Philips webcam: probe of 1-1:0.0 failed with error -71 [ 466.856524][ T17] usb 6-1: USB disconnect, device number 16 [ 466.864666][T12940] usb 1-1: USB disconnect, device number 18 18:42:17 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) creat(0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000000301ffff808fc201000000000000101b"], 0x14}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(0x0) 18:42:17 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000040)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x6, {0x6, 0x37385ef6f197895f, "010004f2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 18:42:17 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0xe084, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000002ac, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 467.553766][ T17] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 467.635904][T12940] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 467.844079][ T17] usb 1-1: Using ep0 maxpacket: 32 [ 467.964981][ T5] input: sonixj as /devices/platform/dummy_hcd.1/usb2/2-1/input/input12 [ 467.985713][ T17] usb 1-1: New USB device found, idVendor=055d, idProduct=9002, bcdDevice=7c.e5 [ 467.995049][ T17] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.031316][ T17] usb 1-1: config 0 descriptor?? [ 468.092942][ T17] pwc: Samsung SNC-35E (v3.0) USB webcam detected. [ 468.100811][T12940] usb 6-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a [ 468.110368][T12940] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.159200][T12940] usb 6-1: config 0 descriptor?? [ 468.177970][T12852] usb 2-1: USB disconnect, device number 13 [ 468.210112][T12940] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 468.219554][T12940] input: xirlink-cit as /devices/platform/dummy_hcd.5/usb6/6-1/input/input13 [ 468.288285][ T17] pwc: recv_control_msg error -71 req 06 val 3700 [ 468.313609][ T17] pwc: Failed to set LED on/off time (-71) [ 468.333724][ T17] pwc: send_video_command error -71 [ 468.339041][ T17] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 468.346912][ T17] Philips webcam: probe of 1-1:0.0 failed with error -71 [ 468.370911][ T17] usb 1-1: USB disconnect, device number 19 [ 468.406532][T12940] usb 6-1: USB disconnect, device number 17 18:42:18 executing program 5: r0 = socket(0x2, 0x3, 0x0) getsockopt$sock_timeval(r0, 0xffff, 0x100b, 0x0, 0x0) 18:42:18 executing program 3: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x8000000200000402, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 18:42:18 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) creat(0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000000301ffff808fc201000000000000101b"], 0x14}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(0x0) 18:42:18 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000040)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x6, {0x6, 0x37385ef6f197895f, "010004f2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 468.954581][ T5] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 469.245194][ T5] usb 2-1: Using ep0 maxpacket: 8 [ 469.365993][ T5] usb 2-1: New USB device found, idVendor=0c45, idProduct=6040, bcdDevice=93.68 [ 469.375484][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.388431][ T5] usb 2-1: config 0 descriptor?? [ 469.438195][ T5] gspca_main: sonixj-2.14.0 probing 0c45:6040 18:42:19 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe4, 0x97, 0x9d, 0x8, 0xc45, 0x6040, 0x9368, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6c, 0x94, 0x40}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0xac, &(0x7f0000001a40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x491, &(0x7f0000000480)={0x0, 0x0, 0x1, "11"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 18:42:19 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x0) utimensat(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={{}, {0x77359400}}, 0x0) 18:42:19 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x29, 0xc3, 0x6a, 0x20, 0x55d, 0x9002, 0x7ce5, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3b, 0x2, 0xa7}}]}}]}}, 0x0) 18:42:19 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1fe, 0x400000000000) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4004004) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'team_slave_1\x00', 0x4fff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x3) accept4(0xffffffffffffffff, &(0x7f0000000480)=@hci, 0x0, 0x0) accept(r0, &(0x7f0000000640)=@hci, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000380), 0x3c5, 0x0}, 0x0) r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) ftruncate(r4, 0x2007fff) pipe(&(0x7f0000000340)={0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r0, r4, &(0x7f0000d83ff8), 0x8000fffffffe) 18:42:19 executing program 2: r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x6, {0x6, 0x37385ef6f197895f, "010004f2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 18:42:19 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000680)='/dev/uhid\x00', 0x0, 0x0) ppoll(&(0x7f00000007c0)=[{r2}], 0x1, &(0x7f0000000300)={0x0, 0x989680}, 0x0, 0x0) [ 469.741916][ T5] gspca_sonixj: reg_w1 err -71 [ 469.748646][ T5] sonixj: probe of 2-1:0.0 failed with error -71 [ 469.815227][ T5] usb 2-1: USB disconnect, device number 14 [ 469.842799][T15174] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 469.851535][T15174] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 18:42:20 executing program 3: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) keyctl$describe(0x6, r0, 0x0, 0x0) [ 469.922175][T15174] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 18:42:20 executing program 3: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x0) keyctl$revoke(0x3, r0) 18:42:20 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x1000000200200103) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) keyctl$revoke(0x3, r0) 18:42:20 executing program 3: creat(&(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read'}}]}}) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r2, r1, 0x0, 0x80000005) 18:42:20 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) keyctl$revoke(0x3, r0) [ 470.143374][T12900] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 470.223334][ T5] usb 2-1: new high-speed USB device number 15 using dummy_hcd 18:42:20 executing program 2: r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x6, {0x6, 0x37385ef6f197895f, "010004f2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 470.383462][T12900] usb 1-1: Using ep0 maxpacket: 32 [ 470.463801][ T5] usb 2-1: Using ep0 maxpacket: 8 [ 470.503668][T12900] usb 1-1: New USB device found, idVendor=055d, idProduct=9002, bcdDevice=7c.e5 [ 470.513935][T12900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.525237][T12900] usb 1-1: config 0 descriptor?? [ 470.567628][T12900] pwc: Samsung SNC-35E (v3.0) USB webcam detected. [ 470.586315][T15174] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 470.603952][ T5] usb 2-1: New USB device found, idVendor=0c45, idProduct=6040, bcdDevice=93.68 [ 470.613938][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.627729][ T5] usb 2-1: config 0 descriptor?? [ 470.643881][T15174] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 470.688531][ T5] gspca_main: sonixj-2.14.0 probing 0c45:6040 [ 470.774104][T12900] pwc: recv_control_msg error -71 req 06 val 3700 [ 470.793623][T12900] pwc: Failed to set LED on/off time (-71) [ 470.813673][T12900] pwc: send_video_command error -71 [ 470.819156][T12900] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 470.827371][T12900] Philips webcam: probe of 1-1:0.0 failed with error -71 [ 470.842858][T12900] usb 1-1: USB disconnect, device number 20 [ 472.005396][ T5] input: sonixj as /devices/platform/dummy_hcd.1/usb2/2-1/input/input14 [ 472.211225][T12940] usb 2-1: USB disconnect, device number 15 18:42:22 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe4, 0x97, 0x9d, 0x8, 0xc45, 0x6040, 0x9368, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6c, 0x94, 0x40}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0xac, &(0x7f0000001a40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x491, &(0x7f0000000480)={0x0, 0x0, 0x1, "11"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 18:42:22 executing program 3: syz_emit_ethernet(0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6076580000140600fe8000000000000000002d00000000aafe8000000000000000000000000000aa00004e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c2000090780000"], 0x0) 18:42:22 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x0, 0x0, 0x0, 0x0, 0x0) 18:42:22 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r2, 0x107, 0x9, &(0x7f00000002c0), &(0x7f0000000300)=0x4) 18:42:22 executing program 2: r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x6, {0x6, 0x37385ef6f197895f, "010004f2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 18:42:22 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x29, 0xc3, 0x6a, 0x20, 0x55d, 0x9002, 0x7ce5, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3b, 0x2, 0xa7}}]}}]}}, 0x0) 18:42:22 executing program 3: syz_emit_ethernet(0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6076580000140600fe8000000000000000002d00000000aafe8000000000000000000000000000aa00004e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c2000090780000"], 0x0) 18:42:23 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, 0x0, &(0x7f0000000180)=""/109, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x5) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001840)={0x8, 0x0, [{0x0, 0xfffffffffffffd57, &(0x7f0000000280)=""/88}, {0x0, 0x61, &(0x7f0000000300)=""/97}, {0x0, 0x50, &(0x7f0000000380)=""/80}, {0x0, 0xed, &(0x7f0000000480)=""/237}, {0x0, 0xdc, &(0x7f0000000580)=""/220}, {0x0, 0x44, &(0x7f0000000700)=""/68}, {0x0, 0x90, &(0x7f0000000780)=""/144}, {0x0, 0x1000, &(0x7f0000000840)=""/4096}]}) 18:42:23 executing program 5: 18:42:23 executing program 3: 18:42:23 executing program 5: [ 473.064934][ T5] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 473.093433][T12940] usb 2-1: new high-speed USB device number 16 using dummy_hcd 18:42:23 executing program 3: [ 473.313788][ T5] usb 1-1: Using ep0 maxpacket: 32 [ 473.343717][T12940] usb 2-1: Using ep0 maxpacket: 8 [ 473.433828][ T5] usb 1-1: New USB device found, idVendor=055d, idProduct=9002, bcdDevice=7c.e5 [ 473.443175][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.453132][ T5] usb 1-1: config 0 descriptor?? [ 473.473530][T12940] usb 2-1: New USB device found, idVendor=0c45, idProduct=6040, bcdDevice=93.68 [ 473.482864][T12940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.492753][T12940] usb 2-1: config 0 descriptor?? [ 473.500030][ T5] pwc: Samsung SNC-35E (v3.0) USB webcam detected. [ 473.538108][T12940] gspca_main: sonixj-2.14.0 probing 0c45:6040 [ 473.733475][ T5] pwc: recv_control_msg error -71 req 06 val 3700 [ 473.753670][ T5] pwc: Failed to set LED on/off time (-71) [ 473.775659][ T5] pwc: send_video_command error -71 [ 473.781208][ T5] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 473.789234][ T5] Philips webcam: probe of 1-1:0.0 failed with error -71 [ 473.799694][ T5] usb 1-1: USB disconnect, device number 21 [ 474.834363][T12940] input: sonixj as /devices/platform/dummy_hcd.1/usb2/2-1/input/input15 [ 475.039402][ T5] usb 2-1: USB disconnect, device number 16 18:42:25 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe4, 0x97, 0x9d, 0x8, 0xc45, 0x6040, 0x9368, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6c, 0x94, 0x40}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0xac, &(0x7f0000001a40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x491, &(0x7f0000000480)={0x0, 0x0, 0x1, "11"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 18:42:25 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x29, 0xc3, 0x6a, 0x20, 0x55d, 0x9002, 0x7ce5, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3b, 0x2, 0xa7}}]}}]}}, 0x0) 18:42:25 executing program 5: 18:42:25 executing program 3: creat(&(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r2, r1, 0x0, 0x80000005) 18:42:25 executing program 4: 18:42:25 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x4, 0xb2, 0x18, 0x0, 0x17e9, 0x8226, 0x8118, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x6, {0x6, 0x37385ef6f197895f, "010004f2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 18:42:25 executing program 4: 18:42:25 executing program 5: 18:42:25 executing program 3: 18:42:25 executing program 4: 18:42:25 executing program 5: 18:42:26 executing program 4: [ 475.886874][ T17] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 475.894795][T12940] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 475.914232][ T5] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 476.133236][T12940] usb 1-1: Using ep0 maxpacket: 32 [ 476.163655][ T5] usb 2-1: Using ep0 maxpacket: 8 [ 476.163943][ T17] usb 3-1: device descriptor read/64, error 18 [ 476.253405][T12940] usb 1-1: New USB device found, idVendor=055d, idProduct=9002, bcdDevice=7c.e5 [ 476.262745][T12940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.274459][T12940] usb 1-1: config 0 descriptor?? [ 476.293963][ T5] usb 2-1: New USB device found, idVendor=0c45, idProduct=6040, bcdDevice=93.68 [ 476.303383][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.312889][ T5] usb 2-1: config 0 descriptor?? [ 476.319206][T12940] pwc: Samsung SNC-35E (v3.0) USB webcam detected. [ 476.357465][ T5] gspca_main: sonixj-2.14.0 probing 0c45:6040 [ 476.523545][T12940] pwc: recv_control_msg error -71 req 06 val 3700 [ 476.553479][T12940] pwc: Failed to set LED on/off time (-71) [ 476.563964][ T17] usb 3-1: device descriptor read/64, error 18 [ 476.573430][T12940] pwc: send_video_command error -71 [ 476.578797][T12940] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 476.587945][T12940] Philips webcam: probe of 1-1:0.0 failed with error -71 [ 476.597602][T12940] usb 1-1: USB disconnect, device number 22 [ 476.833343][ T17] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 477.103570][ T17] usb 3-1: device descriptor read/64, error 18 [ 477.493264][ T17] usb 3-1: device descriptor read/64, error 18 [ 477.613430][ T17] usb usb3-port1: attempt power cycle [ 477.654834][ T5] input: sonixj as /devices/platform/dummy_hcd.1/usb2/2-1/input/input16 [ 477.861216][T12940] usb 2-1: USB disconnect, device number 17 18:42:28 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe4, 0x97, 0x9d, 0x8, 0xc45, 0x6040, 0x9368, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6c, 0x94, 0x40}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0xac, &(0x7f0000001a40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x491, &(0x7f0000000480)={0x0, 0x0, 0x1, "11"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 18:42:28 executing program 5: 18:42:28 executing program 3: 18:42:28 executing program 4: 18:42:28 executing program 0: [ 478.323701][ T17] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 478.624652][ T17] usb 3-1: device descriptor read/64, error 18 18:42:28 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x4, 0xb2, 0x18, 0x0, 0x17e9, 0x8226, 0x8118, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x6, {0x6, 0x37385ef6f197895f, "010004f2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 18:42:28 executing program 3: 18:42:28 executing program 5: 18:42:28 executing program 4: 18:42:28 executing program 0: 18:42:28 executing program 3: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001400)=ANY=[@ANYBLOB="d3d2b93c38f19c0408cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 18:42:28 executing program 5: getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.stat\x00', 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) [ 478.774026][ T5] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 478.930987][T15312] ptrace attach of "/root/syz-executor.3"[15311] was attempted by "/root/syz-executor.3"[15312] [ 479.013320][ T5] usb 2-1: Using ep0 maxpacket: 8 [ 479.133717][ T5] usb 2-1: New USB device found, idVendor=0c45, idProduct=6040, bcdDevice=93.68 [ 479.143035][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.166591][ T5] usb 2-1: config 0 descriptor?? [ 479.173360][ T17] usb 3-1: device descriptor read/64, error -71 [ 479.210596][ T5] gspca_main: sonixj-2.14.0 probing 0c45:6040 [ 479.453307][ T17] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 479.723287][ T17] usb 3-1: device descriptor read/64, error 18 [ 480.123223][ T17] usb 3-1: device descriptor read/64, error 18 [ 480.243745][ T17] usb usb3-port1: unable to enumerate USB device [ 480.513320][ T5] gspca_sonixj: reg_w1 err -71 [ 480.518337][ T5] sonixj: probe of 2-1:0.0 failed with error -71 [ 480.527963][ T5] usb 2-1: USB disconnect, device number 18 18:42:31 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe4, 0x97, 0x9d, 0x8, 0xc45, 0x6040, 0x9368, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6c, 0x94, 0x40}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0xac, &(0x7f0000001a40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x491, &(0x7f0000000480)={0x0, 0x0, 0x1, "11"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 18:42:31 executing program 0: 18:42:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) dup2(r2, r3) 18:42:31 executing program 3: clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='gid_map\x00\xba\x99FH\xf4\a\xaf\x04\x14\xe1\xb8d\xd4@O\xce\xbb\xe4\xdf\xc1\xe9l\x05\x9b\xd5\x1dD\xc7k\x8f\xee\xab\x920\xab\x06\xaf\xb6|&\xb7s>\xac\xebo\xb9\xcd\xfa\xb5N7\x1c!\x9c@ad\xfa\x9d\xffc\xfe\xf5[J\xe9\f\xa9\xc7\xd9e\xc9c\xddI\x94|~\x98\x8c\x14\xfb\x9c1\vu\x13\xd9\xb2\xce\x96\xe9\xdfj\xa5\xec\x19\xd8`.\x91\xdb<\xe9\x195\x81\xb1\xd1\xcbM\xc7VJ5\xb7U\xf6\xc2B\f\x13\x02\x7f\xc3\x99\xbf\xa6\xcc\xaf\xfe\xc88\xb5\xcb\xa2X\xd3\x94\x9d\xe5\xc0\\\x86?\x12 \x0e\xb0\xe8\x11z\xcd\x12Na\xf5\xbc D\x9a#\xe1\xa0h\xcb\x9dkDPp\xc4\xd2\xa7\xbejn\xfb\x03v--\xc5 \xb8\xeaq\x0f\x9a\n\xcb%\x1d\xc2\x82\x9f\x1f\xcd\xc8\x818\xa6\xea\x12\xd7\x1b?\xa0u\xb1z\xb3-\xb7\xc8\xc3\b\x1fI5\xcaxb\x0f\xfa/u\x18\xc6\x06\xa6V\xf0\xa7#5\xaeWPV\xf40xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() tkill(r3, 0x3b) write$P9_RXATTRCREATE(r0, 0x0, 0x21a) 18:42:31 executing program 5: getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.stat\x00', 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) [ 481.363805][ T5] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 481.603258][ T5] usb 2-1: Using ep0 maxpacket: 8 [ 481.723555][ T5] usb 2-1: New USB device found, idVendor=0c45, idProduct=6040, bcdDevice=93.68 [ 481.732889][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.743937][ T5] usb 2-1: config 0 descriptor?? 18:42:31 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x4, 0xb2, 0x18, 0x0, 0x17e9, 0x8226, 0x8118, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x6, {0x6, 0x37385ef6f197895f, "010004f2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 18:42:31 executing program 0: syz_usb_connect(0x0, 0x0, 0x0, 0x0) 18:42:31 executing program 3: 18:42:31 executing program 4: 18:42:31 executing program 5: getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.stat\x00', 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) [ 481.788435][ T5] gspca_main: sonixj-2.14.0 probing 0c45:6040 18:42:32 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, 0x0, &(0x7f0000000180)=""/109, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x5) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af03, &(0x7f0000000000)) 18:42:32 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001280)={0x26, 'hash\x00', 0x0, 0x0, 'tgr192-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003dc0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001300)='@k', 0x2}], 0x1}], 0x1, 0x0) [ 482.225497][T12900] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 482.503399][T12900] usb 3-1: device descriptor read/64, error 18 [ 482.893362][T12900] usb 3-1: device descriptor read/64, error 18 [ 483.093433][ T5] gspca_sonixj: reg_w1 err -71 [ 483.098645][ T5] sonixj: probe of 2-1:0.0 failed with error -71 [ 483.108611][ T5] usb 2-1: USB disconnect, device number 19 [ 483.173220][T12900] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 483.444028][T12900] usb 3-1: device descriptor read/64, error 18 18:42:33 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe4, 0x97, 0x9d, 0x8, 0xc45, 0x6040, 0x9368, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6c, 0x94, 0x40}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0xac, &(0x7f0000001a40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x491, &(0x7f0000000480)={0x0, 0x0, 0x1, "11"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 18:42:33 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, 0x0, 0x0) 18:42:33 executing program 3: munmap(&(0x7f0000000000/0x3000)=nil, 0x3000) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) 18:42:33 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x9000000, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0xf, 0x0, {0x14}}}, 0x30}}, 0x0) 18:42:33 executing program 0: syz_usb_connect(0x0, 0x0, 0x0, 0x0) [ 483.833639][T12900] usb 3-1: device descriptor read/64, error 18 [ 483.913292][ T5] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 483.953742][T12900] usb usb3-port1: attempt power cycle [ 484.153328][ T5] usb 2-1: Using ep0 maxpacket: 8 [ 484.273620][ T5] usb 2-1: New USB device found, idVendor=0c45, idProduct=6040, bcdDevice=93.68 [ 484.283022][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.293503][ T5] usb 2-1: config 0 descriptor?? [ 484.338686][ T5] gspca_main: sonixj-2.14.0 probing 0c45:6040 [ 484.663338][T12900] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 484.933219][T12900] usb 3-1: device descriptor read/64, error 18 18:42:35 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x4, 0xb2, 0x18, 0x40, 0x17e9, 0x8226, 0x8118, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000040)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x6, {0x6, 0x37385ef6f197895f, "010004f2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 18:42:35 executing program 4: r0 = socket(0x2, 0x3, 0x100000001) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}}, 0x38) 18:42:35 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f0000000380)="cfd5886db605b12a3c53d212a0115363b9b4aae66efa9bb87c2afe08834b577f7bb7327096f3c8b54d5774605918c3155f13b247d31a35d9f045062fe328afb84eb70f2bcc78dc652084b2bfa893ef0006d0bcc7843e6426af14e6f66a9a16eaa9b0c1ad26ac19b3dad9571009f4a40208e5c3fefb24e778cf07d6b77d2794faf02df4570d54f49e611f4d9249be572343027fa7eee6e59bd6f866dcaa27bc959cd0429a6b731098a9862157a970", 0x1}, 0x20) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='pids.current\x00', 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffff7, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x800, 0x20000000, @perf_config_ext}, 0x0, 0x3, 0xffffffffffffffff, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000300)) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f0000000180)="f4001100002b2c25e994efd18498d66205baa68754a30000000002000000000000000000000000002100000000000000c0010001050af32ebdbed828026256", 0x3f}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x1ff) 18:42:35 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 18:42:35 executing program 0: syz_usb_connect(0x0, 0x0, 0x0, 0x0) 18:42:35 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) sendmmsg$inet(r0, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000080)="e1", 0x1}], 0x1}}], 0x1, 0x4000841) 18:42:35 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000007c0)=""/95, 0x5f}, {&(0x7f0000000840)=""/98, 0x62}, {&(0x7f00000008c0)=""/152, 0x98}, {&(0x7f0000000980)=""/160, 0xa0}, {0x0}], 0x5}, 0x401}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x62922580ab37a9a8, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r3, r4, 0x0, 0x320f) syz_open_procfs(0x0, 0x0) [ 485.503754][T12900] usb 3-1: device descriptor read/64, error -71 [ 485.624085][ T5] gspca_sonixj: reg_w1 err -71 [ 485.629198][ T5] sonixj: probe of 2-1:0.0 failed with error -71 [ 485.639768][ T5] usb 2-1: USB disconnect, device number 20 [ 485.783246][T12900] usb 3-1: new high-speed USB device number 28 using dummy_hcd 18:42:36 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe4, 0x97, 0x9d, 0x8, 0xc45, 0x6040, 0x9368, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6c, 0x94, 0x40}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0xac, &(0x7f0000001a40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x491, &(0x7f0000000480)={0x0, 0x0, 0x1, "11"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 18:42:36 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x2}, {0x80000006}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000100)=0x4, 0x3b) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) connect$inet(r1, &(0x7f0000000380)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 18:42:36 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000080)="0fa7e33db81fcb6f515e6e4fed7692765bff5c496bfe8c53b729683301f1e49957387f2bd86ab99ebdcd21f3952ce4640786b63b8c6268b20cf94f10bb839070cf396e7c956269f6c43710e58ba1fb14a31bd358b13d140614b53487a21c29c3aa164382240f853f8481e653dff48417770c712d4369f6928d6056a1511a74e9ac042ef49dd0bd682a365745ca6c870650") perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x80000000b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) 18:42:36 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$unix(r1, &(0x7f0000000140), 0x14ded905162a6a4b, 0x0, 0x0, 0x429) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 18:42:36 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x29, 0xc3, 0x6a, 0x0, 0x55d, 0x9002, 0x7ce5, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3b, 0x2, 0xa7}}]}}]}}, 0x0) [ 486.143695][T12900] usb 3-1: New USB device found, idVendor=17e9, idProduct=8226, bcdDevice=81.18 [ 486.153406][T12900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.214973][T12900] usb 3-1: config 0 descriptor?? [ 486.503702][ T17] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 486.556234][T12900] udlfb 3-1:0.0: vendor descriptor not available (-71) [ 486.563739][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 486.564261][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 486.583732][T12940] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 486.584243][T12900] usb 3-1: Read EDID byte 0 failed: -71 [ 486.622188][T12900] usb 3-1: Read EDID byte 0 failed: -71 [ 486.643925][T12900] usb 3-1: Read EDID byte 0 failed: -71 [ 486.643941][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 486.644345][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 486.649717][T12900] usb 3-1: Unable to get valid EDID from device/display [ 486.712674][T12900] usb 3-1: submit urb error: -2 [ 486.725552][T12900] udlfb: probe of 3-1:0.0 failed with error -2 [ 486.783296][ T17] usb 1-1: device descriptor read/64, error 18 [ 486.793409][T12900] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 486.802087][T12900] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 486.823324][T12940] usb 2-1: Using ep0 maxpacket: 8 [ 486.825079][T12900] [drm:udl_init] *ERROR* Selecting channel failed [ 486.836799][T12900] [drm:udl_submit_urb] *ERROR* usb_submit_urb error fffffffe [ 486.863940][T12900] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 486.872846][T12900] [drm] Cannot find any crtc or sizes [ 486.879296][T12900] [drm:udl_submit_urb] *ERROR* usb_submit_urb error fffffffe [ 486.892005][T12900] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 13 [ 486.899992][T12900] [drm] Initialized udl on minor 13 [ 486.914073][T12900] usb 3-1: USB disconnect, device number 28 18:42:37 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x4, 0xb2, 0x18, 0x40, 0x17e9, 0x8226, 0x8118, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000040)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x6, {0x6, 0x37385ef6f197895f, "010004f2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 18:42:37 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r0, 0x0, 0x21, 0x0, 0x0) 18:42:37 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x1, 0x800000032, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) 18:42:37 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) read$alg(r0, 0x0, 0x0) [ 486.956216][T12940] usb 2-1: New USB device found, idVendor=0c45, idProduct=6040, bcdDevice=93.68 [ 486.965750][T12940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.980541][T12940] usb 2-1: config 0 descriptor?? [ 487.038411][T12940] gspca_main: sonixj-2.14.0 probing 0c45:6040 [ 487.099326][T12940] gspca_sonixj: reg_w1 err -32 [ 487.104601][T12940] sonixj: probe of 2-1:0.0 failed with error -32 18:42:37 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) 18:42:37 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x20) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) [ 487.226101][ T17] usb 1-1: device descriptor read/64, error 18 18:42:37 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) read$alg(r0, 0x0, 0x0) [ 487.463875][T12940] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 487.504810][ T17] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 487.793478][ T17] usb 1-1: device descriptor read/64, error 18 [ 487.823803][T12940] usb 3-1: New USB device found, idVendor=17e9, idProduct=8226, bcdDevice=81.18 [ 487.833209][T12940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.843425][T12940] usb 3-1: config 0 descriptor?? [ 488.143595][T12940] udlfb 3-1:0.0: vendor descriptor not available (-71) [ 488.163628][T12940] usb 3-1: Read EDID byte 0 failed: -71 [ 488.183490][ T17] usb 1-1: device descriptor read/64, error 18 [ 488.189900][T12940] usb 3-1: Read EDID byte 0 failed: -71 [ 488.213343][T12940] usb 3-1: Read EDID byte 0 failed: -71 [ 488.219245][T12940] usb 3-1: Unable to get valid EDID from device/display [ 488.261484][T12940] usb 3-1: submit urb error: -2 [ 488.271462][T12940] udlfb: probe of 3-1:0.0 failed with error -2 [ 488.303515][ T17] usb usb1-port1: attempt power cycle [ 488.333445][T12940] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 488.342121][T12940] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 488.365000][T12940] [drm:udl_init] *ERROR* Selecting channel failed [ 488.372722][T12940] [drm:udl_submit_urb] *ERROR* usb_submit_urb error fffffffe [ 488.393298][T12940] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 488.402102][T12940] [drm] Cannot find any crtc or sizes [ 488.407786][T12940] [drm:udl_submit_urb] *ERROR* usb_submit_urb error fffffffe [ 488.419520][T12940] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 14 [ 488.427297][T12940] [drm] Initialized udl on minor 14 [ 488.436279][T12940] usb 3-1: USB disconnect, device number 29 [ 489.013356][ T17] usb 1-1: new high-speed USB device number 25 using dummy_hcd 18:42:39 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe4, 0x97, 0x9d, 0x8, 0xc45, 0x6040, 0x9368, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6c, 0x94, 0x40}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0xac, &(0x7f0000001a40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x491, &(0x7f0000000480)={0x0, 0x0, 0x1, "11"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 18:42:39 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xa8}]}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xde}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}], 0x1, 0x20000180, 0x0) write$binfmt_script(r0, &(0x7f00000009c0)=ANY=[], 0x378) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:42:39 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) unlink(&(0x7f0000000200)='./bus\x00') link(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='./bus\x00') 18:42:39 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000000c0)='t\a\xdd\x00', 0xffffff39) unlink(&(0x7f0000000200)='./bus\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone(0x1000109, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() link(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='./bus\x00') creat(&(0x7f0000000140)='./bus\x00', 0x0) 18:42:39 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x4, 0xb2, 0x18, 0x40, 0x17e9, 0x8226, 0x8118, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000040)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x6, {0x6, 0x37385ef6f197895f, "010004f2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 18:42:39 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x29, 0xc3, 0x6a, 0x0, 0x55d, 0x9002, 0x7ce5, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3b, 0x2, 0xa7}}]}}]}}, 0x0) [ 489.305389][T12940] usb 2-1: USB disconnect, device number 21 18:42:39 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xd1}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xfffffea8}, {&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/226, 0xe2}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:42:39 executing program 4: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000440)='./bus\x00', 0x0) ftruncate(r3, 0xe3ca) fcntl$setstatus(r2, 0x4, 0x6100) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0xf642e7e) r4 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) read(r0, &(0x7f0000000000)=""/250, 0x128b9372) madvise(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x9) [ 489.655254][T12852] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 489.803672][ T17] usb 1-1: device descriptor read/64, error 18 [ 489.814945][T12940] usb 2-1: new high-speed USB device number 22 using dummy_hcd 18:42:40 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xd1}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xfffffea8}, {&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/226, 0xe2}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 490.023964][T12852] usb 3-1: New USB device found, idVendor=17e9, idProduct=8226, bcdDevice=81.18 [ 490.033341][T12852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.054349][T12940] usb 2-1: Using ep0 maxpacket: 8 [ 490.080751][T12852] usb 3-1: config 0 descriptor?? [ 490.176849][T12940] usb 2-1: New USB device found, idVendor=0c45, idProduct=6040, bcdDevice=93.68 [ 490.186472][T12940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.211238][T12940] usb 2-1: config 0 descriptor?? [ 490.219591][ T17] usb 1-1: device descriptor read/64, error 18 18:42:40 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) [ 490.261126][T12940] gspca_main: sonixj-2.14.0 probing 0c45:6040 [ 490.384117][T12852] udlfb 3-1:0.0: vendor descriptor not available (-71) [ 490.404104][T12852] usb 3-1: Read EDID byte 0 failed: -71 [ 490.431811][T12852] usb 3-1: Read EDID byte 0 failed: -71 18:42:40 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 490.456568][T12852] usb 3-1: Read EDID byte 0 failed: -71 [ 490.462354][T12852] usb 3-1: Unable to get valid EDID from device/display [ 490.495730][ T17] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 490.571033][T12852] usb 3-1: submit urb error: -2 [ 490.581459][T12852] udlfb: probe of 3-1:0.0 failed with error -2 [ 490.635229][T15513] input: syz1 as /devices/virtual/input/input17 [ 490.694720][T12852] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 490.703844][T12852] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 490.730028][T12852] [drm:udl_init] *ERROR* Selecting channel failed [ 490.738607][T12852] [drm:udl_submit_urb] *ERROR* usb_submit_urb error fffffffe 18:42:40 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xd1}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xfffffea8}, {&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/226, 0xe2}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 490.774226][T12852] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 490.776335][T15515] input: syz1 as /devices/virtual/input/input18 [ 490.783420][T12852] [drm] Cannot find any crtc or sizes [ 490.794592][T12852] [drm:udl_submit_urb] *ERROR* usb_submit_urb error fffffffe [ 490.807810][ T17] usb 1-1: device descriptor read/64, error 18 [ 490.945835][T12852] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 15 [ 490.954767][T12852] [drm] Initialized udl on minor 15 [ 490.995822][T12852] usb 3-1: USB disconnect, device number 30 [ 491.237353][ T17] usb 1-1: device descriptor read/64, error 18 [ 491.364139][ T17] usb usb1-port1: unable to enumerate USB device [ 491.583569][T12940] gspca_sonixj: reg_w1 err -71 [ 491.588558][T12940] sonixj: probe of 2-1:0.0 failed with error -71 [ 491.598166][T12940] usb 2-1: USB disconnect, device number 22 18:42:42 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe4, 0x97, 0x9d, 0x8, 0xc45, 0x6040, 0x9368, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6c, 0x94, 0x40}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0xac, &(0x7f0000001a40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x491, &(0x7f0000000480)={0x0, 0x0, 0x1, "11"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 18:42:42 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x4, 0xb2, 0x18, 0x40, 0x17e9, 0x8226, 0x8118, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 18:42:42 executing program 5: socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @perf_config_ext, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000980)='TIPC\x00') socket$inet6(0xa, 0x5, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000080)) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24000000) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000380)={0x0, @empty, @local}, &(0x7f00000003c0)=0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x14}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@delqdisc={0x78, 0x25, 0x300, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, {0xfff3, 0x6}, {0x0, 0xc}, {0x8, 0x4}}, [@TCA_RATE={0x8, 0x5, {0xf9, 0x2}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}, @TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x8, 0x5, {0x4f, 0x6}}, @qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x829, 0x10001, 0x0, 0x80000001, 0x1800, 0x3e41978c, 0x9}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40004}, 0x800) 18:42:42 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000480)={0x0, 0x6}) 18:42:42 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xd1}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xfffffea8}, {&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/226, 0xe2}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:42:42 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x29, 0xc3, 0x6a, 0x0, 0x55d, 0x9002, 0x7ce5, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3b, 0x2, 0xa7}}]}}]}}, 0x0) 18:42:42 executing program 4: r0 = socket$kcm(0x2, 0x3, 0x2) socketpair(0x1e, 0x80005, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x10000) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x200002, 0x0) socketpair(0x1e, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x20000, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00@\x00\x00\x00\xf7\x00'}) r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={0xffffffffffffffff, &(0x7f00000004c0)="72bd4c24d2502ed9211884efb78557ab89a7f05de698763d5038e34dbda91cf0acba890a8e66741d3929e23e28270cd22060eeeaa60f2d82058e819ca3bace55b990872bb64a785303f6a9dd9f2a2740f47018dfcf2479640e4b48e4f11f6f45b7b5b831416b552a2ee495eb091edf1f749bc802e90defed0636f0435ef06f3d7718240ce51f118cc4c8f8a44d240f63f8fe1d462ac313c5da0b697b2d5dea17f5d98f78c3537bb52d08fc9e4a40829a68b2c139b32e7901e953b9141f8c3adf01cdd6d83164883b388012399aafa1c6035a9a95861518cb4cf16509f600f479c31903792eeec842a521d11d0a040b0566c831", 0x0}, 0x20) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f00000003c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00\x00\x00\x00\x00\xf7\x00', @broadcast}) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 492.456092][T12900] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 492.564137][ T5] usb 2-1: new high-speed USB device number 23 using dummy_hcd 18:42:42 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xd1}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xfffffea8}, {&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/226, 0xe2}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 492.748934][T15550] device team0 entered promiscuous mode [ 492.755110][T15550] device team_slave_0 entered promiscuous mode [ 492.761906][T15550] device team_slave_1 entered promiscuous mode [ 492.771863][T15550] 8021q: adding VLAN 0 to HW filter on device team0 [ 492.813571][ T5] usb 2-1: Using ep0 maxpacket: 8 [ 492.884403][T12940] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 492.903576][T12900] usb 3-1: New USB device found, idVendor=17e9, idProduct=8226, bcdDevice=81.18 [ 492.912780][T12900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 18:42:43 executing program 5: socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @perf_config_ext, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000980)='TIPC\x00') socket$inet6(0xa, 0x5, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000080)) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24000000) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000380)={0x0, @empty, @local}, &(0x7f00000003c0)=0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x14}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@delqdisc={0x78, 0x25, 0x300, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, {0xfff3, 0x6}, {0x0, 0xc}, {0x8, 0x4}}, [@TCA_RATE={0x8, 0x5, {0xf9, 0x2}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}, @TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x8, 0x5, {0x4f, 0x6}}, @qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x829, 0x10001, 0x0, 0x80000001, 0x1800, 0x3e41978c, 0x9}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40004}, 0x800) [ 492.933440][ T5] usb 2-1: New USB device found, idVendor=0c45, idProduct=6040, bcdDevice=93.68 [ 492.942765][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.996831][ T5] usb 2-1: config 0 descriptor?? [ 493.010802][T12900] usb 3-1: config 0 descriptor?? [ 493.033765][T15550] device team0 left promiscuous mode [ 493.039174][T15550] device team_slave_0 left promiscuous mode [ 493.045908][T15550] device team_slave_1 left promiscuous mode [ 493.059807][ T5] gspca_main: sonixj-2.14.0 probing 0c45:6040 18:42:43 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x1f2, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="740000006600793527f92f7b341cd0d566732a99", @ANYRES32=r2, @ANYRES64], 0x74}}, 0x10000) sendmmsg$alg(r1, &(0x7f0000000180), 0x52136a5252f3b2, 0x0) r3 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r3, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") [ 493.204149][T12940] usb 1-1: device descriptor read/64, error 18 [ 493.272762][T15546] device team0 entered promiscuous mode [ 493.279771][T15546] device team_slave_0 entered promiscuous mode [ 493.286759][T15546] device team_slave_1 entered promiscuous mode [ 493.297010][T15546] 8021q: adding VLAN 0 to HW filter on device team0 [ 493.308923][T15567] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.5'. 18:42:43 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 493.346603][T12900] udlfb 3-1:0.0: vendor descriptor not available (-71) [ 493.375624][T12900] usb 3-1: Read EDID byte 0 failed: -71 [ 493.396048][T12900] usb 3-1: Read EDID byte 0 failed: -71 [ 493.417217][T12900] usb 3-1: Read EDID byte 0 failed: -71 [ 493.423297][T12900] usb 3-1: Unable to get valid EDID from device/display 18:42:43 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000015c0)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="09631040"], 0x0, 0x0, 0x0}) [ 493.497585][T12900] usb 3-1: submit urb error: -2 [ 493.508529][T12900] udlfb: probe of 3-1:0.0 failed with error -2 [ 493.593832][T12940] usb 1-1: device descriptor read/64, error 18 [ 493.595835][T12900] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 493.609097][T12900] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 493.645529][T12900] [drm:udl_init] *ERROR* Selecting channel failed [ 493.654197][T12900] [drm:udl_submit_urb] *ERROR* usb_submit_urb error fffffffe [ 493.677292][T12900] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 493.686747][T12900] [drm] Cannot find any crtc or sizes [ 493.692312][T12900] [drm:udl_submit_urb] *ERROR* usb_submit_urb error fffffffe [ 493.734414][T12900] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 16 [ 493.742106][T12900] [drm] Initialized udl on minor 16 [ 493.816563][T12900] usb 3-1: USB disconnect, device number 31 [ 493.863617][T12940] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 494.143367][T12940] usb 1-1: device descriptor read/64, error 18 [ 494.343436][ T5] gspca_sonixj: reg_w1 err -71 [ 494.348512][ T5] sonixj: probe of 2-1:0.0 failed with error -71 [ 494.358115][ T5] usb 2-1: USB disconnect, device number 23 [ 494.543252][T12940] usb 1-1: device descriptor read/64, error 18 [ 494.663403][T12940] usb usb1-port1: attempt power cycle 18:42:44 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe4, 0x97, 0x9d, 0x8, 0xc45, 0x6040, 0x9368, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6c, 0x94, 0x40}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0xac, &(0x7f0000001a40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 18:42:44 executing program 4: socket$xdp(0x2c, 0x3, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) link(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000740)=ANY=[], 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000), 0x10) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00', @ANYRES16, @ANYBLOB="0000000000000000000001000000000000006d0000000003001462726f6164636173742d6c696e6b0000"], 0x3}}, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x40fdf) 18:42:44 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xd1}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xfffffea8}, {&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/226, 0xe2}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 18:42:44 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x4, 0xb2, 0x18, 0x40, 0x17e9, 0x8226, 0x8118, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 18:42:44 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000000c0)='t\a\xdd\x00', 0xffffff39) unlink(&(0x7f0000000200)='./bus\x00') clone(0x1000109, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() link(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='./bus\x00') ptrace$setopts(0x4206, r2, 0x0, 0x0) creat(&(0x7f0000000140)='./bus\x00', 0x0) tkill(r2, 0x22) [ 495.153457][ T5] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 495.203730][T12900] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 495.383329][T12940] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 495.443457][T12900] usb 2-1: Using ep0 maxpacket: 8 [ 495.513428][ T5] usb 3-1: New USB device found, idVendor=17e9, idProduct=8226, bcdDevice=81.18 [ 495.522762][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.534532][ T5] usb 3-1: config 0 descriptor?? 18:42:45 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'bond0\x00\x00\xff\xf7 \x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) creat(0x0, 0x0) creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) 18:42:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'bond0\x00\x00\xff\xf7 \x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) creat(0x0, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) [ 495.564045][T12900] usb 2-1: New USB device found, idVendor=0c45, idProduct=6040, bcdDevice=93.68 [ 495.573431][T12900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.639227][T12900] usb 2-1: config 0 descriptor?? 18:42:45 executing program 0: setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x801}, 0x5b) r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f00000000c0)={0x4a0e3d761b47f39c}) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x40fdf) [ 495.689467][T12900] gspca_main: sonixj-2.14.0 probing 0c45:6040 18:42:45 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xd1}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xfffffea8}, {&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/226, 0xe2}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 18:42:45 executing program 0: socket(0x0, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x521e01, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) open(0x0, 0x0, 0x0) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) [ 495.823589][ T5] udlfb 3-1:0.0: vendor descriptor not available (-71) [ 495.846885][ T5] usb 3-1: Read EDID byte 0 failed: -71 [ 495.866203][ T5] usb 3-1: Read EDID byte 0 failed: -71 [ 495.886318][ T5] usb 3-1: Read EDID byte 0 failed: -71 [ 495.892251][ T5] usb 3-1: Unable to get valid EDID from device/display [ 495.938677][ T5] usb 3-1: submit urb error: -2 [ 495.949465][ T5] udlfb: probe of 3-1:0.0 failed with error -2 18:42:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'bond0\x00\x00\xff\xf7 \x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) creat(0x0, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) 18:42:46 executing program 5: socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000740)=ANY=[], 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000), 0x10) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000680), 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00', @ANYRES16=r2, @ANYBLOB], 0x3}}, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x40fdf) [ 496.033508][ T5] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 496.042320][ T5] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 496.136464][ T5] [drm:udl_init] *ERROR* Selecting channel failed [ 496.144751][ T5] [drm:udl_submit_urb] *ERROR* usb_submit_urb error fffffffe [ 496.199863][ T5] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 496.209446][ T5] [drm] Cannot find any crtc or sizes [ 496.215252][ T5] [drm:udl_submit_urb] *ERROR* usb_submit_urb error fffffffe [ 496.254636][ T5] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 17 [ 496.262369][ T5] [drm] Initialized udl on minor 17 [ 496.375846][ T5] usb 3-1: USB disconnect, device number 32 [ 496.843432][T12900] gspca_sonixj: reg_r err -110 [ 496.848641][T12900] sonixj: probe of 2-1:0.0 failed with error -110 18:42:48 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe4, 0x97, 0x9d, 0x8, 0xc45, 0x6040, 0x9368, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6c, 0x94, 0x40}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0xac, &(0x7f0000001a40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 18:42:48 executing program 0: socket(0x0, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x521e01, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) open(0x0, 0x0, 0x0) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) 18:42:48 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x4, 0xb2, 0x18, 0x40, 0x17e9, 0x8226, 0x8118, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 18:42:48 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x0) sendfile(r0, r0, 0x0, 0x0) 18:42:48 executing program 5: socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000740)=ANY=[], 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000), 0x10) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000680), 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00', @ANYRES16=r2, @ANYBLOB], 0x3}}, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x40fdf) 18:42:48 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xd1}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xfffffea8}, {&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/226, 0xe2}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r1) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 497.922030][T12940] usb 2-1: USB disconnect, device number 24 18:42:48 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r1, r2) socket$inet(0x2, 0x4000000000000001, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TCSBRKP(r2, 0x5425, 0x3ff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={r4, 0x0, 0x4a, 0x4, 0xbfbc}) r5 = getpid() perf_event_open(0x0, r5, 0xfffffffffffffffb, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0xa) fchdir(0xffffffffffffffff) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setownex(r6, 0xf, &(0x7f0000002ec0)) fchdir(0xffffffffffffffff) 18:42:48 executing program 0: socket(0x0, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x521e01, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) open(0x0, 0x0, 0x0) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) [ 498.320316][T12900] usb 3-1: new high-speed USB device number 33 using dummy_hcd 18:42:48 executing program 0: socket(0x0, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x521e01, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) open(0x0, 0x0, 0x0) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) [ 498.493237][T12940] usb 2-1: new high-speed USB device number 25 using dummy_hcd 18:42:48 executing program 4: socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000740)=ANY=[], 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000680), 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00', @ANYRES16=r2, @ANYBLOB="0000000000000000000001000000000000006d0000000003001462726f6164636173742d6c696e6b0000"], 0x3}}, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x40fdf) 18:42:48 executing program 5: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r1 = memfd_create(0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, "f8ca781d5f7e93115c52fa936f014904ccdb29372829d175a4e80426585243b3926d887f686449fdd786f718d8343d49d4273cc82ed2a2ef63524fc21d710476", "92ef27daf4634f9065ecbc04c983083f390c3d7bf9ac5c11d0b60f5d070e9826557914da1567ee4534b1192353f3f801223d563be035c7fb302fe546973e9c78", "f1a55947f83b5a8a1bd0d7e25a30c2c9d78038891de2ae1c3c5b7be4da2a17da"}) 18:42:48 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) close(r0) [ 498.753458][T12940] usb 2-1: Using ep0 maxpacket: 8 [ 498.766804][T12900] usb 3-1: New USB device found, idVendor=17e9, idProduct=8226, bcdDevice=81.18 [ 498.776169][T12900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.818373][T12900] usb 3-1: config 0 descriptor?? [ 498.873697][T12940] usb 2-1: New USB device found, idVendor=0c45, idProduct=6040, bcdDevice=93.68 [ 498.882930][T12940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.962789][T12940] usb 2-1: config 0 descriptor?? [ 499.020932][T12940] gspca_main: sonixj-2.14.0 probing 0c45:6040 [ 499.123896][T12900] udlfb 3-1:0.0: vendor descriptor not available (-71) [ 499.146274][T12900] usb 3-1: Read EDID byte 0 failed: -71 [ 499.178698][T12900] usb 3-1: Read EDID byte 0 failed: -71 [ 499.206582][T12900] usb 3-1: Read EDID byte 0 failed: -71 [ 499.212468][T12900] usb 3-1: Unable to get valid EDID from device/display [ 499.272297][T12900] usb 3-1: submit urb error: -2 [ 499.282731][T12900] udlfb: probe of 3-1:0.0 failed with error -2 [ 499.355511][T12900] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 499.364850][T12900] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 499.383488][T12900] [drm:udl_init] *ERROR* Selecting channel failed [ 499.391167][T12900] [drm:udl_submit_urb] *ERROR* usb_submit_urb error fffffffe [ 499.413784][T12900] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 499.422473][T12900] [drm] Cannot find any crtc or sizes [ 499.428209][T12900] [drm:udl_submit_urb] *ERROR* usb_submit_urb error fffffffe [ 499.439959][T12900] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 18 [ 499.447889][T12900] [drm] Initialized udl on minor 18 [ 499.456282][T12900] usb 3-1: USB disconnect, device number 33 [ 500.193324][T12940] gspca_sonixj: reg_r err -110 [ 500.198383][T12940] sonixj: probe of 2-1:0.0 failed with error -110 18:42:51 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe4, 0x97, 0x9d, 0x8, 0xc45, 0x6040, 0x9368, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6c, 0x94, 0x40}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0xac, &(0x7f0000001a40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 18:42:51 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xd1}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xfffffea8}, {&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/226, 0xe2}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r1) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:42:51 executing program 5: syz_usb_connect(0x0, 0x240, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xbe, 0x66, 0x34, 0x8, 0x57c, 0x2200, 0x314a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xd, 0xa2, 0x84, 0x0, [], [{{0x9, 0x5, 0x1}}, {{0x9, 0x5, 0x2}}]}}]}}]}}, 0x0) 18:42:51 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x51, 0xdf, 0x3, 0x8, 0xc72, 0x14, 0x8b53, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf3, 0xd, 0xa6}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x25, "c865508f32fca176927f0b49149f0dc5966fe7a1225b0203d3e180e4308b9006a7afac623b"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0xc1}, &(0x7f00000003c0)={0x0, 0x8, 0x1}, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x20, 0x20}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x400}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x2e}, &(0x7f0000000500)={0x40, 0xb, 0x2, "cf74"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000580)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000005c0)={0x40, 0x17, 0x6}, &(0x7f0000000600)={0x40, 0x19, 0x2, "cae6"}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0x7c}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0xbd}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0x3c}}) 18:42:51 executing program 4: socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000740)=ANY=[], 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000680), 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00', @ANYRES16=r2, @ANYBLOB="0000000000000000000001000000000000006d0000000003001462726f6164636173742d6c696e6b0000"], 0x3}}, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x40fdf) 18:42:51 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x4, 0xb2, 0x18, 0x40, 0x17e9, 0x8226, 0x8118, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 501.036314][T12900] usb 2-1: USB disconnect, device number 25 [ 501.365199][ T5] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 501.371215][T12940] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 501.401639][T12852] usb 3-1: new high-speed USB device number 34 using dummy_hcd 18:42:51 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xd1}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xfffffea8}, {&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/226, 0xe2}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r1) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:42:51 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="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"/282], 0x0) [ 501.530262][T12900] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 501.633413][ T5] usb 1-1: Using ep0 maxpacket: 8 [ 501.633762][T12940] usb 6-1: Using ep0 maxpacket: 8 [ 501.773392][T12900] usb 2-1: Using ep0 maxpacket: 8 [ 501.803647][ T5] usb 1-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=8b.53 [ 501.813229][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.829710][T12940] usb 6-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=31.4a [ 501.837745][ T5] usb 1-1: config 0 descriptor?? [ 501.838903][T12940] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.848664][T12940] usb 6-1: config 0 descriptor?? [ 501.876052][T12852] usb 3-1: New USB device found, idVendor=17e9, idProduct=8226, bcdDevice=81.18 [ 501.885344][T12852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.901227][T12940] usb 6-1: Direct firmware load for bfubase.frm failed with error -2 [ 501.909560][T12940] Bluetooth: Firmware request failed [ 501.914225][T12900] usb 2-1: New USB device found, idVendor=0c45, idProduct=6040, bcdDevice=93.68 [ 501.915158][T12940] bfusb: probe of 6-1:0.0 failed with error -5 [ 501.924531][T12900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.972837][T12900] usb 2-1: config 0 descriptor?? [ 501.978503][T12852] usb 3-1: config 0 descriptor?? 18:42:52 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xd1}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xfffffea8}, {&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/226, 0xe2}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 502.015318][ T17] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 502.021099][T12900] gspca_main: sonixj-2.14.0 probing 0c45:6040 [ 502.094790][ T5] peak_usb 1-1:0.0: PEAK-System PCAN-USB X6 v146 fw v127.11.73 (2 channels) [ 502.144741][T12940] usb 6-1: USB disconnect, device number 18 [ 502.283565][ T17] usb 5-1: Using ep0 maxpacket: 16 [ 502.314380][ T5] peak_usb 1-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 502.323576][ T5] peak_usb 1-1:0.0: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 502.341885][T12852] udlfb 3-1:0.0: vendor descriptor not available (-71) [ 502.364763][T12852] usb 3-1: Read EDID byte 0 failed: -71 [ 502.456519][T12852] usb 3-1: Read EDID byte 0 failed: -71 [ 502.474001][T12852] usb 3-1: Read EDID byte 0 failed: -71 [ 502.474430][ T5] peak_usb: probe of 1-1:0.0 failed with error -71 [ 502.480367][T12852] usb 3-1: Unable to get valid EDID from device/display [ 502.497181][ T17] usb 5-1: config 0 has an invalid interface number: 219 but max is 0 [ 502.505741][ T17] usb 5-1: config 0 has no interface number 0 [ 502.512686][ T17] usb 5-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 502.522143][ T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.549498][ T17] usb 5-1: config 0 descriptor?? [ 502.582555][T12852] usb 3-1: submit urb error: -2 [ 502.587680][ T5] usb 1-1: USB disconnect, device number 30 [ 502.592574][T12852] udlfb: probe of 3-1:0.0 failed with error -2 [ 502.675640][T12852] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 502.684835][T12852] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 502.710638][T12852] [drm:udl_init] *ERROR* Selecting channel failed [ 502.721413][T12852] [drm:udl_submit_urb] *ERROR* usb_submit_urb error fffffffe 18:42:52 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xd1}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xfffffea8}, {&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/226, 0xe2}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 502.785718][T12852] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 502.795787][T12852] [drm] Cannot find any crtc or sizes [ 502.801873][T12852] [drm:udl_submit_urb] *ERROR* usb_submit_urb error fffffffe 18:42:52 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x4, 0xb2, 0x18, 0x40, 0x17e9, 0x8226, 0x8118, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 502.853699][ T17] gtco 5-1:0.219: Failed to get HID Report Descriptor of size: 129 [ 502.862175][ T17] gtco: probe of 5-1:0.219 failed with error -5 [ 502.899730][ T17] usb 5-1: USB disconnect, device number 24 [ 502.917985][T12852] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 19 [ 502.926256][T12852] [drm] Initialized udl on minor 19 [ 502.943369][T12940] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 503.029125][T12852] usb 3-1: USB disconnect, device number 34 [ 503.197058][T12900] gspca_sonixj: reg_r err -110 [ 503.202127][T12900] sonixj: probe of 2-1:0.0 failed with error -110 [ 503.215447][ T5] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 503.259387][T12940] usb 6-1: Using ep0 maxpacket: 8 18:42:53 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xd1}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xfffffea8}, {&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/226, 0xe2}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 503.464174][T12940] usb 6-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=31.4a [ 503.473536][T12940] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.485962][T12940] usb 6-1: config 0 descriptor?? [ 503.486726][ T5] usb 1-1: Using ep0 maxpacket: 8 [ 503.531563][T12940] usb 6-1: Direct firmware load for bfubase.frm failed with error -2 [ 503.540017][T12940] Bluetooth: Firmware request failed [ 503.546136][T12940] bfusb: probe of 6-1:0.0 failed with error -5 [ 503.557737][T12852] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 503.615839][ T5] usb 1-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=8b.53 [ 503.625599][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.682890][ T5] usb 1-1: config 0 descriptor?? [ 503.763937][ T17] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 503.774148][T12940] usb 6-1: USB disconnect, device number 19 [ 503.933989][T12852] usb 3-1: New USB device found, idVendor=17e9, idProduct=8226, bcdDevice=81.18 [ 503.943492][T12852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.961678][T12852] usb 3-1: config 0 descriptor?? [ 503.975640][ T5] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 503.984256][ T5] peak_usb 1-1:0.0: unable to read PCAN-USB X6 firmware info (err -71) [ 504.003622][ T17] usb 5-1: Using ep0 maxpacket: 16 [ 504.086422][ T5] peak_usb: probe of 1-1:0.0 failed with error -71 [ 504.118965][ T5] usb 1-1: USB disconnect, device number 31 [ 504.124881][ T17] usb 5-1: config 0 has an invalid interface number: 219 but max is 0 [ 504.133668][ T17] usb 5-1: config 0 has no interface number 0 [ 504.139957][ T17] usb 5-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 504.149385][ T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.255024][T12852] udlfb 3-1:0.0: vendor descriptor not available (-71) [ 504.283568][T12852] usb 3-1: Read EDID byte 0 failed: -71 18:42:54 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe4, 0x97, 0x9d, 0x8, 0xc45, 0x6040, 0x9368, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6c, 0x94, 0x40}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0xac, &(0x7f0000001a40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x491, &(0x7f0000000480)={0x0, 0x0, 0x1, "11"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 18:42:54 executing program 5: syz_usb_connect(0x0, 0x240, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xbe, 0x66, 0x34, 0x8, 0x57c, 0x2200, 0x314a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xd, 0xa2, 0x84, 0x0, [], [{{0x9, 0x5, 0x1}}, {{0x9, 0x5, 0x2}}]}}]}}]}}, 0x0) 18:42:54 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x51, 0xdf, 0x3, 0x8, 0xc72, 0x14, 0x8b53, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf3, 0xd, 0xa6}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x25, "c865508f32fca176927f0b49149f0dc5966fe7a1225b0203d3e180e4308b9006a7afac623b"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0xc1}, &(0x7f00000003c0)={0x0, 0x8, 0x1}, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x20, 0x20}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x400}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x2e}, &(0x7f0000000500)={0x40, 0xb, 0x2, "cf74"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000580)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000005c0)={0x40, 0x17, 0x6}, &(0x7f0000000600)={0x40, 0x19, 0x2, "cae6"}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0x7c}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0xbd}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0x3c}}) [ 504.303442][T12900] usb 2-1: USB disconnect, device number 26 [ 504.303594][T12852] usb 3-1: Read EDID byte 0 failed: -71 [ 504.324675][ T17] usb 5-1: config 0 descriptor?? [ 504.404949][T12852] usb 3-1: Read EDID byte 0 failed: -71 [ 504.410820][T12852] usb 3-1: Unable to get valid EDID from device/display [ 504.634104][T12852] usb 3-1: submit urb error: -2 [ 504.644617][T12852] udlfb: probe of 3-1:0.0 failed with error -2 [ 504.652115][ T17] gtco 5-1:0.219: Failed to get HID Report Descriptor of size: 129 [ 504.661132][ T17] gtco: probe of 5-1:0.219 failed with error -5 [ 504.684799][ T17] usb 5-1: USB disconnect, device number 25 18:42:54 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xd1}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xfffffea8}, {&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/226, 0xe2}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:42:54 executing program 4: ioctl(0xffffffffffffffff, 0x1000008912, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x1}, 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg$inet(r0, &(0x7f0000000540), 0x196, 0x24040000) [ 504.773369][ T5] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 504.805866][T12852] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 504.814628][T12852] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 504.833709][T12940] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 504.856392][T12852] [drm:udl_init] *ERROR* Selecting channel failed [ 504.865175][T12852] [drm:udl_submit_urb] *ERROR* usb_submit_urb error fffffffe 18:42:54 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x4, 0xb2, 0x18, 0x40, 0x17e9, 0x8226, 0x8118, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 504.877159][T12900] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 504.943441][T12852] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 504.952204][T12852] [drm] Cannot find any crtc or sizes [ 504.957902][T12852] [drm:udl_submit_urb] *ERROR* usb_submit_urb error fffffffe [ 505.033541][ T5] usb 1-1: Using ep0 maxpacket: 8 [ 505.055457][T12852] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 20 [ 505.063242][T12852] [drm] Initialized udl on minor 20 [ 505.093993][T12940] usb 6-1: Using ep0 maxpacket: 8 [ 505.109573][T12852] usb 3-1: USB disconnect, device number 35 [ 505.127067][T12900] usb 2-1: Using ep0 maxpacket: 8 [ 505.166151][ T5] usb 1-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=8b.53 [ 505.175583][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.213817][T12940] usb 6-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=31.4a [ 505.223281][T12940] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.243410][T12940] usb 6-1: config 0 descriptor?? [ 505.254375][ T5] usb 1-1: config 0 descriptor?? [ 505.277678][T12900] usb 2-1: New USB device found, idVendor=0c45, idProduct=6040, bcdDevice=93.68 [ 505.286951][T12900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.299160][T12940] usb 6-1: Direct firmware load for bfubase.frm failed with error -2 [ 505.307504][T12940] Bluetooth: Firmware request failed [ 505.337333][T12940] bfusb: probe of 6-1:0.0 failed with error -5 [ 505.360627][T12900] usb 2-1: config 0 descriptor?? [ 505.431499][T12900] gspca_main: sonixj-2.14.0 probing 0c45:6040 [ 505.513366][T12852] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 505.513637][ T5] peak_usb 1-1:0.0: PEAK-System PCAN-USB X6 v146 fw v127.11.73 (2 channels) [ 505.531526][T12940] usb 6-1: USB disconnect, device number 20 [ 505.736094][ T5] peak_usb 1-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 505.744872][ T5] peak_usb 1-1:0.0: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 505.818154][ T5] peak_usb: probe of 1-1:0.0 failed with error -71 [ 505.835599][ T5] usb 1-1: USB disconnect, device number 32 18:42:56 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xd1}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xfffffea8}, {&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/226, 0xe2}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 505.873873][T12852] usb 3-1: New USB device found, idVendor=17e9, idProduct=8226, bcdDevice=81.18 [ 505.883245][T12852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.912083][T12852] usb 3-1: config 0 descriptor?? 18:42:56 executing program 5: syz_usb_connect(0x0, 0x240, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xbe, 0x66, 0x34, 0x8, 0x57c, 0x2200, 0x314a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xd, 0xa2, 0x84, 0x0, [], [{{0x9, 0x5, 0x1}}, {{0x9, 0x5, 0x2}}]}}]}}]}}, 0x0) [ 506.213671][T12852] udlfb 3-1:0.0: vendor descriptor not available (-71) [ 506.237091][T12852] usb 3-1: Read EDID byte 0 failed: -71 [ 506.271116][T12852] usb 3-1: Read EDID byte 0 failed: -71 [ 506.307919][T12852] usb 3-1: Read EDID byte 0 failed: -71 [ 506.314523][T12852] usb 3-1: Unable to get valid EDID from device/display 18:42:56 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1000000, 0x0, "f8ca781d5f7e93115c52fa936f014904ccdb29372829d175a4e80426585243b3926d887f686449fdd786f718d8343d49d4273cc82ed2a2ef63524fc21d710476", "92ef27daf4634f9065ecbc04c983083f390c3d7bf9ac5c11d0b60f5d070e9826557914da1567ee4534b1192353f3f801223d563be035c7fb302fe546973e9c78", "f1a55947f83b5a8a1bd0d7e25a30c2c9d78038891de2ae1c3c5b7be4da2a17da"}) [ 506.524144][T12852] usb 3-1: submit urb error: -2 [ 506.534861][T12852] udlfb: probe of 3-1:0.0 failed with error -2 [ 506.596539][ T5] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 506.614080][T12852] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 506.622796][T12852] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor 18:42:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r1) dup(0xffffffffffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 506.696224][T12852] [drm:udl_init] *ERROR* Selecting channel failed [ 506.705477][T12852] [drm:udl_submit_urb] *ERROR* usb_submit_urb error fffffffe [ 506.728693][T12900] gspca_sonixj: reg_r err -110 [ 506.733827][T12900] sonixj: probe of 2-1:0.0 failed with error -110 18:42:56 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x4, 0xb2, 0x18, 0x40, 0x17e9, 0x8226, 0x8118, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x6, {0x6, 0x0, "010004f2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 506.806526][T12852] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 506.815554][T12852] [drm] Cannot find any crtc or sizes [ 506.821088][T12852] [drm:udl_submit_urb] *ERROR* usb_submit_urb error fffffffe [ 506.894408][ T5] usb 6-1: Using ep0 maxpacket: 8 18:42:57 executing program 4: mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) [ 506.945161][T12852] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 21 [ 506.953226][T12852] [drm] Initialized udl on minor 21 [ 507.030634][T12852] usb 3-1: USB disconnect, device number 36 [ 507.044031][ T5] usb 6-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=31.4a [ 507.053362][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.150485][ T5] usb 6-1: config 0 descriptor?? [ 507.205777][ T5] usb 6-1: Direct firmware load for bfubase.frm failed with error -2 [ 507.214349][ T5] Bluetooth: Firmware request failed [ 507.219939][ T5] bfusb: probe of 6-1:0.0 failed with error -5 [ 507.405292][ T5] usb 6-1: USB disconnect, device number 21 [ 507.434278][T12852] usb 3-1: new high-speed USB device number 37 using dummy_hcd 18:42:57 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe4, 0x97, 0x9d, 0x8, 0xc45, 0x6040, 0x9368, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6c, 0x94, 0x40}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0xac, &(0x7f0000001a40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x491, &(0x7f0000000480)={0x0, 0x0, 0x1, "11"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 18:42:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="580000002500070574e800100000773f50754d74", @ANYRES32, @ANYBLOB="00000000f1ffffff0000000008000100736662002c00020028000100"/64], 0x58}}, 0x0) 18:42:57 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xd1}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xfffffea8}, {&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/226, 0xe2}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 507.488634][T12900] usb 2-1: USB disconnect, device number 27 18:42:57 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x5, 0x8, 0x1, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0xffffffff}, 0x3c) 18:42:57 executing program 0: clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000700)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000000500)="00abe6d29e6101cb8b41eea5cf2e67fea541e9b7b65fe42e517d5f81d2919e1b2f4cf7f77a16fc3e961a0847916c7c2d9b77cd3160567341263cf19b3b2c6177e7065dda850c756c06aede12e9da8118bb5464ad07fa6146f6903ee57345cbd7551f547bdbe947b4f9a0b28cf29a28eda534fc6e2c9bf2c36c87da9ad79e6e7090", 0x4202692d7f740df1, 0x4000801, 0x0, 0xfffffffffffffeda) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) recvfrom$inet(r0, &(0x7f0000000440)=""/98, 0x7cd97198ffceeca1, 0x0, 0x0, 0xffffffffffffffae) pipe(&(0x7f0000000000)) read(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = gettid() tkill(r2, 0x1000000000013) [ 507.798247][T12852] usb 3-1: New USB device found, idVendor=17e9, idProduct=8226, bcdDevice=81.18 [ 507.807970][T12852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.822399][T15848] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 18:42:57 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r1) dup(0xffffffffffffffff) ioctl$TCSBRKP(r1, 0x5425, 0x3ff) syz_open_dev$binderN(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 507.856792][T12852] usb 3-1: config 0 descriptor?? 18:42:58 executing program 5: syz_usb_connect(0x0, 0x240, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xbe, 0x66, 0x34, 0x8, 0x57c, 0x2200, 0x314a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xd, 0xa2, 0x84, 0x0, [], [{{0x9, 0x5, 0x1}}, {{0x9, 0x5, 0x2}}]}}]}}]}}, 0x0) [ 508.053678][T12900] usb 2-1: new high-speed USB device number 28 using dummy_hcd 18:42:58 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r1) dup(0xffffffffffffffff) ioctl$TCSBRKP(r1, 0x5425, 0x3ff) syz_open_dev$binderN(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 508.313371][T12900] usb 2-1: Using ep0 maxpacket: 8 18:42:58 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xd1}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xfffffea8}, {&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/226, 0xe2}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 508.394235][T12852] udlfb 3-1:0.0: vendor descriptor not available (-71) [ 508.401789][ T5] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 508.428014][T12852] usb 3-1: Read EDID byte 0 failed: -71 18:42:58 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r1) dup(0xffffffffffffffff) ioctl$TCSBRKP(r1, 0x5425, 0x3ff) syz_open_dev$binderN(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 508.463881][T12900] usb 2-1: New USB device found, idVendor=0c45, idProduct=6040, bcdDevice=93.68 [ 508.467240][T12852] usb 3-1: Read EDID byte 0 failed: -71 [ 508.473545][T12900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.532624][T12852] usb 3-1: Read EDID byte 0 failed: -71 [ 508.538859][T12852] usb 3-1: Unable to get valid EDID from device/display [ 508.567620][T12900] usb 2-1: config 0 descriptor?? [ 508.619062][T12900] gspca_main: sonixj-2.14.0 probing 0c45:6040 [ 508.647033][ T5] usb 6-1: Using ep0 maxpacket: 8 [ 508.666905][T12852] usb 3-1: submit urb error: -2 [ 508.678924][T12852] udlfb: probe of 3-1:0.0 failed with error -2 [ 508.754294][T12852] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 508.763941][T12852] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 508.783873][T12852] [drm:udl_init] *ERROR* Selecting channel failed [ 508.794722][T12852] [drm:udl_submit_urb] *ERROR* usb_submit_urb error fffffffe [ 508.815624][T12852] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 508.825749][T12852] [drm] Cannot find any crtc or sizes [ 508.834196][ T5] usb 6-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=31.4a [ 508.846181][T12852] [drm:udl_submit_urb] *ERROR* usb_submit_urb error fffffffe [ 508.870345][T12852] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 22 [ 508.872842][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.880933][T12852] [drm] Initialized udl on minor 22 18:42:59 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r1) dup(0xffffffffffffffff) ioctl$TCSBRKP(r1, 0x5425, 0x3ff) syz_open_dev$binderN(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 18:42:59 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xd1}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xfffffea8}, {&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/226, 0xe2}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 508.924058][ T5] usb 6-1: config 0 descriptor?? [ 508.948743][T12852] usb 3-1: USB disconnect, device number 37 [ 508.969558][ T5] usb 6-1: Direct firmware load for bfubase.frm failed with error -2 [ 508.985589][ T5] Bluetooth: Firmware request failed [ 508.991200][ T5] bfusb: probe of 6-1:0.0 failed with error -5 [ 509.180974][ T5] usb 6-1: USB disconnect, device number 22 [ 509.793322][T12900] gspca_sonixj: reg_r err -110 [ 509.802022][T12900] sonixj: probe of 2-1:0.0 failed with error -110 18:43:00 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe4, 0x97, 0x9d, 0x8, 0xc45, 0x6040, 0x9368, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6c, 0x94, 0x40}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0xac, &(0x7f0000001a40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x491, &(0x7f0000000480)={0x0, 0x0, 0x1, "11"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 18:43:00 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='f'], 0x1) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 18:43:00 executing program 4: socket$xdp(0x2c, 0x3, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(0x0, 0x0) link(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x200000002, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) add_key$keyring(&(0x7f0000000100)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000680)="d93165bc75657ac6c202ca1616c0c10f1ddb80b8420c05f1c5151ca93136fd859fc6a1e8995220d9af", 0x29, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f00000000c0)={0x4a0e3d761b47f39c}) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x40fdf) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x1000) 18:43:00 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x4, 0xb2, 0x18, 0x40, 0x17e9, 0x8226, 0x8118, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x6, {0x6, 0x0, "010004f2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 18:43:00 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xd1}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xfffffea8}, {&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/226, 0xe2}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:43:00 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r1) dup(0xffffffffffffffff) ioctl$TCSBRKP(r1, 0x5425, 0x3ff) syz_open_dev$binderN(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 510.621615][T12900] usb 2-1: USB disconnect, device number 28 18:43:00 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xd1}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xfffffea8}, {&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/226, 0xe2}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:43:00 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r1) dup(0xffffffffffffffff) ioctl$TCSBRKP(r1, 0x5425, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 18:43:00 executing program 0: creat(&(0x7f0000000700)='./bus\x00', 0x0) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) 18:43:01 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = inotify_init() r2 = inotify_add_watch(r1, &(0x7f00000000c0)='.\x00', 0x1) inotify_rm_watch(r1, r2) [ 511.003740][T12852] usb 3-1: new high-speed USB device number 38 using dummy_hcd 18:43:01 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xd1}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xfffffea8}, {&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/226, 0xe2}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:43:01 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd2(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000140)={'lo:\x05\xe6\r\x00\x00\x85\x01\x00\x00\x00\x10\x03\x00', {0x2, 0x0, @local}}) [ 511.173368][T12900] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 511.413826][T12900] usb 2-1: Using ep0 maxpacket: 8 [ 511.436702][T12852] usb 3-1: New USB device found, idVendor=17e9, idProduct=8226, bcdDevice=81.18 [ 511.447599][T12852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.459777][T12852] usb 3-1: config 0 descriptor?? [ 511.533608][T12900] usb 2-1: New USB device found, idVendor=0c45, idProduct=6040, bcdDevice=93.68 [ 511.543414][T12900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.554003][T12900] usb 2-1: config 0 descriptor?? [ 511.598571][T12900] gspca_main: sonixj-2.14.0 probing 0c45:6040 [ 511.963539][T12852] udlfb 3-1:0.0: vendor descriptor not available (-71) [ 511.993617][T12852] usb 3-1: Read EDID byte 0 failed: -71 [ 512.013709][T12852] usb 3-1: Read EDID byte 0 failed: -71 [ 512.033503][T12852] usb 3-1: Read EDID byte 0 failed: -71 [ 512.039916][T12852] usb 3-1: Unable to get valid EDID from device/display [ 512.081508][T12852] usb 3-1: submit urb error: -2 [ 512.091559][T12852] udlfb: probe of 3-1:0.0 failed with error -2 [ 512.153789][T12852] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 512.164969][T12852] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 512.193310][T12852] [drm:udl_init] *ERROR* Selecting channel failed [ 512.201948][T12852] [drm:udl_submit_urb] *ERROR* usb_submit_urb error fffffffe [ 512.224511][T12852] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 512.234018][T12852] [drm] Cannot find any crtc or sizes [ 512.239748][T12852] [drm:udl_submit_urb] *ERROR* usb_submit_urb error fffffffe [ 512.254447][T12852] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 23 [ 512.265432][T12852] [drm] Initialized udl on minor 23 [ 512.274044][T12852] usb 3-1: USB disconnect, device number 38 [ 512.763291][T12900] gspca_sonixj: reg_r err -110 [ 512.770907][T12900] sonixj: probe of 2-1:0.0 failed with error -110 18:43:03 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe4, 0x97, 0x9d, 0x8, 0xc45, 0x6040, 0x9368, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6c, 0x94, 0x40}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x491, &(0x7f0000000480)={0x0, 0x0, 0x1, "11"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 18:43:03 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0xff76) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11011, r0, 0x0) 18:43:03 executing program 4: socket$inet_sctp(0x2, 0x0, 0x84) shutdown(0xffffffffffffffff, 0x1) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) dup2(r0, r1) 18:43:03 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xd1}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xfffffea8}, {&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/226, 0xe2}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:43:03 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x4924924924926a9, 0x0) ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) ppoll(&(0x7f0000000500)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 18:43:03 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x4, 0xb2, 0x18, 0x40, 0x17e9, 0x8226, 0x8118, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x6, {0x6, 0x0, "010004f2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 513.763286][T12900] usb 2-1: USB disconnect, device number 29 [ 513.871035][T15947] debugfs: File '15941' in directory 'proc' already present! 18:43:04 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xd1}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xfffffea8}, {&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/226, 0xe2}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 514.006558][T15947] debugfs: File '15941' in directory 'proc' already present! 18:43:04 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r1) ioctl$TCSBRKP(r1, 0x5425, 0x3ff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) fchdir(0xffffffffffffffff) [ 514.103965][ T5] usb 3-1: new high-speed USB device number 39 using dummy_hcd 18:43:04 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) dup2(r0, r1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) getsockname$unix(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000300)=0x6e) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev}, r3}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f00000001c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000180)}}, 0x18) 18:43:04 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xd1}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xfffffea8}, {&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/226, 0xe2}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 514.263262][T12900] usb 2-1: new high-speed USB device number 30 using dummy_hcd 18:43:04 executing program 5: creat(&(0x7f0000000700)='./bus\x00', 0x0) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) 18:43:04 executing program 4: openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}}}, 0x69) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000001c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000180), r2}}, 0x18) [ 514.467257][ T5] usb 3-1: New USB device found, idVendor=17e9, idProduct=8226, bcdDevice=81.18 [ 514.476634][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.513485][T12900] usb 2-1: Using ep0 maxpacket: 8 [ 514.541290][ T5] usb 3-1: config 0 descriptor?? [ 514.633545][T12900] usb 2-1: New USB device found, idVendor=0c45, idProduct=6040, bcdDevice=93.68 [ 514.642790][T12900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.695932][T12900] usb 2-1: config 0 descriptor?? [ 514.741622][T12900] gspca_main: sonixj-2.14.0 probing 0c45:6040 [ 515.044488][ T5] udlfb 3-1:0.0: vendor descriptor not available (-71) [ 515.063588][ T5] usb 3-1: Read EDID byte 0 failed: -71 [ 515.083556][ T5] usb 3-1: Read EDID byte 0 failed: -71 [ 515.103545][ T5] usb 3-1: Read EDID byte 0 failed: -71 [ 515.109505][ T5] usb 3-1: Unable to get valid EDID from device/display [ 515.164987][ T5] usb 3-1: submit urb error: -2 [ 515.176073][ T5] udlfb: probe of 3-1:0.0 failed with error -2 [ 515.243497][ T5] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 515.252552][ T5] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 515.276126][ T5] [drm:udl_init] *ERROR* Selecting channel failed [ 515.284824][ T5] [drm:udl_submit_urb] *ERROR* usb_submit_urb error fffffffe [ 515.303510][ T5] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 515.312738][ T5] [drm] Cannot find any crtc or sizes [ 515.318607][ T5] [drm:udl_submit_urb] *ERROR* usb_submit_urb error fffffffe [ 515.354029][ T5] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 24 [ 515.361748][ T5] [drm] Initialized udl on minor 24 [ 515.388335][ T5] usb 3-1: USB disconnect, device number 39 [ 515.463528][T12900] gspca_sonixj: reg_r err -110 [ 515.469035][T12900] sonixj: probe of 2-1:0.0 failed with error -110 18:43:06 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe4, 0x97, 0x9d, 0x8, 0xc45, 0x6040, 0x9368, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6c, 0x94, 0x40}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x491, &(0x7f0000000480)={0x0, 0x0, 0x1, "11"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 18:43:06 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xd1}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xfffffea8}, {&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/226, 0xe2}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:43:06 executing program 5: openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x2}}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}}}, 0x69) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000001c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000180), r2}}, 0x18) 18:43:06 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x4, 0xb2, 0x18, 0x40, 0x17e9, 0x8226, 0x8118, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x2, {0x2, 0x37385ef6f197895f}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 18:43:06 executing program 4: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKROSET(r0, 0x914, 0x0) 18:43:06 executing program 0: [ 516.868756][ T5] usb 2-1: USB disconnect, device number 30 18:43:07 executing program 0: 18:43:07 executing program 4: 18:43:07 executing program 5: 18:43:07 executing program 0: 18:43:07 executing program 3: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xd1}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xfffffea8}, {&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/226, 0xe2}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 517.223271][T12900] usb 3-1: new high-speed USB device number 40 using dummy_hcd 18:43:07 executing program 4: [ 517.343433][ T5] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 517.583563][T12900] usb 3-1: New USB device found, idVendor=17e9, idProduct=8226, bcdDevice=81.18 [ 517.592839][T12900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.602226][ T5] usb 2-1: Using ep0 maxpacket: 8 [ 517.608609][T12900] usb 3-1: config 0 descriptor?? [ 517.723627][ T5] usb 2-1: New USB device found, idVendor=0c45, idProduct=6040, bcdDevice=93.68 [ 517.732841][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.742880][ T5] usb 2-1: config 0 descriptor?? [ 517.787979][ T5] gspca_main: sonixj-2.14.0 probing 0c45:6040 [ 517.873539][T12900] udlfb 3-1:0.0: vendor descriptor not available (2) [ 518.093658][T12900] usb 3-1: Read EDID byte 0 failed: -71 [ 518.113660][T12900] usb 3-1: Read EDID byte 0 failed: -71 [ 518.133567][T12900] usb 3-1: Read EDID byte 0 failed: -71 [ 518.139400][T12900] usb 3-1: Unable to get valid EDID from device/display [ 518.180643][T12900] usb 3-1: submit urb error: -2 [ 518.189822][T12900] udlfb: probe of 3-1:0.0 failed with error -2 [ 518.253564][T12900] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 518.262156][T12900] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 518.284752][T12900] [drm:udl_init] *ERROR* Selecting channel failed [ 518.292322][T12900] [drm:udl_submit_urb] *ERROR* usb_submit_urb error fffffffe [ 518.313364][T12900] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 518.322094][T12900] [drm] Cannot find any crtc or sizes [ 518.327779][T12900] [drm:udl_submit_urb] *ERROR* usb_submit_urb error fffffffe [ 518.339855][T12900] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 25 [ 518.347691][T12900] [drm] Initialized udl on minor 25 [ 518.356167][T12900] usb 3-1: USB disconnect, device number 40 [ 518.513431][ T5] gspca_sonixj: reg_r err -110 [ 518.518783][ T5] sonixj: probe of 2-1:0.0 failed with error -110 18:43:10 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe4, 0x97, 0x9d, 0x8, 0xc45, 0x6040, 0x9368, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6c, 0x94, 0x40}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x491, &(0x7f0000000480)={0x0, 0x0, 0x1, "11"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 18:43:10 executing program 0: 18:43:10 executing program 5: 18:43:10 executing program 4: 18:43:10 executing program 3: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xd1}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xfffffea8}, {&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/226, 0xe2}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:43:10 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x4, 0xb2, 0x18, 0x40, 0x17e9, 0x8226, 0x8118, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x2, {0x2, 0x37385ef6f197895f}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 519.988817][T12852] usb 2-1: USB disconnect, device number 31 18:43:10 executing program 4: 18:43:10 executing program 0: 18:43:10 executing program 5: 18:43:10 executing program 3: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xd1}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xfffffea8}, {&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/226, 0xe2}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:43:10 executing program 4: 18:43:10 executing program 0: [ 520.331699][T12900] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 520.453267][T12852] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 520.693265][T12852] usb 2-1: Using ep0 maxpacket: 8 [ 520.733675][T12900] usb 3-1: New USB device found, idVendor=17e9, idProduct=8226, bcdDevice=81.18 [ 520.742866][T12900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.754042][T12900] usb 3-1: config 0 descriptor?? [ 520.813698][T12852] usb 2-1: New USB device found, idVendor=0c45, idProduct=6040, bcdDevice=93.68 [ 520.822980][T12852] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.832599][T12852] usb 2-1: config 0 descriptor?? [ 520.888956][T12852] gspca_main: sonixj-2.14.0 probing 0c45:6040 [ 521.013615][T12900] udlfb 3-1:0.0: vendor descriptor not available (2) [ 521.233446][T12900] usb 3-1: Read EDID byte 0 failed: -71 [ 521.263762][T12900] usb 3-1: Read EDID byte 0 failed: -71 [ 521.284714][T12900] usb 3-1: Read EDID byte 0 failed: -71 [ 521.290612][T12900] usb 3-1: Unable to get valid EDID from device/display [ 521.340805][T12900] usb 3-1: submit urb error: -2 [ 521.349336][T12900] udlfb: probe of 3-1:0.0 failed with error -2 [ 521.413339][T12900] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 521.422144][T12900] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 521.443633][T12900] [drm:udl_init] *ERROR* Selecting channel failed [ 521.451244][T12900] [drm:udl_submit_urb] *ERROR* usb_submit_urb error fffffffe [ 521.473539][T12900] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 521.482457][T12900] [drm] Cannot find any crtc or sizes [ 521.488192][T12900] [drm:udl_submit_urb] *ERROR* usb_submit_urb error fffffffe [ 521.500078][T12900] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 26 [ 521.507891][T12900] [drm] Initialized udl on minor 26 [ 521.516411][T12900] usb 3-1: USB disconnect, device number 41 [ 521.613492][T12852] gspca_sonixj: reg_r err -110 [ 521.618542][T12852] sonixj: probe of 2-1:0.0 failed with error -110 18:43:13 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe4, 0x97, 0x9d, 0x8, 0xc45, 0x6040, 0x9368, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6c, 0x94, 0x40}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0xac, &(0x7f0000001a40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x491, &(0x7f0000000480)={0x0, 0x0, 0x1, "11"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 18:43:13 executing program 5: 18:43:13 executing program 4: 18:43:13 executing program 3: r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xd1}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xfffffea8}, {&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/226, 0xe2}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:43:13 executing program 0: 18:43:13 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x4, 0xb2, 0x18, 0x40, 0x17e9, 0x8226, 0x8118, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x2, {0x2, 0x37385ef6f197895f}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 523.089723][T12900] usb 2-1: USB disconnect, device number 32 18:43:13 executing program 0: 18:43:13 executing program 4: 18:43:13 executing program 5: 18:43:13 executing program 3: r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xd1}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xfffffea8}, {&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/226, 0xe2}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:43:13 executing program 5: 18:43:13 executing program 0: [ 523.453561][ T5] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 523.623429][T12900] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 523.813592][ T5] usb 3-1: New USB device found, idVendor=17e9, idProduct=8226, bcdDevice=81.18 [ 523.822950][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.832918][ T5] usb 3-1: config 0 descriptor?? [ 523.883229][T12900] usb 2-1: Using ep0 maxpacket: 8 [ 524.013692][T12900] usb 2-1: New USB device found, idVendor=0c45, idProduct=6040, bcdDevice=93.68 [ 524.023333][T12900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.033358][T12900] usb 2-1: config 0 descriptor?? [ 524.078730][T12900] gspca_main: sonixj-2.14.0 probing 0c45:6040 [ 524.093849][ T5] udlfb 3-1:0.0: vendor descriptor not available (2) [ 524.313378][ T5] usb 3-1: Read EDID byte 0 failed: -71 [ 524.333516][ T5] usb 3-1: Read EDID byte 0 failed: -71 [ 524.353296][ T5] usb 3-1: Read EDID byte 0 failed: -71 [ 524.358989][ T5] usb 3-1: Unable to get valid EDID from device/display [ 524.399008][ T5] usb 3-1: submit urb error: -2 [ 524.407957][ T5] udlfb: probe of 3-1:0.0 failed with error -2 [ 524.473365][ T5] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 524.481980][ T5] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 524.503350][ T5] [drm:udl_init] *ERROR* Selecting channel failed [ 524.510931][ T5] [drm:udl_submit_urb] *ERROR* usb_submit_urb error fffffffe [ 524.533497][ T5] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 524.542206][ T5] [drm] Cannot find any crtc or sizes [ 524.547949][ T5] [drm:udl_submit_urb] *ERROR* usb_submit_urb error fffffffe [ 524.559749][ T5] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 27 [ 524.567586][ T5] [drm] Initialized udl on minor 27 [ 524.575649][ T5] usb 3-1: USB disconnect, device number 42 [ 524.803302][T12900] gspca_sonixj: reg_r err -110 [ 524.808346][T12900] sonixj: probe of 2-1:0.0 failed with error -110 18:43:16 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe4, 0x97, 0x9d, 0x8, 0xc45, 0x6040, 0x9368, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6c, 0x94, 0x40}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0xac, &(0x7f0000001a40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x491, &(0x7f0000000480)={0x0, 0x0, 0x1, "11"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 18:43:16 executing program 4: 18:43:16 executing program 5: 18:43:16 executing program 0: 18:43:16 executing program 3: r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xd1}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xfffffea8}, {&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/226, 0xe2}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:43:16 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x4, 0xb2, 0x18, 0x40, 0x17e9, 0x8226, 0x8118, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x4, {0x4, 0x37385ef6f197895f, "0100"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 526.205323][T12852] usb 2-1: USB disconnect, device number 33 18:43:16 executing program 0: 18:43:16 executing program 4: 18:43:16 executing program 5: 18:43:16 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xd1}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xfffffea8}, {&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/226, 0xe2}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:43:16 executing program 0: [ 526.564259][T12940] usb 3-1: new high-speed USB device number 43 using dummy_hcd 18:43:16 executing program 4: [ 526.724888][T12852] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 526.933690][T12940] usb 3-1: New USB device found, idVendor=17e9, idProduct=8226, bcdDevice=81.18 [ 526.943260][T12940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.952746][T12940] usb 3-1: config 0 descriptor?? [ 526.973809][T12852] usb 2-1: Using ep0 maxpacket: 8 [ 527.093609][T12852] usb 2-1: New USB device found, idVendor=0c45, idProduct=6040, bcdDevice=93.68 [ 527.102796][T12852] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.112770][T12852] usb 2-1: config 0 descriptor?? [ 527.158533][T12852] gspca_main: sonixj-2.14.0 probing 0c45:6040 [ 527.213946][T12940] udlfb 3-1:0.0: vendor descriptor not available (4) [ 527.423622][T12940] usb 3-1: Read EDID byte 0 failed: -71 [ 527.443848][T12940] usb 3-1: Read EDID byte 0 failed: -71 [ 527.463794][T12940] usb 3-1: Read EDID byte 0 failed: -71 [ 527.469693][T12940] usb 3-1: Unable to get valid EDID from device/display [ 527.509635][T12940] usb 3-1: submit urb error: -2 [ 527.518752][T12940] udlfb: probe of 3-1:0.0 failed with error -2 [ 527.583740][T12940] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 527.592737][T12940] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 527.613371][T12940] [drm:udl_init] *ERROR* Selecting channel failed [ 527.621277][T12940] [drm:udl_submit_urb] *ERROR* usb_submit_urb error fffffffe [ 527.644600][T12940] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 527.653440][T12940] [drm] Cannot find any crtc or sizes [ 527.658964][T12940] [drm:udl_submit_urb] *ERROR* usb_submit_urb error fffffffe [ 527.671580][T12940] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 28 [ 527.679337][T12940] [drm] Initialized udl on minor 28 [ 527.687632][T12940] usb 3-1: USB disconnect, device number 43 [ 527.883321][T12852] gspca_sonixj: reg_r err -110 [ 527.888414][T12852] sonixj: probe of 2-1:0.0 failed with error -110 18:43:19 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe4, 0x97, 0x9d, 0x8, 0xc45, 0x6040, 0x9368, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6c, 0x94, 0x40}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0xac, &(0x7f0000001a40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x491, &(0x7f0000000480)={0x0, 0x0, 0x1, "11"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 18:43:19 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = eventfd(0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r3, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x1, 0xc3, 0x0, 0x0, 0x3e, 0x0, 0x218, 0x38, 0x3d0, 0xffff, 0x3, 0x20, 0x1, 0x0, 0x0, 0x7}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x17}], "", [[]]}, 0x158) 18:43:19 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x5e, &(0x7f0000000600)={@link_local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "1f0040", 0x28, 0x3a, 0x86ddffff, @remote={0xfe, 0x80, [0x3, 0x543, 0x700, 0x5, 0x50000000000000d, 0x8848000000f0ffff], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@ndisc_redir={0x89, 0x0, 0x0, [], @local, @empty}}}}}}, 0x0) 18:43:19 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0) 18:43:19 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xd1}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xfffffea8}, {&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/226, 0xe2}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:43:19 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x4, 0xb2, 0x18, 0x40, 0x17e9, 0x8226, 0x8118, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x4, {0x4, 0x37385ef6f197895f, "0100"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 529.313985][T12852] usb 2-1: USB disconnect, device number 34 18:43:19 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x2}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d8, &(0x7f00000000c0)) 18:43:19 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4000000000002a5, 0x4008000) dup3(r2, r3, 0x0) 18:43:19 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xd1}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xfffffea8}, {&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/226, 0xe2}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 529.709379][T12900] usb 3-1: new high-speed USB device number 44 using dummy_hcd 18:43:19 executing program 4: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@nat={'%at\x00', 0x19, 0x1, 0x1a8, [0x200005c0, 0x0, 0x0, 0x200005f0, 0x20000620], 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"/424]}, 0x220) r1 = add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f00000000c0)={'.\x00'}, &(0x7f0000000080), 0xfe28, 0xfffffffffffffffb) keyctl$read(0xb, r1, &(0x7f0000000000)=""/4, 0x31852a384220a633) request_key(0x0, &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)='blacklist\x00', r1) r2 = add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f00000000c0)={'.\x00'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$read(0xb, r2, 0x0, 0x0) r3 = add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f00000000c0)={'.\x00'}, &(0x7f0000000080), 0xfe28, 0xfffffffffffffffb) keyctl$read(0xb, 0x0, &(0x7f0000000000)=""/4, 0x31852a384220a633) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r2, r3}, &(0x7f0000000180)=""/241, 0xf1, &(0x7f00000002c0)={&(0x7f0000000280)={'crc32c-generic\x00'}}) 18:43:19 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fchmod(r0, 0x0) 18:43:19 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xd1}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xfffffea8}, {&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/226, 0xe2}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 529.813755][T12852] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 530.060175][T16176] dns_resolver: Unsupported server list version (0) [ 530.082520][T12852] usb 2-1: Using ep0 maxpacket: 8 [ 530.128483][T16187] dns_resolver: Unsupported server list version (0) [ 530.203631][T12852] usb 2-1: New USB device found, idVendor=0c45, idProduct=6040, bcdDevice=93.68 [ 530.205629][T12900] usb 3-1: New USB device found, idVendor=17e9, idProduct=8226, bcdDevice=81.18 [ 530.212847][T12852] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.222121][T12900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.242445][T12900] usb 3-1: config 0 descriptor?? [ 530.275573][T12852] usb 2-1: config 0 descriptor?? [ 530.318234][T12852] gspca_main: sonixj-2.14.0 probing 0c45:6040 [ 530.503733][T12900] udlfb 3-1:0.0: vendor descriptor not available (4) [ 530.733789][T12900] usb 3-1: Read EDID byte 0 failed: -71 [ 530.753664][T12900] usb 3-1: Read EDID byte 0 failed: -71 [ 530.773864][T12900] usb 3-1: Read EDID byte 0 failed: -71 [ 530.779700][T12900] usb 3-1: Unable to get valid EDID from device/display [ 530.822169][T12900] usb 3-1: submit urb error: -2 [ 530.832092][T12900] udlfb: probe of 3-1:0.0 failed with error -2 [ 530.913541][T12900] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 530.922384][T12900] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 530.943462][T12900] [drm:udl_init] *ERROR* Selecting channel failed [ 530.951126][T12900] [drm:udl_submit_urb] *ERROR* usb_submit_urb error fffffffe [ 530.973497][T12900] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 530.982257][T12900] [drm] Cannot find any crtc or sizes [ 530.987910][T12900] [drm:udl_submit_urb] *ERROR* usb_submit_urb error fffffffe [ 531.000568][T12900] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 29 [ 531.008383][T12900] [drm] Initialized udl on minor 29 [ 531.017247][T12900] usb 3-1: USB disconnect, device number 44 [ 531.043338][T12852] gspca_sonixj: reg_r err -110 [ 531.048476][T12852] sonixj: probe of 2-1:0.0 failed with error -110 18:43:22 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xac, &(0x7f0000001a40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x491, &(0x7f0000000480)={0x0, 0x0, 0x1, "11"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 18:43:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x8, 0x2, [@tunl6_policy=[@tunl_policy=[@IFLA_IPTUN_COLLECT_METADATA={0x4}]]]}}}]}, 0x38}}, 0x0) 18:43:22 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket(0x1000000010, 0x400000400080803, 0x0) dup(r2) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x1000000010, 0x400000400080803, 0x0) dup(r3) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket(0x1000000010, 0x400000400080803, 0x0) dup(r4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r5, 0x0, r5) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket(0x1000000010, 0x400000400080803, 0x0) dup(r6) socket$inet_udp(0x2, 0x2, 0x0) r7 = socket(0x1000000010, 0x400000400080803, 0x0) dup(r7) socket$packet(0x11, 0x2, 0x300) socket$inet_udp(0x2, 0x2, 0x0) r8 = socket(0x1000000010, 0x400000400080803, 0x0) dup(r8) socket$nl_generic(0x10, 0x3, 0x10) eventfd(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000280)=ANY=[@ANYRES32=r9]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xc) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000000)={'syz_tun\x00', 0x0}) 18:43:22 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xd1}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xfffffea8}, {&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/226, 0xe2}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:43:22 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = eventfd(0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r3, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x1, 0xc3, 0x0, 0x0, 0x3e, 0x0, 0x218, 0x38, 0x3d0, 0xffff, 0x3, 0x20, 0x1, 0x0, 0x0, 0x7}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x17}], "", [[]]}, 0x158) 18:43:22 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x4, 0xb2, 0x18, 0x40, 0x17e9, 0x8226, 0x8118, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x4, {0x4, 0x37385ef6f197895f, "0100"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 532.428108][T12900] usb 2-1: USB disconnect, device number 35 18:43:22 executing program 0: clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000140)='gid_map\x00\xba\x99FH\xf4\a\xaf\x04\x14\xe1\xb8d\xd4@O\xce\xbb\xe4\xdf\xc1\xe9l\x05\x9b\xd5\x1dD\xc7k\x8f\xee\xab\x920\xab\x06\xaf\xb6|&\xb7s>\xac\xebo\xb9\xcd\xfa\xb5N7\x1c!\x9c@ad\xfa\x9d\xffc\xfe\xf5[J\xe9\f\xa9\xc7\xd9e\xc9c\xddI\x94|~\x98\x8c\x14\xfb\x9c1\vu\x13\xd9\xb2\xce\x96\xe9\xdfj\xa5\xec\x19\xd8`.\x91\xdb<\xe9\x195\x81\xb1\xd1\xcbM\xc7VJ5\xb7U\xf6\xc2B\f\x13\x02\x7f\xc3\x99\xbf\xa6\xcc\xaf\xfe\xc88\xb5\xcb\xa2X\xd3\x94\x9d\xe5\xc0\\\x86?\x12 \x0e\xb0\xe8\x11z\xcd\x12Na\xf5\xbc D\x9a#\xe1\xa0h\xcb\x9dkDPp\xc4\xd2\xa7\xbejn\xfb\x03v--\xc5 \xb8\xeaq\x0f\x9a\n\xcb%\x1d\xc2\x82\x9f\x1f\xcd\xc8\x818\xa6\xea\x12\xd7\x1b?\xa0u\xb1z\xb3-\xb7\xc8\xc3\b\x1fI5\xcaxb\x0f\xfa/u\x18\xc6\x06\xa6V\xf0\xa7#5\xaeWPV\xf40xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() tkill(r2, 0x3b) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3KU\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#,I\xee\x06\xd1\xad\xd2_\xa7\xf7U\xe1\x00O\xbc\x01\x93K\xc7\x99[\xf2\x87\x97\x86;\xbb\xca\xc0\x1c\xe05\xf6n\xc3\xa9\x83{xe\xdd\xc1\xe3!\xccS^\x9b\xc5\xe7\b\xad\xce') setgroups(0x54b, &(0x7f0000000180)) pread64(r3, 0x0, 0x327, 0x800000) 18:43:22 executing program 0: ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r0 = open(0x0, 0x0, 0x0) membarrier(0x4, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000300)=ANY=[@ANYBLOB='k'], 0x1) ioctl$void(r1, 0x5450) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open$dir(&(0x7f0000000140)='./bus\x00', 0x200, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) msgsnd(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="cc"], 0x1, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000540)) msgsnd(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1a"], 0x1, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYPTR64=&(0x7f0000000300)=ANY=[]], 0x1, 0x0) msgrcv(0x0, &(0x7f0000000040), 0x8, 0x0, 0x0) [ 532.643747][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 532.650164][ C1] protocol 88fb is buggy, dev hsr_slave_1 18:43:22 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xd1}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xfffffea8}, {&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/226, 0xe2}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 532.846427][T12852] usb 3-1: new high-speed USB device number 45 using dummy_hcd 18:43:22 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xd1}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xfffffea8}, {&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/226, 0xe2}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:43:23 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r2, 0x107, 0x11, &(0x7f00000002c0), &(0x7f0000000000)=0x4) 18:43:23 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xac, &(0x7f0000001a40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x491, &(0x7f0000000480)={0x0, 0x0, 0x1, "11"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 18:43:23 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xd1}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xfffffea8}, {&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/226, 0xe2}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:43:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0x14, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8}, @IFLA_GRE_OFLAGS={0x8}]]}}}]}, 0x40}}, 0x0) 18:43:23 executing program 4: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0', [], 0xa, "39980efd60119cc4e10403cfc7fecd412100001500ae830000"}, 0x24) [ 533.213767][T12852] usb 3-1: New USB device found, idVendor=17e9, idProduct=8226, bcdDevice=81.18 [ 533.222902][T12852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.272290][T16241] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 533.281089][T16241] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 533.294121][T12852] usb 3-1: config 0 descriptor?? 18:43:23 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = eventfd(0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r3, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x1, 0xc3, 0x0, 0x0, 0x3e, 0x0, 0x218, 0x38, 0x3d0, 0xffff, 0x3, 0x20, 0x1, 0x0, 0x0, 0x7}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x17}], "", [[]]}, 0x158) 18:43:23 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xd1}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xfffffea8}, {&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/226, 0xe2}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 533.553784][T12852] udlfb 3-1:0.0: vendor descriptor not available (4) [ 533.778999][T12852] usb 3-1: Read EDID byte 0 failed: -71 [ 533.897327][T12852] usb 3-1: Read EDID byte 0 failed: -71 [ 533.923606][T12852] usb 3-1: Read EDID byte 0 failed: -71 [ 533.929470][T12852] usb 3-1: Unable to get valid EDID from device/display [ 533.970796][T12852] usb 3-1: submit urb error: -2 [ 533.979693][T12852] udlfb: probe of 3-1:0.0 failed with error -2 [ 534.043552][T12852] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 534.052403][T12852] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 534.074773][T12852] [drm:udl_init] *ERROR* Selecting channel failed [ 534.082431][T12852] [drm:udl_submit_urb] *ERROR* usb_submit_urb error fffffffe [ 534.103331][T12852] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 534.112075][T12852] [drm] Cannot find any crtc or sizes [ 534.117820][T12852] [drm:udl_submit_urb] *ERROR* usb_submit_urb error fffffffe [ 534.131097][T12852] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 30 [ 534.138954][T12852] [drm] Initialized udl on minor 30 [ 534.147634][T12852] usb 3-1: USB disconnect, device number 45 18:43:24 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x4, 0xb2, 0x18, 0x40, 0x17e9, 0x8226, 0x8118, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x5, {0x5, 0x37385ef6f197895f, "010004"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 18:43:24 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_genetlink_get_family_id$tipc(0x0) 18:43:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x7) setreuid(0x0, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000440)=0x1, 0xffe6) sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r2, &(0x7f0000000140)='|', 0x1, 0x401c005, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) 18:43:24 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xac, &(0x7f0000001a40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x491, &(0x7f0000000480)={0x0, 0x0, 0x1, "11"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 18:43:24 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100), 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xd1}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xfffffea8}, {&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/226, 0xe2}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:43:24 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = eventfd(0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r3, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x1, 0xc3, 0x0, 0x0, 0x3e, 0x0, 0x218, 0x38, 0x3d0, 0xffff, 0x3, 0x20, 0x1, 0x0, 0x0, 0x7}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x17}], "", [[]]}, 0x158) [ 534.378610][T16273] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 18:43:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r5 = eventfd(0x0) splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r5, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 18:43:24 executing program 0: msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000140)=""/66) 18:43:24 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100), 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xd1}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xfffffea8}, {&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/226, 0xe2}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 534.703516][T12900] usb 3-1: new high-speed USB device number 46 using dummy_hcd 18:43:24 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r0, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = fcntl$dupfd(r0, 0x0, r0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000100)=ANY=[], 0x0) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000140)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0xe) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 18:43:25 executing program 1: r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0xac, &(0x7f0000001a40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x491, &(0x7f0000000480)={0x0, 0x0, 0x1, "11"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 18:43:25 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100), 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xd1}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xfffffea8}, {&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/226, 0xe2}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 535.135877][T12900] usb 3-1: New USB device found, idVendor=17e9, idProduct=8226, bcdDevice=81.18 [ 535.145245][T12900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.168613][T12900] usb 3-1: config 0 descriptor?? [ 535.433840][T12900] udlfb 3-1:0.0: vendor descriptor not available (5) [ 535.653576][T12900] usb 3-1: Read EDID byte 0 failed: -71 [ 535.673648][T12900] usb 3-1: Read EDID byte 0 failed: -71 [ 535.693681][T12900] usb 3-1: Read EDID byte 0 failed: -71 [ 535.699487][T12900] usb 3-1: Unable to get valid EDID from device/display [ 535.739139][T12900] usb 3-1: submit urb error: -2 [ 535.747514][T12900] udlfb: probe of 3-1:0.0 failed with error -2 [ 535.813411][T12900] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 535.822039][T12900] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 535.844279][T12900] [drm:udl_init] *ERROR* Selecting channel failed [ 535.851969][T12900] [drm:udl_submit_urb] *ERROR* usb_submit_urb error fffffffe [ 535.873386][T12900] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 535.882142][T12900] [drm] Cannot find any crtc or sizes [ 535.889160][T12900] [drm:udl_submit_urb] *ERROR* usb_submit_urb error fffffffe [ 535.900787][T12900] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 31 [ 535.908643][T12900] [drm] Initialized udl on minor 31 [ 535.917107][T12900] usb 3-1: USB disconnect, device number 46 18:43:26 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x4, 0xb2, 0x18, 0x40, 0x17e9, 0x8226, 0x8118, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x5, {0x5, 0x37385ef6f197895f, "010004"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 18:43:26 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = eventfd(0x0) write$binfmt_elf32(r2, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x1, 0xc3, 0x0, 0x0, 0x3e, 0x0, 0x218, 0x38, 0x3d0, 0xffff, 0x3, 0x20, 0x1, 0x0, 0x0, 0x7}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x17}], "", [[]]}, 0x158) 18:43:26 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$apparmor_current(r1, &(0x7f0000000100)=@profile={'permprofile ', '&\xc9\x00'}, 0xf) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfffffc8f) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r2, 0x0, r4, 0x0, 0x100000000ffe0, 0x0) splice(r0, 0x0, r3, 0x0, 0x100000000000a, 0x0) 18:43:26 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xd1}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xfffffea8}, {&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/226, 0xe2}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:43:26 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @random="59ffcefb00", [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @empty, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 18:43:26 executing program 1: r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0xac, &(0x7f0000001a40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x491, &(0x7f0000000480)={0x0, 0x0, 0x1, "11"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 18:43:26 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$apparmor_current(r1, &(0x7f0000000100)=@profile={'permprofile ', '&\xc9\x00'}, 0xf) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000000000a, 0x0) 18:43:26 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xd1}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xfffffea8}, {&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/226, 0xe2}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:43:26 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)=0x1000006) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0xfffffffc}) 18:43:26 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x822, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x0) 18:43:26 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xd1}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xfffffea8}, {&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/226, 0xe2}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 536.533393][T12852] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 536.536075][T16339] input: syz1 as /devices/virtual/input/input21 18:43:26 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xd1}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xfffffea8}, {&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/226, 0xe2}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 536.893657][T12852] usb 3-1: New USB device found, idVendor=17e9, idProduct=8226, bcdDevice=81.18 [ 536.902886][T12852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.912725][T12852] usb 3-1: config 0 descriptor?? [ 537.173607][T12852] udlfb 3-1:0.0: vendor descriptor not available (5) [ 537.393430][T12852] usb 3-1: Read EDID byte 0 failed: -71 [ 537.413363][T12852] usb 3-1: Read EDID byte 0 failed: -71 [ 537.433438][T12852] usb 3-1: Read EDID byte 0 failed: -71 [ 537.439270][T12852] usb 3-1: Unable to get valid EDID from device/display [ 537.478122][T12852] usb 3-1: submit urb error: -2 [ 537.486110][T12852] udlfb: probe of 3-1:0.0 failed with error -2 [ 537.543567][T12852] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 537.552284][T12852] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 537.573274][T12852] [drm:udl_init] *ERROR* Selecting channel failed [ 537.580718][T12852] [drm:udl_submit_urb] *ERROR* usb_submit_urb error fffffffe [ 537.603313][T12852] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 537.611965][T12852] [drm] Cannot find any crtc or sizes [ 537.617538][T12852] [drm:udl_submit_urb] *ERROR* usb_submit_urb error fffffffe [ 537.629114][T12852] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 32 [ 537.636921][T12852] [drm] Initialized udl on minor 32 [ 537.644815][T12852] usb 3-1: USB disconnect, device number 47 18:43:27 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x4, 0xb2, 0x18, 0x40, 0x17e9, 0x8226, 0x8118, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x5, {0x5, 0x37385ef6f197895f, "010004"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 18:43:27 executing program 4: 18:43:27 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xd1}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xfffffea8}, {&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/226, 0xe2}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:43:27 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = eventfd(0x0) write$binfmt_elf32(r2, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x1, 0xc3, 0x0, 0x0, 0x3e, 0x0, 0x218, 0x38, 0x3d0, 0xffff, 0x3, 0x20, 0x1, 0x0, 0x0, 0x7}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x17}], "", [[]]}, 0x158) 18:43:27 executing program 1: r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0xac, &(0x7f0000001a40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x491, &(0x7f0000000480)={0x0, 0x0, 0x1, "11"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 18:43:27 executing program 0: 18:43:28 executing program 0: 18:43:28 executing program 4: 18:43:28 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xd1}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xfffffea8}, {&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/226, 0xe2}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:43:28 executing program 4: 18:43:28 executing program 0: 18:43:28 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xd1}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xfffffea8}, {&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/226, 0xe2}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 538.243411][T12900] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 538.623580][T12900] usb 3-1: New USB device found, idVendor=17e9, idProduct=8226, bcdDevice=81.18 [ 538.632778][T12900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.642695][T12900] usb 3-1: config 0 descriptor?? [ 538.903644][T12900] udlfb 3-1:0.0: vendor descriptor not available (5) [ 539.123671][T12900] usb 3-1: Read EDID byte 0 failed: -71 [ 539.143796][T12900] usb 3-1: Read EDID byte 0 failed: -71 [ 539.163632][T12900] usb 3-1: Read EDID byte 0 failed: -71 [ 539.169348][T12900] usb 3-1: Unable to get valid EDID from device/display [ 539.209456][T12900] usb 3-1: submit urb error: -2 [ 539.217985][T12900] udlfb: probe of 3-1:0.0 failed with error -2 [ 539.283527][T12900] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 539.292128][T12900] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 539.313511][T12900] [drm:udl_init] *ERROR* Selecting channel failed [ 539.321178][T12900] [drm:udl_submit_urb] *ERROR* usb_submit_urb error fffffffe [ 539.343603][T12900] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 539.352366][T12900] [drm] Cannot find any crtc or sizes [ 539.358055][T12900] [drm:udl_submit_urb] *ERROR* usb_submit_urb error fffffffe [ 539.369646][T12900] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 33 [ 539.377449][T12900] [drm] Initialized udl on minor 33 [ 539.385818][T12900] usb 3-1: USB disconnect, device number 48 18:43:29 executing program 4: 18:43:29 executing program 0: 18:43:29 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xd1}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xfffffea8}, {&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/226, 0xe2}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:43:29 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe4, 0x97, 0x9d, 0x0, 0xc45, 0x6040, 0x9368, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6c, 0x94, 0x40}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0xac, &(0x7f0000001a40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x491, &(0x7f0000000480)={0x0, 0x0, 0x1, "11"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 18:43:29 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = eventfd(0x0) write$binfmt_elf32(r2, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x1, 0xc3, 0x0, 0x0, 0x3e, 0x0, 0x218, 0x38, 0x3d0, 0xffff, 0x3, 0x20, 0x1, 0x0, 0x0, 0x7}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x17}], "", [[]]}, 0x158) 18:43:29 executing program 4: 18:43:29 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xd1}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xfffffea8}, {&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/226, 0xe2}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:43:29 executing program 0: 18:43:29 executing program 2: 18:43:30 executing program 0: [ 539.983818][T12852] usb 2-1: new high-speed USB device number 36 using dummy_hcd 18:43:30 executing program 0: creat(&(0x7f0000000700)='./bus\x00', 0x0) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) pipe(0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x10000014c) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) 18:43:30 executing program 2: socket$inet(0x2, 0x0, 0x0) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f00000004c0)=""/119, 0x77) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 18:43:30 executing program 4: r0 = syz_open_dev$video(&(0x7f00000003c0)='/dev/video#\x00', 0x100000001, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000000)={0x1, @raw_data="24699b6c1605096bd6a5603ce48040f3a235e74e2880a782e7351b7f730fff1385fac32657cea5afc90f5f0c0e7739f2c97ca80227fdbe0bcb1242d5c12606604590abbf5dadc46bc72edf0ea74d9c56a32e5605b1ddba94d4574e89d69230dc80c1839c0c702fcc8afed953e62f2eb1744ad4c795f9d943eab4199902618eb454c9f81cd6eb9a123b5634d56dff5ca0678c232975359078212cf9682e435ec3507516bd2f2cc5f5223cf3876e005e744a9bdc85a2efcd36f3b0f16bc301103191a69272e99f1fde"}) 18:43:30 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xd1}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xfffffea8}, {&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/226, 0xe2}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:43:30 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) dup2(r2, r3) [ 540.263457][T12852] usb 2-1: device descriptor read/64, error 18 [ 540.663413][T12852] usb 2-1: device descriptor read/64, error 18 [ 540.943338][T12852] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 541.223309][T12852] usb 2-1: device descriptor read/64, error 18 [ 541.613266][T12852] usb 2-1: device descriptor read/64, error 18 [ 541.733347][T12852] usb usb2-port1: attempt power cycle [ 542.453166][T12852] usb 2-1: new high-speed USB device number 38 using dummy_hcd 18:43:32 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe4, 0x97, 0x9d, 0x0, 0xc45, 0x6040, 0x9368, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6c, 0x94, 0x40}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0xac, &(0x7f0000001a40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x491, &(0x7f0000000480)={0x0, 0x0, 0x1, "11"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 18:43:32 executing program 4: r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001280)=@del={0xe0, 0x11, 0x6a52ace90ef26e3f, 0x0, 0x0, {{'sha1-ssse3\x00'}, [], [], 0x0, 0xefffffff}}, 0xe0}}, 0x0) 18:43:32 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xd1}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xfffffea8}, {&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/226, 0xe2}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:43:32 executing program 2: r0 = syz_open_dev$video(&(0x7f00000003c0)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000000)={0x1, @raw_data="24699b6c1605096bd6a5603ce48040f3a235e74e2880a782e7351b7f730fff1385fac32657cea5afc90f5f0c0e7739f2c97ca80227fdbe0bcb1242d5c12606604590abbf5dadc46bc72edf0ea74d9c56a32e5605b1ddba94d4574e89d69230dc80c1839c0c702fcc8afed953e62f2eb1744ad4c795f9d943eab4199902618eb454c9f81cd6eb9a123b5634d56dff5ca0678c232975359078212cf9682e435ec3507516bd2f2cc5f5223cf3876e005e744a9bdc85a2efcd36f3b0f16bc301103191a69272e99f1fde"}) 18:43:32 executing program 0: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x22, 0x400, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000340)) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x40000000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) creat(0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) pipe2(0x0, 0x4000) r2 = dup(0xffffffffffffffff) setsockopt$inet6_tcp_int(r2, 0x6, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141046, 0x0) ftruncate(r3, 0x2007fff) fsetxattr$trusted_overlay_nlink(r3, 0x0, &(0x7f0000000080)={'\x01\x00', 0x7}, 0xfdd1, 0x0) r4 = socket$inet(0x2, 0x4, 0xbc) r5 = socket$inet6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, 0x0) ioctl$FICLONERANGE(r4, 0x4020940d, &(0x7f0000000040)={r5, 0x0, 0x3, 0x10001, 0x1ff}) socket$unix(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r6 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r7, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/459], 0x0) close(0xffffffffffffffff) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:43:32 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x1, 0xc3, 0x0, 0x0, 0x3e, 0x0, 0x218, 0x38, 0x3d0, 0xffff, 0x3, 0x20, 0x1, 0x0, 0x0, 0x7}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x17}], "", [[]]}, 0x158) [ 542.723860][T12852] usb 2-1: device descriptor read/64, error 18 18:43:32 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xd1}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xfffffea8}, {&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/226, 0xe2}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:43:32 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0xff52) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa4756f}, 0x100) 18:43:33 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x22, 0x400, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000340)) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @loopback, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x40000000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) creat(0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) pipe2(0x0, 0x4000) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000040)="b3703bd842220e64a51d4e4c81e9f49206", 0x11, 0x4000002, &(0x7f00000000c0)={0xa, 0x4e20, 0x9, @local, 0x2}, 0x1c) r3 = dup(0xffffffffffffffff) setsockopt$inet6_tcp_int(r3, 0x6, 0x0, 0x0, 0x0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x141046, 0x0) ftruncate(r4, 0x2007fff) fsetxattr$trusted_overlay_nlink(r4, 0x0, &(0x7f0000000080)={'\x01\x00', 0x7}, 0xfdd1, 0x0) socket$unix(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r6, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) close(0xffffffffffffffff) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:43:33 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xd1}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xfffffea8}, {&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/226, 0xe2}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 543.106606][T16460] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 18:43:33 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000400)={0x8, @output}) 18:43:33 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) sendmmsg$unix(r3, &(0x7f0000000680), 0x4924924924925c6, 0x0) [ 543.274194][T12852] usb 2-1: device descriptor read/64, error -71 [ 543.543329][T12852] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 543.813250][T12852] usb 2-1: device descriptor read/64, error 18 [ 544.203333][T12852] usb 2-1: device descriptor read/64, error 18 [ 544.323541][T12852] usb usb2-port1: unable to enumerate USB device 18:43:36 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe4, 0x97, 0x9d, 0x0, 0xc45, 0x6040, 0x9368, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6c, 0x94, 0x40}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0xac, &(0x7f0000001a40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x491, &(0x7f0000000480)={0x0, 0x0, 0x1, "11"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 18:43:36 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xd1}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xfffffea8}, {&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/226, 0xe2}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:43:36 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000006c0)="b9ff0300000d698cb89e40f02cea", 0x0, 0x400}, 0x28) 18:43:36 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x22, 0x400, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000340)) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @loopback, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x40000000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) creat(0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) pipe2(0x0, 0x4000) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000040)="b3703bd842220e64a51d4e4c81e9f49206", 0x11, 0x4000002, &(0x7f00000000c0)={0xa, 0x4e20, 0x9, @local, 0x2}, 0x1c) r3 = dup(0xffffffffffffffff) setsockopt$inet6_tcp_int(r3, 0x6, 0x0, 0x0, 0x0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x141046, 0x0) ftruncate(r4, 0x2007fff) fsetxattr$trusted_overlay_nlink(r4, 0x0, &(0x7f0000000080)={'\x01\x00', 0x7}, 0xfdd1, 0x0) socket$unix(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r6, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) close(0xffffffffffffffff) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:43:36 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) 18:43:36 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x1, 0xc3, 0x0, 0x0, 0x3e, 0x0, 0x218, 0x38, 0x3d0, 0xffff, 0x3, 0x20, 0x1, 0x0, 0x0, 0x7}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x17}], "", [[]]}, 0x158) 18:43:36 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xd1}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xfffffea8}, {&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/226, 0xe2}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:43:36 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x40141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7fffff, 0x11, r1, 0x0) ftruncate(0xffffffffffffffff, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000005f00)={'filter\x00', 0x1000000000000199}, 0x438) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) 18:43:36 executing program 2: r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x6) fcntl$setsig(r1, 0xa, 0x12) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f00000000c0)=0x1000006) read(r3, &(0x7f00003fefff)=""/1, 0x1) readv(r3, &(0x7f00000002c0)=[{&(0x7f0000cd8000)=""/1, 0x2e171c03}], 0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xffffffffffbffff8) dup2(r1, r2) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x16) 18:43:36 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xd1}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xfffffea8}, {&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/226, 0xe2}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:43:36 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="24000000260007031dfffd946f610500070000006700000077000000421ba3a20400ff7e280000001100ffffba16a004000000000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 546.365130][T12852] usb 2-1: new high-speed USB device number 40 using dummy_hcd 18:43:36 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xd1}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xfffffea8}, {&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/226, 0xe2}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 546.479652][T16512] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 546.643269][T12852] usb 2-1: device descriptor read/64, error 18 [ 547.045247][T12852] usb 2-1: device descriptor read/64, error 18 [ 547.313283][T12852] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 547.583156][T12852] usb 2-1: device descriptor read/64, error 18 [ 547.973268][T12852] usb 2-1: device descriptor read/64, error 18 [ 548.093461][T12852] usb usb2-port1: attempt power cycle [ 548.803547][T12852] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 549.073237][T12852] usb 2-1: device descriptor read/64, error 18 18:43:39 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe4, 0x97, 0x9d, 0x8, 0xc45, 0x6040, 0x9368, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6c, 0x94, 0x40}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0xac, &(0x7f0000001a40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x491, &(0x7f0000000480)={0x0, 0x0, 0x1, "11"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 18:43:39 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x280000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000001040)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_aout(r0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/560], 0x865) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x100) shutdown(r0, 0x1) 18:43:39 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xd1}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xfffffea8}, {&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/226, 0xe2}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:43:39 executing program 4: bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000001c0)={@in, 0x0, 0x5, 0x0, "9527eb1fe4a70061631dce40540ea584dc670e8a5b346583b4b9fd983552f8df14ee9ef7112f35b7d06988ac8f9131a1d9718dde8c44f8ab9d20c6894f2929496f17cef927115402414625e9abc4eb6a"}, 0xd8) write$evdev(0xffffffffffffffff, 0x0, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000004c0)=""/53) openat$zero(0xffffffffffffff9c, &(0x7f0000000440)='/dev/zero\x00', 0x200000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@rand_addr="516b2a9a3311d4e0e17ce06360e1769a", 0x0, 0x4, 0x103, 0x0, 0x0, 0x6a}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000340)) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbcf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x7f641723}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = inotify_init() r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) dup2(r6, r5) 18:43:39 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x1, 0xc3, 0x0, 0x0, 0x3e, 0x0, 0x218, 0x38, 0x3d0, 0xffff, 0x3, 0x20, 0x1, 0x0, 0x0, 0x7}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x17}], "", [[]]}, 0x158) 18:43:39 executing program 0: syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x1000000000054}, 0x98) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) 18:43:39 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xd1}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xfffffea8}, {&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/226, 0xe2}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:43:39 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xd1}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xfffffea8}, {&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/226, 0xe2}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:43:39 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xd1}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xfffffea8}, {&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/226, 0xe2}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:43:39 executing program 4: syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_disconnect(r0) 18:43:39 executing program 2: syz_open_dev$hidraw(&(0x7f0000000040)='../\x00', 0x0, 0x294000) [ 549.665243][T12852] usb 2-1: device descriptor read/64, error -71 18:43:39 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xd1}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xfffffea8}, {&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/226, 0xe2}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 549.960540][T12852] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 550.243289][T12852] usb 2-1: Using ep0 maxpacket: 8 [ 550.363791][T12852] usb 2-1: New USB device found, idVendor=0c45, idProduct=6040, bcdDevice=93.68 [ 550.373275][T12852] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.382691][T12852] usb 2-1: config 0 descriptor?? [ 550.428683][T12852] gspca_main: sonixj-2.14.0 probing 0c45:6040 [ 551.153368][T12852] gspca_sonixj: reg_r err -110 [ 551.158629][T12852] sonixj: probe of 2-1:0.0 failed with error -110 18:43:42 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = eventfd(0x0) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r2, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x1, 0xc3, 0x0, 0x0, 0x3e, 0x0, 0x218, 0x38, 0x3d0, 0xffff, 0x3, 0x20, 0x1, 0x0, 0x0, 0x7}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x17}], "", [[]]}, 0x158) 18:43:42 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe4, 0x97, 0x9d, 0x8, 0xc45, 0x6040, 0x9368, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6c, 0x94, 0x40}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0xac, &(0x7f0000001a40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x491, &(0x7f0000000480)={0x0, 0x0, 0x1, "11"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 18:43:42 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 18:43:42 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @perf_config_ext, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000980)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e") r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r3 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r2, 0x4c01) write(0xffffffffffffffff, &(0x7f0000cc2fed)="130000003e0005ffffe3ffbd000026180a3f", 0x12) accept$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x14}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@delqdisc={0x78, 0x25, 0x300, 0x70bd2c, 0x25dfdbff, {0x0, r4, {0xfff3, 0x6}, {0x0, 0xc}, {0x8, 0x4}}, [@TCA_RATE={0x8, 0x5, {0xf9, 0x2}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}, @TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x8, 0x5, {0x4f, 0x6}}, @qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x829, 0x10001, 0x0, 0x80000001, 0x1800, 0x3e41978c, 0x9}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40004}, 0x800) listen(r0, 0x8cfb) connect$inet(0xffffffffffffffff, 0x0, 0x0) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x0, 0x2000}, 0x0) socket$inet6(0xa, 0x10000000000001, 0x0) 18:43:42 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xd1}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xfffffea8}, {&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/226, 0xe2}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:43:42 executing program 4: syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_disconnect(r0) [ 552.260479][T12852] usb 2-1: USB disconnect, device number 43 [ 552.536767][T16592] blk_update_request: I/O error, dev loop0, sector 512 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 552.603744][T12940] usb 3-1: new high-speed USB device number 49 using dummy_hcd 18:43:42 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$get_persistent(0x16, 0x0, r2) 18:43:42 executing program 0: 18:43:42 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xd1}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xfffffea8}, {&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/226, 0xe2}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 552.763660][T12852] usb 2-1: new high-speed USB device number 44 using dummy_hcd 18:43:42 executing program 0: 18:43:43 executing program 0: [ 552.993913][T12940] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 553.005281][T12940] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 553.015254][T12940] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 553.027826][T12852] usb 2-1: Using ep0 maxpacket: 8 18:43:43 executing program 0: 18:43:43 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = eventfd(0x0) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r2, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x1, 0xc3, 0x0, 0x0, 0x3e, 0x0, 0x218, 0x38, 0x3d0, 0xffff, 0x3, 0x20, 0x1, 0x0, 0x0, 0x7}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x17}], "", [[]]}, 0x158) [ 553.156839][T12852] usb 2-1: New USB device found, idVendor=0c45, idProduct=6040, bcdDevice=93.68 [ 553.166499][T12852] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.193570][T12940] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 553.202859][T12940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.211662][T12940] usb 3-1: Product: syz [ 553.215959][T12940] usb 3-1: Manufacturer: syz [ 553.220646][T12940] usb 3-1: SerialNumber: syz [ 553.239637][T12852] usb 2-1: config 0 descriptor?? [ 553.305524][T12852] gspca_main: sonixj-2.14.0 probing 0c45:6040 [ 554.023554][T12852] gspca_sonixj: reg_r err -110 [ 554.028711][T12852] sonixj: probe of 2-1:0.0 failed with error -110 [ 554.493728][T12940] cdc_ncm 3-1:1.0: bind() failure [ 554.533533][T12940] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 554.553525][T12940] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 554.574665][T12940] usbtest: probe of 3-1:1.1 failed with error -71 [ 554.585297][T12940] usb 3-1: USB disconnect, device number 49 [ 555.243176][T12940] usb 3-1: new high-speed USB device number 50 using dummy_hcd 18:43:45 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe4, 0x97, 0x9d, 0x8, 0xc45, 0x6040, 0x9368, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6c, 0x94, 0x40}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0xac, &(0x7f0000001a40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x491, &(0x7f0000000480)={0x0, 0x0, 0x1, "11"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 555.350040][T12852] usb 2-1: USB disconnect, device number 44 [ 555.603414][T12940] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 555.614502][T12940] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 555.624564][T12940] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 555.783151][T12852] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 555.794131][T12940] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 555.803527][T12940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.811608][T12940] usb 3-1: Product: syz [ 555.815955][T12940] usb 3-1: Manufacturer: syz [ 555.820625][T12940] usb 3-1: SerialNumber: syz 18:43:46 executing program 2: 18:43:46 executing program 4: 18:43:46 executing program 0: 18:43:46 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:43:46 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = eventfd(0x0) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r2, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x1, 0xc3, 0x0, 0x0, 0x3e, 0x0, 0x218, 0x38, 0x3d0, 0xffff, 0x3, 0x20, 0x1, 0x0, 0x0, 0x7}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x17}], "", [[]]}, 0x158) [ 556.033366][T12852] usb 2-1: Using ep0 maxpacket: 8 [ 556.039061][T12940] cdc_ncm 3-1:1.0: bind() failure [ 556.051343][T12940] cdc_ncm 3-1:1.1: bind() failure [ 556.076705][T12940] usb 3-1: USB disconnect, device number 50 18:43:46 executing program 0: 18:43:46 executing program 4: [ 556.165525][T12852] usb 2-1: New USB device found, idVendor=0c45, idProduct=6040, bcdDevice=93.68 [ 556.174773][T12852] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 18:43:46 executing program 2: [ 556.223847][T12852] usb 2-1: config 0 descriptor?? [ 556.270797][T12852] gspca_main: sonixj-2.14.0 probing 0c45:6040 18:43:46 executing program 2: 18:43:46 executing program 4: 18:43:46 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="eabe9f303b222957eecbc624877c825255f910c28f5e87a64820546a1ebed56adb3b91e7f1ffd7e4ab56ad8e39808e0b61a0bf7a301ffe8dac0726906da58a5d1ab066f24351eda628769d37cbcb5c0c5d6b03e4c0487a0c5c3ced0b6983", @ANYRESOCT, @ANYRESOCT, @ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d0492482ba837296d961244e2e0c734057548c402cc43b3897ccb5430331f633e7ec2bc40d42cc3aa39f2441d8ece5ff1b9d9e2afb674462b435729c12b0f1c4872b0001000000000000f515586de3c101e4f8d1b12b1894ef983d0cfcdfbb1118c5ae060bb6ae2af877735be7b03b5278b53fe125393d6b6adf7f7d0734bc1e5566", @ANYRESHEX], 0x0, 0x15a}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 557.093453][T12852] gspca_sonixj: reg_r err -110 [ 557.098547][T12852] sonixj: probe of 2-1:0.0 failed with error -110 18:43:48 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe4, 0x97, 0x9d, 0x8, 0xc45, 0x6040, 0x9368, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6c, 0x94, 0x40}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xac, &(0x7f0000001a40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x491, &(0x7f0000000480)={0x0, 0x0, 0x1, "11"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 18:43:48 executing program 2: 18:43:48 executing program 4: 18:43:48 executing program 0: 18:43:48 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:43:48 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = eventfd(0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r3, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x1, 0xc3, 0x0, 0x0, 0x3e, 0x0, 0x218, 0x38, 0x3d0, 0xffff, 0x3, 0x20, 0x1, 0x0, 0x0, 0x7}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x17}], "", [[]]}, 0x158) [ 558.397493][ T5] usb 2-1: USB disconnect, device number 45 18:43:48 executing program 2: 18:43:48 executing program 4: 18:43:48 executing program 0: 18:43:48 executing program 2: 18:43:48 executing program 4: 18:43:48 executing program 0: [ 558.934908][ T5] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 559.173298][ T5] usb 2-1: Using ep0 maxpacket: 8 [ 559.293703][ T5] usb 2-1: New USB device found, idVendor=0c45, idProduct=6040, bcdDevice=93.68 [ 559.302971][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.318632][ T5] usb 2-1: config 0 descriptor?? [ 559.368272][ T5] gspca_main: sonixj-2.14.0 probing 0c45:6040 [ 560.093303][ T5] gspca_sonixj: reg_r err -110 [ 560.098434][ T5] sonixj: probe of 2-1:0.0 failed with error -110 18:43:51 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe4, 0x97, 0x9d, 0x8, 0xc45, 0x6040, 0x9368, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6c, 0x94, 0x40}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xac, &(0x7f0000001a40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x491, &(0x7f0000000480)={0x0, 0x0, 0x1, "11"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 18:43:51 executing program 2: 18:43:51 executing program 4: 18:43:51 executing program 0: 18:43:51 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:43:51 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = eventfd(0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r3, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x1, 0xc3, 0x0, 0x0, 0x3e, 0x0, 0x218, 0x38, 0x3d0, 0xffff, 0x3, 0x20, 0x1, 0x0, 0x0, 0x7}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x17}], "", [[]]}, 0x158) [ 561.539205][ T5] usb 2-1: USB disconnect, device number 46 18:43:51 executing program 0: 18:43:51 executing program 2: 18:43:51 executing program 4: 18:43:51 executing program 4: 18:43:51 executing program 2: 18:43:51 executing program 0: [ 562.073760][ T5] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 562.323274][ T5] usb 2-1: Using ep0 maxpacket: 8 [ 562.443655][ T5] usb 2-1: New USB device found, idVendor=0c45, idProduct=6040, bcdDevice=93.68 [ 562.452787][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.463341][ T5] usb 2-1: config 0 descriptor?? [ 562.507925][ T5] gspca_main: sonixj-2.14.0 probing 0c45:6040 [ 563.243376][ T5] gspca_sonixj: reg_r err -110 [ 563.248397][ T5] sonixj: probe of 2-1:0.0 failed with error -110 18:43:54 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe4, 0x97, 0x9d, 0x8, 0xc45, 0x6040, 0x9368, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6c, 0x94, 0x40}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xac, &(0x7f0000001a40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x491, &(0x7f0000000480)={0x0, 0x0, 0x1, "11"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 18:43:54 executing program 0: syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x252, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x7b}}}}}]}}]}}, 0x0) 18:43:54 executing program 4: syz_usb_connect(0x2, 0x36, &(0x7f0000000800)={{0x12, 0x1, 0x0, 0xe5, 0xa7, 0x79, 0x10, 0xbc7, 0x3, 0x2ff7, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x86, 0x1a, 0x76, 0x0, [], [{{0x9, 0x5, 0x81, 0x3, 0x81}}, {{0x9, 0x5, 0xf}}]}}]}}]}}, 0x0) 18:43:54 executing program 2: syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x14, 0x33, 0x58, 0x40, 0x15c2, 0x3f, 0xa639, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xe2, 0xa5, 0xc6, 0x0, [], [{{0x9, 0x5, 0x88, 0x3}}]}}]}}]}}, 0x0) 18:43:54 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xde}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/226, 0xe2}, {0x0}], 0x5}}], 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:43:54 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = eventfd(0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r3, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x1, 0xc3, 0x0, 0x0, 0x3e, 0x0, 0x218, 0x38, 0x3d0, 0xffff, 0x3, 0x20, 0x1, 0x0, 0x0, 0x7}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x17}], "", [[]]}, 0x158) [ 564.656778][ T5] usb 2-1: USB disconnect, device number 47 [ 564.965338][T12900] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 564.973955][ T2808] usb 3-1: new full-speed USB device number 51 using dummy_hcd 18:43:55 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xde}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/226, 0xe2}, {0x0}], 0x5}}], 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 565.013409][T12852] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 565.173499][ T5] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 565.333846][T12900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 565.345057][T12900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 129, setting to 64 [ 565.356064][T12900] usb 5-1: New USB device found, idVendor=0bc7, idProduct=0003, bcdDevice=2f.f7 [ 565.365285][T12900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.374321][ T2808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 565.385498][ T2808] usb 3-1: New USB device found, idVendor=15c2, idProduct=003f, bcdDevice=a6.39 [ 565.394713][ T2808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.404795][T12900] usb 5-1: config 0 descriptor?? [ 565.406344][T12852] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 565.422746][T12852] usb 1-1: New USB device found, idVendor=05ac, idProduct=0252, bcdDevice= 0.40 18:43:55 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xde}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/226, 0xe2}, {0x0}], 0x5}}], 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 565.431954][T12852] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.442294][ T2808] usb 3-1: config 0 descriptor?? [ 565.452127][T12900] ati_remote 5-1:0.0: Initializing ati_remote hardware failed. [ 565.460277][T12900] ati_remote: probe of 5-1:0.0 failed with error -5 [ 565.470780][ T5] usb 2-1: Using ep0 maxpacket: 8 [ 565.488367][ T2808] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 565.496307][ T2808] imon 3-1:0.0: unable to initialize intf0, err -90 [ 565.502940][ T2808] imon:imon_probe: failed to initialize context! [ 565.509546][ T2808] imon 3-1:0.0: unable to register, err -19 18:43:55 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = eventfd(0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r2, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x1, 0xc3, 0x0, 0x0, 0x3e, 0x0, 0x218, 0x38, 0x3d0, 0xffff, 0x3, 0x20, 0x1, 0x0, 0x0, 0x7}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x17}], "", [[]]}, 0x158) [ 565.593705][ T5] usb 2-1: New USB device found, idVendor=0c45, idProduct=6040, bcdDevice=93.68 [ 565.603205][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.622995][ T5] usb 2-1: config 0 descriptor?? [ 565.632650][T12852] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 565.669066][ T5] gspca_main: sonixj-2.14.0 probing 0c45:6040 [ 565.681244][ T2808] usb 5-1: USB disconnect, device number 26 [ 565.694151][T12900] usb 3-1: USB disconnect, device number 51 [ 565.850879][T12852] usb 1-1: USB disconnect, device number 33 18:43:56 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xde}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:43:56 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xde}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 566.449381][ T5] gspca_sonixj: reg_r err -110 [ 566.454501][ T5] sonixj: probe of 2-1:0.0 failed with error -110 [ 566.473701][ T2808] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 566.503389][T12852] usb 3-1: new full-speed USB device number 52 using dummy_hcd 18:43:56 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = eventfd(0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r2, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x1, 0xc3, 0x0, 0x0, 0x3e, 0x0, 0x218, 0x38, 0x3d0, 0xffff, 0x3, 0x20, 0x1, 0x0, 0x0, 0x7}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x17}], "", [[]]}, 0x158) [ 566.623613][T12900] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 566.863548][ T2808] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 566.874793][ T2808] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 129, setting to 64 [ 566.885818][ T2808] usb 5-1: New USB device found, idVendor=0bc7, idProduct=0003, bcdDevice=2f.f7 [ 566.895039][ T2808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.903830][T12852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 566.909327][ T2808] usb 5-1: config 0 descriptor?? [ 566.915087][T12852] usb 3-1: New USB device found, idVendor=15c2, idProduct=003f, bcdDevice=a6.39 [ 566.929008][T12852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.938866][T12852] usb 3-1: config 0 descriptor?? [ 566.958892][ T2808] ati_remote 5-1:0.0: Initializing ati_remote hardware failed. [ 566.966995][ T2808] ati_remote: probe of 5-1:0.0 failed with error -5 [ 566.987768][T12852] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 566.995700][T12852] imon 3-1:0.0: unable to initialize intf0, err -90 [ 567.002332][T12852] imon:imon_probe: failed to initialize context! [ 567.008922][T12852] imon 3-1:0.0: unable to register, err -19 [ 567.054638][T12900] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 567.067639][T12900] usb 1-1: New USB device found, idVendor=05ac, idProduct=0252, bcdDevice= 0.40 [ 567.076814][T12900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.126792][T12900] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 567.155750][T12900] usb 5-1: USB disconnect, device number 27 [ 567.185068][T12852] usb 3-1: USB disconnect, device number 52 [ 567.325791][ T2808] usb 1-1: USB disconnect, device number 34 18:43:57 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe4, 0x97, 0x9d, 0x8, 0xc45, 0x6040, 0x9368, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6c, 0x94, 0x40}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x491, &(0x7f0000000480)={0x0, 0x0, 0x1, "11"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 18:43:57 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xde}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:43:57 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = eventfd(0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r2, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x1, 0xc3, 0x0, 0x0, 0x3e, 0x0, 0x218, 0x38, 0x3d0, 0xffff, 0x3, 0x20, 0x1, 0x0, 0x0, 0x7}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x17}], "", [[]]}, 0x158) 18:43:57 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0xfc, 0x46, 0x40, 0x979, 0x270, 0x5b1b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb8, 0x61, 0x52}}]}}]}}, 0x0) 18:43:57 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0xf2, 0xfd, 0x8, 0x46d, 0x990, 0x2e98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30}}]}}]}}, 0x0) 18:43:57 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x22, 0xd2, 0x6b, 0x8, 0x14c8, 0x3, 0xac5e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x5c, 0xa3, 0x98, 0x0, [], [{{0x9, 0x5, 0x8e, 0x1e, 0x8}}]}}]}}]}}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x3, 0x0) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000080)) [ 567.800767][ T2808] usb 2-1: USB disconnect, device number 48 [ 568.154915][T12940] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 568.162771][T12852] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 568.170988][ T17] usb 5-1: new high-speed USB device number 28 using dummy_hcd 18:43:58 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xde}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 568.283515][ T2808] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 568.393831][T12940] usb 1-1: Using ep0 maxpacket: 8 [ 568.413642][T12852] usb 3-1: Using ep0 maxpacket: 8 [ 568.534502][ T2808] usb 2-1: Using ep0 maxpacket: 8 [ 568.535908][T12940] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 8 [ 568.549574][T12940] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice=ac.5e [ 568.558963][T12940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.567766][T12852] usb 3-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice=2e.98 18:43:58 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xde}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 568.577172][T12852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.586346][ T17] usb 5-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=5b.1b [ 568.595632][ T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.610147][T12852] usb 3-1: config 0 descriptor?? [ 568.624227][ T17] usb 5-1: config 0 descriptor?? [ 568.659217][T12852] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 568.668884][T12852] snd-usb-audio: probe of 3-1:0.0 failed with error -22 [ 568.674003][ T2808] usb 2-1: New USB device found, idVendor=0c45, idProduct=6040, bcdDevice=93.68 [ 568.681994][ T17] gspca_main: jeilinj-2.14.0 probing 0979:0270 [ 568.685208][ T2808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 18:43:58 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r1 = eventfd(0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x1, 0xc3, 0x0, 0x0, 0x3e, 0x0, 0x218, 0x38, 0x3d0, 0xffff, 0x3, 0x20, 0x1, 0x0, 0x0, 0x7}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x17}], "", [[]]}, 0x158) [ 568.709913][ T2808] usb 2-1: config 0 descriptor?? [ 568.729937][T12940] usb 1-1: config 0 descriptor?? [ 568.768188][ T2808] gspca_main: sonixj-2.14.0 probing 0c45:6040 [ 568.788374][T12940] input: USB Touchscreen 14c8:0003 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input25 [ 568.862951][ T17] usb 3-1: USB disconnect, device number 53 [ 568.871624][T12900] usb 5-1: USB disconnect, device number 28 18:43:59 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r1 = eventfd(0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x1, 0xc3, 0x0, 0x0, 0x3e, 0x0, 0x218, 0x38, 0x3d0, 0xffff, 0x3, 0x20, 0x1, 0x0, 0x0, 0x7}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x17}], "", [[]]}, 0x158) [ 568.990891][T12940] usb 1-1: USB disconnect, device number 35 18:43:59 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r1 = eventfd(0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x1, 0xc3, 0x0, 0x0, 0x3e, 0x0, 0x218, 0x38, 0x3d0, 0xffff, 0x3, 0x20, 0x1, 0x0, 0x0, 0x7}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x17}], "", [[]]}, 0x158) 18:43:59 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = eventfd(0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r3, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x1, 0xc3, 0x0, 0x0, 0x3e, 0x0, 0x218, 0x38, 0x3d0, 0xffff, 0x3, 0x20, 0x1, 0x0, 0x0, 0x7}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x17}], "", [[]]}, 0x158) [ 569.525690][ T2808] gspca_sonixj: reg_r err -110 [ 569.530685][ T2808] sonixj: probe of 2-1:0.0 failed with error -110 [ 569.633293][T12940] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 569.643666][ T17] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 569.874264][T12940] usb 3-1: Using ep0 maxpacket: 8 [ 569.913453][T12852] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 569.993692][T12940] usb 3-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice=2e.98 [ 570.002906][T12940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.016332][ T17] usb 5-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=5b.1b [ 570.025913][ T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.037594][T12940] usb 3-1: config 0 descriptor?? [ 570.043823][ T17] usb 5-1: config 0 descriptor?? [ 570.078158][T12940] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 570.088423][T12940] snd-usb-audio: probe of 3-1:0.0 failed with error -22 [ 570.103317][ T17] gspca_main: jeilinj-2.14.0 probing 0979:0270 [ 570.153663][T12852] usb 1-1: Using ep0 maxpacket: 8 [ 570.273661][T12852] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 8 [ 570.283860][T12852] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice=ac.5e [ 570.292994][T12852] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.301985][ T2808] usb 3-1: USB disconnect, device number 54 [ 570.319434][T12940] usb 5-1: USB disconnect, device number 29 [ 570.328359][T12852] usb 1-1: config 0 descriptor?? [ 570.378901][T12852] input: USB Touchscreen 14c8:0003 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input26 [ 570.575988][ T2808] usb 1-1: USB disconnect, device number 36 18:44:01 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe4, 0x97, 0x9d, 0x8, 0xc45, 0x6040, 0x9368, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6c, 0x94, 0x40}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x491, &(0x7f0000000480)={0x0, 0x0, 0x1, "11"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 18:44:01 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xde}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:44:01 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = eventfd(0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r3, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x1, 0xc3, 0x0, 0x0, 0x3e, 0x0, 0x218, 0x38, 0x3d0, 0xffff, 0x3, 0x20, 0x1, 0x0, 0x0, 0x7}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x17}], "", [[]]}, 0x158) 18:44:01 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0xfc, 0x46, 0x40, 0x979, 0x270, 0x5b1b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb8, 0x61, 0x52}}]}}]}}, 0x0) 18:44:01 executing program 2: r0 = syz_open_dev$hidraw(&(0x7f0000000140)='/dev/../raw#\x00', 0x0, 0x0) ioctl$HIDIOCAPPLICATION(r0, 0x40286608, 0x400002) 18:44:01 executing program 0: syz_open_dev$hidraw(&(0x7f00000000c0)='/dev/../raw#\x00', 0x0, 0x0) r0 = syz_open_dev$hidraw(0x0, 0x0, 0x12dc40) read$hidraw(r0, &(0x7f0000001200)=""/4096, 0x4000) [ 570.946972][ T2808] usb 2-1: USB disconnect, device number 49 18:44:01 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x6c, 0xc8, 0xeb, 0x10, 0xa2c, 0x8, 0xf8f8, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x54, 0x5f}}]}}]}}, 0x0) 18:44:01 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x86, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@call_mgmt={0x5}, @acm={0x3}, @mbim_extended={0x8}, @network_terminal={0x7}]}}}}}]}}, &(0x7f00000007c0)={0xa, &(0x7f00000005c0)={0xa}, 0x1d, &(0x7f0000000600)={0x5, 0xf, 0x1d, 0x1, [@ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}]}, 0x2, [{0xae, &(0x7f0000000640)=@string={0xae, 0x3, "c11423f964687502e0e5b7e93f8b3771d6c67206cc5ce42fae6984266c16d8c3b06c297590e39353a0f0c66ce03b66088718e880b878b3036692680179f01ee8b0739cdfdce6b51b56f8fbd894f1a9d4c360d0d4923581bd02919b057c8cff2b30df85c9e97c4d40de81372dd8d6624e8d26dbc63f65854c9acc2a4ff944e4dfe4abfea57a1998de7c806753227c441081124d6f746a9e7e2383c99f8b625055a3d1d36b1270e972c81ab66e"}}, {0x8b, &(0x7f0000000700)=@string={0x8b, 0x3, "a5d37674084366142a341148386839b1174f71c29b1d0a78fc3d075994d5dc1527512190bf22663e51a738e81066a891754ce019866508fc4e3bf15ab27a8f7b9c37059e98d4cd818460b4217ad64913b970dcf0e3b60b0e09bf597715b9b7573b2182e270e477c6679fa4f34f16548970cbab1a8450a90afceab3cab6082935eb16cb3af443016695"}}]}) [ 571.333313][T12940] usb 5-1: new high-speed USB device number 30 using dummy_hcd 18:44:01 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xde}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/226, 0xe2}], 0x4}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 571.483390][ T2808] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 571.573385][T12852] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 571.622642][ T17] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 571.723733][ T2808] usb 2-1: Using ep0 maxpacket: 8 [ 571.776464][T12940] usb 5-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=5b.1b [ 571.785698][T12940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.796329][T12940] usb 5-1: config 0 descriptor?? 18:44:01 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xde}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/226, 0xe2}], 0x4}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 571.846779][ T2808] usb 2-1: New USB device found, idVendor=0c45, idProduct=6040, bcdDevice=93.68 [ 571.850655][T12940] gspca_main: jeilinj-2.14.0 probing 0979:0270 [ 571.856093][ T2808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.866456][T12852] usb 3-1: Using ep0 maxpacket: 8 18:44:01 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = eventfd(0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r3, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x1, 0xc3, 0x0, 0x0, 0x3e, 0x0, 0x218, 0x38, 0x3d0, 0xffff, 0x3, 0x20, 0x1, 0x0, 0x0, 0x7}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x17}], "", [[]]}, 0x158) [ 571.892429][ T17] usb 1-1: Using ep0 maxpacket: 16 [ 571.917204][ T2808] usb 2-1: config 0 descriptor?? [ 571.960033][ T2808] gspca_main: sonixj-2.14.0 probing 0c45:6040 [ 572.027145][T12852] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 572.037456][T12852] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 572.046532][T12852] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 572.059668][T12852] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 572.068848][T12852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.080236][ T17] usb 1-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=f8.f8 [ 572.089398][ T17] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.132014][ T17] usb 1-1: config 0 descriptor?? [ 572.145505][T12900] usb 5-1: USB disconnect, device number 30 [ 572.219210][ T17] cypress_cy7c63 1-1:0.0: Cypress CY7C63xxx device now attached [ 572.235487][T12852] cdc_ncm 3-1:1.0: bind() failure 18:44:02 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xde}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/226, 0xe2}], 0x4}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 572.437499][ T5] usb 1-1: USB disconnect, device number 37 [ 572.444382][ T5] cypress_cy7c63 1-1:0.0: Cypress CY7C63xxx device now disconnected [ 572.450620][T12852] usb 3-1: USB disconnect, device number 55 [ 572.693882][ T2808] gspca_sonixj: reg_r err -110 [ 572.699099][ T2808] sonixj: probe of 2-1:0.0 failed with error -110 [ 573.213390][ T2808] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 573.223626][ T5] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 573.453158][ T2808] usb 3-1: Using ep0 maxpacket: 8 [ 573.464035][ T5] usb 1-1: Using ep0 maxpacket: 16 [ 573.573302][ T2808] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 573.583832][ T2808] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 573.592824][ T2808] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 573.606032][ T2808] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 573.615235][ T2808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.624302][ T5] usb 1-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=f8.f8 [ 573.633506][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.643694][ T5] usb 1-1: config 0 descriptor?? [ 573.675749][ T2808] cdc_ncm 3-1:1.0: bind() failure [ 573.690418][ T5] cypress_cy7c63 1-1:0.0: Cypress CY7C63xxx device now attached [ 573.876450][ T5] usb 3-1: USB disconnect, device number 56 [ 573.888655][ T2808] usb 1-1: USB disconnect, device number 38 [ 573.895152][ T2808] cypress_cy7c63 1-1:0.0: Cypress CY7C63xxx device now disconnected 18:44:04 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe4, 0x97, 0x9d, 0x8, 0xc45, 0x6040, 0x9368, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6c, 0x94, 0x40}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x491, &(0x7f0000000480)={0x0, 0x0, 0x1, "11"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 18:44:04 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0xfc, 0x46, 0x40, 0x979, 0x270, 0x5b1b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb8, 0x61, 0x52}}]}}]}}, 0x0) 18:44:04 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = eventfd(0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r3, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x1, 0xc3, 0x0, 0x0, 0x3e, 0x0, 0x218, 0x38, 0x3d0, 0xffff, 0x3, 0x20, 0x1, 0x0, 0x0, 0x7}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x17}], "", [[]]}, 0x158) 18:44:04 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xde}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/238, 0xee}, {0x0}], 0x4}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 574.054425][T12900] usb 2-1: USB disconnect, device number 50 18:44:04 executing program 2: syz_usb_connect(0x0, 0xfa, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x59, 0x6, 0x46, 0x8, 0x4b4, 0x2, 0x5486, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x40, 0x49, 0xb9}}]}}]}}, 0x0) 18:44:04 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x18b, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x265, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0xfffffffffffffd55, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f00000003c0)={0x0, 0x0, 0x22, {0x22, 0x0, "5cdba0d5b2f22fea542b2388675e925daab1f5649a605d68bdf1cbd052f37fec"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 574.384568][ T5] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 574.506259][T12900] usb 2-1: new high-speed USB device number 51 using dummy_hcd 18:44:04 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xde}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/238, 0xee}, {0x0}], 0x4}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 574.705394][T12852] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 574.713538][ T17] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 574.753802][ T5] usb 5-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=5b.1b [ 574.763324][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.773237][T12900] usb 2-1: Using ep0 maxpacket: 8 [ 574.786048][ T5] usb 5-1: config 0 descriptor?? [ 574.828247][ T5] gspca_main: jeilinj-2.14.0 probing 0979:0270 [ 574.893464][T12900] usb 2-1: New USB device found, idVendor=0c45, idProduct=6040, bcdDevice=93.68 [ 574.902866][T12900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.958498][T12900] usb 2-1: config 0 descriptor?? [ 574.975040][ T17] usb 3-1: Using ep0 maxpacket: 8 [ 574.980438][T12852] usb 1-1: Using ep0 maxpacket: 8 [ 575.008650][T12900] gspca_main: sonixj-2.14.0 probing 0c45:6040 [ 575.031787][ T5] usb 5-1: USB disconnect, device number 31 18:44:05 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = eventfd(0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r3, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x1, 0xc3, 0x0, 0x0, 0x3e, 0x0, 0x218, 0x38, 0x3d0, 0xffff, 0x3, 0x20, 0x1, 0x0, 0x0, 0x7}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x17}], "", [[]]}, 0x158) [ 575.163532][T12852] usb 1-1: config index 0 descriptor too short (expected 64853, got 377) [ 575.172145][T12852] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 575.182518][T12852] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 575.193572][T12852] usb 1-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 575.202738][T12852] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.212473][ T17] usb 3-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=54.86 [ 575.221782][ T17] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.279723][ T17] usb 3-1: config 0 descriptor?? [ 575.364837][T12852] usb 1-1: config 0 descriptor?? [ 575.377712][ T17] cytherm 3-1:0.0: Cypress thermometer device now attached 18:44:05 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xde}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/238, 0xee}, {0x0}], 0x4}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 575.594822][ T5] usb 3-1: USB disconnect, device number 57 [ 575.601686][ T5] cytherm 3-1:0.0: Cypress thermometer now disconnected 18:44:05 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0xfc, 0x46, 0x40, 0x979, 0x270, 0x5b1b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb8, 0x61, 0x52}}]}}]}}, 0x0) [ 575.733468][T12900] gspca_sonixj: reg_r err -110 [ 575.738635][T12900] sonixj: probe of 2-1:0.0 failed with error -110 [ 576.052603][T12900] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 576.078628][T12852] usb 1-1: USB disconnect, device number 39 18:44:06 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = eventfd(0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r3, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x1, 0xc3, 0x0, 0x0, 0x3e, 0x0, 0x218, 0x38, 0x3d0, 0xffff, 0x3, 0x20, 0x1, 0x0, 0x0, 0x7}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x17}], "", [[]]}, 0x158) 18:44:06 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xde}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/238, 0xee}, {0x0}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 576.403802][ T17] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 576.514175][T12900] usb 5-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=5b.1b [ 576.523743][T12900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.534819][T12900] usb 5-1: config 0 descriptor?? [ 576.635721][T12900] gspca_main: jeilinj-2.14.0 probing 0979:0270 [ 576.778978][ T17] usb 3-1: Using ep0 maxpacket: 8 [ 576.847180][T12940] usb 5-1: USB disconnect, device number 32 [ 576.903488][T12852] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 576.913532][ T17] usb 3-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=54.86 [ 576.922975][ T17] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.939964][ T17] usb 3-1: config 0 descriptor?? [ 576.987776][ T17] cytherm 3-1:0.0: Cypress thermometer device now attached 18:44:07 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe4, 0x97, 0x9d, 0x8, 0xc45, 0x6040, 0x9368, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6c, 0x94, 0x40}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x491, &(0x7f0000000480)={0x0, 0x0, 0x1, "11"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 18:44:07 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xde}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/238, 0xee}, {0x0}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:44:07 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = eventfd(0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r3, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x1, 0xc3, 0x0, 0x0, 0x3e, 0x0, 0x218, 0x38, 0x3d0, 0xffff, 0x3, 0x20, 0x1, 0x0, 0x0, 0x7}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x17}], "", [[]]}, 0x158) [ 577.150086][T12940] usb 2-1: USB disconnect, device number 51 [ 577.157976][T12852] usb 1-1: Using ep0 maxpacket: 8 [ 577.185680][ T17] usb 3-1: USB disconnect, device number 58 [ 577.192261][ T17] cytherm 3-1:0.0: Cypress thermometer now disconnected [ 577.323723][T12852] usb 1-1: config index 0 descriptor too short (expected 64853, got 377) [ 577.332353][T12852] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 577.342638][T12852] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 577.353657][T12852] usb 1-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 577.362800][T12852] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 18:44:07 executing program 2: r0 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{}]}}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0x4, 0xfffffffffffffffe) [ 577.423800][T12852] usb 1-1: config 0 descriptor?? 18:44:07 executing program 4: 18:44:07 executing program 0: syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000001840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @output_terminal={0x9}, @processing_unit={0xd, 0x24, 0x7, 0x0, 0x0, 0x0, "188628ae4b1d"}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x5, "40e513e1"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x0, 0x6}, @selector_unit={0x8, 0x24, 0x5, 0x6, 0x2, "ef5d1e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 18:44:07 executing program 4: [ 577.742131][T12940] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 577.793879][T12852] usbhid 1-1:0.0: can't add hid device: -71 [ 577.800097][T12852] usbhid: probe of 1-1:0.0 failed with error -71 [ 577.829674][T12852] usb 1-1: USB disconnect, device number 40 18:44:07 executing program 4: [ 577.845564][ T17] usb 3-1: new high-speed USB device number 59 using dummy_hcd 18:44:08 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xde}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xae}, {0x0}, {0x0}], 0x4}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:44:08 executing program 4: syz_usb_connect(0x0, 0x0, 0x0, 0x0) 18:44:08 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r1 = eventfd(0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x1, 0xc3, 0x0, 0x0, 0x3e, 0x0, 0x218, 0x38, 0x3d0, 0xffff, 0x3, 0x20, 0x1, 0x0, 0x0, 0x7}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x17}], "", [[]]}, 0x158) [ 578.035891][T12940] usb 2-1: Using ep0 maxpacket: 8 [ 578.115815][ T17] usb 3-1: Using ep0 maxpacket: 32 18:44:08 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r1 = eventfd(0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x1, 0xc3, 0x0, 0x0, 0x3e, 0x0, 0x218, 0x38, 0x3d0, 0xffff, 0x3, 0x20, 0x1, 0x0, 0x0, 0x7}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x17}], "", [[]]}, 0x158) [ 578.166814][T12940] usb 2-1: New USB device found, idVendor=0c45, idProduct=6040, bcdDevice=93.68 [ 578.176049][T12940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.188581][T12852] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 578.224701][T12940] usb 2-1: config 0 descriptor?? [ 578.245120][ T17] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 578.258286][ T17] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 578.267648][ T17] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.290910][T12940] gspca_main: sonixj-2.14.0 probing 0c45:6040 [ 578.365636][ T17] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 578.503498][T12852] usb 1-1: Using ep0 maxpacket: 32 [ 578.653452][T12852] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 578.664613][T12852] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 578.769630][T12900] usb 3-1: USB disconnect, device number 59 [ 578.833528][T12852] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 578.842890][T12852] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.851365][T12852] usb 1-1: Product: syz [ 578.855692][T12852] usb 1-1: Manufacturer: syz [ 578.860323][T12852] usb 1-1: SerialNumber: syz [ 579.033394][T12940] gspca_sonixj: reg_r err -110 [ 579.038622][T12940] sonixj: probe of 2-1:0.0 failed with error -110 [ 579.203562][T12852] usb 1-1: unit 239 not found! [ 579.225751][T12852] usb 1-1: USB disconnect, device number 41 [ 579.533247][T12900] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 579.773380][T12900] usb 3-1: Using ep0 maxpacket: 32 [ 579.873374][ T5] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 579.893484][T12900] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 579.906631][T12900] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 579.915962][T12900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.965838][T12900] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 580.123233][ T5] usb 1-1: Using ep0 maxpacket: 32 [ 580.165781][T12900] usb 3-1: USB disconnect, device number 60 18:44:10 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe4, 0x97, 0x9d, 0x8, 0xc45, 0x6040, 0x9368, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6c, 0x94, 0x40}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x491, &(0x7f0000000480)={0x0, 0x0, 0x1, "11"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 18:44:10 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r1 = eventfd(0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x1, 0xc3, 0x0, 0x0, 0x3e, 0x0, 0x218, 0x38, 0x3d0, 0xffff, 0x3, 0x20, 0x1, 0x0, 0x0, 0x7}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x17}], "", [[]]}, 0x158) 18:44:10 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xde}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xae}, {0x0}, {0x0}], 0x4}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 580.243549][ T5] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 580.254793][ T5] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 580.283039][ T2808] usb 2-1: USB disconnect, device number 52 [ 580.423452][ T5] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 580.432777][ T5] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.441132][ T5] usb 1-1: Product: syz [ 580.445463][ T5] usb 1-1: Manufacturer: syz [ 580.450160][ T5] usb 1-1: SerialNumber: syz 18:44:10 executing program 2: syz_open_dev$hiddev(&(0x7f0000000000)='/dev/uhid\x00\x10\x00', 0x0, 0x0) r0 = syz_open_dev$hidraw(0x0, 0x0, 0x82) write$hidraw(r0, &(0x7f00000013c0)="53fbbf93", 0x4) 18:44:10 executing program 4: syz_usb_connect(0x0, 0x0, 0x0, 0x0) [ 580.723470][ T2808] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 580.783582][ T5] usb 1-1: unit 239 not found! 18:44:10 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = eventfd(0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r3, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x1, 0xc3, 0x0, 0x0, 0x3e, 0x0, 0x218, 0x38, 0x3d0, 0xffff, 0x3, 0x20, 0x1, 0x0, 0x0, 0x7}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x17}], "", [[]]}, 0x158) 18:44:10 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xde}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xae}, {0x0}, {0x0}], 0x4}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:44:10 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc340000000000109022400010000a000090400000103010100092100000001220500090581030000000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 580.813717][ T5] usb 1-1: USB disconnect, device number 42 18:44:10 executing program 0: syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000001840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @output_terminal={0x9}, @processing_unit={0xd, 0x24, 0x7, 0x0, 0x0, 0x0, "188628ae4b1d"}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x5, "40e513e1"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x0, 0x6}, @selector_unit={0x8, 0x24, 0x5, 0x6, 0x2, "ef5d1e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 580.973884][ T2808] usb 2-1: Using ep0 maxpacket: 8 18:44:11 executing program 4: syz_usb_connect(0x0, 0x0, 0x0, 0x0) [ 581.148317][ T2808] usb 2-1: New USB device found, idVendor=0c45, idProduct=6040, bcdDevice=93.68 [ 581.157600][ T2808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.168405][ T2808] usb 2-1: config 0 descriptor?? 18:44:11 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xde}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xae}, {0x0}, {0x0}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 581.227801][ T2808] gspca_main: sonixj-2.14.0 probing 0c45:6040 [ 581.243768][T12852] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 581.383390][ T5] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 581.532932][T12852] usb 3-1: Using ep0 maxpacket: 32 18:44:11 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xde}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xae}, {0x0}, {0x0}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 581.640462][ T5] usb 1-1: Using ep0 maxpacket: 32 [ 581.705702][T12852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 581.717282][T12852] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 581.726714][T12852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.763995][ T5] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 581.775696][ T5] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 581.783582][T12852] usb 3-1: config 0 descriptor?? [ 581.835476][T12852] hub 3-1:0.0: ignoring external hub [ 581.974576][ T5] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 581.984172][ T5] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.992303][ T5] usb 1-1: Product: syz [ 581.997190][ T5] usb 1-1: Manufacturer: syz [ 582.001976][ T5] usb 1-1: SerialNumber: syz [ 582.008123][ T2808] gspca_sonixj: reg_r err -110 [ 582.013356][ T2808] sonixj: probe of 2-1:0.0 failed with error -110 [ 582.334070][T12852] usbhid 3-1:0.0: can't add hid device: -71 [ 582.340157][T12852] usbhid: probe of 3-1:0.0 failed with error -71 [ 582.374253][T12852] usb 3-1: USB disconnect, device number 61 [ 582.393541][ T5] usb 1-1: unit 239 not found! [ 582.413788][ T5] usb 1-1: USB disconnect, device number 43 [ 583.013246][ T5] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 583.253153][ T5] usb 3-1: Using ep0 maxpacket: 32 18:44:13 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe4, 0x97, 0x9d, 0x8, 0xc45, 0x6040, 0x9368, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6c, 0x94, 0x40}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x491, &(0x7f0000000480)={0x0, 0x0, 0x1, "11"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 18:44:13 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = eventfd(0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r3, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x1, 0xc3, 0x0, 0x0, 0x3e, 0x0, 0x218, 0x38, 0x3d0, 0xffff, 0x3, 0x20, 0x1, 0x0, 0x0, 0x7}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x17}], "", [[]]}, 0x158) 18:44:13 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0xfc, 0x46, 0x0, 0x979, 0x270, 0x5b1b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb8, 0x61, 0x52}}]}}]}}, 0x0) 18:44:13 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xde}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xae}, {0x0}, {0x0}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:44:13 executing program 0: syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000001840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @output_terminal={0x9}, @processing_unit={0xd, 0x24, 0x7, 0x0, 0x0, 0x0, "188628ae4b1d"}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x5, "40e513e1"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x0, 0x6}, @selector_unit={0x8, 0x24, 0x5, 0x6, 0x2, "ef5d1e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 583.356322][ T2808] usb 2-1: USB disconnect, device number 53 [ 583.392796][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 583.404287][ T5] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 583.413574][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.453948][ T5] usb 3-1: config 0 descriptor?? [ 583.495842][ T5] hub 3-1:0.0: ignoring external hub 18:44:13 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xde}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f0000000880)=""/238, 0xee}, {0x0}, {0x0}], 0x4}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 583.721728][T12852] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 583.754165][T12900] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 583.783683][ T5] usbhid 3-1:0.0: can't add hid device: -71 [ 583.790030][ T5] usbhid: probe of 3-1:0.0 failed with error -71 [ 583.833708][ T2808] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 583.844400][ T5] usb 3-1: USB disconnect, device number 62 18:44:14 executing program 2: r0 = syz_open_dev$hidraw(&(0x7f0000000180)='/dev/../raw#\x00', 0x0, 0x0) ioctl$HIDIOCAPPLICATION(r0, 0x40086604, 0x0) [ 584.000237][T12852] usb 1-1: Using ep0 maxpacket: 32 18:44:14 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x80004508, 0x0) [ 584.025742][T12900] usb 5-1: device descriptor read/64, error 18 [ 584.074671][ T2808] usb 2-1: Using ep0 maxpacket: 8 [ 584.149618][T12852] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 584.160527][T12852] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 18:44:14 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xde}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f0000000880)=""/238, 0xee}, {0x0}, {0x0}], 0x4}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 584.193463][ T2808] usb 2-1: New USB device found, idVendor=0c45, idProduct=6040, bcdDevice=93.68 [ 584.202675][ T2808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.224158][ T2808] usb 2-1: config 0 descriptor?? 18:44:14 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = eventfd(0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r3, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x1, 0xc3, 0x0, 0x0, 0x3e, 0x0, 0x218, 0x38, 0x3d0, 0xffff, 0x3, 0x20, 0x1, 0x0, 0x0, 0x7}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x17}], "", [[]]}, 0x158) [ 584.268048][ T2808] gspca_main: sonixj-2.14.0 probing 0c45:6040 [ 584.344298][T12852] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 584.353902][T12852] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.361941][T12852] usb 1-1: Product: syz [ 584.366243][T12852] usb 1-1: Manufacturer: syz [ 584.370901][T12852] usb 1-1: SerialNumber: syz 18:44:14 executing program 2: r0 = syz_usb_connect(0x0, 0x309, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x40, 0xff, 0xe0, 0x40, 0x2770, 0x913d, 0x4759, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x22, 0x0, 0x0, 0x80, 0xcd, 0x4f}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 584.426513][T12900] usb 5-1: device descriptor read/64, error 18 18:44:14 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xde}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f0000000880)=""/238, 0xee}, {0x0}, {0x0}], 0x4}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 584.695932][T12900] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 584.773639][T12940] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 584.793820][T12852] usb 1-1: unit 239 not found! [ 584.864717][T12852] usb 1-1: USB disconnect, device number 44 [ 584.982336][T12900] usb 5-1: device descriptor read/64, error 18 [ 585.003515][ T2808] gspca_sonixj: reg_r err -110 [ 585.008463][ T2808] sonixj: probe of 2-1:0.0 failed with error -110 [ 585.173614][T12940] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 585.183693][T12940] usb 3-1: config 0 has no interface number 0 [ 585.190114][T12940] usb 3-1: New USB device found, idVendor=2770, idProduct=913d, bcdDevice=47.59 [ 585.199437][T12940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.243899][T12940] usb 3-1: config 0 descriptor?? [ 585.288376][T12940] gspca_main: sq905c-2.14.0 probing 2770:913d [ 585.373394][T12900] usb 5-1: device descriptor read/64, error 18 [ 585.493607][T12900] usb usb5-port1: attempt power cycle [ 585.713451][T12940] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 585.721785][T12940] sq905c 3-1:0.34: Reading version command failed [ 585.729033][T12940] sq905c: probe of 3-1:0.34 failed with error -71 [ 585.738047][T12940] usb 3-1: USB disconnect, device number 63 [ 586.203722][T12900] usb 5-1: new high-speed USB device number 35 using dummy_hcd 18:44:16 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe4, 0x97, 0x9d, 0x8, 0xc45, 0x6040, 0x9368, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6c, 0x94, 0x40}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0xac, &(0x7f0000001a40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x491, &(0x7f0000000480)={0x0, 0x0, 0x1, "11"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 18:44:16 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xde}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {0x0}, {&(0x7f0000000880)=""/238, 0xee}, {0x0}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:44:16 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = eventfd(0x0) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r2, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x1, 0xc3, 0x0, 0x0, 0x3e, 0x0, 0x218, 0x38, 0x3d0, 0xffff, 0x3, 0x20, 0x1, 0x0, 0x0, 0x7}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x17}], "", [[]]}, 0x158) 18:44:16 executing program 0: syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000001840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @output_terminal={0x9}, @processing_unit={0xd, 0x24, 0x7, 0x0, 0x0, 0x0, "188628ae4b1d"}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x5, "40e513e1"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x0, 0x6}, @selector_unit={0x8, 0x24, 0x5, 0x6, 0x2, "ef5d1e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 18:44:16 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0xfc, 0x46, 0x0, 0x979, 0x270, 0x5b1b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb8, 0x61, 0x52}}]}}]}}, 0x0) [ 586.463310][ T2808] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 586.483563][T12900] usb 5-1: device descriptor read/64, error 18 [ 586.497777][T12940] usb 2-1: USB disconnect, device number 54 [ 586.835865][T12852] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 586.873245][ T2808] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 586.882048][ T2808] usb 3-1: config 0 has no interface number 0 [ 586.889930][ T2808] usb 3-1: New USB device found, idVendor=2770, idProduct=913d, bcdDevice=47.59 [ 586.899584][ T2808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 18:44:17 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xde}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {0x0}, {&(0x7f0000000880)=""/238, 0xee}, {0x0}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 586.926874][ T2808] usb 3-1: config 0 descriptor?? [ 586.980918][ T2808] gspca_main: sq905c-2.14.0 probing 2770:913d [ 587.003283][T12940] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 587.073485][T12900] usb 5-1: device descriptor read/64, error -71 [ 587.135614][T12852] usb 1-1: Using ep0 maxpacket: 32 [ 587.193479][ T2808] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 587.201368][ T2808] sq905c 3-1:0.34: Get version command failed [ 587.207957][ T2808] sq905c: probe of 3-1:0.34 failed with error -71 [ 587.224222][ T2808] usb 3-1: USB disconnect, device number 64 [ 587.264017][T12940] usb 2-1: Using ep0 maxpacket: 8 [ 587.269628][T12852] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 587.280912][T12852] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 18:44:17 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xde}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {0x0}, {&(0x7f0000000880)=""/238, 0xee}, {0x0}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 587.363490][T12900] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 587.383799][T12940] usb 2-1: New USB device found, idVendor=0c45, idProduct=6040, bcdDevice=93.68 [ 587.393610][T12940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 18:44:17 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = eventfd(0x0) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r2, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x1, 0xc3, 0x0, 0x0, 0x3e, 0x0, 0x218, 0x38, 0x3d0, 0xffff, 0x3, 0x20, 0x1, 0x0, 0x0, 0x7}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x17}], "", [[]]}, 0x158) [ 587.410327][T12940] usb 2-1: config 0 descriptor?? [ 587.444661][T12852] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 587.454038][T12852] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.462115][T12852] usb 1-1: Product: syz [ 587.466499][T12852] usb 1-1: Manufacturer: syz [ 587.471205][T12852] usb 1-1: SerialNumber: syz [ 587.485528][T12940] gspca_main: sonixj-2.14.0 probing 0c45:6040 18:44:17 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x200000) ioctl$EVIOCGKEYCODE(r0, 0x80084504, 0x0) [ 587.673421][T12900] usb 5-1: device descriptor read/64, error 18 18:44:17 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x38, 0xef, 0x18, 0x8, 0x1943, 0x2255, 0x3c75, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xe0, 0x0, 0x1, 0xad, 0x3b, 0xdd, 0x0, [], [{{0x7, 0x5, 0x7, 0x2}}]}}]}}]}}, 0x0) [ 587.714847][T12940] gspca_sonixj: reg_r err -32 [ 587.719994][T12940] sonixj: probe of 2-1:0.0 failed with error -32 18:44:17 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xde}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/238, 0xee}, {0x0}, {0x0}], 0x4}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 587.883589][T12852] usb 1-1: unit 239 not found! [ 587.949086][T12852] usb 1-1: USB disconnect, device number 45 [ 588.063628][T12900] usb 5-1: device descriptor read/64, error 18 [ 588.074181][ T2808] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 588.183763][T12900] usb usb5-port1: unable to enumerate USB device 18:44:18 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xde}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/238, 0xee}, {0x0}, {0x0}], 0x4}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 588.343450][ T2808] usb 3-1: Using ep0 maxpacket: 8 [ 588.496331][ T2808] usb 3-1: config 0 has an invalid interface number: 224 but max is 0 [ 588.504710][ T2808] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 588.515292][ T2808] usb 3-1: config 0 has no interface number 0 [ 588.521494][ T2808] usb 3-1: config 0 interface 224 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 588.531902][ T2808] usb 3-1: New USB device found, idVendor=1943, idProduct=2255, bcdDevice=3c.75 [ 588.541128][ T2808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.552284][ T2808] usb 3-1: config 0 descriptor?? [ 588.598503][ T2808] s2255 3-1:0.224: Could not find bulk-in endpoint [ 588.605330][ T2808] Sensoray 2255 driver load failed: 0xfffffff4 [ 588.611678][ T2808] s2255: probe of 3-1:0.224 failed with error -12 [ 588.796094][ T2808] usb 3-1: USB disconnect, device number 65 18:44:19 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe4, 0x97, 0x9d, 0x8, 0xc45, 0x6040, 0x9368, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6c, 0x94, 0x40}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0xac, &(0x7f0000001a40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x491, &(0x7f0000000480)={0x0, 0x0, 0x1, "11"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 18:44:19 executing program 0: 18:44:19 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = eventfd(0x0) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r2, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x1, 0xc3, 0x0, 0x0, 0x3e, 0x0, 0x218, 0x38, 0x3d0, 0xffff, 0x3, 0x20, 0x1, 0x0, 0x0, 0x7}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x17}], "", [[]]}, 0x158) 18:44:19 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xde}, {&(0x7f00000001c0)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/238, 0xee}, {0x0}, {0x0}], 0x4}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:44:19 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0xfc, 0x46, 0x0, 0x979, 0x270, 0x5b1b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb8, 0x61, 0x52}}]}}]}}, 0x0) [ 589.573405][T12852] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 589.603003][ T17] usb 2-1: USB disconnect, device number 55 18:44:19 executing program 0: 18:44:19 executing program 0: [ 589.843278][T12852] usb 3-1: Using ep0 maxpacket: 8 18:44:20 executing program 0: syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) [ 589.985090][T12940] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 590.023380][T12852] usb 3-1: config 0 has an invalid interface number: 224 but max is 0 [ 590.031696][T12852] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 590.042037][T12852] usb 3-1: config 0 has no interface number 0 [ 590.048319][T12852] usb 3-1: config 0 interface 224 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 590.058857][T12852] usb 3-1: New USB device found, idVendor=1943, idProduct=2255, bcdDevice=3c.75 [ 590.068088][T12852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 18:44:20 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/238, 0xee}, {0x0}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 590.082427][T12852] usb 3-1: config 0 descriptor?? [ 590.128041][T12852] s2255 3-1:0.224: Could not find bulk-in endpoint [ 590.135111][T12852] Sensoray 2255 driver load failed: 0xfffffff4 [ 590.141467][T12852] s2255: probe of 3-1:0.224 failed with error -12 [ 590.153426][ T17] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 590.323248][T12940] usb 5-1: device descriptor read/64, error 18 [ 590.366777][T12852] usb 3-1: USB disconnect, device number 66 [ 590.403491][ T17] usb 2-1: Using ep0 maxpacket: 8 [ 590.534289][ T17] usb 2-1: New USB device found, idVendor=0c45, idProduct=6040, bcdDevice=93.68 [ 590.543584][ T17] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.555263][ T17] usb 2-1: config 0 descriptor?? [ 590.610841][ T17] gspca_main: sonixj-2.14.0 probing 0c45:6040 [ 590.723195][T12940] usb 5-1: device descriptor read/64, error 18 18:44:20 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000040)=""/97) 18:44:20 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, 0x0, 0x0) r3 = eventfd(0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r3, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x1, 0xc3, 0x0, 0x0, 0x3e, 0x0, 0x218, 0x38, 0x3d0, 0xffff, 0x3, 0x20, 0x1, 0x0, 0x0, 0x7}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x17}], "", [[]]}, 0x158) 18:44:20 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/238, 0xee}, {0x0}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 591.015671][T12940] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 591.313470][T12940] usb 5-1: device descriptor read/64, error 18 [ 591.703470][T12940] usb 5-1: device descriptor read/64, error 18 [ 591.793365][ T17] gspca_sonixj: reg_r err -110 [ 591.798535][ T17] sonixj: probe of 2-1:0.0 failed with error -110 [ 591.823851][T12940] usb usb5-port1: attempt power cycle [ 592.533270][T12940] usb 5-1: new high-speed USB device number 39 using dummy_hcd 18:44:22 executing program 2: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x100000000000012, 0x7, 0x1, 0x3, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:44:22 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe4, 0x97, 0x9d, 0x8, 0xc45, 0x6040, 0x9368, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6c, 0x94, 0x40}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0xac, &(0x7f0000001a40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x491, &(0x7f0000000480)={0x0, 0x0, 0x1, "11"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 18:44:22 executing program 0: syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) 18:44:22 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/238, 0xee}, {0x0}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:44:22 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, 0x0, 0x0) r3 = eventfd(0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r3, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x1, 0xc3, 0x0, 0x0, 0x3e, 0x0, 0x218, 0x38, 0x3d0, 0xffff, 0x3, 0x20, 0x1, 0x0, 0x0, 0x7}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x17}], "", [[]]}, 0x158) 18:44:22 executing program 4: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001400)=ANY=[@ANYBLOB="d3d2b93c38f19c0408cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="eabe9f303b222957eecbc624877c785255f910c28f5e87a64820546a1ebed56adb3b91e7f1ffd7e4ab569f8e39808e0b61a0bf7a301ffe8dac0773d9e5411f2b25f3a750e5a8eb334926fbc7cf7682c1f0d81a590ed76f2c4af37bd3d331de23d61ce6017abd2f1c2e314544", @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb12ee4510100010029a741efca44f937d0492482ba837296c43b3897cc275fd87f333c960d2bc40dd8ff010000000000000d744041f409d58ac4872bf5b65c87e940b30eecb487d7df000000dfdaf3d0fe", @ANYRESHEX=0x0], 0x0, 0xfd}, 0x20) tkill(r0, 0x39) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 592.725271][ T17] usb 2-1: USB disconnect, device number 56 18:44:22 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_PRIORITY={0x8}]}}}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) [ 592.775483][T17196] ptrace attach of "/root/syz-executor.4"[17195] was attempted by "/root/syz-executor.4"[17196] [ 592.887812][T17208] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 593.065856][T12852] usb 3-1: new high-speed USB device number 67 using dummy_hcd 18:44:23 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/238, 0xee}, {0x0}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 593.273311][ T17] usb 2-1: new high-speed USB device number 57 using dummy_hcd 18:44:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) setpriority(0x1, 0x0, 0x0) [ 593.313574][T12852] usb 3-1: Using ep0 maxpacket: 8 18:44:23 executing program 0: syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) [ 593.433641][T12852] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 593.443573][T12852] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 593.453534][T12852] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 593.466724][T12852] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 593.475944][T12852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 18:44:23 executing program 4: syz_open_dev$binderN(0xffffffffffffffff, 0x0, 0x0) [ 593.537515][ T17] usb 2-1: Using ep0 maxpacket: 8 18:44:23 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, 0x0, 0x0) r3 = eventfd(0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r3, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x1, 0xc3, 0x0, 0x0, 0x3e, 0x0, 0x218, 0x38, 0x3d0, 0xffff, 0x3, 0x20, 0x1, 0x0, 0x0, 0x7}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x17}], "", [[]]}, 0x158) [ 593.654578][ T17] usb 2-1: New USB device found, idVendor=0c45, idProduct=6040, bcdDevice=93.68 [ 593.663976][ T17] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.710296][ T17] usb 2-1: config 0 descriptor?? [ 593.779898][ T17] gspca_main: sonixj-2.14.0 probing 0c45:6040 [ 593.977387][T12852] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 67 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 594.175841][T12852] usb 3-1: USB disconnect, device number 67 [ 594.184427][T12852] usblp0: removed [ 594.923293][ T17] gspca_sonixj: reg_r err -110 [ 594.928314][ T17] sonixj: probe of 2-1:0.0 failed with error -110 [ 594.943327][ T2808] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 595.193384][ T2808] usb 3-1: Using ep0 maxpacket: 8 [ 595.313520][ T2808] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 595.323470][ T2808] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 595.333415][ T2808] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 595.346504][ T2808] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 595.355720][ T2808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.666388][ T2808] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 68 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 18:44:25 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = eventfd(0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r3, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20, 0x1}, [{}]}, 0x58) [ 595.771678][ T2808] usb 3-1: USB disconnect, device number 68 [ 595.781365][ T2808] usblp0: removed 18:44:25 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe4, 0x97, 0x9d, 0x8, 0xc45, 0x6040, 0x9368, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6c, 0x94, 0x40}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0xac, &(0x7f0000001a40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x491, &(0x7f0000000480)={0x0, 0x0, 0x1, "11"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 18:44:25 executing program 4: pipe(&(0x7f0000000100)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"/334], 0xf9}}, 0x0) 18:44:25 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/238, 0xee}, {0x0}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:44:25 executing program 0: syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000001840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @output_terminal={0x9}, @processing_unit={0xd, 0x24, 0x7, 0x0, 0x0, 0x0, "188628ae4b1d"}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x5, "40e513e1"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x0, 0x6}, @selector_unit={0x8, 0x24, 0x5, 0x6, 0x2, "ef5d1e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 18:44:25 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = eventfd(0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r2, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x1, 0xc3, 0x0, 0x0, 0x3e, 0x0, 0x218, 0x38, 0x3d0, 0xffff, 0x3, 0x20, 0x1, 0x0, 0x0, 0x7}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x17}], "", [[]]}, 0x158) [ 595.870387][ T17] usb 2-1: USB disconnect, device number 57 18:44:26 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000001c80)='./file0\x00', 0x113d, 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 18:44:26 executing program 4: open(0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8) [ 596.283253][T12900] usb 1-1: new high-speed USB device number 46 using dummy_hcd 18:44:26 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/238, 0xee}, {0x0}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 596.464702][ T17] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 596.605195][T12900] usb 1-1: device descriptor read/64, error 18 18:44:26 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = eventfd(0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r3, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20, 0x1}, [{}]}, 0x58) [ 596.704306][ T17] usb 2-1: Using ep0 maxpacket: 8 18:44:26 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = eventfd(0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r2, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x1, 0xc3, 0x0, 0x0, 0x3e, 0x0, 0x218, 0x38, 0x3d0, 0xffff, 0x3, 0x20, 0x1, 0x0, 0x0, 0x7}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x17}], "", [[]]}, 0x158) [ 596.872871][ T17] usb 2-1: New USB device found, idVendor=0c45, idProduct=6040, bcdDevice=93.68 [ 596.882989][ T17] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.964231][ T17] usb 2-1: config 0 descriptor?? [ 597.010391][ T17] gspca_main: sonixj-2.14.0 probing 0c45:6040 [ 597.054790][T12900] usb 1-1: device descriptor read/64, error 18 18:44:27 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xde}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/238, 0xee}, {0x0}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 597.325731][T12900] usb 1-1: new high-speed USB device number 47 using dummy_hcd 18:44:27 executing program 4: open(0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8) [ 597.615638][T12900] usb 1-1: device descriptor read/64, error 18 [ 598.033287][T12900] usb 1-1: device descriptor read/64, error 18 [ 598.153516][T12900] usb usb1-port1: attempt power cycle [ 598.283344][ T17] gspca_sonixj: reg_r err -110 [ 598.288657][ T17] sonixj: probe of 2-1:0.0 failed with error -110 [ 598.863349][T12900] usb 1-1: new high-speed USB device number 48 using dummy_hcd 18:44:29 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe4, 0x97, 0x9d, 0x8, 0xc45, 0x6040, 0x9368, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6c, 0x94, 0x40}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0xac, &(0x7f0000001a40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x491, &(0x7f0000000480)={0x0, 0x0, 0x1, "11"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 18:44:29 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = eventfd(0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r3, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20, 0x1}, [{}]}, 0x58) 18:44:29 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xde}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/238, 0xee}, {0x0}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:44:29 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = eventfd(0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r2, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x1, 0xc3, 0x0, 0x0, 0x3e, 0x0, 0x218, 0x38, 0x3d0, 0xffff, 0x3, 0x20, 0x1, 0x0, 0x0, 0x7}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x17}], "", [[]]}, 0x158) 18:44:29 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f0000003480)) 18:44:29 executing program 0: syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000001840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @output_terminal={0x9}, @processing_unit={0xd, 0x24, 0x7, 0x0, 0x0, 0x0, "188628ae4b1d"}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x5, "40e513e1"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x0, 0x6}, @selector_unit={0x8, 0x24, 0x5, 0x6, 0x2, "ef5d1e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 598.988390][ T2808] usb 2-1: USB disconnect, device number 58 18:44:29 executing program 4: creat(&(0x7f0000000180)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}]}}) 18:44:29 executing program 4: creat(&(0x7f0000000180)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read'}}]}}) [ 599.533558][T12900] usb 1-1: device descriptor read/64, error -71 18:44:29 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000001c80)='./file0\x00', 0x113d, 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = gettid() tkill(r0, 0x1000000000016) 18:44:29 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xde}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/238, 0xee}, {0x0}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 599.633946][ T2808] usb 2-1: new high-speed USB device number 59 using dummy_hcd 18:44:29 executing program 4: [ 599.875410][ T2808] usb 2-1: Using ep0 maxpacket: 8 18:44:30 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = eventfd(0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r3, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x1, 0xc3, 0x0, 0x0, 0x3e, 0x0, 0x218, 0x38, 0x3d0, 0xffff, 0x3, 0x20, 0x1, 0x0, 0x0, 0x7}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x17}], "", [[]]}, 0x158) [ 599.924627][T12900] usb 1-1: device descriptor read/64, error 18 [ 600.004076][ T2808] usb 2-1: New USB device found, idVendor=0c45, idProduct=6040, bcdDevice=93.68 [ 600.014053][ T2808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.079376][ T2808] usb 2-1: config 0 descriptor?? [ 600.130322][ T2808] gspca_main: sonixj-2.14.0 probing 0c45:6040 [ 600.204583][T12900] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 600.473345][T12900] usb 1-1: device descriptor read/64, error 18 [ 600.863276][T12900] usb 1-1: device descriptor read/64, error 18 [ 600.983633][T12900] usb usb1-port1: unable to enumerate USB device [ 601.293414][ T2808] gspca_sonixj: reg_r err -110 [ 601.298503][ T2808] sonixj: probe of 2-1:0.0 failed with error -110 18:44:32 executing program 4: 18:44:32 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe4, 0x97, 0x9d, 0x8, 0xc45, 0x6040, 0x9368, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6c, 0x94, 0x40}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0xac, &(0x7f0000001a40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x491, &(0x7f0000000480)={0x0, 0x0, 0x1, "11"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 18:44:32 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = eventfd(0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r3, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20, 0x1}, [{}]}, 0x58) 18:44:32 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xde}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/238, 0xee}, {0x0}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:44:32 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = eventfd(0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r3, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x1, 0xc3, 0x0, 0x0, 0x3e, 0x0, 0x218, 0x38, 0x3d0, 0xffff, 0x3, 0x20, 0x1, 0x0, 0x0, 0x7}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x17}], "", [[]]}, 0x158) 18:44:32 executing program 0: syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000001840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @output_terminal={0x9}, @processing_unit={0xd, 0x24, 0x7, 0x0, 0x0, 0x0, "188628ae4b1d"}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x5, "40e513e1"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x0, 0x6}, @selector_unit={0x8, 0x24, 0x5, 0x6, 0x2, "ef5d1e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 602.099811][T12900] usb 2-1: USB disconnect, device number 59 18:44:32 executing program 4: clone(0x10000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:44:32 executing program 4: r0 = socket(0x1f, 0x5, 0x2) getsockopt(r0, 0x2, 0x0, 0x0, 0x0) 18:44:32 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x3c0a, r3) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) [ 602.507932][ T2808] usb 1-1: new high-speed USB device number 50 using dummy_hcd 18:44:32 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xde}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/238, 0xee}, {0x0}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:44:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f00000000c0)=0x2, 0x4) sendmmsg(r0, &(0x7f0000007f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)="9f", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000940)='!', 0x1}], 0x1}}], 0x127ad, 0x0) [ 602.663916][T12900] usb 2-1: new high-speed USB device number 60 using dummy_hcd 18:44:32 executing program 4: [ 602.793577][ T2808] usb 1-1: device descriptor read/64, error 18 [ 602.913680][T12900] usb 2-1: Using ep0 maxpacket: 8 18:44:33 executing program 4: [ 603.040912][T12900] usb 2-1: New USB device found, idVendor=0c45, idProduct=6040, bcdDevice=93.68 [ 603.050320][T12900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.084541][T12900] usb 2-1: config 0 descriptor?? [ 603.131012][T12900] gspca_main: sonixj-2.14.0 probing 0c45:6040 [ 603.214862][ T2808] usb 1-1: device descriptor read/64, error 18 [ 603.483174][ T2808] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 603.753258][ T2808] usb 1-1: device descriptor read/64, error 18 [ 604.143265][ T2808] usb 1-1: device descriptor read/64, error 18 [ 604.263302][ T2808] usb usb1-port1: attempt power cycle [ 604.293387][T12900] gspca_sonixj: reg_r err -110 [ 604.298330][T12900] sonixj: probe of 2-1:0.0 failed with error -110 [ 604.973331][ T2808] usb 1-1: new high-speed USB device number 52 using dummy_hcd 18:44:35 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe4, 0x97, 0x9d, 0x8, 0xc45, 0x6040, 0x9368, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6c, 0x94, 0x40}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0xac, &(0x7f0000001a40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 18:44:35 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = eventfd(0x0) write$binfmt_elf32(r2, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20, 0x1}, [{}]}, 0x58) 18:44:35 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = eventfd(0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r3, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x1, 0xc3, 0x0, 0x0, 0x3e, 0x0, 0x218, 0x38, 0x3d0, 0xffff, 0x3, 0x20, 0x1, 0x0, 0x0, 0x7}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x17}], "", [[]]}, 0x158) 18:44:35 executing program 4: 18:44:35 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/222, 0xde}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/238, 0xee}, {0x0}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:44:35 executing program 0: syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @output_terminal={0x9}, @processing_unit={0xd, 0x24, 0x7, 0x0, 0x0, 0x0, "188628ae4b1d"}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x5, "40e513e1"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x0, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 605.230233][ T17] usb 2-1: USB disconnect, device number 60 [ 605.261117][ T2808] usb 1-1: device descriptor read/64, error 18 18:44:35 executing program 4: 18:44:35 executing program 4: 18:44:35 executing program 4: 18:44:35 executing program 4: [ 605.733577][ T17] usb 2-1: new high-speed USB device number 61 using dummy_hcd 18:44:35 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/143, 0x8f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/238, 0xee}, {0x0}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:44:35 executing program 4: [ 605.833897][ T2808] usb 1-1: device descriptor read/64, error -71 [ 606.029386][ T17] usb 2-1: Using ep0 maxpacket: 8 [ 606.103675][ T2808] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 606.204441][ T17] usb 2-1: New USB device found, idVendor=0c45, idProduct=6040, bcdDevice=93.68 [ 606.213721][ T17] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.240647][ T17] usb 2-1: config 0 descriptor?? [ 606.291342][ T17] gspca_main: sonixj-2.14.0 probing 0c45:6040 [ 606.393577][ T2808] usb 1-1: Using ep0 maxpacket: 32 [ 606.513587][ T2808] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 606.524901][ T2808] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 606.693786][ T2808] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 606.702958][ T2808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.711369][ T2808] usb 1-1: Product: syz [ 606.715710][ T2808] usb 1-1: Manufacturer: syz [ 606.720361][ T2808] usb 1-1: SerialNumber: syz [ 607.053554][ T2808] usb 1-1: unit 6 not found! [ 607.072910][ T2808] usb 1-1: USB disconnect, device number 53 [ 607.463205][ T17] gspca_sonixj: reg_r err -110 [ 607.468283][ T17] sonixj: probe of 2-1:0.0 failed with error -110 18:44:38 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe4, 0x97, 0x9d, 0x8, 0xc45, 0x6040, 0x9368, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6c, 0x94, 0x40}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0xac, &(0x7f0000001a40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 18:44:38 executing program 4: 18:44:38 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = eventfd(0x0) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) write$binfmt_elf32(r3, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x1, 0xc3, 0x0, 0x0, 0x3e, 0x0, 0x218, 0x38, 0x3d0, 0xffff, 0x3, 0x20, 0x1, 0x0, 0x0, 0x7}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x17}], "", [[]]}, 0x158) 18:44:38 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = eventfd(0x0) write$binfmt_elf32(r2, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20, 0x1}, [{}]}, 0x58) 18:44:38 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/238, 0xee}, {0x0}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:44:38 executing program 0: syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @output_terminal={0x9}, @processing_unit={0xd, 0x24, 0x7, 0x0, 0x0, 0x0, "188628ae4b1d"}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x5, "40e513e1"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x0, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 608.341145][ T17] usb 2-1: USB disconnect, device number 61 18:44:38 executing program 4: 18:44:38 executing program 4: 18:44:38 executing program 4: [ 608.756190][ T2808] usb 1-1: new high-speed USB device number 54 using dummy_hcd 18:44:38 executing program 4: r0 = creat(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000080)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000240), 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000180)=[@window={0x3, 0x0, 0x7f}, @sack_perm], 0x2000047a) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 18:44:38 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/238, 0xee}, {0x0}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 608.803793][ T17] usb 2-1: new high-speed USB device number 62 using dummy_hcd 18:44:39 executing program 4: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="eabe9f303b222957eecbc624877c825255f910c28f5e87a64820546a1ebed56adb3b91e7f1ffd7e4ab56ad8e39808e0b61a0bf7a301ffe8dac0726906da58a5d1ab066f24351eda628769d37cbcb5c0c5d6b03e4c0487a0c5c3ced0b6983", @ANYRESOCT, @ANYRESOCT, @ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d0492482ba837296d961244e2e0c734057548c402cc43b3897ccb5430331f633e7ec2bc40d42cc3aa39f2441d8ece5ff1b9d9e2afb674462b435729c12b0f1c4872b0001000000000000f515586de3c101e4f8d1b12b1894ef983d0cfcdfbb1118c5ae060bb6ae2af877735be7b03b5278b53fe125393d6b6adf7f7d0734bc1e5566", @ANYRESHEX], 0x0, 0x15a}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 609.016550][ T2808] usb 1-1: Using ep0 maxpacket: 32 [ 609.063655][ T17] usb 2-1: Using ep0 maxpacket: 8 [ 609.144165][ T2808] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 609.155397][ T2808] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 609.248451][ T17] usb 2-1: New USB device found, idVendor=0c45, idProduct=6040, bcdDevice=93.68 [ 609.257932][ T17] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.277151][ T17] usb 2-1: config 0 descriptor?? [ 609.317963][ T17] gspca_main: sonixj-2.14.0 probing 0c45:6040 [ 609.376007][ T2808] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 609.385757][ T2808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.394186][ T2808] usb 1-1: Product: syz [ 609.398422][ T2808] usb 1-1: Manufacturer: syz [ 609.403205][ T2808] usb 1-1: SerialNumber: syz [ 609.733494][ T2808] usb 1-1: unit 6 not found! [ 609.752357][ T2808] usb 1-1: USB disconnect, device number 54 [ 610.463238][ T17] gspca_sonixj: reg_r err -110 [ 610.468189][ T17] sonixj: probe of 2-1:0.0 failed with error -110 18:44:41 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe4, 0x97, 0x9d, 0x8, 0xc45, 0x6040, 0x9368, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6c, 0x94, 0x40}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0xac, &(0x7f0000001a40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 18:44:41 executing program 4: clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='gid_map\x00\xba\x99FH\xf4\a\xaf\x04\x14\xe1\xb8d\xd4@O\xce\xbb\xe4\xdf\xc1\xe9l\x05\x9b\xd5\x1dD\xc7k\x8f\xee\xab\x920\xab\x06\xaf\xb6|&\xb7s>\xac\xebo\xb9\xcd\xfa\xb5N7\x1c!\x9c@ad\xfa\x9d\xffc\xfe\xf5[J\xe9\f\xa9\xc7\xd9e\xc9c\xddI\x94|~\x98\x8c\x14\xfb\x9c1\vu\x13\xd9\xb2\xce\x96\xe9\xdfj\xa5\xec\x19\xd8`.\x91\xdb<\xe9\x195\x81\xb1\xd1\xcbM\xc7VJ5\xb7U\xf6\xc2B\f\x13\x02\x7f\xc3\x99\xbf\xa6\xcc\xaf\xfe\xc88\xb5\xcb\xa2X\xd3\x94\x9d\xe5\xc0\\\x86?\x12 \x0e\xb0\xe8\x11z\xcd\x12Na\xf5\xbc D\x9a#\xe1\xa0h\xcb\x9dkDPp\xc4\xd2\xa7\xbejn\xfb\x03v--\xc5 \xb8\xeaq\x0f\x9a\n\xcb%\x1d\xc2\x82\x9f\x1f\xcd\xc8\x818\xa6\xea\x12\xd7\x1b?\xa0u\xb1z\xb3-\xb7\xc8\xc3\b\x1fI5\xcaxb\x0f\xfa/u\x18\xc6\x06\xa6V\xf0\xa7#5\xaeWPV\xf40xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = eventfd(0x0) write$binfmt_elf32(r2, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20, 0x1}, [{}]}, 0x58) 18:44:41 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/238, 0xee}, {0x0}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:44:41 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = eventfd(0x0) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) write$binfmt_elf32(r3, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x1, 0xc3, 0x0, 0x0, 0x3e, 0x0, 0x218, 0x38, 0x3d0, 0xffff, 0x3, 0x20, 0x1, 0x0, 0x0, 0x7}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x17}], "", [[]]}, 0x158) 18:44:41 executing program 0: syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @output_terminal={0x9}, @processing_unit={0xd, 0x24, 0x7, 0x0, 0x0, 0x0, "188628ae4b1d"}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x5, "40e513e1"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x0, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 611.448153][ T2808] usb 2-1: USB disconnect, device number 62 18:44:41 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/143, 0x8f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/238, 0xee}, {0x0}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 611.833464][T12900] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 611.923669][ T2808] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 612.093597][T12900] usb 1-1: Using ep0 maxpacket: 32 18:44:42 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/143, 0x8f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/238, 0xee}, {0x0}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 612.183393][ T2808] usb 2-1: Using ep0 maxpacket: 8 [ 612.216615][T12900] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 612.227611][T12900] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 612.313894][ T2808] usb 2-1: New USB device found, idVendor=0c45, idProduct=6040, bcdDevice=93.68 [ 612.323330][ T2808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.365851][ T2808] usb 2-1: config 0 descriptor?? 18:44:42 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = eventfd(0x0) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) write$binfmt_elf32(r3, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x1, 0xc3, 0x0, 0x0, 0x3e, 0x0, 0x218, 0x38, 0x3d0, 0xffff, 0x3, 0x20, 0x1, 0x0, 0x0, 0x7}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x17}], "", [[]]}, 0x158) 18:44:42 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20, 0x1}, [{}]}, 0x58) [ 612.410305][ T2808] gspca_main: sonixj-2.14.0 probing 0c45:6040 [ 612.423784][T12900] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 612.433446][T12900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.441732][T12900] usb 1-1: Product: syz [ 612.446244][T12900] usb 1-1: Manufacturer: syz [ 612.451235][T12900] usb 1-1: SerialNumber: syz 18:44:42 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc3, 0x200000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x1, 0x0, 0x0, 0x5}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000480)='/dev/urandom\x00', 0x0, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000001bc0), 0x40000000000016b, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r5 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r5, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0xa0000800}, 0xc, &(0x7f0000000580)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1cfc000809af1866631263a58cc709901cb6ab6b09e3579421d97eb991b51391c44cb88f31d9b2d7e8dab114d25ee513d4a8021822f30f59b6fde0994371b7afad942b3ec8aea70a211c9ad938cb", @ANYRES16, @ANYBLOB], 0x3}}, 0x8000) 18:44:42 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/143, 0x8f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/238, 0xee}, {0x0}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 612.804630][T12900] usb 1-1: unit 6 not found! [ 612.885111][T12900] usb 1-1: USB disconnect, device number 55 [ 613.623321][ T2808] gspca_sonixj: reg_r err -110 [ 613.628317][ T2808] sonixj: probe of 2-1:0.0 failed with error -110 18:44:44 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe4, 0x97, 0x9d, 0x8, 0xc45, 0x6040, 0x9368, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6c, 0x94, 0x40}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0xac, &(0x7f0000001a40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 18:44:44 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/143, 0x8f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/238, 0xee}, {0x0}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:44:44 executing program 0: syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000001840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @output_terminal={0x9}, @processing_unit={0xd, 0x24, 0x7, 0x0, 0x0, 0x0, "188628ae4b1d"}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x5, "40e513e1"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x0, 0x6}, @selector_unit={0x8, 0x24, 0x5, 0x0, 0x2, "ef5d1e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 18:44:44 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) eventfd(0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x1, 0xc3, 0x0, 0x0, 0x3e, 0x0, 0x218, 0x38, 0x3d0, 0xffff, 0x3, 0x20, 0x1, 0x0, 0x0, 0x7}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x17}], "", [[]]}, 0x158) 18:44:44 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20, 0x1}, [{}]}, 0x58) 18:44:44 executing program 4: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="eabe9f303b222957eecbc624877c825255f910c28f5e87a64820546a1ebed56adb3b91e7f1ffd7e4ab56ad8e39808e0b61a0bf7a301ffe8dac0726906da58a5d1ab066f24351eda628769d37cbcb5c0c5d6b03e4c0487a0c5c3ced0b6983", @ANYRESOCT, @ANYRESOCT, @ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d0492482ba837296d961244e2e0c734057548c402cc43b3897ccb5430331f633e7ec2bc40d42cc3aa39f2441d8ece5ff1b9d9e2afb", @ANYRESHEX], 0x0, 0x10d}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 614.528353][ T2808] usb 2-1: USB disconnect, device number 63 18:44:44 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)='\t\x00\x00\x00\x00\x0069@', 0x9}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe44, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x18) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 614.600226][T17536] ptrace attach of "/root/syz-executor.4"[17535] was attempted by "/root/syz-executor.4"[17536] 18:44:44 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0xd}, 0xd) [ 614.895872][ T17] usb 1-1: new high-speed USB device number 56 using dummy_hcd 18:44:45 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) write$binfmt_misc(r1, 0x0, 0x0) 18:44:45 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/143, 0x8f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/238, 0xee}, {0x0}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 615.063268][ T2808] usb 2-1: new high-speed USB device number 64 using dummy_hcd 18:44:45 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x9, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000e7b0dcc3daa5520d15393464e02ff4091800eb0c280a1d56bb729bd3378032a431db705eb5b2e2b965ac087ecd8645ab029395eb39974ae562cbe55909b8f1f99b9b939000c4bb63a84e2ab946b87fc14b688f5b4c456cb467e285de87dd3c9510a1aadeaf28fb9b710ecf7fdd4240aece1996b95aa33f7a702cf4314043558b94402b9ccfe9622f5aa1809e22cb6a6f516eb5ce41f2f2b733273edb89b06945b3ba545513b0f358d4553053807f609db7928b73b60c04bb9923de8272017f1dc2e6112fd9f7e967fc260299ba5ea9fb0d3fe1befc431917451d1f630256c08b8afbfa1c09b9eac772977a2b01108d5db00f75c66b7b295e96eb336d63ddf4fd217d929bde6a13695ecfa3aa958341f029c2009e91d2d4279af3cd57059a15b68956aa5aaf53fb12c423f9b637185d169b132f110c77a9bb735dd2811ece8f39092950a7e127fc47a78ccda231002246ec19b8a6376e0c1cff2aa8d30c8c7475bca6780028fcc73e0f46b3c4f3d59e2006f4bb84b5c46b7cc096a6570bb963196a"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x1ee, &(0x7f00000003c0)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1cf}, 0x48) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000040)={r1, r0, 0xd}, 0xd) [ 615.193712][ T17] usb 1-1: Using ep0 maxpacket: 32 18:44:45 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") close(0xffffffffffffffff) sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) [ 615.303406][ T2808] usb 2-1: Using ep0 maxpacket: 8 [ 615.335831][ T17] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 615.346891][ T17] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 615.423952][ T2808] usb 2-1: New USB device found, idVendor=0c45, idProduct=6040, bcdDevice=93.68 [ 615.433355][ T2808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.472132][ T2808] usb 2-1: config 0 descriptor?? [ 615.519255][ T2808] gspca_main: sonixj-2.14.0 probing 0c45:6040 [ 615.592279][ T17] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 615.601700][ T17] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.610043][ T17] usb 1-1: Product: syz [ 615.614362][ T17] usb 1-1: Manufacturer: syz [ 615.619127][ T17] usb 1-1: SerialNumber: syz [ 616.023594][ T17] usb 1-1: unit 6 not found! [ 616.045194][ T17] usb 1-1: USB disconnect, device number 56 [ 616.683232][ T2808] gspca_sonixj: reg_r err -110 [ 616.688155][ T2808] sonixj: probe of 2-1:0.0 failed with error -110 18:44:47 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe4, 0x97, 0x9d, 0x8, 0xc45, 0x6040, 0x9368, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6c, 0x94, 0x40}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0xac, &(0x7f0000001a40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 18:44:47 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) eventfd(0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x1, 0xc3, 0x0, 0x0, 0x3e, 0x0, 0x218, 0x38, 0x3d0, 0xffff, 0x3, 0x20, 0x1, 0x0, 0x0, 0x7}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x17}], "", [[]]}, 0x158) 18:44:47 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20, 0x1}, [{}]}, 0x58) 18:44:47 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") close(0xffffffffffffffff) sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) 18:44:47 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/143, 0x8f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/238, 0xee}, {0x0}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:44:47 executing program 0: syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000001840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @output_terminal={0x9}, @processing_unit={0xd, 0x24, 0x7, 0x0, 0x0, 0x0, "188628ae4b1d"}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x5, "40e513e1"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x0, 0x6}, @selector_unit={0x8, 0x24, 0x5, 0x0, 0x2, "ef5d1e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 617.649646][ T17] usb 2-1: USB disconnect, device number 64 18:44:48 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") close(0xffffffffffffffff) sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) [ 618.037644][T12852] usb 1-1: new high-speed USB device number 57 using dummy_hcd 18:44:48 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") close(0xffffffffffffffff) sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) 18:44:48 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/143, 0x8f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/238, 0xee}, {0x0}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 618.193562][ T17] usb 2-1: new high-speed USB device number 65 using dummy_hcd 18:44:48 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") close(0xffffffffffffffff) sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) [ 618.284967][T12852] usb 1-1: Using ep0 maxpacket: 32 [ 618.463756][T12852] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 618.475054][T12852] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 618.486881][ T17] usb 2-1: Using ep0 maxpacket: 8 18:44:48 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) eventfd(0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x1, 0xc3, 0x0, 0x0, 0x3e, 0x0, 0x218, 0x38, 0x3d0, 0xffff, 0x3, 0x20, 0x1, 0x0, 0x0, 0x7}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x17}], "", [[]]}, 0x158) 18:44:48 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = eventfd(0x0) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r2, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20, 0x1}, [{}]}, 0x58) [ 618.606258][ T17] usb 2-1: New USB device found, idVendor=0c45, idProduct=6040, bcdDevice=93.68 [ 618.615805][ T17] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.692074][ T17] usb 2-1: config 0 descriptor?? [ 618.723678][T12852] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 618.732856][T12852] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.741588][T12852] usb 1-1: Product: syz [ 618.746076][T12852] usb 1-1: Manufacturer: syz [ 618.750900][T12852] usb 1-1: SerialNumber: syz [ 618.806328][ T17] gspca_main: sonixj-2.14.0 probing 0c45:6040 [ 619.174184][T12852] usb 1-1: unit 6 not found! [ 619.224127][T12852] usb 1-1: USB disconnect, device number 57 [ 619.893326][ T17] gspca_sonixj: reg_r err -110 [ 619.898411][ T17] sonixj: probe of 2-1:0.0 failed with error -110 18:44:50 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe4, 0x97, 0x9d, 0x8, 0xc45, 0x6040, 0x9368, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6c, 0x94, 0x40}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0xac, &(0x7f0000001a40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 18:44:50 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/143, 0x8f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/238, 0xee}, {0x0}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:44:50 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = eventfd(0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r3, 0x0, 0x0) 18:44:50 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") close(0xffffffffffffffff) sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) 18:44:50 executing program 0: syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000001840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @output_terminal={0x9}, @processing_unit={0xd, 0x24, 0x7, 0x0, 0x0, 0x0, "188628ae4b1d"}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x5, "40e513e1"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x0, 0x6}, @selector_unit={0x8, 0x24, 0x5, 0x0, 0x2, "ef5d1e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 18:44:50 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = eventfd(0x0) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r2, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20, 0x1}, [{}]}, 0x58) [ 620.753228][ T17] usb 2-1: USB disconnect, device number 65 18:44:51 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/143, 0x8f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/238, 0xee}, {0x0}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 621.163312][T12852] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 621.243550][ T17] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 621.423328][T12852] usb 1-1: Using ep0 maxpacket: 32 [ 621.516196][ T17] usb 2-1: Using ep0 maxpacket: 8 18:44:51 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/143, 0x8f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/238, 0xee}, {0x0}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 621.574209][T12852] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 621.585521][T12852] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 18:44:51 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = eventfd(0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r3, 0x0, 0x0) [ 621.633755][ T17] usb 2-1: New USB device found, idVendor=0c45, idProduct=6040, bcdDevice=93.68 [ 621.643507][ T17] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 18:44:51 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") close(0xffffffffffffffff) sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) [ 621.698597][ T17] usb 2-1: config 0 descriptor?? 18:44:51 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = eventfd(0x0) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r2, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20, 0x1}, [{}]}, 0x58) [ 621.758723][ T17] gspca_main: sonixj-2.14.0 probing 0c45:6040 [ 621.793919][T12852] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 621.803178][T12852] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.811262][T12852] usb 1-1: Product: syz [ 621.815702][T12852] usb 1-1: Manufacturer: syz [ 621.820406][T12852] usb 1-1: SerialNumber: syz 18:44:52 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/143, 0x8f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/238, 0xee}, {0x0}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 622.303756][T12852] usb 1-1: unit 6 not found! [ 622.369221][T12852] usb 1-1: USB disconnect, device number 58 18:44:52 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") close(0xffffffffffffffff) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) [ 622.924098][ T17] gspca_sonixj: reg_r err -110 [ 622.929221][ T17] sonixj: probe of 2-1:0.0 failed with error -110 18:44:53 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe4, 0x97, 0x9d, 0x8, 0xc45, 0x6040, 0x9368, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6c, 0x94, 0x40}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0xac, &(0x7f0000001a40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000480), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 18:44:53 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = eventfd(0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r3, 0x0, 0x0) 18:44:53 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = eventfd(0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r3, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20, 0x1}, [{}]}, 0x58) 18:44:53 executing program 0: syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000001840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @output_terminal={0x9}, @processing_unit={0xd, 0x24, 0x7, 0x0, 0x0, 0x0, "188628ae4b1d"}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x5, "40e513e1"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x0, 0x6}, @selector_unit={0x8, 0x24, 0x5, 0x6, 0x0, "ef5d1e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 18:44:53 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") close(0xffffffffffffffff) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) 18:44:53 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/143, 0x8f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/238, 0xee}, {0x0}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 623.847057][ T2808] usb 2-1: USB disconnect, device number 66 18:44:54 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") close(0xffffffffffffffff) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) [ 624.230374][T12900] usb 1-1: new high-speed USB device number 59 using dummy_hcd 18:44:54 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) 18:44:54 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/143, 0x8f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/238, 0xee}, {0x0}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 624.383873][ T2808] usb 2-1: new high-speed USB device number 67 using dummy_hcd 18:44:54 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) [ 624.486059][T12900] usb 1-1: Using ep0 maxpacket: 32 18:44:54 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = eventfd(0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r3, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20, 0x1}, [{}]}, 0x58) [ 624.675975][T12900] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 624.687119][T12900] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 624.698834][ T2808] usb 2-1: Using ep0 maxpacket: 8 18:44:54 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) [ 624.823976][ T2808] usb 2-1: New USB device found, idVendor=0c45, idProduct=6040, bcdDevice=93.68 [ 624.833345][ T2808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.870456][ T2808] usb 2-1: config 0 descriptor?? [ 624.924345][T12900] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 624.933714][T12900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.942359][T12900] usb 1-1: Product: syz [ 624.947215][T12900] usb 1-1: Manufacturer: syz [ 624.951933][T12900] usb 1-1: SerialNumber: syz [ 624.969232][ T2808] gspca_main: sonixj-2.14.0 probing 0c45:6040 [ 625.359183][T12900] usb 1-1: USB disconnect, device number 59 18:44:57 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe4, 0x97, 0x9d, 0x8, 0xc45, 0x6040, 0x9368, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6c, 0x94, 0x40}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0xac, &(0x7f0000001a40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000480), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 18:44:57 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/143, 0x8f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/238, 0xee}, {0x0}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:44:57 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = eventfd(0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r3, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x3e, 0x0, 0x218, 0x38, 0x3d0, 0xffff, 0x3, 0x20, 0x1, 0x0, 0x0, 0x7}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x17}], "", [[]]}, 0x158) 18:44:57 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) 18:44:57 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = eventfd(0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r3, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20, 0x1}, [{}]}, 0x58) 18:44:57 executing program 0: syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000001840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @output_terminal={0x9}, @processing_unit={0xd, 0x24, 0x7, 0x0, 0x0, 0x0, "188628ae4b1d"}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x5, "40e513e1"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x0, 0x6}, @selector_unit={0x8, 0x24, 0x5, 0x6, 0x0, "ef5d1e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 627.022471][ T17] usb 2-1: USB disconnect, device number 67 18:44:57 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) [ 627.386851][T12852] usb 1-1: new high-speed USB device number 60 using dummy_hcd 18:44:57 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) 18:44:57 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/143, 0x8f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/238, 0xee}, {0x0}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:44:57 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) [ 627.653382][ T17] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 627.703427][T12852] usb 1-1: Using ep0 maxpacket: 32 18:44:57 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) [ 627.823618][T12852] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 627.834728][T12852] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 627.893462][ T17] usb 2-1: Using ep0 maxpacket: 8 18:44:58 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = eventfd(0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r3, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x218, 0x38, 0x3d0, 0xffff, 0x3, 0x20, 0x1, 0x0, 0x0, 0x7}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x17}], "", [[]]}, 0x158) [ 628.007172][T12852] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 628.016653][T12852] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.024856][T12852] usb 1-1: Product: syz [ 628.029079][T12852] usb 1-1: Manufacturer: syz [ 628.033804][T12852] usb 1-1: SerialNumber: syz [ 628.041099][ T17] usb 2-1: New USB device found, idVendor=0c45, idProduct=6040, bcdDevice=93.68 [ 628.050483][ T17] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.088977][ T17] usb 2-1: config 0 descriptor?? [ 628.138212][ T17] gspca_main: sonixj-2.14.0 probing 0c45:6040 [ 628.531217][T12852] usb 1-1: USB disconnect, device number 60 18:45:00 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe4, 0x97, 0x9d, 0x8, 0xc45, 0x6040, 0x9368, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6c, 0x94, 0x40}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0xac, &(0x7f0000001a40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000480), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 18:45:00 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = eventfd(0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r2, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20, 0x1}, [{}]}, 0x58) 18:45:00 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) 18:45:00 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/143, 0x8f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/238, 0xee}, {0x0}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:45:00 executing program 0: syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000001840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @output_terminal={0x9}, @processing_unit={0xd, 0x24, 0x7, 0x0, 0x0, 0x0, "188628ae4b1d"}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x5, "40e513e1"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x0, 0x6}, @selector_unit={0x8, 0x24, 0x5, 0x6, 0x0, "ef5d1e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 18:45:00 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = eventfd(0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r3, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x218, 0x38, 0x3d0, 0xffff, 0x3, 0x20, 0x1, 0x0, 0x0, 0x7}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x17}], "", [[]]}, 0x158) [ 630.251112][ T17] usb 2-1: USB disconnect, device number 68 [ 630.615417][T12852] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 630.743556][ T17] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 630.873454][T12852] usb 1-1: Using ep0 maxpacket: 32 [ 630.983505][ T17] usb 2-1: Using ep0 maxpacket: 8 [ 630.993825][T12852] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 631.005289][T12852] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 18:45:01 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = eventfd(0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r2, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20, 0x1}, [{}]}, 0x58) [ 631.103977][ T17] usb 2-1: New USB device found, idVendor=0c45, idProduct=6040, bcdDevice=93.68 [ 631.113558][ T17] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.125898][ T17] usb 2-1: config 0 descriptor?? [ 631.169208][ T17] gspca_main: sonixj-2.14.0 probing 0c45:6040 [ 631.205400][T12852] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 18:45:01 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/143, 0x8f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/238, 0xee}, {0x0}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:45:01 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = eventfd(0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r3, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x218, 0x38, 0x3d0, 0xffff, 0x3, 0x20, 0x1, 0x0, 0x0, 0x7}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x17}], "", [[]]}, 0x158) 18:45:01 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) [ 631.215523][T12852] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.223845][T12852] usb 1-1: Product: syz [ 631.228669][T12852] usb 1-1: Manufacturer: syz [ 631.233574][T12852] usb 1-1: SerialNumber: syz [ 631.613645][ T17] gspca_sonixj: reg_w1 err -32 [ 631.618992][ T17] sonixj: probe of 2-1:0.0 failed with error -32 [ 631.831054][T12852] usb 1-1: USB disconnect, device number 61 18:45:02 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = eventfd(0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r2, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20, 0x1}, [{}]}, 0x58) 18:45:02 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = eventfd(0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r3, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x218, 0x38, 0x3d0, 0xffff, 0x3, 0x20, 0x1, 0x0, 0x0, 0x7}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x17}], "", [[]]}, 0x158) 18:45:03 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) 18:45:03 executing program 0: syz_usb_connect$uac1(0x0, 0xa9, &(0x7f0000001840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x97, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @output_terminal={0x9}, @processing_unit={0xd, 0x24, 0x7, 0x0, 0x0, 0x0, "188628ae4b1d"}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x5, "40e513e1"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x0, 0x6}, @selector_unit={0x5, 0x24, 0x5, 0x6, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 18:45:03 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe4, 0x97, 0x9d, 0x8, 0xc45, 0x6040, 0x9368, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6c, 0x94, 0x40}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0xac, &(0x7f0000001a40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x491, &(0x7f0000000480)={0x0, 0x0, 0x1, "11"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 18:45:03 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/143, 0x8f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/238, 0xee}, {0x0}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:45:03 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r1 = eventfd(0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20, 0x1}, [{}]}, 0x58) 18:45:03 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = eventfd(0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r3, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x3d0, 0xffff, 0x3, 0x20, 0x1, 0x0, 0x0, 0x7}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x17}], "", [[]]}, 0x158) [ 633.368085][ T2808] usb 2-1: USB disconnect, device number 69 18:45:03 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r1 = eventfd(0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20, 0x1}, [{}]}, 0x58) 18:45:03 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r1 = eventfd(0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20, 0x1}, [{}]}, 0x58) 18:45:03 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = eventfd(0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r3, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20, 0x1}, [{}]}, 0x58) [ 633.760362][T12900] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 633.940902][ T2808] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 634.072172][T12900] usb 1-1: Using ep0 maxpacket: 32 18:45:04 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/143, 0x8f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/238, 0xee}, {0x0}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x0, 0x11, 0x0, 0x0) [ 634.193587][T12900] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 634.204636][T12900] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 634.215950][ T2808] usb 2-1: Using ep0 maxpacket: 8 18:45:04 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) 18:45:04 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = eventfd(0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r3, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0xffff, 0x3, 0x20, 0x1, 0x0, 0x0, 0x7}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x17}], "", [[]]}, 0x158) [ 634.333846][ T2808] usb 2-1: New USB device found, idVendor=0c45, idProduct=6040, bcdDevice=93.68 [ 634.343516][ T2808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.379666][ T2808] usb 2-1: config 0 descriptor?? [ 634.389741][T12900] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 634.399297][T12900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.407616][T12900] usb 1-1: Product: syz [ 634.411857][T12900] usb 1-1: Manufacturer: syz [ 634.416629][T12900] usb 1-1: SerialNumber: syz [ 634.439694][ T2808] gspca_main: sonixj-2.14.0 probing 0c45:6040 18:45:04 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = eventfd(0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r3, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20, 0x1}, [{}]}, 0x58) [ 634.892422][T12900] usb 1-1: USB disconnect, device number 62 18:45:05 executing program 0: syz_usb_connect$uac1(0x0, 0xa9, &(0x7f0000001840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x97, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @output_terminal={0x9}, @processing_unit={0xd, 0x24, 0x7, 0x0, 0x0, 0x0, "188628ae4b1d"}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x5, "40e513e1"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x0, 0x6}, @selector_unit={0x5, 0x24, 0x5, 0x6, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 635.663454][T12852] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 635.723475][ T2808] gspca_sonixj: reg_w1 err -71 [ 635.728685][ T2808] sonixj: probe of 2-1:0.0 failed with error -71 [ 635.738521][ T2808] usb 2-1: USB disconnect, device number 70 [ 635.903314][T12852] usb 1-1: Using ep0 maxpacket: 32 [ 636.023526][T12852] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 636.034852][T12852] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 18:45:06 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe4, 0x97, 0x9d, 0x8, 0xc45, 0x6040, 0x9368, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6c, 0x94, 0x40}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0xac, &(0x7f0000001a40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x491, &(0x7f0000000480)={0x0, 0x0, 0x1, "11"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 636.203541][T12852] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 636.212730][T12852] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.221083][T12852] usb 1-1: Product: syz [ 636.225417][T12852] usb 1-1: Manufacturer: syz [ 636.230114][T12852] usb 1-1: SerialNumber: syz 18:45:06 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/143, 0x8f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/238, 0xee}, {0x0}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x0, 0x11, 0x0, 0x0) 18:45:06 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) 18:45:06 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = eventfd(0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r3, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x3, 0x20, 0x1, 0x0, 0x0, 0x7}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x17}], "", [[]]}, 0x158) 18:45:06 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = eventfd(0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r3, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20, 0x1}, [{}]}, 0x58) [ 636.663920][ T17] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 636.734840][T12852] usb 1-1: USB disconnect, device number 63 [ 636.923435][ T17] usb 2-1: Using ep0 maxpacket: 8 [ 637.043549][ T17] usb 2-1: New USB device found, idVendor=0c45, idProduct=6040, bcdDevice=93.68 [ 637.052773][ T17] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.081851][ T17] usb 2-1: config 0 descriptor?? 18:45:07 executing program 0: syz_usb_connect$uac1(0x0, 0xa9, &(0x7f0000001840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x97, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @output_terminal={0x9}, @processing_unit={0xd, 0x24, 0x7, 0x0, 0x0, 0x0, "188628ae4b1d"}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x5, "40e513e1"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x0, 0x6}, @selector_unit={0x5, 0x24, 0x5, 0x6, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 637.131312][ T17] gspca_main: sonixj-2.14.0 probing 0c45:6040 18:45:07 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/143, 0x8f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/238, 0xee}, {0x0}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x0, 0x11, 0x0, 0x0) 18:45:07 executing program 2: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = eventfd(0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r3, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20, 0x1}, [{}]}, 0x58) 18:45:07 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = eventfd(0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r3, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20, 0x1, 0x0, 0x0, 0x7}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x17}], "", [[]]}, 0x158) 18:45:07 executing program 4: bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(0xffffffffffffffff, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)={'syz0'}, 0x4) 18:45:07 executing program 4: bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(0xffffffffffffffff, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)={'syz0'}, 0x4) [ 637.641166][T12852] usb 1-1: new high-speed USB device number 64 using dummy_hcd 18:45:07 executing program 4: bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(0xffffffffffffffff, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)={'syz0'}, 0x4) [ 637.884311][T12852] usb 1-1: Using ep0 maxpacket: 32 [ 638.004179][T12852] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 638.016144][T12852] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 638.183895][T12852] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 638.193697][T12852] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.201834][T12852] usb 1-1: Product: syz [ 638.206192][T12852] usb 1-1: Manufacturer: syz [ 638.210928][T12852] usb 1-1: SerialNumber: syz [ 638.463548][ T17] gspca_sonixj: reg_w1 err -71 [ 638.468570][ T17] sonixj: probe of 2-1:0.0 failed with error -71 [ 638.478118][ T17] usb 2-1: USB disconnect, device number 71 [ 638.607919][T12852] usb 1-1: USB disconnect, device number 64 18:45:09 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe4, 0x97, 0x9d, 0x8, 0xc45, 0x6040, 0x9368, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6c, 0x94, 0x40}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0xac, &(0x7f0000001a40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x491, &(0x7f0000000480)={0x0, 0x0, 0x1, "11"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 18:45:09 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) 18:45:09 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = eventfd(0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r3, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x17}], "", [[]]}, 0x158) 18:45:09 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/143, 0x8f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/238, 0xee}, {0x0}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0), 0x0, 0x11, 0x0, 0x0) 18:45:09 executing program 2: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = eventfd(0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r3, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20, 0x1}, [{}]}, 0x58) 18:45:09 executing program 0: syz_usb_connect$uac1(0x0, 0xab, &(0x7f0000001840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x99, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @output_terminal={0x9}, @processing_unit={0xd, 0x24, 0x7, 0x0, 0x0, 0x0, "188628ae4b1d"}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x5, "40e513e1"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x0, 0x6}, @selector_unit={0x7, 0x24, 0x5, 0x6, 0x2, "ef5d"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 18:45:09 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) [ 639.405963][T12852] usb 2-1: new high-speed USB device number 72 using dummy_hcd 18:45:09 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) [ 639.543590][ T2808] usb 1-1: new high-speed USB device number 65 using dummy_hcd 18:45:09 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) [ 639.673336][T12852] usb 2-1: Using ep0 maxpacket: 8 [ 639.783426][ T2808] usb 1-1: Using ep0 maxpacket: 32 [ 639.794189][T12852] usb 2-1: New USB device found, idVendor=0c45, idProduct=6040, bcdDevice=93.68 [ 639.803612][T12852] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 18:45:09 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/143, 0x8f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/238, 0xee}, {0x0}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0), 0x0, 0x11, 0x0, 0x0) 18:45:09 executing program 2: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = eventfd(0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r3, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20, 0x1}, [{}]}, 0x58) [ 639.857251][T12852] usb 2-1: config 0 descriptor?? 18:45:10 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = eventfd(0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r3, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x17}], "", [[]]}, 0x158) [ 639.900075][T12852] gspca_main: sonixj-2.14.0 probing 0c45:6040 [ 639.906859][ T2808] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 639.917965][ T2808] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 640.210854][ T2808] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 640.220228][ T2808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.228409][ T2808] usb 1-1: Product: syz [ 640.232624][ T2808] usb 1-1: Manufacturer: syz [ 640.237341][ T2808] usb 1-1: SerialNumber: syz [ 640.656172][ T2808] usb 1-1: USB disconnect, device number 65 [ 641.233537][T12852] gspca_sonixj: reg_w1 err -71 [ 641.238517][T12852] sonixj: probe of 2-1:0.0 failed with error -71 [ 641.248324][T12852] usb 2-1: USB disconnect, device number 72 18:45:11 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe4, 0x97, 0x9d, 0x8, 0xc45, 0x6040, 0x9368, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6c, 0x94, 0x40}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0xac, &(0x7f0000001a40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x491, &(0x7f0000000480)={0x0, 0x0, 0x1, "11"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 18:45:11 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) 18:45:11 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r1 = eventfd(0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20, 0x1}, [{}]}, 0x58) 18:45:11 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = eventfd(0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r3, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17}], "", [[]]}, 0x158) 18:45:11 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/143, 0x8f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/238, 0xee}, {0x0}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0), 0x0, 0x11, 0x0, 0x0) 18:45:11 executing program 0: syz_usb_connect$uac1(0x0, 0xab, &(0x7f0000001840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x99, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @output_terminal={0x9}, @processing_unit={0xd, 0x24, 0x7, 0x0, 0x0, 0x0, "188628ae4b1d"}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x5, "40e513e1"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x0, 0x6}, @selector_unit={0x7, 0x24, 0x5, 0x6, 0x2, "ef5d"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 18:45:11 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r1 = eventfd(0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20, 0x1}, [{}]}, 0x58) 18:45:12 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r1 = eventfd(0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20, 0x1}, [{}]}, 0x58) 18:45:12 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = eventfd(0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r3, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20, 0x1}, [{}]}, 0x58) [ 642.093277][T12852] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 642.104479][ T2808] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 642.333283][T12852] usb 2-1: Using ep0 maxpacket: 8 [ 642.403282][ T2808] usb 1-1: Using ep0 maxpacket: 32 [ 642.453534][T12852] usb 2-1: New USB device found, idVendor=0c45, idProduct=6040, bcdDevice=93.68 [ 642.462880][T12852] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.474599][T12852] usb 2-1: config 0 descriptor?? [ 642.519256][T12852] gspca_main: sonixj-2.14.0 probing 0c45:6040 [ 642.534161][ T2808] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 642.545303][ T2808] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 18:45:12 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/143, 0x8f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/238, 0xee}, {0x0}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b0", 0x27, 0x11, 0x0, 0x0) 18:45:12 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = eventfd(0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r3, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "", [[]]}, 0x158) 18:45:12 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) [ 642.765849][ T2808] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 642.775179][ T2808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.783439][ T2808] usb 1-1: Product: syz [ 642.787658][ T2808] usb 1-1: Manufacturer: syz [ 642.792292][ T2808] usb 1-1: SerialNumber: syz [ 643.200944][ T2808] usb 1-1: USB disconnect, device number 66 [ 643.883525][T12852] gspca_sonixj: reg_w1 err -71 [ 643.888525][T12852] sonixj: probe of 2-1:0.0 failed with error -71 [ 643.897487][T12852] usb 2-1: USB disconnect, device number 73 18:45:14 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe4, 0x97, 0x9d, 0x8, 0xc45, 0x6040, 0x9368, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6c, 0x94, 0x40}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0xac, &(0x7f0000001a40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x491, &(0x7f0000000480)={0x0, 0x0, 0x1, "11"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 18:45:14 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = eventfd(0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r3, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20, 0x1}, [{}]}, 0x58) 18:45:14 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = eventfd(0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r3, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 18:45:14 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/143, 0x8f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/238, 0xee}, {0x0}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b0", 0x27, 0x11, 0x0, 0x0) 18:45:14 executing program 0: syz_usb_connect$uac1(0x0, 0xab, &(0x7f0000001840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x99, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @output_terminal={0x9}, @processing_unit={0xd, 0x24, 0x7, 0x0, 0x0, 0x0, "188628ae4b1d"}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x5, "40e513e1"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x0, 0x6}, @selector_unit={0x7, 0x24, 0x5, 0x6, 0x2, "ef5d"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 18:45:14 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) [ 644.774798][ T2808] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 644.794365][T12852] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 645.013387][ T2808] usb 1-1: Using ep0 maxpacket: 32 [ 645.033281][T12852] usb 2-1: Using ep0 maxpacket: 8 [ 645.133762][ T2808] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 645.145216][ T2808] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 645.163684][T12852] usb 2-1: New USB device found, idVendor=0c45, idProduct=6040, bcdDevice=93.68 [ 645.172907][T12852] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.182952][T12852] usb 2-1: config 0 descriptor?? 18:45:15 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/143, 0x8f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/238, 0xee}, {0x0}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b0", 0x27, 0x11, 0x0, 0x0) [ 645.230581][T12852] gspca_main: sonixj-2.14.0 probing 0c45:6040 18:45:15 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='c\xa6F\x04\xe0\xd9\xb3K\xa2\xc7\xa4&,\xc3\x92x\xa9\xbdp}.st\a\x00\x12', 0x275a, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x300000c, 0x13, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x2011, r2, 0x0) 18:45:15 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = eventfd(0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r3, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20, 0x1}, [{}]}, 0x58) [ 645.323395][ T2808] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 645.332621][ T2808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.340824][ T2808] usb 1-1: Product: syz [ 645.345283][ T2808] usb 1-1: Manufacturer: syz [ 645.349959][ T2808] usb 1-1: SerialNumber: syz 18:45:15 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) 18:45:15 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) read(r0, &(0x7f0000000040)=""/191, 0xbf) r3 = socket(0x11, 0x800000003, 0x0) r4 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x4, 0x6}, 0x10}, 0x70) bind(r3, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffe14) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 645.821822][ T2808] usb 1-1: USB disconnect, device number 67 18:45:16 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = eventfd(0x0) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r2, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20, 0x1}, [{}]}, 0x58) [ 646.523537][T12852] gspca_sonixj: reg_w1 err -71 [ 646.528733][T12852] sonixj: probe of 2-1:0.0 failed with error -71 [ 646.540973][T12852] usb 2-1: USB disconnect, device number 74 18:45:17 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe4, 0x97, 0x9d, 0x8, 0xc45, 0x6040, 0x9368, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6c, 0x94, 0x40}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0xac, &(0x7f0000001a40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x491, &(0x7f0000000480)={0x0, 0x0, 0x1, "11"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 18:45:17 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/143, 0x8f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/238, 0xee}, {0x0}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab", 0x3a, 0x11, 0x0, 0x0) 18:45:17 executing program 0: syz_usb_connect$uac1(0x0, 0xa3, &(0x7f0000001840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x91, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @output_terminal={0x9}, @processing_unit={0xd, 0x24, 0x7, 0x0, 0x0, 0x0, "188628ae4b1d"}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x5, "40e513e1"}, @selector_unit={0x8, 0x24, 0x5, 0x6, 0x2, "ef5d1e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 18:45:17 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) 18:45:17 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) read(r0, &(0x7f0000000040)=""/191, 0xbf) r3 = socket(0x11, 0x800000003, 0x0) r4 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x4, 0x6}, 0x10}, 0x70) bind(r3, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffe14) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 18:45:17 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = eventfd(0x0) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r2, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20, 0x1}, [{}]}, 0x58) [ 647.323285][ T2808] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 647.373295][T12852] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 647.573333][ T2808] usb 1-1: Using ep0 maxpacket: 32 [ 647.613287][T12852] usb 2-1: Using ep0 maxpacket: 8 [ 647.703607][ T2808] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 647.714845][ T2808] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 647.753764][T12852] usb 2-1: New USB device found, idVendor=0c45, idProduct=6040, bcdDevice=93.68 [ 647.764372][T12852] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.776037][T12852] usb 2-1: config 0 descriptor?? [ 647.818126][T12852] gspca_main: sonixj-2.14.0 probing 0c45:6040 18:45:17 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4), 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) 18:45:18 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/143, 0x8f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/238, 0xee}, {0x0}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab", 0x3a, 0x11, 0x0, 0x0) [ 647.926819][ T2808] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 647.936073][ T2808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.944359][ T2808] usb 1-1: Product: syz [ 647.948629][ T2808] usb 1-1: Manufacturer: syz [ 647.953360][ T2808] usb 1-1: SerialNumber: syz 18:45:18 executing program 5: 18:45:18 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = eventfd(0x0) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r2, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20, 0x1}, [{}]}, 0x58) 18:45:18 executing program 5: 18:45:18 executing program 5: [ 648.363923][ T2808] usb 1-1: USB disconnect, device number 68 [ 649.143522][T12852] gspca_sonixj: reg_w1 err -71 [ 649.148682][T12852] sonixj: probe of 2-1:0.0 failed with error -71 [ 649.157998][T12852] usb 2-1: USB disconnect, device number 75 18:45:19 executing program 0: syz_usb_connect$uac1(0x0, 0xa3, &(0x7f0000001840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x91, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @output_terminal={0x9}, @processing_unit={0xd, 0x24, 0x7, 0x0, 0x0, 0x0, "188628ae4b1d"}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x5, "40e513e1"}, @selector_unit={0x8, 0x24, 0x5, 0x6, 0x2, "ef5d1e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 18:45:19 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') 18:45:19 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4), 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) 18:45:19 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/143, 0x8f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/238, 0xee}, {0x0}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab", 0x3a, 0x11, 0x0, 0x0) 18:45:19 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, 0x0, 0x0) r3 = eventfd(0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r3, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20, 0x1}, [{}]}, 0x58) 18:45:19 executing program 1: socket(0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 18:45:19 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$setopts(0x4206, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) rmdir(0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x3) sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x840000000002, 0x3, 0x200000000000ff) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000200)={0x2, {{0xa, 0x0, 0x0, @empty}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) r4 = socket$inet6(0xa, 0x3, 0x84) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffedd, 0xffd8) socket$inet6_sctp(0xa, 0x10000000005, 0x84) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) recvfrom(0xffffffffffffffff, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) [ 649.977043][ T2808] usb 1-1: new high-speed USB device number 69 using dummy_hcd 18:45:20 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = shmat(0x0, &(0x7f0000fee000/0x1000)=nil, 0x6ffd) shmdt(r3) socket(0x0, 0x0, 0x0) [ 650.223546][ T2808] usb 1-1: Using ep0 maxpacket: 32 [ 650.344020][ T2808] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 650.355475][ T2808] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 18:45:20 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, 0x0, 0x0) r3 = eventfd(0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r3, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20, 0x1}, [{}]}, 0x58) 18:45:20 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4), 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) [ 650.524073][ T2808] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 650.533528][ T2808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.541624][ T2808] usb 1-1: Product: syz [ 650.546046][ T2808] usb 1-1: Manufacturer: syz [ 650.550755][ T2808] usb 1-1: SerialNumber: syz 18:45:20 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/143, 0x8f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/238, 0xee}, {0x0}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b", 0x44, 0x11, 0x0, 0x0) 18:45:21 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x800000000000937e, &(0x7f0000000000)="01000000000000001801000005008000a0000000000000002f") [ 651.051729][ T2808] usb 1-1: USB disconnect, device number 69 18:45:21 executing program 0: syz_usb_connect$uac1(0x0, 0xa3, &(0x7f0000001840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x91, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @output_terminal={0x9}, @processing_unit={0xd, 0x24, 0x7, 0x0, 0x0, 0x0, "188628ae4b1d"}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x5, "40e513e1"}, @selector_unit={0x8, 0x24, 0x5, 0x6, 0x2, "ef5d1e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 18:45:21 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) select(0x40, &(0x7f00000002c0), &(0x7f0000000300)={0x1f}, 0x0, 0x0) 18:45:21 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$packet(0x11, 0x2, 0x300) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x80000000) 18:45:21 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, 0x0, 0x0) r3 = eventfd(0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r3, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20, 0x1}, [{}]}, 0x58) 18:45:21 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f00000001c0)="7f3f093d2cbb408df9f59e532a410fb37c2f613358bd603f1f2787799693f83772566f78ab66e9871f397e3e3259249c5cdf4dfbc26b0da9df7d94bc808ba8429cd87e9868b5c2fa9f889bf017c5eb378d43f8d979a221d9b0fa02796fb44f8f07ef2847704366a1508135e3082d1dd429879f90ec8b4de60046dc53678b84bec45bf39f0435d2489fd5b4a3f48d008a79b2738e6f92d1a455c389fbc7adc9dea6313f31d154afa6bbcc3ff99f94eafc6c587d422ccdfab3537bf33ed9762926b016d733dd5c5fc778aeb638810d8262c65966a5f0076636d8b5c96c882168d322fee3a069bdf5394a61cbcbd8a8646891db45cda23d270828cd7eca86bb72d0189a48eb8d7b283ba185b6a1f547f5652c07a4ddc01b249589e04d310faca3fdd1b03cba184aa396135fe57941e34b35b8a754b90405311f97cde897bc726e451604459935193495e897f5b3caef228a7442b14689fcc95e7cf8f79a228ffb43f221e9344ee11a002e17cdbc4261b046401dd73d1f081d6e063071c1af1040b7be7fd16e7c998093ae6221310d3465661eb19134a98c113a1a514f4df365ac66b66e9ea7af4d80b53220e24142dbee49572881c9e236be1e585961cb5563b4498eb78cdf0dc231d8d74afb12dd38ab59b3ce622736f9e48dc990437a04f520ad3a82bcbbbf1e77ce068f2ed0adb6b14f9d8ddf1ffef692c7ed9dd399daca2d3feb226463e1fa7ad31ad8d01c353caddfee8c236b65f165d9a8139c256d1b410ab3ac1de93204a961d4ff89396e46196b497c1fd0c44627920ffb928df2b8ff47fb319114cbec942f1c806f1d3eaf8ec305727a1c9230668e6ea2ed4bc56072a2c97d7fde01c989c2531a4b22db32437873535541f2af213927b591634f3b99229daf9683a3088f3ca8856fa31ad3ac9d970c7b93da8a436011431ea1bdb576023e9c4af9e96c87b1c3b6426712de9d3aaaae48174ad12630af359a52f5926af638806ff10d48d70ea08e3d69f87337ded12d48786b5aa8311fb49d639d62f76fb4a66e665c084284637e33380705809a60ad102b4e90c3cd918f8af57e77945780dcbfb073ad9d4e942c97732ec4c6999868649031dbadce4f0d17a9935f625ef5c6c000c7c5b8de875f4c1e33f07d07631a520ef1993a82169d6b125bd61a3b6a2c1c888db97f72f4dac76a365721902340fe3451f3f5bdfd9b4bf6d9b080a65d4e5e0798bb6b08132444e393bac69eaa6e5b3ff9265f13a3a14b5bce7f301528b00e6d8b954635980d2fd2479b7151caf1699a88d5272609901c2b168819c3a1dca5b1ad0e1f2bf707f6e891e040ea44f0e3d3f5b2ca03a9bb5165f60e228f5c93e396f965d155487cf1dcb3a5d9ab130fbd8ff92ab7de3f124fec7a392bf65ea29cc412ebee579340e6ab9702c8152146da18f36e425dd6b2cb279db46c3609fe55c079ce45f6ee74d1cdd16dc0ec8001a6a2e632ccf6a8f5f8ecd6e20d54512447715262b485184a1ff5e23eb8162d58edf6faac53826ecbda5014539eb78a1fd6112d68684111446e19c80c26b7c9494c1b7f20816c0fc874a13463970cb287a3df2eccc60f95cdb78132878f6f3281b9c4f9fe94141cb04ab1fed5c4794bc7578d44a38733122cdbbaa2e8eb79914780d2b4b32855302b9b218b46e36d825c0535861c0544a779ae5adba44c1f361cf937e1149c8dcee552bb4903820a68c4cfe49d7f741e1ef5de2d973a8796e3b1d5d5461a9ef90bd9e041184cc8765baa92619889675f63aeb56ac027d6c202d936764e554bff9ab2e2a3600e0507b16b3fc3847b1f0613181ade063aef16e551159f91a0fff52b88c6c75f3c63f96cf0f3b3ebbe406c84e55ff05f0ec1df82999db2ccfb93d33ab6aebd57d9ae6dbc9bbf4afe3d31b600a203e15694eefe659b4b24a1f136f9d19c3aec915c64a69388f9c0c81d6e1699a63ba265fbfd2f741718d5bbdc9b161dad764be094e58535f2828189b2dc1c7468ce7da17cdd27949dd649267f259dd07e3e3691bc2355a6aed00e8c34261c30f896d179add606ae809057287bd902dff26f880b5b4baa6d942392f34d1cafb212c8e6750fa22c78c304c80bfc9217bf6950adacc74faf46f21f616b8c5037063aac27dd899e9367c5441b36c0af71f07fdaccf3d9eb779fa78ae3846d814306909b7484a1f949f8943e35764f7fc9c1647d10ed29ca4baac9e80f0463f548721d647a6c38e77708297feddea39c7f7fd4d1d92a8a041f811e5daf9eba522714206145c01feecfb397b4b3b8419a0769cccaa196c2caf7fcba5bc4f3e7e7246ea2690b595149e4a73a2be0f29413160b9193118473504e53bc896b376f62b3613da2598999aa12dd22e87d2edc354be74eb9e2d13f3467476aaf04b28ec136e13e980742b773ec9ff2c94f2e0ea135e5a499cb3510b9898d5260bf23ef8b6fcf9773a10f9bcb7d2b26581d908861385ffcc3c7bb3a89edf4d051486c922fa5449a24f2959741e0f7c6c5d41594e28063a15c376dc0f620ef6dfacb373c0456ea9edab5713ff8219398df6cf721fb4f28594ce47806ab610ec779dbb4ea6d9dbe9f92154b74bfaefd7f9f2e29a35c0021535e7dc735af43219b8a17764502002e343f9200004d07f8b895ab05eab9ecdaf6c4c253c527a03bf35b392ed847ae2083abd0dc85d9b048125aed64f3dd12ac3569c947bc4ab5d59aed169e330198fc6b82f31f4653d2e8f06e5566ca429c690ffaf932370767ae9d6ce7ba5f9236eeeb2f0f77bf3e9902928f51f5e88892d31c2b2963a65d077598b3916d9d243adc2046ffc6333f2ea0a5271b9bbe05a81d46e25436f4210070ada8e2d06da4d6a12e7a654399621d8bcb1978c8912f002483d1b5afb8ede78ec7d451083bb11279f972d5e444c6a4a17fc42347113fe4495a27e611bce966b5b72bd3b914d0ae61f13fc2f41a332425129084d847022d070f4c3edc9a2406a01de00abb79db633bcd7a3b0665c8170866b6c1d726b7f3800801326ceb78ecaf839b1919862dc07d756b48634c0f1f357a29d188ada209139e9498f9a6d1837931215f515a3b4f2f11b0d6022f3453df5487cbb93bb3806dce44ac7d2465d5f145a00c10b9f257bdcb54ba192107baff625025295567fb02b88cc6d241b73a535e578238dc0df7343c27847bad8b0442a079a52680b430cc7032cb73168193ea2a105e8bfe7266e6bfa06cede107ff22592bd6be05b98c245a114ca57700a9883acfcb0789c8113fbc8a136d23a48cda5817035fa97196b612c5a8e59ecd54f6023fe813d2810f7bbcfb3681dc3a158c0ed5bb5c1b4d30ab25b8fbfc7e0828f4775bfc1607ed47c72b01e1d61d7b1bcc65f1f59e9dfa3f049705e8fcfd86b8840331eefddc7da2925abe7272650d0b858fef933a15d65519ca5ae34f0eae1de6af56ddbcf54a61a9a5b3df0cb955cf0218604b02ad5b5ca38e8f770cb17256ef6a6cfd11bc3be1b5ac6045accb2c5e8d86f1a5f6caa5cc4d818da88041c243ae5a9c7efe7103887fad89684babf2ff4dae4cbc7516eeba2c9e056f41c662609f2fb718d92718b09b4e635111c6e96983597f7728cd9adc76e0b9d2a4f548b69c8f41e535513ba778546a880ce310033c178bc4b48f1b9b2d6ae6eebaca2a1a258de984a084e44db6fd128bdb25cc6ef91d1ddba7187b9e555e11322ba2ddaac334f0a52900f1ef5f258afb945f9b93f30eef248e460711ca99e1b09ac4050ae2a1b7fa304faf7338776cea2dc2a22737492679ff3dc0c6fcb940cf2e5ccbc3c3b063a9a80bc33746598c4ffe8332d43077342e25bf225170f5e38f7930bff5ede3231bc5de10962a1eca95ddd5c97abca62b4424c9b0bbeab6dfcc3125b7dbe1299f0b2c248a2342b9caf0f48f60f7bdd72c242ca07a16261346830f1d2f6b316f0d9d16b0661ecbdc74089e761942b526fb71538ca8867ee0fbe076769cdaaf246590301a2557a7ca9bd2f4acaf4818ecb46a3a9d4d3e5f041a3dcac31e64629499c4a1c18750d855ef619b45cf6cbb9e330f0554b4b0bde8c986a25db8b6980a7ca8d9197f615df6cafe1333a1ff04ee0bafabe28d164971723072950824cec3daf6ad565746ce54ac4ed33f50df62f9a517a3a1e56686fd1f5289fb1698297731394c814c3c83f8f0c2ac697158d1986cbfc5f53c6e5cff5589cd07ab274b8c734b361206ea7d72d7baadf54c8c5bded8c1b9c01d152d3006c693638d4d7dee942920a16b4216a82952313e313d6bd1bdda210279a3ed9d9c1affa3ad47a614b5e819770124bbd9f2523c64ed328491ba104b720d09ac5a5480b911cc09ac22240d2e8f6d5d32de25a8aca2d42960a1ca5c5ad5e772d934721b14b6ef5ea2b46bb3db3d25ccebe96d66e9bcc36c12af500fda8f7bb3efddc53127fea66e9c72b60c371e054fff203ada4d8bc73b0f1881a47673f5f54216c96ef45ce93d8f45d34000e789056ab4f97e148399453b5a888f86c9f285b1b4426619fe59766d4c7e459b87ef9c649989fb77556910b64752d952c81fa19a942b1c648913358dc23e95c0b6e49c94e7faeae8699b9f363ab001913d24d1835e22717eb2ff2e2e13d809116834568d9a1a3489358bc597a4679466e16768fc577858aefc01f4eece7a65e6e43ac0fd79ec9b9d3277debeda42daa83cc9711a9f696c83fc5ada15a7ad80ee5c08372776f03156828b88afd86648d6de4b581412ab57cd647eb65300acf681e4f9292ba42567ab74aead35cfd9975356544bdf316c7d841828f4db1f4c67bf41ae479063e564a741405b9598e30a98dfa4832ffa01b151e965766075a8b2bf9cca9dc0dde9bd1aa4a4022a44af0ede4e25e90a85f1c44133e7fbd9d51e29500d1acadba016deace86b1414a05c839a4f37ad852d1f2c582f0c021b32f02bf3d2297c9864933e4f068917239871ea774dcc2e0d06186c7ff18d696211315d58e984f2262facf6b0cf926128d32a7cabf7cfbb54aceda42fa0ceb53cc9deb415b31dea61ec1925c12055d38d5a8d3f5b235396bf5203baa24859c26a322678edaf2646e3f15a1661cf88b6b9ed6966400c7136672e3d8395e3d00977440287e9422062003d64dd96fea1ea8710dbcdf9fa88e6c6c8be240a59bc54c1ebb7f20e557a0f25d284a9e2714aac85962f98d9cd4a5aa2e4e49f75744bec7dbaa5119a063dd76255a2ae532612c6172ad20388a60ea4d133f9fd740a0247b795f78b4c041a11d278ebda8004a0f9aa2ae4f9b8ccc109a8a0d23edc53570886cbad93a19f9f37cebf086cb81f6b1c1b9dd7679ee8c86c9361d3879b3944185df7d972d1015337e206852cf01936c9c3eaa0b7274b6f35a66996c5f50a45ffaea619c5039a933454dda764fa99b185fd8ea2317c3554b77f8c097eaed555e295ccf04df640bfe87eba3ceb233ee790fd1a34b7b61180a9a40663d8c961feb7c992f77acf7562fed18262c6b920a968aeded9696851ab1db9799613da98f390b80275c1b234bb8560b3645b5681377b2f04c5602ed7c794af8e3f08a53d4b5f5433171ef4e20572d193153b2201fcfbc5e4027cefe55e51e90ead7012d2dd65c6c42153e781d03a48f79aa57222b73816902c4be2a04ffa433ff66ff2a9f97c19f791a43b6714516d8e04797f1caeeda06ad546734523cf31cf705a551e96cb92c34f97036985884a7d1eed2b403b6e5d0d05b7c0f6ea5ebcd4cac660d715109ee213f1c541164ad6bc4743ae611e59a00a2ab4153b471862730a0094079bcc", 0x1000) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') lseek(r1, 0x0, 0x2) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000000)=""/249) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r2 = add_key$keyring(&(0x7f0000001240)='\xe5\x15W\x05\xe0\xec+\xda', &(0x7f0000001280)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) request_key(0x0, 0x0, &(0x7f0000000280)='em1vmnet0\x00', r2) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0, r2) r3 = geteuid() getgroups(0x3, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000740)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\a\xd2\x8f(.\xf6\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e\xab\x8d\xed\xa6\\\x1c\xc3\x97\x94\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\x15v$\xc5\xbc\x11N\t\x9ej5)\x00\x00\x009\x8c4\xc4\x88C\xa2B\x8b\x81\v\xea\t\xf0\x8fw\a\f\x15\xe2\xd0q\xbb\t\xbf\x85\x98~\v\xd8D\xab9(\xf6.\x15\xcd2-\xf2\xc4\xd8\x00a\xd5\xd9\xb5Z\xd7\xb4\xac\x1d_+k\xd6\x8ag\xdceHE\xd5\x1c\x8a\xbd#\xcc\x82\xc2\xc2(\xb6\xe1\x99p\x9b\xa3D\xd2\x91\x96\xef\x05\fv\x16\x14\xcc\xea\x9d\x11w\x1e\xb5VG\x9ad\x9a`=^h\x8c8\xc9\"\x1eO\xb5vk\xc9\v\x17\x95\xf7\x19\x99\x99\x92\xc3\xc0\x8a\x18\xc7\"g\xd7B\x8f\x85\x18\xf3\x02\xa7\xb6\x83\x92\xefY\xef\x85\x92\x10E\x18\xbc\xacy\xd6\xa7Wh\xcd\xd0\xfa\xcc\x01\xeb\xdf\xad\xfd\xb0\xee\xfb\xc2(\x8cj\xd0uj{4\xb2\xe1p\x88u6\x9a;\xaa\x9f+J\x9e\xe3\xcc\xc7O\xad\x84\x8c;\x92~,\x15\xb2\x97\f~\xa0W\x16\x8b\a\x88\xaa\xe4C\xaf\x90\xdf\x7f\xe51\x00/n\xb5f\x1a\x8c+\xea<\xe3N@\x9e\xec\xbe{\x90x\xc6\xd7\xeeI\x1d\xcbY\xe1\x01\xd2d\xae\xd1(>\xa3\xa9\x93\x16\xc6G\x94|\x00\x00\x00\x00\x00\x00\x00\x00\x91\x00+/pF\xfa]\xc4\xb3\xfc~\x13\xc3\x8aV\xa5\n\xe9H\xad\xf5\xa7{\x90\b\x9bb\xb8gY\xdb', 0x2761, 0x0) write$cgroup_pid(r5, &(0x7f0000000080), 0xfffffe38) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x660c, 0x0) getresgid(&(0x7f0000000700), &(0x7f0000001d00), &(0x7f0000001d40)=0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x8801) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) ioctl$sock_inet_udp_SIOCOUTQ(r7, 0x5411, &(0x7f00000011c0)) r8 = getegid() setgroups(0x4, &(0x7f0000000140)=[r4, r6, r8, 0x0]) keyctl$chown(0x4, r2, r3, r8) 18:45:21 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) 18:45:21 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/143, 0x8f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/238, 0xee}, {0x0}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b", 0x44, 0x11, 0x0, 0x0) 18:45:21 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) select(0x40, &(0x7f00000002c0), &(0x7f0000000300)={0x1f}, 0x0, 0x0) [ 651.803242][T12852] usb 1-1: new high-speed USB device number 70 using dummy_hcd 18:45:21 executing program 1: keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'\x00\x00\xf86K\xff\x00', 'ecryptfs', 0x20, 'user:', 'new '}, 0x0, 0xfffffffffffffffd) 18:45:22 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind(r0, &(0x7f0000000580)=@in={0x2, 0x4e20}, 0x70) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000140)=0x6, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) recvmmsg(r0, &(0x7f00000065c0), 0x40000e5, 0x0, 0x0) [ 652.053178][T12852] usb 1-1: Using ep0 maxpacket: 32 [ 652.173584][T12852] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 652.184586][T12852] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 652.363591][T12852] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 652.372745][T12852] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.380958][T12852] usb 1-1: Product: syz [ 652.385286][T12852] usb 1-1: Manufacturer: syz [ 652.389933][T12852] usb 1-1: SerialNumber: syz 18:45:22 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="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", 0x128}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:45:22 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = eventfd(0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r2, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20, 0x1}, [{}]}, 0x58) [ 652.805524][T12852] usb 1-1: USB disconnect, device number 70 18:45:23 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/143, 0x8f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/238, 0xee}, {0x0}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b", 0x44, 0x11, 0x0, 0x0) 18:45:23 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) 18:45:23 executing program 0: syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000001840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @output_terminal={0x9}, @processing_unit={0xd, 0x24, 0x7, 0x0, 0x0, 0x0, "188628ae4b1d"}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x5, "40e513e1"}, @output_terminal={0x9}, @selector_unit={0x8, 0x24, 0x5, 0x6, 0x2, "ef5d1e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 18:45:23 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 18:45:23 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = eventfd(0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r2, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20, 0x1}, [{}]}, 0x58) [ 653.523997][ T2808] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 653.773220][ T2808] usb 1-1: Using ep0 maxpacket: 32 [ 653.893636][ T2808] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 653.904654][ T2808] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 18:45:24 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) 18:45:24 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/143, 0x8f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/238, 0xee}, {0x0}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf74", 0x49, 0x11, 0x0, 0x0) [ 654.073626][ T2808] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 654.082998][ T2808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.091180][ T2808] usb 1-1: Product: syz [ 654.095467][ T2808] usb 1-1: Manufacturer: syz [ 654.100116][ T2808] usb 1-1: SerialNumber: syz 18:45:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") sendmmsg$inet(r0, &(0x7f0000005b40)=[{{&(0x7f00000004c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x94, 0x4, '8+'}]}}}], 0x18}}], 0x1, 0x0) 18:45:24 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = eventfd(0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r2, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20, 0x1}, [{}]}, 0x58) 18:45:24 executing program 1: syz_open_dev$usbmon(&(0x7f0000000300)='/dev/usbmon#\x00', 0x0, 0x2000) [ 654.546714][ T2808] usb 1-1: USB disconnect, device number 71 18:45:25 executing program 0: syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000001840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @output_terminal={0x9}, @processing_unit={0xd, 0x24, 0x7, 0x0, 0x0, 0x0, "188628ae4b1d"}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x5, "40e513e1"}, @output_terminal={0x9}, @selector_unit={0x8, 0x24, 0x5, 0x6, 0x2, "ef5d1e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 18:45:25 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="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", 0x128}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:45:25 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) 18:45:25 executing program 1: clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='projid_map\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$P9_RRENAME(r0, 0x0, 0xffffff47) 18:45:25 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/143, 0x8f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/238, 0xee}, {0x0}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf74", 0x49, 0x11, 0x0, 0x0) 18:45:25 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = eventfd(0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r3, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20, 0x1}, [{}]}, 0x58) 18:45:25 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) 18:45:25 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) 18:45:25 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, 0x0, 0x0) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) [ 655.863711][T12852] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 656.103397][T12852] usb 1-1: Using ep0 maxpacket: 32 [ 656.223719][T12852] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 656.235129][T12852] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 18:45:26 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = eventfd(0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r3, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20, 0x1}, [{}]}, 0x58) 18:45:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x19, 0x0, &(0x7f00000000c0)) 18:45:26 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/143, 0x8f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/238, 0xee}, {0x0}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf74", 0x49, 0x11, 0x0, 0x0) [ 656.413592][T12852] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 656.422845][T12852] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.431076][T12852] usb 1-1: Product: syz [ 656.435709][T12852] usb 1-1: Manufacturer: syz [ 656.440417][T12852] usb 1-1: SerialNumber: syz [ 656.881270][T12852] usb 1-1: USB disconnect, device number 72 18:45:27 executing program 0: syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000001840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @output_terminal={0x9}, @processing_unit={0xd, 0x24, 0x7, 0x0, 0x0, 0x0, "188628ae4b1d"}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x5, "40e513e1"}, @output_terminal={0x9}, @selector_unit={0x8, 0x24, 0x5, 0x6, 0x2, "ef5d1e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 657.583164][T12852] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 657.823150][T12852] usb 1-1: Using ep0 maxpacket: 32 [ 657.943418][T12852] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 657.954586][T12852] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 658.123475][T12852] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 658.132596][T12852] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.140712][T12852] usb 1-1: Product: syz [ 658.144991][T12852] usb 1-1: Manufacturer: syz [ 658.149617][T12852] usb 1-1: SerialNumber: syz [ 658.497406][T12852] usb 1-1: USB disconnect, device number 73 18:45:28 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="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", 0x128}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:45:28 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = eventfd(0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r3, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20, 0x1}, [{}]}, 0x58) 18:45:28 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, 0x0, 0x0) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) 18:45:28 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/143, 0x8f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/238, 0xee}, {0x0}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec", 0x4b, 0x11, 0x0, 0x0) 18:45:28 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x40045564, &(0x7f0000000000)) 18:45:28 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)=0x1000006) read(r0, &(0x7f00003fefff)=""/1, 0x1) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000cd8000)=""/1, 0x2e171c03}], 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) poll(0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) tkill(0x0, 0x16) 18:45:28 executing program 0: syz_usb_connect$uac1(0x0, 0xa1, &(0x7f0000001840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8f, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @output_terminal={0x9}, @processing_unit={0xd, 0x24, 0x7, 0x0, 0x0, 0x0, "188628ae4b1d"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x0, 0x6}, @selector_unit={0x8, 0x24, 0x5, 0x6, 0x2, "ef5d1e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 659.223256][ T2808] usb 1-1: new high-speed USB device number 74 using dummy_hcd 18:45:29 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/143, 0x8f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/238, 0xee}, {0x0}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec", 0x4b, 0x11, 0x0, 0x0) [ 659.463358][ T2808] usb 1-1: Using ep0 maxpacket: 32 18:45:29 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, 0x0, 0x0) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) 18:45:29 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = eventfd(0x0) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) write$binfmt_elf32(r3, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20, 0x1}, [{}]}, 0x58) [ 659.583905][ T2808] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 659.594384][ T2808] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 18:45:29 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x28001) write$evdev(r0, 0x0, 0x0) [ 659.763815][ T2808] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 659.773576][ T2808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.781631][ T2808] usb 1-1: Product: syz [ 659.785985][ T2808] usb 1-1: Manufacturer: syz [ 659.791109][ T2808] usb 1-1: SerialNumber: syz 18:45:30 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='maps\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) sendfile(r1, r0, 0x0, 0x2e2ec1f6) 18:45:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r0, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = fcntl$dupfd(r0, 0x0, r0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000100)=ANY=[], 0x0) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000140)) ptrace$setopts(0x4206, r1, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x80000000002c00) [ 660.133882][ T2808] usb 1-1: 0:2 : does not exist [ 660.160596][ T2808] usb 1-1: USB disconnect, device number 74 18:45:31 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="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", 0x128}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:45:31 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0x0, 0x0, 0x40001}) poll(0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) tkill(0x0, 0x0) 18:45:31 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/143, 0x8f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/238, 0xee}, {0x0}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec", 0x4b, 0x11, 0x0, 0x0) 18:45:31 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x0, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) 18:45:31 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = eventfd(0x0) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) write$binfmt_elf32(r3, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20, 0x1}, [{}]}, 0x58) 18:45:31 executing program 0: syz_usb_connect$uac1(0x0, 0xa1, &(0x7f0000001840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8f, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @output_terminal={0x9}, @processing_unit={0xd, 0x24, 0x7, 0x0, 0x0, 0x0, "188628ae4b1d"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x0, 0x6}, @selector_unit={0x8, 0x24, 0x5, 0x6, 0x2, "ef5d1e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 18:45:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) 18:45:31 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="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", 0x128}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) [ 662.023547][ T2808] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 662.263247][ T2808] usb 1-1: Using ep0 maxpacket: 32 [ 662.383762][ T2808] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 662.394503][ T2808] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 18:45:32 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x0, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) 18:45:32 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = eventfd(0x0) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) write$binfmt_elf32(r3, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20, 0x1}, [{}]}, 0x58) [ 662.564079][ T2808] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 662.573405][ T2808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.581550][ T2808] usb 1-1: Product: syz [ 662.585915][ T2808] usb 1-1: Manufacturer: syz [ 662.590629][ T2808] usb 1-1: SerialNumber: syz 18:45:32 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/143, 0x8f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/238, 0xee}, {0x0}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66", 0x4c, 0x11, 0x0, 0x0) 18:45:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0xa, 0x0, &(0x7f00000000c0)) 18:45:33 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) clone(0x6102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendto$inet(r0, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) [ 663.005494][ T2808] usb 1-1: 0:2 : does not exist [ 663.036513][ T2808] usb 1-1: USB disconnect, device number 75 18:45:33 executing program 1: syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000180)="5500000018007f5300fe01b2a4a280930a60000000a8430891ed0000390009000a000c00060000001900a30700000000000000dc1338d54400009b841338caaee86ef75afba3de448daa7227c43ab8220000060c00", 0x55}], 0x1}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) 18:45:33 executing program 1: 18:45:33 executing program 1: 18:45:33 executing program 1: write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000180)="5500000018007f5300fe01b2a4a280930a60000000a8430891ed0000390009000a000c00060000001900a30700000000000000dc1338d54400009b841338caaee86ef75afba3de448daa7227c43ab8220000060c00", 0x55}], 0x1}, 0x0) 18:45:33 executing program 0: syz_usb_connect$uac1(0x0, 0xa1, &(0x7f0000001840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8f, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @output_terminal={0x9}, @processing_unit={0xd, 0x24, 0x7, 0x0, 0x0, 0x0, "188628ae4b1d"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x0, 0x6}, @selector_unit={0x8, 0x24, 0x5, 0x6, 0x2, "ef5d1e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 18:45:33 executing program 1: r0 = socket(0x1f, 0x5, 0x2) getsockopt(r0, 0x2, 0x2, 0x0, 0x0) [ 663.823276][T12852] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 664.063257][T12852] usb 1-1: Using ep0 maxpacket: 32 [ 664.183577][T12852] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 664.193990][T12852] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 664.353360][T12852] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 664.362447][T12852] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.370698][T12852] usb 1-1: Product: syz [ 664.374931][T12852] usb 1-1: Manufacturer: syz [ 664.379560][T12852] usb 1-1: SerialNumber: syz [ 664.713504][T12852] usb 1-1: 0:2 : does not exist [ 664.730720][T12852] usb 1-1: USB disconnect, device number 76 18:45:35 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c92465e5f9cc2d3fbf0322168078aba9d7ae45b0051a1221af2772a9567bb821942ce72590f1bf41d20d4c000000279bd612811df1fcaa94a96d58db92af7f9298918ae95b745777a1968e48d46358c8735e3b009f9d01000000000000005b5895e126de3d6d7c6949c6a87cf3ab2fbe80d1028d6e727a596c761e274e8f7bf745addbe19bd7642d38323564278e0410a966da6a254b9c2fa9c5d27796310a13c91878b74c9d615ae752a67e9373b0bc80f98ca3686a79c2dd0d6428fcbacb482ba7a33878f84fdc417a06cfa6d91426d3160fb649591b6d9523a05bf6c09be99b46692a885d573ba599041fde6a90e8758c", 0x128}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 18:45:35 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x0, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) 18:45:35 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) eventfd(0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20, 0x1}, [{}]}, 0x58) 18:45:35 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'i\x7f\x8ei \x00\xee?\x00\x00\x00\x05\x00', 0x8011}) 18:45:35 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/143, 0x8f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/238, 0xee}, {0x0}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66", 0x4c, 0x11, 0x0, 0x0) 18:45:35 executing program 1: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000020000000001, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="a504", 0x2) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='ip6_vti0\x00', 0x1000001d0) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffccf, 0x3e8, 0x0, 0xffffffffffffff37) 18:45:35 executing program 0: syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000001840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @output_terminal={0x9}, @processing_unit={0xd, 0x24, 0x7, 0x0, 0x0, 0x0, "188628ae4b1d"}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x0, "40e513e1"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x0, 0x6}, @selector_unit={0x8, 0x24, 0x5, 0x6, 0x2, "ef5d1e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 18:45:35 executing program 1: 18:45:35 executing program 1: 18:45:35 executing program 1: 18:45:35 executing program 1: [ 665.524044][ T2808] usb 1-1: new high-speed USB device number 77 using dummy_hcd 18:45:35 executing program 1: [ 665.763540][ T2808] usb 1-1: Using ep0 maxpacket: 32 [ 665.883581][ T2808] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 665.894111][ T2808] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 666.063849][ T2808] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 666.073157][ T2808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.081220][ T2808] usb 1-1: Product: syz [ 666.085612][ T2808] usb 1-1: Manufacturer: syz [ 666.090254][ T2808] usb 1-1: SerialNumber: syz [ 666.413443][ T2808] usb 1-1: 0:2 : does not exist [ 666.429167][ T2808] usb 1-1: USB disconnect, device number 77 18:45:38 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="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", 0x128}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 18:45:38 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/143, 0x8f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/238, 0xee}, {0x0}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66", 0x4c, 0x11, 0x0, 0x0) 18:45:38 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) eventfd(0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20, 0x1}, [{}]}, 0x58) 18:45:38 executing program 1: 18:45:38 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) 18:45:38 executing program 0: syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000001840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @output_terminal={0x9}, @processing_unit={0xd, 0x24, 0x7, 0x0, 0x0, 0x0, "188628ae4b1d"}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x0, "40e513e1"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x0, 0x6}, @selector_unit={0x8, 0x24, 0x5, 0x6, 0x2, "ef5d1e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 18:45:38 executing program 1: 18:45:38 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) 18:45:38 executing program 1: 18:45:38 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="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", 0x128}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:45:38 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) [ 668.303941][T12852] usb 1-1: new high-speed USB device number 78 using dummy_hcd 18:45:38 executing program 1: 18:45:38 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) [ 668.623316][T12852] usb 1-1: Using ep0 maxpacket: 32 [ 668.743817][T12852] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 668.754179][T12852] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 18:45:38 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/143, 0x8f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/238, 0xee}, {0x0}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x4d, 0x0, 0x0, 0x0) 18:45:38 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) eventfd(0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20, 0x1}, [{}]}, 0x58) 18:45:38 executing program 1: 18:45:38 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) [ 668.924051][T12852] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 668.933373][T12852] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.941492][T12852] usb 1-1: Product: syz [ 668.945907][T12852] usb 1-1: Manufacturer: syz [ 668.950598][T12852] usb 1-1: SerialNumber: syz [ 669.313771][T12852] usb 1-1: 0:2 : does not exist [ 669.340878][T12852] usb 1-1: USB disconnect, device number 78 18:45:39 executing program 0: syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000001840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @output_terminal={0x9}, @processing_unit={0xd, 0x24, 0x7, 0x0, 0x0, 0x0, "188628ae4b1d"}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x0, "40e513e1"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x0, 0x6}, @selector_unit={0x8, 0x24, 0x5, 0x6, 0x2, "ef5d1e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 18:45:39 executing program 1: 18:45:39 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) 18:45:39 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/143, 0x8f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/238, 0xee}, {0x0}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x4d, 0x0, 0x0, 0x0) [ 670.153232][ T2808] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 670.393185][ T2808] usb 1-1: Using ep0 maxpacket: 32 [ 670.513382][ T2808] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 670.523723][ T2808] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 670.683413][ T2808] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 670.692616][ T2808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.700857][ T2808] usb 1-1: Product: syz [ 670.705167][ T2808] usb 1-1: Manufacturer: syz [ 670.709813][ T2808] usb 1-1: SerialNumber: syz [ 671.033669][ T2808] usb 1-1: 0:2 : does not exist [ 671.048518][ T2808] usb 1-1: USB disconnect, device number 79 18:45:41 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="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", 0x128}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:45:41 executing program 1: 18:45:41 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}], 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) 18:45:41 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = eventfd(0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r3, 0x0, 0x0) 18:45:41 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x2000000000000074, 0x114) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/143, 0x8f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/238, 0xee}, {0x0}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x4d, 0x0, 0x0, 0x0) 18:45:41 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="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", 0x128}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:45:41 executing program 1: 18:45:41 executing program 0: syz_usb_connect$uac1(0x0, 0xa8, &(0x7f0000001840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @output_terminal={0x9}, @processing_unit={0xd, 0x24, 0x7, 0x0, 0x0, 0x0, "188628ae4b1d"}, @processing_unit={0x7, 0x24, 0x7, 0x0, 0x0, 0x5}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x0, 0x6}, @selector_unit={0x8, 0x24, 0x5, 0x6, 0x2, "ef5d1e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 18:45:41 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}], 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) 18:45:41 executing program 1: 18:45:41 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}], 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) 18:45:42 executing program 1: 18:45:42 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) [ 671.963823][T12852] usb 1-1: new high-speed USB device number 80 using dummy_hcd 18:45:42 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) 18:45:42 executing program 1: [ 672.203439][T12852] usb 1-1: Using ep0 maxpacket: 32 18:45:42 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = eventfd(0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r3, 0x0, 0x0) 18:45:42 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) [ 672.333637][T12852] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 672.344029][T12852] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 672.544910][T12852] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 672.554127][T12852] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.562220][T12852] usb 1-1: Product: syz [ 672.566585][T12852] usb 1-1: Manufacturer: syz [ 672.571237][T12852] usb 1-1: SerialNumber: syz [ 672.903787][T12852] usb 1-1: 0:2 : does not exist [ 672.919008][T12852] usb 1-1: USB disconnect, device number 80 18:45:44 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="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", 0x128}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:45:44 executing program 1: 18:45:44 executing program 3: 18:45:44 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/224, 0xe0}], 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) 18:45:44 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = eventfd(0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r3, 0x0, 0x0) 18:45:44 executing program 0: syz_usb_connect$uac1(0x0, 0xa8, &(0x7f0000001840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @output_terminal={0x9}, @processing_unit={0xd, 0x24, 0x7, 0x0, 0x0, 0x0, "188628ae4b1d"}, @processing_unit={0x7, 0x24, 0x7, 0x0, 0x0, 0x5}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x0, 0x6}, @selector_unit={0x8, 0x24, 0x5, 0x6, 0x2, "ef5d1e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 18:45:44 executing program 1: 18:45:44 executing program 3: 18:45:44 executing program 1: 18:45:45 executing program 1: 18:45:45 executing program 3: 18:45:45 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/224, 0xe0}], 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) [ 674.923404][T12852] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 675.223297][T12852] usb 1-1: Using ep0 maxpacket: 32 [ 675.353585][T12852] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 675.363920][T12852] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 675.543543][T12852] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 675.552686][T12852] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.561096][T12852] usb 1-1: Product: syz [ 675.565386][T12852] usb 1-1: Manufacturer: syz [ 675.570052][T12852] usb 1-1: SerialNumber: syz [ 675.893408][T12852] usb 1-1: 0:2 : does not exist [ 675.909476][T12852] usb 1-1: USB disconnect, device number 81 18:45:47 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="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", 0x128}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:45:47 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/224, 0xe0}], 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) 18:45:47 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = eventfd(0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r3, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20, 0x1}, [{}]}, 0x58) 18:45:47 executing program 0: syz_usb_connect$uac1(0x0, 0xa8, &(0x7f0000001840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @output_terminal={0x9}, @processing_unit={0xd, 0x24, 0x7, 0x0, 0x0, 0x0, "188628ae4b1d"}, @processing_unit={0x7, 0x24, 0x7, 0x0, 0x0, 0x5}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x0, 0x6}, @selector_unit={0x8, 0x24, 0x5, 0x6, 0x2, "ef5d1e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 18:45:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) sendmmsg$unix(r3, &(0x7f0000001e00)=[{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001340)="e1", 0x1}, {&(0x7f00000014c0)="805b204d4043f202f41ed605bd375175b7d12d3077183f5765723ffbb87e9616129c5bcabfa401745a4decf5e5ed55de6d33fb3f28f834a7b29734e830c4e41aee3efa6f7dbb249ace87c7ccc455b88e41dceab095dc4661", 0x58}], 0x2}], 0x1, 0x0) 18:45:47 executing program 1: 18:45:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000280)=ANY=[@ANYRES32=r0]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'syz_tun\x00', 0x0}) 18:45:47 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000280)=ANY=[@ANYRES32=r0]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'syz_tun\x00', 0x0}) 18:45:48 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) [ 678.117682][ T2808] usb 1-1: new high-speed USB device number 82 using dummy_hcd 18:45:48 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000001040)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_aout(r0, &(0x7f0000000680)=ANY=[@ANYBLOB="01"], 0x1) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x100) shutdown(r0, 0x0) 18:45:48 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) 18:45:48 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000280)=ANY=[@ANYRES32=r0]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'syz_tun\x00', 0x0}) [ 678.363859][ T2808] usb 1-1: Using ep0 maxpacket: 32 18:45:48 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) [ 678.484282][ T2808] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 678.495334][ T2808] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 678.663732][ T2808] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 678.673301][ T2808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.681393][ T2808] usb 1-1: Product: syz [ 678.686011][ T2808] usb 1-1: Manufacturer: syz [ 678.690657][ T2808] usb 1-1: SerialNumber: syz [ 679.013538][ T2808] usb 1-1: 0:2 : does not exist [ 679.038902][ T2808] usb 1-1: USB disconnect, device number 82 18:45:50 executing program 1: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff}) tee(r1, r0, 0x100000000, 0x0) 18:45:50 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="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", 0x128}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:45:50 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000280)=ANY=[@ANYRES32=r0]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'syz_tun\x00', 0x0}) 18:45:50 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x0, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) 18:45:50 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = eventfd(0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r3, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20, 0x1}, [{}]}, 0x58) 18:45:50 executing program 0: syz_usb_connect$uac1(0x0, 0xaa, &(0x7f0000001840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x98, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @output_terminal={0x9}, @processing_unit={0xd, 0x24, 0x7, 0x0, 0x0, 0x0, "188628ae4b1d"}, @processing_unit={0x9, 0x24, 0x7, 0x0, 0x0, 0x5, "40e5"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x0, 0x6}, @selector_unit={0x8, 0x24, 0x5, 0x6, 0x2, "ef5d1e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 18:45:51 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x0, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) 18:45:51 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000280)=ANY=[@ANYRES32=r0]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'syz_tun\x00', 0x0}) 18:45:51 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x0, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) [ 681.154253][ T2808] usb 1-1: new high-speed USB device number 83 using dummy_hcd 18:45:51 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000280)=ANY=[@ANYRES32=r0]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xc) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'syz_tun\x00', 0x0}) 18:45:51 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, 0x0) sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) 18:45:51 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000280)=ANY=[@ANYRES32=r0]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xc) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'syz_tun\x00', 0x0}) [ 681.393372][ T2808] usb 1-1: Using ep0 maxpacket: 32 [ 681.514171][ T2808] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 681.524678][ T2808] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 18:45:51 executing program 1: clone(0x11100b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 681.693816][ T2808] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 681.703011][ T2808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.711430][ T2808] usb 1-1: Product: syz [ 681.716037][ T2808] usb 1-1: Manufacturer: syz [ 681.720766][ T2808] usb 1-1: SerialNumber: syz [ 682.043636][ T2808] usb 1-1: 0:2 : does not exist [ 682.063007][ T2808] usb 1-1: USB disconnect, device number 83 18:45:53 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="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", 0x128}], 0x4, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:45:53 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000280)=ANY=[@ANYRES32=r0]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xc) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'syz_tun\x00', 0x0}) 18:45:53 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, 0x0) sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) 18:45:53 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = eventfd(0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r3, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20, 0x1}, [{}]}, 0x58) 18:45:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ffb000/0x5000)=nil, 0x1000000, 0x2, 0x0, &(0x7f0000ffc000/0x4000)=nil}) 18:45:53 executing program 0: syz_usb_connect$uac1(0x0, 0xaa, &(0x7f0000001840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x98, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @output_terminal={0x9}, @processing_unit={0xd, 0x24, 0x7, 0x0, 0x0, 0x0, "188628ae4b1d"}, @processing_unit={0x9, 0x24, 0x7, 0x0, 0x0, 0x5, "40e5"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x0, 0x6}, @selector_unit={0x8, 0x24, 0x5, 0x6, 0x2, "ef5d1e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 18:45:54 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c92465e5f9cc2d3fbf0322168078aba9d7ae45b0051a1221af2772a9567bb821942ce72590f1bf41d20d4c000000279bd612811df1fcaa94a96d58db92af7f9298918ae95b745777a1968e48d46358c8735e3b009f9d01000000000000005b5895e126de3d6d7c6949c6a87cf3ab2fbe80d1028d6e727a596c761e274e8f7bf745addbe19bd7642d38323564278e0410a966da6a254b9c2fa9c5d27796310a13c91878b74c9d615ae752a67e9373b0bc80f98ca3686a79c2dd0d6428fcbacb482ba7a33878f84fdc417a06cfa6d91426d3160fb649591b6d9523a05bf6c09be99b46692a885d573ba599041fde6a90e8758c", 0x128}], 0x4, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:45:54 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x22, 0x400, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000340)) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @loopback, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x40000000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) creat(0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) pipe2(0x0, 0x4000) r2 = dup(0xffffffffffffffff) setsockopt$inet6_tcp_int(r2, 0x6, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141046, 0x0) ftruncate(r3, 0x2007fff) fsetxattr$trusted_overlay_nlink(r3, 0x0, &(0x7f0000000080)={'\x01\x00', 0x7}, 0xfdd1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f00000000c0)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) socket$unix(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r6, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:45:54 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c92465e5f9cc2d3fbf0322168078aba9d7ae45b0051a1221af2772a9567bb821942ce72590f1bf41d20d4c000000279bd612811df1fcaa94a96d58db92af7f9298918ae95b745777a1968e48d46358c8735e3b009f9d01000000000000005b5895e126de3d6d7c6949c6a87cf3ab2fbe80d1028d6e727a596c761e274e8f7bf745addbe19bd7642d38323564278e0410a966da6a254b9c2fa9c5d27796310a13c91878b74c9d615ae752a67e9373b0bc80f98ca3686a79c2dd0d6428fcbacb482ba7a33878f84fdc417a06cfa6d91426d3160fb649591b6d9523a05bf6c09be99b46692a885d573ba599041fde6a90e8758c", 0x128}], 0x4, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:45:54 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000280)=ANY=[@ANYRES32=r0]}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'syz_tun\x00', 0x0}) 18:45:54 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, 0x0) sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) 18:45:54 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 684.233430][T12852] usb 1-1: new high-speed USB device number 84 using dummy_hcd 18:45:54 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000280)=ANY=[@ANYRES32=r0]}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'syz_tun\x00', 0x0}) 18:45:54 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)) sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) [ 684.503240][T12852] usb 1-1: Using ep0 maxpacket: 32 18:45:54 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000280)=ANY=[@ANYRES32=r0]}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'syz_tun\x00', 0x0}) [ 684.626991][T12852] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 684.637357][T12852] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 18:45:54 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = eventfd(0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) write$binfmt_elf32(r3, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 18:45:54 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)) sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) [ 684.803647][T12852] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 684.812913][T12852] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.821364][T12852] usb 1-1: Product: syz [ 684.825679][T12852] usb 1-1: Manufacturer: syz [ 684.830344][T12852] usb 1-1: SerialNumber: syz [ 685.233719][T12852] usb 1-1: 0:2 : does not exist [ 685.249775][T12852] usb 1-1: USB disconnect, device number 84 18:45:55 executing program 0: syz_usb_connect$uac1(0x0, 0xaa, &(0x7f0000001840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x98, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @output_terminal={0x9}, @processing_unit={0xd, 0x24, 0x7, 0x0, 0x0, 0x0, "188628ae4b1d"}, @processing_unit={0x9, 0x24, 0x7, 0x0, 0x0, 0x5, "40e5"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x0, 0x6}, @selector_unit={0x8, 0x24, 0x5, 0x6, 0x2, "ef5d1e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 18:45:55 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xc) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', 0x0}) 18:45:55 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)) sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) 18:45:55 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000028c0)=[{{&(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f00000007c0)=""/95, 0x5f}, {&(0x7f0000000840)=""/98, 0x62}, {&(0x7f00000008c0)=""/152, 0x98}, {&(0x7f0000000980)=""/160, 0xa0}, {&(0x7f0000000a40)=""/118, 0x76}, {&(0x7f0000000ac0)=""/237, 0xed}], 0x6}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x48000, 0x0) ioctl$VT_RELDISP(r4, 0x5605) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x62922580ab37a9a8, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r5, r6, 0x0, 0x320f) recvfrom(0xffffffffffffffff, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp\x00') 18:45:55 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x140, &(0x7f0000000640)=ANY=[@ANYBLOB="0777aaaaaaaaaaaaaaaaaabb86dd6050a09c00081100fe8000000000000000000000000000bbfe8000000000000000000000080200aa00004e2000089078"], 0x0) 18:45:55 executing program 1: creat(&(0x7f0000000700)='./bus\x00', 0x0) mount$fuseblk(&(0x7f0000000040)='/dev/loop0\x00', &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, 0x0) [ 685.973314][T12852] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 686.213342][T12852] usb 1-1: Using ep0 maxpacket: 32 [ 686.333373][T12852] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 686.343890][T12852] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 686.503535][T12852] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 686.512789][T12852] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.521044][T12852] usb 1-1: Product: syz [ 686.525322][T12852] usb 1-1: Manufacturer: syz [ 686.530012][T12852] usb 1-1: SerialNumber: syz [ 686.853482][T12852] usb 1-1: 0:2 : does not exist [ 686.870933][T12852] usb 1-1: USB disconnect, device number 85 18:45:57 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:45:57 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xc) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', 0x0}) 18:45:57 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0b") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) 18:45:57 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) eventfd(0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 18:45:57 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="2e0000001e000503ed0080648c6394f20531d20006600f4009000500000000000000009700d0bdff0f0000000000", 0x2e}], 0x1}, 0x0) 18:45:57 executing program 0: syz_usb_connect$uac1(0x0, 0xab, &(0x7f0000001840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x99, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @output_terminal={0x9}, @processing_unit={0xd, 0x24, 0x7, 0x0, 0x0, 0x0, "188628ae4b1d"}, @processing_unit={0xa, 0x24, 0x7, 0x0, 0x0, 0x5, "40e513"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x0, 0x6}, @selector_unit={0x8, 0x24, 0x5, 0x6, 0x2, "ef5d1e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 687.416931][T18871] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.2'. [ 687.439477][T18876] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.2'. 18:45:57 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:45:57 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x1f00, &(0x7f0000000000)=[{&(0x7f0000000180)="2e0000001e000503ed0080648c6394f20531d20006000f4009000500000000000000009700d0bdff0f0000000000", 0x2e}], 0x1}, 0x0) 18:45:57 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xc) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', 0x0}) 18:45:57 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0b") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) [ 687.683714][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 687.689949][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 687.696643][ T2808] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 687.700831][T18888] netlink: 18 bytes leftover after parsing attributes in process `syz-executor.2'. 18:45:57 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x100) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0xc0096616, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)=0x100000001, 0x12) write$cgroup_int(r2, 0x0, 0x0) 18:45:57 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000280)=ANY=[@ANYRES32]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xc) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', 0x0}) 18:45:58 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0b") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) [ 687.953538][ T2808] usb 1-1: Using ep0 maxpacket: 32 [ 687.985966][T18901] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 687.997159][T18901] CPU: 0 PID: 18901 Comm: syz-executor.2 Not tainted 5.4.0-rc3+ #0 [ 688.005119][T18901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 688.015311][T18901] Call Trace: [ 688.018658][T18901] dump_stack+0x191/0x1f0 [ 688.023060][T18901] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 688.029055][T18901] dump_header+0x1e7/0xd00 [ 688.033554][T18901] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 688.039780][T18901] ? ___ratelimit+0x542/0x720 [ 688.044493][T18901] ? task_will_free_mem+0x2c9/0x810 [ 688.049736][T18901] oom_kill_process+0x210/0x560 [ 688.054639][T18901] out_of_memory+0x1796/0x1c70 [ 688.059440][T18901] ? kmsan_internal_set_origin+0x6a/0xb0 [ 688.065130][T18901] memory_max_write+0x90b/0xb60 [ 688.070040][T18901] ? memory_max_show+0x1b0/0x1b0 [ 688.075009][T18901] cgroup_file_write+0x41a/0x8e0 [ 688.079992][T18901] ? cgroup_seqfile_stop+0x150/0x150 [ 688.085314][T18901] kernfs_fop_write+0x55f/0x840 [ 688.090211][T18901] ? kernfs_fop_read+0x9a0/0x9a0 [ 688.095177][T18901] __vfs_write+0x1a9/0xcb0 [ 688.099658][T18901] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 688.105759][T18901] ? __sb_start_write+0x10b/0x230 [ 688.110818][T18901] vfs_write+0x481/0x920 [ 688.115108][T18901] ksys_write+0x265/0x430 [ 688.119478][T18901] __se_sys_write+0x92/0xb0 [ 688.124015][T18901] __x64_sys_write+0x4a/0x70 [ 688.128641][T18901] do_syscall_64+0xb6/0x160 [ 688.133186][T18901] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 688.139110][T18901] RIP: 0033:0x459ef9 [ 688.143054][T18901] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 688.162687][T18901] RSP: 002b:00007feccdb0ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 688.171225][T18901] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459ef9 [ 688.179217][T18901] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 688.187208][T18901] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 688.195200][T18901] R10: 0000000000000000 R11: 0000000000000246 R12: 00007feccdb0f6d4 [ 688.203191][T18901] R13: 00000000004ca4f4 R14: 00000000004e23a8 R15: 00000000ffffffff [ 688.211403][T18901] memory: usage 6312kB, limit 0kB, failcnt 8 [ 688.217516][T18901] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 688.224489][T18901] Memory cgroup stats for /syz2: [ 688.224850][T18901] anon 4505600 [ 688.224850][T18901] file 180224 [ 688.224850][T18901] kernel_stack 262144 [ 688.224850][T18901] slab 1019904 [ 688.224850][T18901] sock 0 [ 688.224850][T18901] shmem 53248 [ 688.224850][T18901] file_mapped 0 [ 688.224850][T18901] file_dirty 0 [ 688.224850][T18901] file_writeback 0 [ 688.224850][T18901] anon_thp 4194304 [ 688.224850][T18901] inactive_anon 0 [ 688.224850][T18901] active_anon 4415488 [ 688.224850][T18901] inactive_file 135168 [ 688.224850][T18901] active_file 0 [ 688.224850][T18901] unevictable 0 [ 688.224850][T18901] slab_reclaimable 0 [ 688.224850][T18901] slab_unreclaimable 1019904 [ 688.224850][T18901] pgfault 13662 [ 688.224850][T18901] pgmajfault 0 [ 688.224850][T18901] workingset_refault 0 [ 688.224850][T18901] workingset_activate 0 [ 688.224850][T18901] workingset_nodereclaim 0 [ 688.224850][T18901] pgrefill 0 [ 688.224850][T18901] pgscan 0 [ 688.224850][T18901] pgsteal 0 [ 688.224850][T18901] pgactivate 0 [ 688.319797][T18901] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=18857,uid=0 18:45:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") sendmmsg$inet(r0, &(0x7f0000005b40)=[{{&(0x7f00000004c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x0, 0x2}]}}}], 0x18}}, {{&(0x7f0000000900)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x2, 0x0) [ 688.335591][T18901] Memory cgroup out of memory: Killed process 18857 (syz-executor.2) total-vm:72980kB, anon-rss:4276kB, file-rss:35780kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 [ 688.357728][ T1834] oom_reaper: reaped process 18857 (syz-executor.2), now anon-rss:0kB, file-rss:34820kB, shmem-rss:0kB [ 688.374124][T18899] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 688.385654][T18899] CPU: 1 PID: 18899 Comm: syz-executor.2 Not tainted 5.4.0-rc3+ #0 [ 688.393620][T18899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 688.403735][T18899] Call Trace: [ 688.407089][T18899] dump_stack+0x191/0x1f0 [ 688.411458][T18899] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 688.417388][T18899] dump_header+0x1e7/0xd00 [ 688.421852][T18899] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 688.428043][T18899] ? ___ratelimit+0x542/0x720 [ 688.432752][T18899] ? task_will_free_mem+0x2c9/0x810 [ 688.437993][T18899] oom_kill_process+0x210/0x560 [ 688.442905][T18899] out_of_memory+0x1796/0x1c70 [ 688.447707][T18899] ? kmsan_internal_set_origin+0x6a/0xb0 [ 688.453426][T18899] try_charge+0x2889/0x3d70 [ 688.458017][T18899] mem_cgroup_try_charge+0xa29/0xe40 [ 688.463349][T18899] mem_cgroup_try_charge_delay+0x7e/0x140 [ 688.469109][T18899] ? kmsan_get_shadow_origin_ptr+0x196/0x4b0 [ 688.475130][T18899] shmem_getpage_gfp+0x1f48/0x3f80 [ 688.480303][T18899] ? do_page_fault+0xbb/0x500 [ 688.485053][T18899] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 688.490982][T18899] shmem_write_begin+0x1ac/0x310 [ 688.495968][T18899] ? shmem_writepage+0x18f0/0x18f0 [ 688.501109][T18899] generic_perform_write+0x424/0x990 [ 688.506426][T18899] ? shmem_write_begin+0x310/0x310 [ 688.511598][T18899] __generic_file_write_iter+0x44e/0xa50 [ 688.517288][T18899] generic_file_write_iter+0x770/0xad0 [ 688.522797][T18899] ? __generic_file_write_iter+0xa50/0xa50 [ 688.528649][T18899] __vfs_write+0xa2c/0xcb0 [ 688.533122][T18899] vfs_write+0x481/0x920 [ 688.537409][T18899] ksys_write+0x265/0x430 [ 688.541775][T18899] __se_sys_write+0x92/0xb0 [ 688.546315][T18899] __x64_sys_write+0x4a/0x70 [ 688.550941][T18899] do_syscall_64+0xb6/0x160 [ 688.555485][T18899] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 688.561398][T18899] RIP: 0033:0x459ef9 [ 688.565330][T18899] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 688.584982][T18899] RSP: 002b:00007feccdb2fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 688.593446][T18899] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459ef9 [ 688.601443][T18899] RDX: 00000000ffffff43 RSI: 0000000020000080 RDI: 0000000000000003 [ 688.609438][T18899] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 688.617437][T18899] R10: 0000000000000000 R11: 0000000000000246 R12: 00007feccdb306d4 [ 688.625430][T18899] R13: 00000000004ca4f4 R14: 00000000004e23a8 R15: 00000000ffffffff [ 688.634394][T18899] memory: usage 1888kB, limit 0kB, failcnt 20 [ 688.640545][T18899] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 688.647527][T18899] Memory cgroup stats for /syz2: [ 688.647861][T18899] anon 294912 [ 688.647861][T18899] file 180224 [ 688.647861][T18899] kernel_stack 196608 [ 688.647861][T18899] slab 1019904 [ 688.647861][T18899] sock 0 [ 688.647861][T18899] shmem 53248 [ 688.647861][T18899] file_mapped 0 [ 688.647861][T18899] file_dirty 0 [ 688.647861][T18899] file_writeback 0 [ 688.647861][T18899] anon_thp 0 [ 688.647861][T18899] inactive_anon 0 [ 688.647861][T18899] active_anon 204800 [ 688.647861][T18899] inactive_file 135168 [ 688.647861][T18899] active_file 0 [ 688.647861][T18899] unevictable 0 [ 688.647861][T18899] slab_reclaimable 0 [ 688.647861][T18899] slab_unreclaimable 1019904 [ 688.647861][T18899] pgfault 13662 [ 688.647861][T18899] pgmajfault 0 [ 688.647861][T18899] workingset_refault 0 [ 688.647861][T18899] workingset_activate 0 [ 688.647861][T18899] workingset_nodereclaim 0 [ 688.647861][T18899] pgrefill 0 [ 688.647861][T18899] pgscan 0 [ 688.647861][T18899] pgsteal 0 [ 688.647861][T18899] pgactivate 0 [ 688.742042][T18899] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=12969,uid=0 [ 688.757844][T18899] Memory cgroup out of memory: Killed process 12969 (syz-executor.2) total-vm:72452kB, anon-rss:112kB, file-rss:35776kB, shmem-rss:0kB, UID:0 pgtables:118784kB oom_score_adj:0 [ 692.259438][ C1] clocksource: timekeeping watchdog on CPU1: Marking clocksource 'tsc' as unstable because the skew is too large: [ 692.271653][ C1] clocksource: 'acpi_pm' wd_now: b1f50a wd_last: ec7229 mask: ffffff [ 692.282293][ C1] clocksource: 'tsc' cs_now: 1780d366a67 cs_last: 1761d846bc4 mask: ffffffffffffffff [ 692.294035][ C1] tsc: Marking TSC unstable due to clocksource watchdog [ 692.304397][ T1834] oom_reaper: reaped process 12969 (syz-executor.2), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB [ 692.320254][T18897] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 692.323479][T12852] TSC found unstable after boot, most likely due to broken BIOS. Use 'tsc=unstable'. [ 692.330965][T18897] CPU: 0 PID: 18897 Comm: syz-executor.2 Not tainted 5.4.0-rc3+ #0 [ 692.340639][T12852] sched_clock: Marking unstable (692400468235, -77017965)<-(692335484914, -12034558) [ 692.348889][T18897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 692.348908][T18897] Call Trace: [ 692.348974][T18897] dump_stack+0x191/0x1f0 [ 692.349042][T18897] dump_header+0x1e7/0xd00 [ 692.376921][T18897] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 692.376921][T18897] ? ___ratelimit+0x542/0x720 [ 692.376921][T18897] ? task_will_free_mem+0x14c/0x810 [ 692.376921][T18897] oom_kill_process+0x210/0x560 [ 692.376921][T18897] out_of_memory+0x1796/0x1c70 [ 692.376921][T18897] try_charge+0x2889/0x3d70 [ 692.376921][T18897] mem_cgroup_try_charge+0xa29/0xe40 [ 692.376921][T18897] mem_cgroup_try_charge_delay+0x7e/0x140 [ 692.376921][T18897] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 692.376921][T18897] handle_mm_fault+0x522b/0x9f70 [ 692.376921][T18897] do_user_addr_fault+0x905/0x1510 [ 692.376921][T18897] __do_page_fault+0x1a2/0x410 [ 692.376921][T18897] do_page_fault+0xbb/0x500 [ 692.376921][T18897] ? kmsan_unpoison_pt_regs+0x28/0x30 [ 692.376921][T18897] page_fault+0x4e/0x60 [ 692.376921][T18897] RIP: 0033:0x4116ef [ 692.376921][T18897] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 692.376921][T18897] RSP: 002b:0000000000a6fb10 EFLAGS: 00010206 [ 692.376921][T18897] RAX: 00007feccdace000 RBX: 0000000000020000 RCX: 0000000000459f4a [ 692.376921][T18897] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 692.376921][T18897] RBP: 0000000000a6fbf0 R08: ffffffffffffffff R09: 0000000000000000 [ 692.376921][T18897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a6fce0 [ 692.376921][T18897] R13: 00007feccdaee700 R14: 0000000000000002 R15: 000000000075c07c [ 692.528958][T18897] memory: usage 1860kB, limit 0kB, failcnt 4611 [ 692.535315][T18897] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 692.542218][T18897] Memory cgroup stats for /syz2: [ 692.542511][T18897] anon 294912 [ 692.542511][T18897] file 180224 [ 692.542511][T18897] kernel_stack 196608 [ 692.542511][T18897] slab 1019904 [ 692.542511][T18897] sock 0 [ 692.542511][T18897] shmem 53248 [ 692.542511][T18897] file_mapped 0 [ 692.542511][T18897] file_dirty 0 [ 692.542511][T18897] file_writeback 0 [ 692.542511][T18897] anon_thp 0 [ 692.542511][T18897] inactive_anon 0 [ 692.542511][T18897] active_anon 204800 [ 692.542511][T18897] inactive_file 135168 [ 692.542511][T18897] active_file 0 [ 692.542511][T18897] unevictable 0 [ 692.542511][T18897] slab_reclaimable 0 [ 692.542511][T18897] slab_unreclaimable 1019904 [ 692.542511][T18897] pgfault 13662 [ 692.542511][T18897] pgmajfault 0 [ 692.542511][T18897] workingset_refault 0 [ 692.542511][T18897] workingset_activate 0 [ 692.542511][T18897] workingset_nodereclaim 0 [ 692.542511][T18897] pgrefill 0 [ 692.542511][T18897] pgscan 0 [ 692.542511][T18897] pgsteal 0 [ 692.542511][T18897] pgactivate 0 [ 692.637372][T18897] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=18897,uid=0 18:46:02 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000280)=ANY=[@ANYRES32]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xc) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', 0x0}) [ 692.653168][T18897] Memory cgroup out of memory: Killed process 18897 (syz-executor.2) total-vm:72848kB, anon-rss:112kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 [ 692.673561][ T1834] oom_reaper: reaped process 18897 (syz-executor.2), now anon-rss:0kB, file-rss:33856kB, shmem-rss:0kB [ 692.684843][T18903] clocksource: Switched to clocksource acpi_pm 18:46:02 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c92465e5f9cc2d3fbf0322168078aba9d7ae45b0051a1221af2772a9567bb821942ce72590f1bf41d20d4c000000279bd612811df1fcaa94a96d58db92af7f9298918ae95b745777a1968e48d46358c8735e3b009f9d01000000000000005b5895e126de3d6d7c6949c6a87cf3ab2fbe80d1028d6e727a596c761e274e8f7bf745addbe19bd7642d38323564278e0410a966da6a254b9c2fa9c5d27796310a13c91878b74c9d615ae752a67e9373b0bc80f98ca3686a79c2dd0d6428fcbacb482ba7a33878f84fdc417a06cfa6d91426d3160fb649591b6d9523a05bf6c09be99b46692a885d573ba599041fde6a90e8758c", 0x128}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:46:02 executing program 0: syz_usb_connect$uac1(0x0, 0xab, &(0x7f0000001840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x99, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @output_terminal={0x9}, @processing_unit={0xd, 0x24, 0x7, 0x0, 0x0, 0x0, "188628ae4b1d"}, @processing_unit={0xa, 0x24, 0x7, 0x0, 0x0, 0x5, "40e513"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x0, 0x6}, @selector_unit={0x8, 0x24, 0x5, 0x6, 0x2, "ef5d1e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 18:46:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x71, &(0x7f0000000180)={r3}, 0x8) 18:46:03 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000280)=ANY=[@ANYRES32]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xc) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', 0x0}) [ 692.888258][ T2808] usb 1-1: unable to read config index 0 descriptor/all [ 692.895707][ T2808] usb 1-1: can't read configurations, error -71 18:46:03 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) 18:46:03 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="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", 0x128}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:46:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000280)=ANY=[@ANYRES32=r0]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'syz_tun\x00', 0x0}) [ 693.303652][ T2808] usb 1-1: new high-speed USB device number 87 using dummy_hcd 18:46:03 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x100) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0xc0096616, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)=0x100000001, 0x12) write$cgroup_int(r2, 0x0, 0x0) 18:46:03 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0xd, &(0x7f00000000c0), 0x8) 18:46:03 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="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", 0x128}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:46:03 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) [ 693.544531][ T2808] usb 1-1: Using ep0 maxpacket: 32 18:46:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000280)=ANY=[@ANYRES32=r0]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'syz_tun\x00', 0x0}) [ 693.659572][T12851] Left network mode 18:46:03 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="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", 0x128}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) [ 693.693559][ T2808] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 693.704088][ T2808] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 693.905777][ T2808] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 693.915585][ T2808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.924321][ T2808] usb 1-1: Product: syz [ 693.928614][ T2808] usb 1-1: Manufacturer: syz [ 693.933408][ T2808] usb 1-1: SerialNumber: syz [ 694.323900][ T2808] usb 1-1: 0:2 : does not exist [ 694.359261][ T2808] usb 1-1: USB disconnect, device number 87 18:46:04 executing program 0: syz_usb_connect$uac1(0x0, 0xab, &(0x7f0000001840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x99, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @output_terminal={0x9}, @processing_unit={0xd, 0x24, 0x7, 0x0, 0x0, 0x0, "188628ae4b1d"}, @processing_unit={0xa, 0x24, 0x7, 0x0, 0x0, 0x5, "40e513"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x0, 0x6}, @selector_unit={0x8, 0x24, 0x5, 0x6, 0x2, "ef5d1e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 18:46:04 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) 18:46:04 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x100) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0xc0096616, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)=0x100000001, 0x12) write$cgroup_int(r2, 0x0, 0x0) 18:46:04 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="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", 0x128}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 18:46:04 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000280)=ANY=[@ANYRES32=r0]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'syz_tun\x00', 0x0}) 18:46:04 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x100) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0xc0096616, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)=0x100000001, 0x12) write$cgroup_int(r2, 0x0, 0x0) [ 694.808005][T12851] device bridge_slave_1 left promiscuous mode [ 694.815392][T12851] bridge0: port 2(bridge_slave_1) entered disabled state 18:46:04 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c92465e5f9cc2d3fbf0322168078aba9d7ae45b0051a1221af2772a9567bb821942ce72590f1bf41d20d4c000000279bd612811df1fcaa94a96d58db92af7f9298918ae95b745777a1968e48d46358c8735e3b009f9d01000000000000005b5895e126de3d6d7c6949c6a87cf3ab2fbe80d1028d6e727a596c761e274e8f7bf745addbe19bd7642d38323564278e0410a966da6a254b9c2fa9c5d27796310a13c91878b74c9d615ae752a67e9373b0bc80f98ca3686a79c2dd0d6428fcbacb482ba7a33878f84fdc417a06cfa6d91426d3160fb649591b6d9523a05bf6c09be99b46692a885d573ba599041fde6a90e8758c", 0x128}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) [ 694.874081][T12851] device bridge_slave_0 left promiscuous mode [ 694.881117][T12851] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.941070][T18973] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 694.951711][T18973] CPU: 1 PID: 18973 Comm: syz-executor.1 Not tainted 5.4.0-rc3+ #0 [ 694.959681][T18973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 694.961418][T18973] Call Trace: [ 694.961418][T18973] dump_stack+0x191/0x1f0 [ 694.961418][T18973] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 694.961418][T18973] dump_header+0x1e7/0xd00 [ 694.961418][T18973] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 694.961418][T18973] ? ___ratelimit+0x542/0x720 [ 694.961418][T18973] ? task_will_free_mem+0x14c/0x810 [ 694.961418][T18973] oom_kill_process+0x210/0x560 [ 694.961418][T18973] out_of_memory+0x1796/0x1c70 [ 694.961418][T18973] ? kmsan_internal_set_origin+0x6a/0xb0 [ 694.961418][T18973] memory_max_write+0x90b/0xb60 [ 694.961418][T18973] ? memory_max_show+0x1b0/0x1b0 [ 694.961418][T18973] cgroup_file_write+0x41a/0x8e0 [ 694.961418][T18973] ? cgroup_seqfile_stop+0x150/0x150 [ 694.961418][T18973] kernfs_fop_write+0x55f/0x840 [ 695.043334][T18973] ? kernfs_fop_read+0x9a0/0x9a0 [ 695.043334][T18973] __vfs_write+0x1a9/0xcb0 [ 695.043334][T18973] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 695.043334][T18973] ? __sb_start_write+0x10b/0x230 [ 695.043334][T18973] vfs_write+0x481/0x920 [ 695.043334][T18973] ksys_write+0x265/0x430 [ 695.043334][T18973] __se_sys_write+0x92/0xb0 [ 695.043334][T18973] __x64_sys_write+0x4a/0x70 [ 695.043334][T18973] do_syscall_64+0xb6/0x160 [ 695.043334][T18973] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 695.043334][T18973] RIP: 0033:0x459ef9 [ 695.043334][T18973] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 695.043334][T18973] RSP: 002b:00007fe5ea716c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 695.043334][T18973] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459ef9 [ 695.043334][T18973] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 695.043334][T18973] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 695.043334][T18973] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe5ea7176d4 [ 695.043334][T18973] R13: 00000000004ca4f4 R14: 00000000004e23a8 R15: 00000000ffffffff [ 695.168486][T18973] memory: usage 10236kB, limit 0kB, failcnt 8 [ 695.174729][T18973] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 695.181742][T18973] Memory cgroup stats for /syz1: [ 695.182103][T18973] anon 2424832 [ 695.182103][T18973] file 790528 [ 695.182103][T18973] kernel_stack 262144 [ 695.182103][T18973] slab 995328 [ 695.182103][T18973] sock 5324800 [ 695.182103][T18973] shmem 790528 [ 695.182103][T18973] file_mapped 135168 [ 695.182103][T18973] file_dirty 0 [ 695.182103][T18973] file_writeback 0 [ 695.182103][T18973] anon_thp 2097152 [ 695.182103][T18973] inactive_anon 811008 [ 695.182103][T18973] active_anon 2338816 [ 695.182103][T18973] inactive_file 0 [ 695.182103][T18973] active_file 0 [ 695.182103][T18973] unevictable 0 [ 695.182103][T18973] slab_reclaimable 0 [ 695.182103][T18973] slab_unreclaimable 995328 [ 695.182103][T18973] pgfault 22902 [ 695.182103][T18973] pgmajfault 0 [ 695.182103][T18973] workingset_refault 0 [ 695.182103][T18973] workingset_activate 0 [ 695.182103][T18973] workingset_nodereclaim 0 [ 695.182103][T18973] pgrefill 0 [ 695.182103][T18973] pgscan 0 [ 695.182103][T18973] pgsteal 0 [ 695.182103][T18973] pgactivate 0 18:46:05 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x100) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0xc0096616, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)=0x100000001, 0x12) write$cgroup_int(r2, 0x0, 0x0) [ 695.278688][T18973] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=18967,uid=0 [ 695.294638][T18973] Memory cgroup out of memory: Killed process 18967 (syz-executor.1) total-vm:72716kB, anon-rss:2164kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 [ 695.315530][ T1834] oom_reaper: reaped process 18967 (syz-executor.1), now anon-rss:0kB, file-rss:34828kB, shmem-rss:0kB [ 695.438206][T12898] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 695.448528][T12898] CPU: 1 PID: 12898 Comm: syz-executor.1 Not tainted 5.4.0-rc3+ #0 [ 695.456497][T12898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 695.458201][T12898] Call Trace: [ 695.458201][T12898] dump_stack+0x191/0x1f0 [ 695.458201][T12898] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 695.458201][T12898] dump_header+0x1e7/0xd00 [ 695.458201][T12898] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 695.458201][T12898] ? ___ratelimit+0x542/0x720 [ 695.458201][T12898] ? task_will_free_mem+0x2c9/0x810 [ 695.458201][T12898] oom_kill_process+0x210/0x560 [ 695.458201][T12898] out_of_memory+0x1796/0x1c70 [ 695.458201][T12898] ? kmsan_internal_set_origin+0x6a/0xb0 [ 695.516369][T12898] try_charge+0x2889/0x3d70 [ 695.516369][T12898] ? stack_trace_save+0x1b0/0x1b0 [ 695.523211][T12898] ? kmsan_get_metadata+0x39/0x350 [ 695.523211][T12898] mem_cgroup_try_charge+0xa29/0xe40 [ 695.523211][T12898] mem_cgroup_try_charge_delay+0x7e/0x140 [ 695.523211][T12898] wp_page_copy+0x776/0x26d0 [ 695.523211][T12898] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 695.523211][T12898] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 695.523211][T12898] ? kmsan_internal_set_origin+0x6a/0xb0 [ 695.523211][T12898] ? kmsan_get_shadow_origin_ptr+0x196/0x4b0 [ 695.523211][T12898] do_wp_page+0x1e8c/0x37f0 [ 695.523211][T12898] ? kmsan_internal_set_origin+0x6a/0xb0 [ 695.583241][T12898] handle_mm_fault+0x46e3/0x9f70 [ 695.583241][T12898] do_user_addr_fault+0x905/0x1510 [ 695.583241][T12898] __do_page_fault+0x1a2/0x410 [ 695.583241][T12898] do_page_fault+0xbb/0x500 [ 695.583241][T12898] ? kmsan_unpoison_pt_regs+0x28/0x30 [ 695.583241][T12898] page_fault+0x4e/0x60 [ 695.583241][T12898] RIP: 0033:0x474c0d [ 695.583241][T12898] Code: 54 55 53 48 81 ec 28 21 00 00 8b 8f c0 00 00 00 85 c9 0f 85 4d 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 01 00 00 <48> 89 bc 24 00 01 00 00 48 89 fb 41 bd 00 00 00 00 c7 84 24 e0 00 [ 695.583241][T12898] RSP: 002b:0000000000a6d5f0 EFLAGS: 00010246 [ 695.583241][T12898] RAX: 0000000000a6d710 RBX: 0000000000715f20 RCX: 00000000ffffffff [ 695.583241][T12898] RDX: 0000000000a6fcc0 RSI: 00000000004bf8af RDI: 0000000000715f20 [ 695.659230][T12898] RBP: 0000000000a6fc90 R08: 0000000000a76c70 R09: 00000000004bf8af [ 695.659230][T12898] R10: 0000000002308940 R11: 0000000000000246 R12: 00000000004bf8af [ 695.659230][T12898] R13: 0000000000a6fcc0 R14: 0000000000000000 R15: 0000000000a6fdf0 [ 695.684636][T12898] memory: usage 7764kB, limit 0kB, failcnt 31 [ 695.690807][T12898] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 695.697885][T12898] Memory cgroup stats for /syz1: [ 695.698196][T12898] anon 311296 [ 695.698196][T12898] file 790528 [ 695.698196][T12898] kernel_stack 65536 [ 695.698196][T12898] slab 995328 [ 695.698196][T12898] sock 5324800 [ 695.698196][T12898] shmem 790528 [ 695.698196][T12898] file_mapped 135168 [ 695.698196][T12898] file_dirty 0 [ 695.698196][T12898] file_writeback 0 [ 695.698196][T12898] anon_thp 0 [ 695.698196][T12898] inactive_anon 811008 [ 695.698196][T12898] active_anon 225280 [ 695.698196][T12898] inactive_file 0 [ 695.698196][T12898] active_file 0 [ 695.698196][T12898] unevictable 0 [ 695.698196][T12898] slab_reclaimable 0 [ 695.698196][T12898] slab_unreclaimable 995328 [ 695.698196][T12898] pgfault 22935 [ 695.698196][T12898] pgmajfault 0 [ 695.698196][T12898] workingset_refault 0 [ 695.698196][T12898] workingset_activate 0 [ 695.698196][T12898] workingset_nodereclaim 0 [ 695.698196][T12898] pgrefill 0 [ 695.698196][T12898] pgscan 0 [ 695.698196][T12898] pgsteal 0 [ 695.698196][T12898] pgactivate 0 [ 695.794971][T12898] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=18403,uid=0 [ 695.811030][T12898] Memory cgroup out of memory: Killed process 18403 (syz-executor.1) total-vm:72848kB, anon-rss:180kB, file-rss:35784kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 [ 695.867380][ T1834] oom_reaper: reaped process 18403 (syz-executor.1), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB [ 695.887356][T12898] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 695.897546][T12898] CPU: 1 PID: 12898 Comm: syz-executor.1 Not tainted 5.4.0-rc3+ #0 [ 695.905516][T12898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 695.907346][T12898] Call Trace: [ 695.907346][T12898] dump_stack+0x191/0x1f0 [ 695.907346][T12898] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 695.907346][T12898] dump_header+0x1e7/0xd00 [ 695.907346][T12898] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 695.907346][T12898] ? ___ratelimit+0x542/0x720 [ 695.907346][T12898] ? task_will_free_mem+0x2c9/0x810 [ 695.907346][T12898] oom_kill_process+0x210/0x560 [ 695.955475][T12898] out_of_memory+0x1796/0x1c70 [ 695.955475][T12898] ? kmsan_internal_set_origin+0x6a/0xb0 [ 695.955475][T12898] try_charge+0x2889/0x3d70 [ 695.955475][T12898] ? stack_trace_save+0x1b0/0x1b0 [ 695.955475][T12898] ? kmsan_get_metadata+0x39/0x350 [ 695.955475][T12898] mem_cgroup_try_charge+0xa29/0xe40 [ 695.955475][T12898] mem_cgroup_try_charge_delay+0x7e/0x140 [ 695.955475][T12898] wp_page_copy+0x776/0x26d0 [ 695.955475][T12898] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 696.001865][T12898] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 696.001865][T12898] ? kmsan_internal_set_origin+0x6a/0xb0 [ 696.001865][T12898] ? kmsan_get_shadow_origin_ptr+0x196/0x4b0 [ 696.001865][T12898] do_wp_page+0x1e8c/0x37f0 [ 696.001865][T12898] ? kmsan_internal_set_origin+0x6a/0xb0 [ 696.001865][T12898] handle_mm_fault+0x46e3/0x9f70 [ 696.001865][T12898] do_user_addr_fault+0x905/0x1510 [ 696.001865][T12898] __do_page_fault+0x1a2/0x410 [ 696.001865][T12898] do_page_fault+0xbb/0x500 [ 696.001865][T12898] ? kmsan_unpoison_pt_regs+0x28/0x30 [ 696.001865][T12898] page_fault+0x4e/0x60 [ 696.001865][T12898] RIP: 0033:0x474c0d [ 696.001865][T12898] Code: 54 55 53 48 81 ec 28 21 00 00 8b 8f c0 00 00 00 85 c9 0f 85 4d 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 01 00 00 <48> 89 bc 24 00 01 00 00 48 89 fb 41 bd 00 00 00 00 c7 84 24 e0 00 [ 696.074461][T12898] RSP: 002b:0000000000a6d5f0 EFLAGS: 00010246 [ 696.074461][T12898] RAX: 0000000000a6d710 RBX: 0000000000715f20 RCX: 00000000ffffffff [ 696.074461][T12898] RDX: 0000000000a6fcc0 RSI: 00000000004bf8af RDI: 0000000000715f20 [ 696.074461][T12898] RBP: 0000000000a6fc90 R08: 0000000000a76c70 R09: 00000000004bf8af [ 696.074461][T12898] R10: 0000000002308940 R11: 0000000000000246 R12: 00000000004bf8af [ 696.129414][T12898] R13: 0000000000a6fcc0 R14: 0000000000000000 R15: 0000000000a6fdf0 [ 696.142069][T12898] memory: usage 7492kB, limit 0kB, failcnt 73 [ 696.148601][T12898] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 696.157443][T12898] Memory cgroup stats for /syz1: [ 696.157769][T12898] anon 172032 [ 696.157769][T12898] file 790528 [ 696.157769][T12898] kernel_stack 65536 [ 696.157769][T12898] slab 995328 [ 696.157769][T12898] sock 5324800 [ 696.157769][T12898] shmem 790528 [ 696.157769][T12898] file_mapped 135168 [ 696.157769][T12898] file_dirty 0 [ 696.157769][T12898] file_writeback 0 [ 696.157769][T12898] anon_thp 0 [ 696.157769][T12898] inactive_anon 811008 [ 696.157769][T12898] active_anon 90112 [ 696.157769][T12898] inactive_file 0 [ 696.157769][T12898] active_file 0 [ 696.157769][T12898] unevictable 0 [ 696.157769][T12898] slab_reclaimable 0 [ 696.157769][T12898] slab_unreclaimable 995328 [ 696.157769][T12898] pgfault 22935 [ 696.157769][T12898] pgmajfault 0 [ 696.157769][T12898] workingset_refault 0 [ 696.157769][T12898] workingset_activate 0 [ 696.157769][T12898] workingset_nodereclaim 0 [ 696.157769][T12898] pgrefill 0 [ 696.157769][T12898] pgscan 0 [ 696.157769][T12898] pgsteal 0 [ 696.157769][T12898] pgactivate 0 18:46:06 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c92465e5f9cc2d3fbf0322168078aba9d7ae45b0051a1221af2772a9567bb821942ce72590f1bf41d20d4c000000279bd612811df1fcaa94a96d58db92af7f9298918ae95b745777a1968e48d46358c8735e3b009f9d01000000000000005b5895e126de3d6d7c6949c6a87cf3ab2fbe80d1028d6e727a596c761e274e8f7bf745addbe19bd7642d38323564278e0410a966da6a254b9c2fa9c5d27796310a13c91878b74c9d615ae752a67e9373b0bc80f98ca3686a79c2dd0d6428fcbacb482ba7a33878f84fdc417a06cfa6d91426d3160fb649591b6d9523a05bf6c09be99b46692a885d573ba599041fde6a90e8758c", 0x128}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 696.256747][T12898] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=12898,uid=0 [ 696.274038][T12898] Memory cgroup out of memory: Killed process 12898 (syz-executor.1) total-vm:72452kB, anon-rss:116kB, file-rss:35776kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:0 [ 696.292221][T12940] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 696.293519][ T1834] oom_reaper: reaped process 12898 (syz-executor.1), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB [ 696.403610][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 696.409813][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 696.416236][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 696.422348][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 696.428665][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 696.434895][ C1] protocol 88fb is buggy, dev hsr_slave_1 18:46:06 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c92465e5f9cc2d3fbf0322168078aba9d7ae45b0051a1221af2772a9567bb821942ce72590f1bf41d20d4c000000279bd612811df1fcaa94a96d58db92af7f9298918ae95b745777a1968e48d46358c8735e3b009f9d01000000000000005b5895e126de3d6d7c6949c6a87cf3ab2fbe80d1028d6e727a596c761e274e8f7bf745addbe19bd7642d38323564278e0410a966da6a254b9c2fa9c5d27796310a13c91878b74c9d615ae752a67e9373b0bc80f98ca3686a79c2dd0d6428fcbacb482ba7a33878f84fdc417a06cfa6d91426d3160fb649591b6d9523a05bf6c09be99b46692a885d573ba599041fde6a90e8758c", 0x128}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 696.553553][T12940] usb 1-1: Using ep0 maxpacket: 32 18:46:06 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="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", 0x128}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 696.683649][T12940] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 696.694353][T12940] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 696.804075][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 696.810414][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 696.884090][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 696.890514][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 696.903661][T12940] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 696.912934][T12940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.921168][T12940] usb 1-1: Product: syz [ 696.925515][T12940] usb 1-1: Manufacturer: syz 18:46:07 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="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", 0x128}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 696.930192][T12940] usb 1-1: SerialNumber: syz [ 697.284142][T12940] usb 1-1: 0:2 : does not exist [ 697.317153][T12940] usb 1-1: USB disconnect, device number 88 18:46:07 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="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", 0x128}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 698.374746][T12851] device hsr_slave_0 left promiscuous mode [ 698.414046][T12851] device hsr_slave_1 left promiscuous mode [ 698.483791][T12851] team0 (unregistering): Port device team_slave_1 removed [ 698.499949][T12851] team0 (unregistering): Port device team_slave_0 removed [ 698.518728][T12851] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 698.615447][T12851] bond0 (unregistering): Released all slaves [ 698.754194][T19010] IPVS: ftp: loaded support on port[0] = 21 18:46:08 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b00") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) 18:46:08 executing program 0: syz_usb_connect$uac1(0x0, 0x9f, &(0x7f0000001840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @output_terminal={0x9}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x5, "40e513e1"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x0, 0x6}, @selector_unit={0x8, 0x24, 0x5, 0x6, 0x2, "ef5d1e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 18:46:08 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="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", 0x128}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:46:08 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xc) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', 0x0}) [ 699.214334][T12852] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 699.336054][T19010] chnl_net:caif_netlink_parms(): no params data found [ 699.398642][T19010] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.406107][T19010] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.415338][T19010] device bridge_slave_0 entered promiscuous mode [ 699.427611][T19010] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.434947][T19010] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.444388][T19010] device bridge_slave_1 entered promiscuous mode [ 699.481717][T19010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 699.491434][T12852] usb 1-1: Using ep0 maxpacket: 32 [ 699.501145][T19010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 699.528212][T19010] team0: Port device team_slave_0 added [ 699.537100][T19010] team0: Port device team_slave_1 added [ 699.588406][T19010] device hsr_slave_0 entered promiscuous mode [ 699.613603][T12852] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 699.624015][T12852] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 699.635118][T19010] device hsr_slave_1 entered promiscuous mode [ 699.673751][T19010] debugfs: Directory 'hsr0' with parent '/' already present! [ 699.698498][T19010] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.705705][T19010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 699.713590][T19010] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.720761][T19010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 699.793503][T12852] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 699.795581][T19010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 699.802739][T12852] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.817602][T12852] usb 1-1: Product: syz [ 699.821854][T12852] usb 1-1: Manufacturer: syz [ 699.825087][T12900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 699.826642][T12852] usb 1-1: SerialNumber: syz [ 699.840350][T12900] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.851610][T12900] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.870380][T19010] 8021q: adding VLAN 0 to HW filter on device team0 [ 699.886418][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 699.896845][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 699.905935][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.913263][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 699.933444][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 699.942772][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 699.952700][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.960093][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 699.968391][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 699.983735][T12940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 700.001014][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 700.011320][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 700.022180][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 700.045036][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 700.056076][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 700.066419][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 700.075932][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 700.089373][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 700.098922][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 700.115825][T19010] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 700.149133][T19010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 700.164059][T12852] usb 1-1: 0:2 : does not exist [ 700.184256][T12852] usb 1-1: USB disconnect, device number 89 [ 700.327945][T19034] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 700.338423][T19034] CPU: 1 PID: 19034 Comm: syz-executor.2 Not tainted 5.4.0-rc3+ #0 [ 700.346346][T19034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 700.356096][T19034] Call Trace: [ 700.359717][T19034] dump_stack+0x191/0x1f0 [ 700.364376][T19034] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 700.370276][T19034] dump_header+0x1e7/0xd00 [ 700.373954][T19034] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 700.379992][T19034] ? ___ratelimit+0x542/0x720 [ 700.384962][T19034] ? task_will_free_mem+0x14c/0x810 [ 700.391107][T19034] oom_kill_process+0x210/0x560 [ 700.395948][T19034] out_of_memory+0x1796/0x1c70 [ 700.400795][T19034] ? kmsan_internal_set_origin+0x6a/0xb0 [ 700.405678][T19034] memory_max_write+0x90b/0xb60 [ 700.411853][T19034] ? memory_max_show+0x1b0/0x1b0 [ 700.416763][T19034] cgroup_file_write+0x41a/0x8e0 [ 700.421476][T19034] ? cgroup_seqfile_stop+0x150/0x150 [ 700.427381][T19034] kernfs_fop_write+0x55f/0x840 [ 700.431955][T19034] ? kernfs_fop_read+0x9a0/0x9a0 [ 700.436932][T19034] __vfs_write+0x1a9/0xcb0 [ 700.441772][T19034] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 700.447821][T19034] ? __sb_start_write+0x10b/0x230 [ 700.452766][T19034] vfs_write+0x481/0x920 [ 700.456478][T19034] ksys_write+0x265/0x430 [ 700.461325][T19034] __se_sys_write+0x92/0xb0 [ 700.466278][T19034] __x64_sys_write+0x4a/0x70 [ 700.469957][T19034] do_syscall_64+0xb6/0x160 [ 700.474929][T19034] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 700.481055][T19034] RIP: 0033:0x459ef9 [ 700.484701][T19034] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 700.504079][T19034] RSP: 002b:00007f103b244c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 700.513734][T19034] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459ef9 [ 700.520997][T19034] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 700.529450][T19034] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 700.537711][T19034] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f103b2456d4 [ 700.544953][T19034] R13: 00000000004ca4f4 R14: 00000000004e23a8 R15: 00000000ffffffff [ 700.555189][T19034] memory: usage 7336kB, limit 0kB, failcnt 4629 [ 700.561490][T19034] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 700.568567][T19034] Memory cgroup stats for /syz2: [ 700.568875][T19034] anon 2162688 [ 700.568875][T19034] file 3543040 [ 700.568875][T19034] kernel_stack 196608 [ 700.568875][T19034] slab 1019904 [ 700.568875][T19034] sock 0 [ 700.568875][T19034] shmem 3567616 [ 700.568875][T19034] file_mapped 0 [ 700.568875][T19034] file_dirty 0 [ 700.568875][T19034] file_writeback 0 [ 700.568875][T19034] anon_thp 2097152 [ 700.568875][T19034] inactive_anon 3649536 [ 700.568875][T19034] active_anon 2162688 [ 700.568875][T19034] inactive_file 135168 [ 700.568875][T19034] active_file 0 [ 700.568875][T19034] unevictable 0 [ 700.568875][T19034] slab_reclaimable 0 [ 700.568875][T19034] slab_unreclaimable 1019904 [ 700.568875][T19034] pgfault 13728 [ 700.568875][T19034] pgmajfault 0 [ 700.568875][T19034] workingset_refault 0 [ 700.568875][T19034] workingset_activate 0 [ 700.568875][T19034] workingset_nodereclaim 0 [ 700.568875][T19034] pgrefill 0 [ 700.568875][T19034] pgscan 0 [ 700.568875][T19034] pgsteal 0 [ 700.568875][T19034] pgactivate 0 18:46:10 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x100) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0xc0096616, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)=0x100000001, 0x12) write$cgroup_int(r2, 0x0, 0x0) 18:46:10 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="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", 0x128}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:46:10 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x100) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0xc0096616, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)=0x100000001, 0x12) write$cgroup_int(r2, 0x0, 0x0) [ 700.664652][T19034] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=19032,uid=0 [ 700.680491][T19034] Memory cgroup out of memory: Killed process 19032 (syz-executor.2) total-vm:72720kB, anon-rss:2152kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:139264kB oom_score_adj:1000 [ 700.701339][ T1834] oom_reaper: reaped process 19032 (syz-executor.2), now anon-rss:0kB, file-rss:33856kB, shmem-rss:0kB 18:46:10 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b00") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) [ 700.754460][T19010] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 700.764695][T19010] CPU: 1 PID: 19010 Comm: syz-executor.2 Not tainted 5.4.0-rc3+ #0 [ 700.772659][T19010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 700.774480][T19010] Call Trace: [ 700.774480][T19010] dump_stack+0x191/0x1f0 [ 700.774480][T19010] dump_header+0x1e7/0xd00 [ 700.774480][T19010] ? __msan_metadata_ptr_for_store_1+0x13/0x20 18:46:10 executing program 0: syz_usb_connect$uac1(0x0, 0x9f, &(0x7f0000001840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @output_terminal={0x9}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x5, "40e513e1"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x0, 0x6}, @selector_unit={0x8, 0x24, 0x5, 0x6, 0x2, "ef5d1e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 18:46:10 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xc) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', 0x0}) [ 700.774480][T19010] ? ___ratelimit+0x542/0x720 [ 700.774480][T19010] ? task_will_free_mem+0x2c9/0x810 [ 700.774480][T19010] oom_kill_process+0x210/0x560 [ 700.774480][T19010] out_of_memory+0x1796/0x1c70 [ 700.774480][T19010] ? kmsan_internal_set_origin+0x6a/0xb0 [ 700.822110][T19010] try_charge+0x2889/0x3d70 [ 700.822110][T19010] mem_cgroup_try_charge+0xa29/0xe40 [ 700.822110][T19010] mem_cgroup_try_charge_delay+0x7e/0x140 [ 700.822110][T19010] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 700.822110][T19010] handle_mm_fault+0x522b/0x9f70 [ 700.822110][T19010] do_user_addr_fault+0x905/0x1510 [ 700.822110][T19010] __do_page_fault+0x1a2/0x410 [ 700.822110][T19010] do_page_fault+0xbb/0x500 [ 700.822110][T19010] ? kmsan_unpoison_pt_regs+0x28/0x30 [ 700.822110][T19010] page_fault+0x4e/0x60 [ 700.822110][T19010] RIP: 0033:0x403a42 [ 700.822110][T19010] Code: 55 41 54 49 89 fc 55 53 48 81 ec b8 10 00 00 64 48 8b 04 25 28 00 00 00 48 89 84 24 a8 10 00 00 31 c0 be 02 00 00 00 4c 89 e7 d9 8e 05 00 85 c0 0f 84 00 03 00 00 4c 89 e7 e8 f9 43 05 00 48 [ 700.822110][T19010] RSP: 002b:0000000000a6ecc0 EFLAGS: 00010246 [ 700.822110][T19010] RAX: 0000000000000000 RBX: 00000000000aaffb RCX: 00000000004139b0 [ 700.822110][T19010] RDX: 000000000000000c RSI: 0000000000000002 RDI: 0000000000a6fdf0 [ 700.822110][T19010] RBP: 0000000000000002 R08: 0000000000000001 R09: 00000000010ab940 [ 700.822110][T19010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a6fdf0 [ 700.822110][T19010] R13: 0000000000a6fde0 R14: 0000000000000000 R15: 0000000000a6fdf0 [ 700.949223][T19010] memory: usage 4868kB, limit 0kB, failcnt 4648 18:46:11 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b00") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) [ 700.955717][T19010] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 700.962613][T19010] Memory cgroup stats for /syz2: [ 700.962939][T19010] anon 0 [ 700.962939][T19010] file 3543040 [ 700.962939][T19010] kernel_stack 0 [ 700.962939][T19010] slab 1019904 [ 700.962939][T19010] sock 0 [ 700.962939][T19010] shmem 3567616 [ 700.962939][T19010] file_mapped 0 [ 700.962939][T19010] file_dirty 0 [ 700.962939][T19010] file_writeback 0 [ 700.962939][T19010] anon_thp 0 [ 700.962939][T19010] inactive_anon 3649536 [ 700.962939][T19010] active_anon 0 [ 700.962939][T19010] inactive_file 135168 [ 700.962939][T19010] active_file 0 [ 700.962939][T19010] unevictable 0 [ 700.962939][T19010] slab_reclaimable 0 [ 700.962939][T19010] slab_unreclaimable 1019904 [ 700.962939][T19010] pgfault 13728 [ 700.962939][T19010] pgmajfault 0 [ 700.962939][T19010] workingset_refault 0 [ 700.962939][T19010] workingset_activate 0 [ 700.962939][T19010] workingset_nodereclaim 0 [ 700.962939][T19010] pgrefill 0 [ 700.962939][T19010] pgscan 0 [ 700.962939][T19010] pgsteal 0 [ 700.962939][T19010] pgactivate 0 [ 701.056824][T19010] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=19010,uid=0 [ 701.072607][T19010] Memory cgroup out of memory: Killed process 19010 (syz-executor.2) total-vm:72456kB, anon-rss:80kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:0 [ 701.091893][ T1834] oom_reaper: reaped process 19010 (syz-executor.2), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB 18:46:11 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xc) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', 0x0}) 18:46:11 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="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", 0x128}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 701.383437][T12852] usb 1-1: new high-speed USB device number 90 using dummy_hcd 18:46:11 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="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", 0x128}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:46:11 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(0xffffffffffffffff, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) [ 701.624812][T12852] usb 1-1: Using ep0 maxpacket: 32 18:46:11 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'syz_tun\x00'}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xc) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', 0x0}) 18:46:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8}]]}}}]}, 0x3c}}, 0x0) [ 701.745506][T12852] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 701.755869][T12852] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 701.953595][T12852] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 701.962945][T12852] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.971174][T12852] usb 1-1: Product: syz [ 701.975491][T12852] usb 1-1: Manufacturer: syz [ 701.980160][T12852] usb 1-1: SerialNumber: syz 18:46:12 executing program 2: r0 = socket$kcm(0x2, 0x3, 0x2) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1e, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00@\x00\x00\x00\xf7\x00'}) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f00000003c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00\x00\x00\x00\x00\xf7\x00', @broadcast}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 702.363864][T12852] usb 1-1: 0:2 : does not exist [ 702.427573][T12852] usb 1-1: USB disconnect, device number 90 [ 703.254958][T12890] device bridge_slave_1 left promiscuous mode [ 703.261492][T12890] bridge0: port 2(bridge_slave_1) entered disabled state [ 703.295612][T12890] device bridge_slave_0 left promiscuous mode [ 703.302280][T12890] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.650898][T19079] IPVS: ftp: loaded support on port[0] = 21 [ 704.289706][T19081] IPVS: ftp: loaded support on port[0] = 21 [ 704.301173][T12890] device hsr_slave_0 left promiscuous mode [ 704.333765][T12890] device hsr_slave_1 left promiscuous mode [ 704.394331][T12890] team0 (unregistering): Port device team_slave_1 removed [ 704.409034][T12890] team0 (unregistering): Port device team_slave_0 removed [ 704.420927][T12890] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 704.459057][T12890] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 704.536059][T12890] bond0 (unregistering): Released all slaves [ 704.784571][T19081] chnl_net:caif_netlink_parms(): no params data found [ 704.875191][T19081] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.882413][T19081] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.891584][T19081] device bridge_slave_0 entered promiscuous mode [ 704.905524][T19081] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.912712][T19081] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.921685][T19081] device bridge_slave_1 entered promiscuous mode [ 704.943747][T19079] chnl_net:caif_netlink_parms(): no params data found [ 704.968048][T19081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 704.986777][T19081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 705.088898][T19081] team0: Port device team_slave_0 added [ 705.098773][T19081] team0: Port device team_slave_1 added [ 705.157378][T19079] bridge0: port 1(bridge_slave_0) entered blocking state [ 705.164828][T19079] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.174020][T19079] device bridge_slave_0 entered promiscuous mode [ 705.247464][T19081] device hsr_slave_0 entered promiscuous mode [ 705.293904][T19081] device hsr_slave_1 entered promiscuous mode [ 705.373389][T19081] debugfs: Directory 'hsr0' with parent '/' already present! [ 705.381465][T19079] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.388869][T19079] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.397646][T19079] device bridge_slave_1 entered promiscuous mode [ 705.430616][T19079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 705.444560][T19079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 705.479944][T19079] team0: Port device team_slave_0 added [ 705.488774][T19079] team0: Port device team_slave_1 added [ 705.587822][T19079] device hsr_slave_0 entered promiscuous mode [ 705.644502][T19079] device hsr_slave_1 entered promiscuous mode [ 705.683449][T19079] debugfs: Directory 'hsr0' with parent '/' already present! [ 705.832018][T19081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 705.859149][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 705.868429][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 705.888243][T19081] 8021q: adding VLAN 0 to HW filter on device team0 [ 705.904629][T19079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 705.917101][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 705.927086][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 705.936751][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 705.944048][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 705.956221][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 705.980482][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 705.990446][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 706.001535][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 706.008816][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 706.024493][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 706.033841][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 706.049160][T19079] 8021q: adding VLAN 0 to HW filter on device team0 [ 706.061806][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 706.078925][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 706.089035][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 706.098500][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 706.105871][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 706.117764][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 706.127426][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 706.149163][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 706.159237][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 706.170528][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 706.177874][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 706.186544][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 706.196626][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 706.244527][T19081] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 706.256004][T19081] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 706.269764][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 706.279238][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 706.288971][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 706.298907][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 706.308559][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 706.318048][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 706.327546][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 706.337425][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 706.346782][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 706.356602][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 706.365600][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 706.375032][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 706.385141][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 706.394836][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 706.404110][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 706.417884][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 706.427918][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 706.459214][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 706.468693][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 706.489658][T19079] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 706.526713][T19081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 706.545973][T19079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 706.726278][T19091] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 706.736680][T19091] CPU: 0 PID: 19091 Comm: syz-executor.1 Not tainted 5.4.0-rc3+ #0 [ 706.744637][T19091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 706.754522][T19091] Call Trace: [ 706.754522][T19091] dump_stack+0x191/0x1f0 [ 706.754522][T19091] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 706.754522][T19091] dump_header+0x1e7/0xd00 [ 706.754522][T19091] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 706.754522][T19091] ? ___ratelimit+0x542/0x720 [ 706.754522][T19091] ? task_will_free_mem+0x14c/0x810 [ 706.754522][T19091] oom_kill_process+0x210/0x560 [ 706.754522][T19091] out_of_memory+0x1796/0x1c70 [ 706.754522][T19091] ? kmsan_internal_set_origin+0x6a/0xb0 [ 706.754522][T19091] memory_max_write+0x90b/0xb60 [ 706.754522][T19091] ? memory_max_show+0x1b0/0x1b0 [ 706.754522][T19091] cgroup_file_write+0x41a/0x8e0 [ 706.754522][T19091] ? cgroup_seqfile_stop+0x150/0x150 [ 706.754522][T19091] kernfs_fop_write+0x55f/0x840 [ 706.754522][T19091] ? kernfs_fop_read+0x9a0/0x9a0 [ 706.754522][T19091] __vfs_write+0x1a9/0xcb0 [ 706.754522][T19091] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 706.845553][T19091] ? __sb_start_write+0x10b/0x230 [ 706.850925][T19091] vfs_write+0x481/0x920 [ 706.855243][T19091] ksys_write+0x265/0x430 [ 706.858852][T19091] __se_sys_write+0x92/0xb0 [ 706.863925][T19091] __x64_sys_write+0x4a/0x70 [ 706.868976][T19091] do_syscall_64+0xb6/0x160 [ 706.872759][T19091] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 706.879226][T19091] RIP: 0033:0x459ef9 [ 706.883137][T19091] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 706.903503][T19091] RSP: 002b:00007f8802e2ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 706.911578][T19091] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459ef9 [ 706.920551][T19091] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 706.928452][T19091] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 706.936070][T19091] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8802e2f6d4 [ 706.943530][T19091] R13: 00000000004ca4f4 R14: 00000000004e23a8 R15: 00000000ffffffff [ 706.952939][T19091] memory: usage 10688kB, limit 0kB, failcnt 82 [ 706.959318][T19091] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 706.966346][T19091] Memory cgroup stats for /syz1: [ 706.966702][T19091] anon 2183168 [ 706.966702][T19091] file 1851392 [ 706.966702][T19091] kernel_stack 196608 [ 706.966702][T19091] slab 995328 [ 706.966702][T19091] sock 5324800 [ 706.966702][T19091] shmem 1851392 [ 706.966702][T19091] file_mapped 135168 [ 706.966702][T19091] file_dirty 0 [ 706.966702][T19091] file_writeback 0 [ 706.966702][T19091] anon_thp 2097152 [ 706.966702][T19091] inactive_anon 1757184 [ 706.966702][T19091] active_anon 2183168 [ 706.966702][T19091] inactive_file 0 [ 706.966702][T19091] active_file 0 [ 706.966702][T19091] unevictable 0 [ 706.966702][T19091] slab_reclaimable 0 [ 706.966702][T19091] slab_unreclaimable 995328 [ 706.966702][T19091] pgfault 23001 [ 706.966702][T19091] pgmajfault 0 [ 706.966702][T19091] workingset_refault 0 [ 706.966702][T19091] workingset_activate 0 [ 706.966702][T19091] workingset_nodereclaim 0 [ 706.966702][T19091] pgrefill 0 [ 706.966702][T19091] pgscan 0 [ 706.966702][T19091] pgsteal 0 [ 706.966702][T19091] pgactivate 0 [ 707.062917][T19091] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=19088,uid=0 [ 707.078834][T19091] Memory cgroup out of memory: Killed process 19088 (syz-executor.1) total-vm:72720kB, anon-rss:2148kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 [ 707.105206][ T1834] oom_reaper: reaped process 19088 (syz-executor.1), now anon-rss:0kB, file-rss:34828kB, shmem-rss:0kB [ 707.116210][T19090] device team0 entered promiscuous mode [ 707.121889][T19090] device team_slave_0 entered promiscuous mode [ 707.129346][T19090] device team_slave_1 entered promiscuous mode [ 707.138754][T19090] 8021q: adding VLAN 0 to HW filter on device team0 [ 707.161930][T19079] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 707.172908][T19079] CPU: 0 PID: 19079 Comm: syz-executor.1 Not tainted 5.4.0-rc3+ #0 [ 707.180866][T19079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 707.181968][T19079] Call Trace: [ 707.181968][T19079] dump_stack+0x191/0x1f0 [ 707.181968][T19079] dump_header+0x1e7/0xd00 [ 707.181968][T19079] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 707.181968][T19079] ? ___ratelimit+0x542/0x720 [ 707.181968][T19079] ? task_will_free_mem+0x2c9/0x810 [ 707.181968][T19079] oom_kill_process+0x210/0x560 [ 707.181968][T19079] out_of_memory+0x1796/0x1c70 [ 707.181968][T19079] ? kmsan_internal_set_origin+0x6a/0xb0 [ 707.181968][T19079] try_charge+0x2889/0x3d70 [ 707.181968][T19079] ? kmsan_memcpy_memmove_metadata+0x109/0x2e0 [ 707.181968][T19079] mem_cgroup_try_charge+0xa29/0xe40 [ 707.181968][T19079] mem_cgroup_try_charge_delay+0x7e/0x140 [ 707.181968][T19079] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 707.181968][T19079] handle_mm_fault+0x522b/0x9f70 [ 707.181968][T19079] do_user_addr_fault+0x905/0x1510 [ 707.181968][T19079] __do_page_fault+0x1a2/0x410 18:46:17 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001840)={0x8, 0x0, [{0x0, 0xfffffffffffffd57, &(0x7f0000000280)=""/88}, {0x0, 0x61, &(0x7f0000000300)=""/97}, {0x0, 0x50, &(0x7f0000000380)=""/80}, {0x0, 0xed, &(0x7f0000000480)=""/237}, {0x0, 0xdc, &(0x7f0000000580)=""/220}, {0x0, 0x44, &(0x7f0000000700)=""/68}, {0x0, 0x90, &(0x7f0000000780)=""/144}, {0x0, 0x1000, &(0x7f0000000840)=""/4096}]}) 18:46:17 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c92465e5f9cc2d3fbf0322168078aba9d7ae45b0051a1221af2772a9567bb821942ce72590f1bf41d20d4c000000279bd612811df1fcaa94a96d58db92af7f9298918ae95b745777a1968e48d46358c8735e3b009f9d01000000000000005b5895e126de3d6d7c6949c6a87cf3ab2fbe80d1028d6e727a596c761e274e8f7bf745addbe19bd7642d38323564278e0410a966da6a254b9c2fa9c5d27796310a13c91878b74c9d615ae752a67e9373b0bc80f98ca3686a79c2dd0d6428fcbacb482ba7a33878f84fdc417a06cfa6d91426d3160fb649591b6d9523a05bf6c09be99b46692a885d573ba599041fde6a90e8758c", 0x128}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:46:17 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(0xffffffffffffffff, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) 18:46:17 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'syz_tun\x00'}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xc) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', 0x0}) 18:46:17 executing program 0: syz_usb_connect$uac1(0x0, 0x9f, &(0x7f0000001840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @output_terminal={0x9}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x5, "40e513e1"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x0, 0x6}, @selector_unit={0x8, 0x24, 0x5, 0x6, 0x2, "ef5d1e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 18:46:17 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="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", 0x128}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 707.181968][T19079] do_page_fault+0xbb/0x500 [ 707.181968][T19079] ? kmsan_unpoison_pt_regs+0x28/0x30 [ 707.181968][T19079] page_fault+0x4e/0x60 [ 707.181968][T19079] RIP: 0033:0x403a42 [ 707.181968][T19079] Code: 55 41 54 49 89 fc 55 53 48 81 ec b8 10 00 00 64 48 8b 04 25 28 00 00 00 48 89 84 24 a8 10 00 00 31 c0 be 02 00 00 00 4c 89 e7 d9 8e 05 00 85 c0 0f 84 00 03 00 00 4c 89 e7 e8 f9 43 05 00 48 [ 707.314526][T19079] RSP: 002b:0000000000a6ecc0 EFLAGS: 00010246 [ 707.314526][T19079] RAX: 0000000000000000 RBX: 00000000000ac967 RCX: 00000000004139b0 [ 707.314526][T19079] RDX: 000000000000000c RSI: 0000000000000002 RDI: 0000000000a6fdf0 [ 707.314526][T19079] RBP: 0000000000000002 R08: 0000000000000001 R09: 0000000001d8a940 [ 707.343167][T19079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a6fdf0 [ 707.343167][T19079] R13: 0000000000a6fde0 R14: 0000000000000000 R15: 0000000000a6fdf0 [ 707.362826][T19079] memory: usage 8240kB, limit 0kB, failcnt 91 [ 707.369089][T19079] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 707.376195][T19079] Memory cgroup stats for /syz1: [ 707.376487][T19079] anon 0 [ 707.376487][T19079] file 1851392 [ 707.376487][T19079] kernel_stack 0 [ 707.376487][T19079] slab 995328 [ 707.376487][T19079] sock 5324800 [ 707.376487][T19079] shmem 1851392 [ 707.376487][T19079] file_mapped 135168 [ 707.376487][T19079] file_dirty 0 [ 707.376487][T19079] file_writeback 0 [ 707.376487][T19079] anon_thp 0 [ 707.376487][T19079] inactive_anon 1757184 [ 707.376487][T19079] active_anon 0 [ 707.376487][T19079] inactive_file 0 [ 707.376487][T19079] active_file 0 [ 707.376487][T19079] unevictable 0 [ 707.376487][T19079] slab_reclaimable 0 [ 707.376487][T19079] slab_unreclaimable 995328 [ 707.376487][T19079] pgfault 23001 [ 707.376487][T19079] pgmajfault 0 [ 707.376487][T19079] workingset_refault 0 [ 707.376487][T19079] workingset_activate 0 [ 707.376487][T19079] workingset_nodereclaim 0 [ 707.376487][T19079] pgrefill 0 [ 707.376487][T19079] pgscan 0 [ 707.376487][T19079] pgsteal 0 [ 707.376487][T19079] pgactivate 0 18:46:17 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(0xffffffffffffffff, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) [ 707.473158][T19079] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=19079,uid=0 [ 707.488869][T19079] Memory cgroup out of memory: Killed process 19079 (syz-executor.1) total-vm:72456kB, anon-rss:76kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:0 [ 707.508249][ T1834] oom_reaper: reaped process 19079 (syz-executor.1), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB 18:46:17 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="0900000000003639408fa3a3ba27660199783b0a82f79b32a7c8225086600a38e07d4db88a66", 0x26}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x18) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 707.553386][T12940] usb 1-1: new high-speed USB device number 91 using dummy_hcd 18:46:17 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'syz_tun\x00'}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xc) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', 0x0}) 18:46:17 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="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", 0x128}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 707.825553][T12940] usb 1-1: Using ep0 maxpacket: 32 18:46:18 executing program 2: r0 = socket$kcm(0x2, 0x3, 0x2) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00@\x00\x00\x00\xf7\x00'}) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0}, 0x20) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00\x00\x00\x00\x00\xf7\x00', @broadcast}) [ 707.953591][T12940] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 707.963913][T12940] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 18:46:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000340)="390000001300090417feb1ae7aa77cf40000ff2431bd4ab6c681bce7be4d704f480d3d47f2503689d374743f00101419000400090000000000", 0x39}], 0x1) 18:46:18 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:46:18 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, 0x0, 0x0, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) 18:46:18 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000280)=ANY=[]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xc) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', 0x0}) [ 708.125639][T19129] device team0 left promiscuous mode [ 708.131029][T19129] device team_slave_0 left promiscuous mode [ 708.137765][T19129] device team_slave_1 left promiscuous mode [ 708.153702][T12940] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 708.163003][T12940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.171457][T12940] usb 1-1: Product: syz [ 708.175776][T12940] usb 1-1: Manufacturer: syz [ 708.180421][T12940] usb 1-1: SerialNumber: syz 18:46:18 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b700002a45a3430706f3c03f79b2f9f00d9a00000100fb0e5ddff3000000100000950a0850df3b9244"], &(0x7f0000003ff6)='OPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) [ 708.633792][T12940] usb 1-1: 0:2 : does not exist [ 708.667528][T12940] usb 1-1: USB disconnect, device number 91 [ 708.818878][T19136] device team0 entered promiscuous mode [ 708.825262][T19136] device team_slave_0 entered promiscuous mode [ 708.832015][T19136] device team_slave_1 entered promiscuous mode [ 708.841818][T19136] 8021q: adding VLAN 0 to HW filter on device team0 [ 708.870124][T19136] device team0 left promiscuous mode [ 708.875737][T19136] device team_slave_0 left promiscuous mode [ 708.882186][T19136] device team_slave_1 left promiscuous mode 18:46:19 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000280)=ANY=[]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xc) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', 0x0}) 18:46:19 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, 0x0, 0x0, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) 18:46:19 executing program 0: syz_usb_connect$uac1(0x0, 0xa6, &(0x7f0000001840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x94, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @output_terminal={0x9}, @processing_unit={0x7}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x5, "40e513e1"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x0, 0x6}, @selector_unit={0x8, 0x24, 0x5, 0x6, 0x2, "ef5d1e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 709.388095][T19145] device team0 entered promiscuous mode [ 709.394094][T19145] device team_slave_0 entered promiscuous mode [ 709.400752][T19145] device team_slave_1 entered promiscuous mode [ 709.410657][T19145] 8021q: adding VLAN 0 to HW filter on device team0 18:46:19 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000280)=ANY=[]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xc) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', 0x0}) 18:46:19 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, 0x0, 0x0, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) [ 709.493432][T12940] usb 1-1: new high-speed USB device number 92 using dummy_hcd 18:46:19 executing program 2: r0 = socket$kcm(0x2, 0x3, 0x2) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00@\x00\x00\x00\xf7\x00'}) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0}, 0x20) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00\x00\x00\x00\x00\xf7\x00', @broadcast}) [ 709.727973][T19163] device team0 left promiscuous mode [ 709.733557][T19163] device team_slave_0 left promiscuous mode [ 709.739907][T19163] device team_slave_1 left promiscuous mode [ 709.749400][T12940] usb 1-1: Using ep0 maxpacket: 32 [ 709.888262][T19166] device team0 entered promiscuous mode [ 709.893334][T12940] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 709.894271][T19166] device team_slave_0 entered promiscuous mode [ 709.904233][T12940] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 709.919939][T19166] device team_slave_1 entered promiscuous mode [ 709.930371][T19166] 8021q: adding VLAN 0 to HW filter on device team0 18:46:20 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000280)=ANY=[@ANYRES32]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xc) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', 0x0}) 18:46:20 executing program 2: r0 = socket$kcm(0x2, 0x3, 0x2) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00@\x00\x00\x00\xf7\x00'}) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0}, 0x20) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00\x00\x00\x00\x00\xf7\x00', @broadcast}) [ 710.073696][T12940] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 710.082949][T12940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.091922][T12940] usb 1-1: Product: syz [ 710.096277][T12940] usb 1-1: Manufacturer: syz [ 710.100967][T12940] usb 1-1: SerialNumber: syz [ 710.172105][T19174] device team0 left promiscuous mode [ 710.177938][T19174] device team_slave_0 left promiscuous mode [ 710.184556][T19174] device team_slave_1 left promiscuous mode [ 710.277704][T19175] device team0 entered promiscuous mode [ 710.283784][T19175] device team_slave_0 entered promiscuous mode [ 710.290416][T19175] device team_slave_1 entered promiscuous mode [ 710.300381][T19175] 8021q: adding VLAN 0 to HW filter on device team0 [ 710.484728][T12940] usb 1-1: 0:2 : does not exist [ 710.529255][T12940] usb 1-1: USB disconnect, device number 92 [ 710.805376][T12923] device bridge_slave_1 left promiscuous mode [ 710.811956][T12923] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.855868][T12923] device bridge_slave_0 left promiscuous mode [ 710.862315][T12923] bridge0: port 1(bridge_slave_0) entered disabled state 18:46:21 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:46:21 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0), 0x0, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) 18:46:21 executing program 2: r0 = socket$kcm(0x2, 0x3, 0x2) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00@\x00\x00\x00\xf7\x00'}) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0}, 0x20) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00\x00\x00\x00\x00\xf7\x00', @broadcast}) [ 711.388135][T19192] IPVS: ftp: loaded support on port[0] = 21 [ 712.134831][T12923] device hsr_slave_0 left promiscuous mode [ 712.173850][T12923] device hsr_slave_1 left promiscuous mode [ 712.227943][T12923] team0 (unregistering): Port device team_slave_1 removed [ 712.241898][T12923] team0 (unregistering): Port device team_slave_0 removed [ 712.257298][T12923] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 712.289650][T12923] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 712.385544][T12923] bond0 (unregistering): Released all slaves [ 712.478765][T19186] device team0 left promiscuous mode [ 712.484307][T19186] device team_slave_0 left promiscuous mode [ 712.490456][T19186] device team_slave_1 left promiscuous mode [ 712.527951][T19189] device team0 entered promiscuous mode [ 712.534163][T19189] device team_slave_0 entered promiscuous mode [ 712.540755][T19189] device team_slave_1 entered promiscuous mode [ 712.550283][T19189] 8021q: adding VLAN 0 to HW filter on device team0 [ 712.765725][T19192] chnl_net:caif_netlink_parms(): no params data found [ 712.829119][T19192] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.836510][T19192] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.845493][T19192] device bridge_slave_0 entered promiscuous mode [ 712.857762][T19192] bridge0: port 2(bridge_slave_1) entered blocking state [ 712.865066][T19192] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.874078][T19192] device bridge_slave_1 entered promiscuous mode [ 712.915493][T19192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 712.931244][T19192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 712.957573][T19192] team0: Port device team_slave_0 added [ 712.966594][T19192] team0: Port device team_slave_1 added [ 713.027574][T19192] device hsr_slave_0 entered promiscuous mode [ 713.076226][T19192] device hsr_slave_1 entered promiscuous mode [ 713.124454][T19192] debugfs: Directory 'hsr0' with parent '/' already present! [ 713.146802][T19192] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.154047][T19192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 713.161561][T19192] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.168847][T19192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 713.239303][T19192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 713.257661][T12940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 713.267392][T12940] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.276548][T12940] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.293352][T19192] 8021q: adding VLAN 0 to HW filter on device team0 [ 713.306522][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 713.315304][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.322424][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 713.337531][T12852] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 713.346194][T12852] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.353426][T12852] bridge0: port 2(bridge_slave_1) entered forwarding state [ 713.382067][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 713.392151][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 713.408776][T12852] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 713.425652][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 713.442395][T19192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 713.455734][T19192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 713.466368][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 713.499660][T19192] 8021q: adding VLAN 0 to HW filter on device batadv0 18:46:23 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x80000006, 0x0, 0x0, 0x5}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000100)=0x4, 0x3b) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) connect$inet(r1, &(0x7f0000000380)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 18:46:23 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000280)=ANY=[@ANYRES32]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xc) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', 0x0}) 18:46:23 executing program 0: syz_usb_connect$uac1(0x0, 0xa6, &(0x7f0000001840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x94, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @output_terminal={0x9}, @processing_unit={0x7}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x5, "40e513e1"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x0, 0x6}, @selector_unit={0x8, 0x24, 0x5, 0x6, 0x2, "ef5d1e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 18:46:23 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0), 0x0, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) 18:46:23 executing program 2: r0 = socket$kcm(0x2, 0x3, 0x2) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00@\x00\x00\x00\xf7\x00'}) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00\x00\x00\x00\x00\xf7\x00', @broadcast}) [ 713.683743][ C0] net_ratelimit: 6 callbacks suppressed [ 713.683769][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 713.695946][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 713.702524][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 713.708967][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 713.716170][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 713.722537][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:46:23 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000280)=ANY=[@ANYRES32]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xc) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', 0x0}) [ 713.734100][T19209] device team0 left promiscuous mode [ 713.739551][T19209] device team_slave_0 left promiscuous mode [ 713.746137][T19209] device team_slave_1 left promiscuous mode [ 713.833826][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 713.840217][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 713.878036][T19212] device team0 entered promiscuous mode [ 713.883939][T19212] device team_slave_0 entered promiscuous mode [ 713.890558][T19212] device team_slave_1 entered promiscuous mode [ 713.900806][T19212] 8021q: adding VLAN 0 to HW filter on device team0 18:46:24 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000280)=ANY=[@ANYRES32=r0]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'syz_tun\x00', 0x0}) [ 713.943617][T12852] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 713.953959][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 713.960292][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:46:24 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0), 0x0, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) 18:46:24 executing program 2: r0 = socket$kcm(0x2, 0x3, 0x2) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00@\x00\x00\x00\xf7\x00'}) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00\x00\x00\x00\x00\xf7\x00', @broadcast}) [ 714.204264][T12852] usb 1-1: Using ep0 maxpacket: 32 [ 714.216727][T19226] device team0 left promiscuous mode [ 714.222265][T19226] device team_slave_0 left promiscuous mode [ 714.229021][T19226] device team_slave_1 left promiscuous mode [ 714.324780][T12852] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 714.335119][T12852] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 18:46:24 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:46:24 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000280)=ANY=[@ANYRES32=r0]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'syz_tun\x00', 0x0}) 18:46:24 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033", 0x21, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) [ 714.534127][T12852] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 714.543396][T12852] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.551474][T12852] usb 1-1: Product: syz [ 714.555867][T12852] usb 1-1: Manufacturer: syz [ 714.560591][T12852] usb 1-1: SerialNumber: syz 18:46:25 executing program 2: r0 = socket$kcm(0x2, 0x3, 0x2) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00@\x00\x00\x00\xf7\x00'}) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00\x00\x00\x00\x00\xf7\x00', @broadcast}) 18:46:25 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000280)=ANY=[@ANYRES32=r0]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'syz_tun\x00', 0x0}) [ 714.994044][T12852] usb 1-1: 0:2 : does not exist [ 715.036185][T12852] usb 1-1: USB disconnect, device number 93 18:46:25 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033", 0x21, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) 18:46:25 executing program 1: keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'user:', ':'}, 0xfffffffffffffd81, 0xfffffffffffffffd) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 18:46:25 executing program 2: r0 = socket$kcm(0x2, 0x3, 0x2) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00@\x00\x00\x00\xf7\x00'}) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00\x00\x00\x00\x00\xf7\x00', @broadcast}) 18:46:25 executing program 0: syz_usb_connect$uac1(0x0, 0xa6, &(0x7f0000001840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x94, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @output_terminal={0x9}, @processing_unit={0x7}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x5, "40e513e1"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x0, 0x6}, @selector_unit={0x8, 0x24, 0x5, 0x6, 0x2, "ef5d1e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 18:46:25 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000280)=ANY=[@ANYRES32=r0]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xc) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'syz_tun\x00', 0x0}) 18:46:25 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000280)=ANY=[@ANYRES32=r0]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xc) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'syz_tun\x00', 0x0}) 18:46:25 executing program 2: r0 = socket$kcm(0x2, 0x3, 0x2) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00@\x00\x00\x00\xf7\x00'}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00\x00\x00\x00\x00\xf7\x00', @broadcast}) [ 715.735025][T19270] device team0 entered promiscuous mode [ 715.740677][T19270] device team_slave_0 entered promiscuous mode [ 715.747765][T19270] device team_slave_1 entered promiscuous mode [ 715.758491][T19270] 8021q: adding VLAN 0 to HW filter on device team0 [ 715.772203][T19271] encrypted_key: keylen parameter is missing [ 715.843865][ T5] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 716.083738][ T5] usb 1-1: Using ep0 maxpacket: 32 [ 716.203678][ T5] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 716.214207][ T5] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 716.383437][ T5] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 716.392688][ T5] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.401052][ T5] usb 1-1: Product: syz [ 716.405413][ T5] usb 1-1: Manufacturer: syz [ 716.410062][ T5] usb 1-1: SerialNumber: syz [ 716.733472][ T5] usb 1-1: 0:2 : does not exist [ 716.758530][ T5] usb 1-1: USB disconnect, device number 94 18:46:27 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:46:27 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033", 0x21, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) 18:46:27 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000280)=ANY=[@ANYRES32=r0]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xc) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'syz_tun\x00', 0x0}) 18:46:27 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000240)={0xa, 0x0, 0x0, @rand_addr='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}, 0x1c) 18:46:27 executing program 2: socket$kcm(0x2, 0x3, 0x2) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00\x00\x00\x00\x00\xf7\x00', @broadcast}) 18:46:27 executing program 0: syz_usb_connect$uac1(0x0, 0xa9, &(0x7f0000001840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x97, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @output_terminal={0x9}, @processing_unit={0xa, 0x24, 0x7, 0x0, 0x0, 0x0, "188628"}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x5, "40e513e1"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x0, 0x6}, @selector_unit={0x8, 0x24, 0x5, 0x6, 0x2, "ef5d1e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 18:46:27 executing program 2: socket$kcm(0x2, 0x3, 0x2) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00\x00\x00\x00\x00\xf7\x00', @broadcast}) 18:46:27 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000280)=ANY=[@ANYRES32=r0]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xc) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'syz_tun\x00', 0x0}) 18:46:27 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f63261", 0x31, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) 18:46:27 executing program 2: socket$kcm(0x2, 0x3, 0x2) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00\x00\x00\x00\x00\xf7\x00', @broadcast}) [ 717.824305][ T5] usb 1-1: new high-speed USB device number 95 using dummy_hcd 18:46:27 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000280)=ANY=[@ANYRES32=r0]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xc) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'syz_tun\x00', 0x0}) 18:46:28 executing program 2: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00@\x00\x00\x00\xf7\x00'}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00\x00\x00\x00\x00\xf7\x00', @broadcast}) [ 718.047149][T19310] device team0 left promiscuous mode [ 718.052624][T19310] device team_slave_0 left promiscuous mode [ 718.059257][T19310] device team_slave_1 left promiscuous mode [ 718.069215][ T5] usb 1-1: Using ep0 maxpacket: 32 [ 718.195964][ T5] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 718.207404][ T5] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 718.227214][T19312] device team0 entered promiscuous mode [ 718.232948][T19312] device team_slave_0 entered promiscuous mode [ 718.239982][T19312] device team_slave_1 entered promiscuous mode [ 718.250126][T19312] 8021q: adding VLAN 0 to HW filter on device team0 [ 718.405131][ T5] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 718.414660][ T5] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.422755][ T5] usb 1-1: Product: syz [ 718.427176][ T5] usb 1-1: Manufacturer: syz [ 718.431898][ T5] usb 1-1: SerialNumber: syz [ 718.789599][ T5] usb 1-1: USB disconnect, device number 95 18:46:30 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000280)=ANY=[@ANYRES32=r0]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xc) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'syz_tun\x00', 0x0}) 18:46:30 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:46:30 executing program 2: ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00@\x00\x00\x00\xf7\x00'}) r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00\x00\x00\x00\x00\xf7\x00', @broadcast}) 18:46:30 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\b\x80\x00\x00\x00\x00*', 0x8002}) ioctl$sock_ifreq(r0, 0x8923, &(0x7f0000000040)={'eql\x00\x00\x00\xa9[\x00', @ifru_flags=0x7001}) 18:46:30 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f63261", 0x31, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) 18:46:30 executing program 0: syz_usb_connect$uac1(0x0, 0xa9, &(0x7f0000001840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x97, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @output_terminal={0x9}, @processing_unit={0xa, 0x24, 0x7, 0x0, 0x0, 0x0, "188628"}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x5, "40e513e1"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x0, 0x6}, @selector_unit={0x8, 0x24, 0x5, 0x6, 0x2, "ef5d1e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 720.681592][T19326] p: renamed from eql 18:46:30 executing program 2: ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00@\x00\x00\x00\xf7\x00'}) r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00\x00\x00\x00\x00\xf7\x00', @broadcast}) 18:46:30 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000280)=ANY=[@ANYRES32=r0]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) 18:46:30 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f63261", 0x31, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) 18:46:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x7, 0x0, &(0x7f0000000000)) [ 720.914987][ T5] usb 1-1: new high-speed USB device number 96 using dummy_hcd 18:46:31 executing program 2: ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00@\x00\x00\x00\xf7\x00'}) r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00\x00\x00\x00\x00\xf7\x00', @broadcast}) 18:46:31 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000280)=ANY=[@ANYRES32=r0]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) 18:46:31 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed", 0x39, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) [ 721.155368][ T5] usb 1-1: Using ep0 maxpacket: 32 [ 721.273603][ T5] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 721.284807][ T5] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 721.483744][ T5] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 721.492906][ T5] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.501200][ T5] usb 1-1: Product: syz [ 721.505752][ T5] usb 1-1: Manufacturer: syz [ 721.510432][ T5] usb 1-1: SerialNumber: syz [ 721.869856][ T5] usb 1-1: USB disconnect, device number 96 18:46:33 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:46:33 executing program 2: r0 = socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00@\x00\x00\x00\xf7\x00'}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00\x00\x00\x00\x00\xf7\x00', @broadcast}) 18:46:33 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) read$usbfs(r0, &(0x7f0000000100)=""/196, 0xc4) 18:46:33 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000280)=ANY=[@ANYRES32=r0]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) 18:46:33 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed", 0x39, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) 18:46:33 executing program 0: syz_usb_connect$uac1(0x0, 0xa9, &(0x7f0000001840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x97, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @output_terminal={0x9}, @processing_unit={0xa, 0x24, 0x7, 0x0, 0x0, 0x0, "188628"}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x5, "40e513e1"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x0, 0x6}, @selector_unit={0x8, 0x24, 0x5, 0x6, 0x2, "ef5d1e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 18:46:33 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000400)={0xc, @output}) 18:46:33 executing program 2: r0 = socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00@\x00\x00\x00\xf7\x00'}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00\x00\x00\x00\x00\xf7\x00', @broadcast}) 18:46:33 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:46:34 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) socketpair(0x1e, 0x80005, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x10000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x200002, 0x0) socketpair(0x1e, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x20000, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00@\x00\x00\x00\xf7\x00'}) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={0xffffffffffffffff, &(0x7f00000004c0)="72bd4c24d2502ed9211884efb78557ab89a7f05de698763d5038e34dbda91cf0acba890a8e66741d3929e23e28270cd22060eeeaa60f2d82058e819ca3bace55b990872bb64a785303f6a9dd9f2a2740f47018dfcf2479640e4b48e4f11f6f45b7b5b831416b552a2ee495eb091edf1f749bc802e90defed0636f0435ef06f3d7718240ce51f118cc4c8f8a44d240f63f8fe1d462ac313c5da0b697b2d5dea17f5d98f78c3537bb52d08fc9e4a40829a68b2c139b32e7901e953b9141f8c3adf01cdd6d83164883b388012399aafa1c6035a9a95861518cb4cf16509f600f479c31903792eeec842a521d11d0a040b0566c831", 0x0}, 0x20) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00\x00\x00\x00\x00\xf7\x00', @broadcast}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 18:46:34 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed", 0x39, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) 18:46:34 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text16={0x10, &(0x7f0000000080)="2e0f38f126098866dfa8a1c00f07baf80c66b851f8608666efbafc0cb00dee6467660f3810cf6766c7442400440000006766c74424022ad16bc46766c744240600000000670f011c24f30fc7752266b80000c0fe0f23d0b89b008ee866353000000f0f23f8b83b008ed866b9800000c00f326635010000000f30", 0x7a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) open(0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 724.013421][ T5] usb 1-1: new high-speed USB device number 97 using dummy_hcd 18:46:34 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:46:34 executing program 2: r0 = socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00@\x00\x00\x00\xf7\x00'}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00\x00\x00\x00\x00\xf7\x00', @broadcast}) [ 724.263617][ T5] usb 1-1: Using ep0 maxpacket: 32 [ 724.375957][T19410] device team0 entered promiscuous mode [ 724.381562][T19410] device team_slave_0 entered promiscuous mode [ 724.388371][T19410] device team_slave_1 entered promiscuous mode [ 724.397932][T19410] 8021q: adding VLAN 0 to HW filter on device team0 [ 724.403586][ T5] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 724.415753][ T5] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 18:46:34 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e52", 0x3d, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) 18:46:34 executing program 2: socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00@\x00\x00\x00\xf7\x00'}) r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00\x00\x00\x00\x00\xf7\x00', @broadcast}) 18:46:34 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000400)={0x4, @output}) [ 724.613713][ T5] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 724.623158][ T5] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.631285][ T5] usb 1-1: Product: syz [ 724.635657][ T5] usb 1-1: Manufacturer: syz [ 724.640363][ T5] usb 1-1: SerialNumber: syz [ 724.681633][T19396] device team0 left promiscuous mode [ 724.687239][T19396] device team_slave_0 left promiscuous mode [ 724.693838][T19396] device team_slave_1 left promiscuous mode [ 724.843814][T19410] device team0 entered promiscuous mode [ 724.849579][T19410] device team_slave_0 entered promiscuous mode [ 724.856868][T19410] device team_slave_1 entered promiscuous mode [ 724.866688][T19410] 8021q: adding VLAN 0 to HW filter on device team0 [ 725.169467][ T5] usb 1-1: USB disconnect, device number 97 18:46:35 executing program 2: socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00@\x00\x00\x00\xf7\x00'}) r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00\x00\x00\x00\x00\xf7\x00', @broadcast}) 18:46:35 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000080), 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text16={0x10, &(0x7f0000000080)="2e0f38f126098866dfa8a1c00f07baf80c66b851f8608666efbafc0cb00dee6467660f3810cf6766c7442400440000006766c74424022ad16bc46766c744240600000000670f011c24f30fc7752266b80000c0fe0f23d0b89b008ee866353000000f0f23f8b83b008ed866b9800000c00f326635010000000f30", 0x7a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) open(0x0, 0x4008040, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:46:35 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e52", 0x3d, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) 18:46:35 executing program 3: 18:46:35 executing program 0: syz_usb_connect$uac1(0x0, 0xab, &(0x7f0000001840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x99, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @output_terminal={0x9}, @processing_unit={0xc, 0x24, 0x7, 0x0, 0x0, 0x0, "188628ae4b"}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x5, "40e513e1"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x0, 0x6}, @selector_unit={0x8, 0x24, 0x5, 0x6, 0x2, "ef5d1e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 18:46:35 executing program 3: 18:46:35 executing program 2: socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00@\x00\x00\x00\xf7\x00'}) r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00\x00\x00\x00\x00\xf7\x00', @broadcast}) [ 725.893495][ T5] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 726.153288][ T5] usb 1-1: Using ep0 maxpacket: 32 [ 726.273427][ T5] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 726.282820][ T5] usb 1-1: config 1 has no interface number 1 [ 726.289322][ T5] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 726.300379][ T5] usb 1-1: config 1 interface 2 has no altsetting 0 [ 726.463492][ T5] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 726.472730][ T5] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.481040][ T5] usb 1-1: Product: syz [ 726.485836][ T5] usb 1-1: Manufacturer: syz [ 726.490616][ T5] usb 1-1: SerialNumber: syz [ 726.813785][ T5] usb 1-1: selecting invalid altsetting 0 [ 726.831135][ T5] usb 1-1: USB disconnect, device number 98 18:46:37 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:46:37 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e52", 0x3d, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) 18:46:37 executing program 3: 18:46:37 executing program 1: 18:46:37 executing program 2: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00\x00\x00\x00\x00\xf7\x00', @broadcast}) 18:46:37 executing program 0: syz_usb_connect$uac1(0x0, 0xab, &(0x7f0000001840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x99, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @output_terminal={0x9}, @processing_unit={0xc, 0x24, 0x7, 0x0, 0x0, 0x0, "188628ae4b"}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x5, "40e513e1"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x0, 0x6}, @selector_unit={0x8, 0x24, 0x5, 0x6, 0x2, "ef5d1e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 18:46:37 executing program 3: 18:46:37 executing program 2: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00\x00\x00\x00\x00\xf7\x00', @broadcast}) 18:46:37 executing program 1: 18:46:37 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a01", 0x3f, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) 18:46:37 executing program 3: 18:46:37 executing program 2: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00\x00\x00\x00\x00\xf7\x00', @broadcast}) [ 727.753565][T12852] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 727.993325][T12852] usb 1-1: Using ep0 maxpacket: 32 [ 728.123513][T12852] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 728.132763][T12852] usb 1-1: config 1 has no interface number 1 [ 728.139280][T12852] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 728.150404][T12852] usb 1-1: config 1 interface 2 has no altsetting 0 [ 728.313600][T12852] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 728.322724][T12852] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.331036][T12852] usb 1-1: Product: syz [ 728.335408][T12852] usb 1-1: Manufacturer: syz [ 728.340071][T12852] usb 1-1: SerialNumber: syz [ 728.663707][T12852] usb 1-1: selecting invalid altsetting 0 [ 728.680650][T12852] usb 1-1: USB disconnect, device number 99 18:46:40 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:46:40 executing program 1: 18:46:40 executing program 3: 18:46:40 executing program 2: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00@\x00\x00\x00\xf7\x00'}) r1 = socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00\x00\x00\x00\x00\xf7\x00', @broadcast}) 18:46:40 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a01", 0x3f, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) 18:46:40 executing program 0: syz_usb_connect$uac1(0x0, 0xab, &(0x7f0000001840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x99, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @output_terminal={0x9}, @processing_unit={0xc, 0x24, 0x7, 0x0, 0x0, 0x0, "188628ae4b"}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x5, "40e513e1"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x0, 0x6}, @selector_unit={0x8, 0x24, 0x5, 0x6, 0x2, "ef5d1e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 18:46:40 executing program 3: [ 730.402644][T19498] device team0 left promiscuous mode [ 730.408275][T19498] device team_slave_0 left promiscuous mode [ 730.414743][T19498] device team_slave_1 left promiscuous mode 18:46:40 executing program 1: 18:46:40 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:46:40 executing program 3: [ 730.697252][ T5] usb 1-1: new high-speed USB device number 100 using dummy_hcd 18:46:40 executing program 3: 18:46:40 executing program 1: 18:46:40 executing program 2: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00@\x00\x00\x00\xf7\x00'}) r1 = socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00\x00\x00\x00\x00\xf7\x00', @broadcast}) 18:46:41 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a01", 0x3f, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) [ 730.943335][ T5] usb 1-1: Using ep0 maxpacket: 32 18:46:41 executing program 3: 18:46:41 executing program 1: [ 731.073507][ T5] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 731.083657][ T5] usb 1-1: config 1 has no interface number 1 [ 731.089980][ T5] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 731.101195][ T5] usb 1-1: config 1 interface 2 has no altsetting 0 18:46:41 executing program 3: [ 731.303614][ T5] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 731.312947][ T5] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.321407][ T5] usb 1-1: Product: syz [ 731.326294][ T5] usb 1-1: Manufacturer: syz [ 731.331024][ T5] usb 1-1: SerialNumber: syz [ 731.733559][ T5] usb 1-1: selecting invalid altsetting 0 [ 731.751764][ T5] usb 1-1: USB disconnect, device number 100 18:46:42 executing program 0: syz_usb_connect$uac1(0x0, 0xa3, &(0x7f0000001840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x91, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @processing_unit={0xd, 0x24, 0x7, 0x0, 0x0, 0x0, "188628ae4b1d"}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x5, "40e513e1"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x0, 0x6}, @selector_unit={0x8, 0x24, 0x5, 0x6, 0x2, "ef5d1e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 18:46:42 executing program 3: 18:46:42 executing program 2: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00@\x00\x00\x00\xf7\x00'}) r1 = socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00\x00\x00\x00\x00\xf7\x00', @broadcast}) [ 732.493219][ T5] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 732.733311][ T5] usb 1-1: Using ep0 maxpacket: 32 [ 732.853470][ T5] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 732.863900][ T5] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 733.023591][ T5] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 733.032854][ T5] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.041143][ T5] usb 1-1: Product: syz [ 733.045596][ T5] usb 1-1: Manufacturer: syz [ 733.050317][ T5] usb 1-1: SerialNumber: syz [ 733.373615][ T5] usb 1-1: 0:2 : does not exist [ 733.392950][ T5] usb 1-1: USB disconnect, device number 101 18:46:43 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:46:43 executing program 1: 18:46:43 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d", 0x40, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) 18:46:43 executing program 3: 18:46:43 executing program 2: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00@\x00\x00\x00\xf7\x00'}) socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00\x00\x00\x00\x00\xf7\x00', @broadcast}) 18:46:43 executing program 3: 18:46:43 executing program 1: 18:46:43 executing program 0: syz_usb_connect$uac1(0x0, 0xa3, &(0x7f0000001840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x91, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @processing_unit={0xd, 0x24, 0x7, 0x0, 0x0, 0x0, "188628ae4b1d"}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x5, "40e513e1"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x0, 0x6}, @selector_unit={0x8, 0x24, 0x5, 0x6, 0x2, "ef5d1e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 18:46:43 executing program 2: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00@\x00\x00\x00\xf7\x00'}) socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00\x00\x00\x00\x00\xf7\x00', @broadcast}) 18:46:44 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d", 0x40, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) 18:46:44 executing program 3: 18:46:44 executing program 1: [ 734.403419][T12852] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 734.643480][T12852] usb 1-1: Using ep0 maxpacket: 32 [ 734.773462][T12852] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 734.784105][T12852] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 734.964077][T12852] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 734.973563][T12852] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.982456][T12852] usb 1-1: Product: syz [ 734.986874][T12852] usb 1-1: Manufacturer: syz [ 734.991634][T12852] usb 1-1: SerialNumber: syz [ 735.314095][T12852] usb 1-1: 0:2 : does not exist [ 735.330532][T12852] usb 1-1: USB disconnect, device number 102 18:46:46 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c92465e5f9cc2d3fbf0322168078aba9d7ae45b0051a1221af2772a9567bb821942ce72590f1bf41d20d4c000000279bd612811df1fcaa94a96d58db92af7f9298918ae95b745777a1968e48d46358c8735e3b009f9d0100000000000000", 0x94}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:46:46 executing program 2: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00@\x00\x00\x00\xf7\x00'}) socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00\x00\x00\x00\x00\xf7\x00', @broadcast}) 18:46:46 executing program 3: 18:46:46 executing program 1: 18:46:46 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d", 0x40, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) 18:46:46 executing program 0: syz_usb_connect$uac1(0x0, 0xa3, &(0x7f0000001840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x91, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @processing_unit={0xd, 0x24, 0x7, 0x0, 0x0, 0x0, "188628ae4b1d"}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x5, "40e513e1"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x0, 0x6}, @selector_unit={0x8, 0x24, 0x5, 0x6, 0x2, "ef5d1e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 18:46:47 executing program 3: 18:46:47 executing program 2: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00@\x00\x00\x00\xf7\x00'}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) 18:46:47 executing program 1: 18:46:47 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c92465e5f9cc2d3fbf0322168078aba9d7ae45b0051a1221af2772a9567bb821942ce72590f1bf41d20d4c000000279bd612811df1fcaa94a96d58db92af7f9298918ae95b745777a1968e48d46358c8735e3b009f9d0100000000000000", 0x94}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:46:47 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x0, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) [ 737.126854][T12852] usb 1-1: new high-speed USB device number 103 using dummy_hcd 18:46:47 executing program 3: 18:46:47 executing program 1: 18:46:47 executing program 2: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00@\x00\x00\x00\xf7\x00'}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) 18:46:47 executing program 1: [ 737.373740][T12852] usb 1-1: Using ep0 maxpacket: 32 18:46:47 executing program 3: 18:46:47 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x0, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) [ 737.493698][T12852] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 737.504410][T12852] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 737.694005][T12852] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 737.703354][T12852] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.711615][T12852] usb 1-1: Product: syz [ 737.716098][T12852] usb 1-1: Manufacturer: syz [ 737.720822][T12852] usb 1-1: SerialNumber: syz [ 738.084998][T12852] usb 1-1: 0:2 : does not exist [ 738.106859][T12852] usb 1-1: USB disconnect, device number 103 18:46:48 executing program 1: 18:46:48 executing program 3: 18:46:48 executing program 2: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00@\x00\x00\x00\xf7\x00'}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) 18:46:48 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x0, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) 18:46:50 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c92465e5f9cc2d3fbf0322168078aba9d7ae45b0051a1221af2772a9567bb821942ce72590f1bf41d20d4c000000279bd612811df1fcaa94a96d58db92af7f9298918ae95b745777a1968e48d46358c8735e3b009f9d0100000000000000", 0x94}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:46:50 executing program 0: syz_usb_connect$uac1(0x0, 0xa3, &(0x7f0000001840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x91, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @processing_unit={0xd, 0x24, 0x7, 0x0, 0x0, 0x0, "188628ae4b1d"}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x5, "40e513e1"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x0, 0x6}, @selector_unit={0x8, 0x24, 0x5, 0x6, 0x2, "ef5d1e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 18:46:50 executing program 3: 18:46:50 executing program 1: 18:46:50 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)={'syz0'}, 0x4) 18:46:50 executing program 2: 18:46:50 executing program 2: 18:46:50 executing program 1: 18:46:50 executing program 3: 18:46:50 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c92465e5f9cc2d3fbf0322168078aba9d7ae45b0051a1221af2772a9567bb821942ce72590f1bf41d20d4c000000279bd612811df1fcaa94a96d58db92af7f9298918ae95b745777a1968e48d46358c8735e3b009f9d01000000000000005b5895e126de3d6d7c6949c6a87cf3ab2fbe80d1028d6e727a596c761e274e8f7bf745addbe19bd7642d38323564278e0410a966da6a254b9c2fa9c5d27796310a13c91878b74c9d615a", 0xde}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:46:50 executing program 3: 18:46:50 executing program 2: [ 740.514001][T12852] usb 1-1: new high-speed USB device number 104 using dummy_hcd 18:46:50 executing program 1: syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xcf, 0xd2, 0xc0, 0x10, 0xeb1, 0x7007, 0x200, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x0, 0xff}}]}}]}}, 0x0) [ 740.762171][T12852] usb 1-1: Using ep0 maxpacket: 32 [ 740.894439][T12852] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 740.905337][T12852] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 741.003513][ T5] usb 2-1: new full-speed USB device number 76 using dummy_hcd [ 741.073934][T12852] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 741.083728][T12852] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.092589][T12852] usb 1-1: Product: syz [ 741.097171][T12852] usb 1-1: Manufacturer: syz [ 741.102399][T12852] usb 1-1: SerialNumber: syz [ 741.383811][ T5] usb 2-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00 [ 741.393608][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.404113][ T5] usb 2-1: config 0 descriptor?? [ 741.433698][T12852] usb 1-1: 0:2 : does not exist [ 741.451096][ T5] go7007 2-1:0.0: Direct firmware load for go7007/go7007fw.bin failed with error -2 [ 741.461490][ T5] WIS XMen or compatible: unable to load firmware from file "go7007/go7007fw.bin" [ 741.461669][T12852] usb 1-1: USB disconnect, device number 104 [ 741.471217][ T5] go7007: probe of 2-1:0.0 failed with error -12 [ 741.656429][ T5] usb 2-1: USB disconnect, device number 76 18:46:51 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2e, 0xa7, 0x53, 0x8, 0x565, 0x2, 0x84e0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1a, 0x5b, 0xb}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0xac, &(0x7f0000000600), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 18:46:51 executing program 3: 18:46:51 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)={'syz0'}, 0x4) 18:46:51 executing program 0: syz_usb_connect$uac1(0x0, 0xa3, &(0x7f0000001840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x91, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @processing_unit={0xd, 0x24, 0x7, 0x0, 0x0, 0x0, "188628ae4b1d"}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x5, "40e513e1"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x0, 0x6}, @selector_unit={0x8, 0x24, 0x5, 0x6, 0x2, "ef5d1e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 18:46:52 executing program 3: 18:46:52 executing program 3: 18:46:52 executing program 3: 18:46:52 executing program 3: syz_open_dev$hidraw(0x0, 0x0, 0x0) r0 = syz_open_dev$hidraw(&(0x7f0000000080)='/dev/../raw#\x00', 0x0, 0x12d43d) write$hidraw(r0, &(0x7f0000000000)="3a0ac17e00595345e24ea72cf22da8cf6bd8605cc6dd64", 0x140000) [ 742.203630][T12852] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 742.234034][T12940] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 742.423290][ T5] usb 2-1: new full-speed USB device number 77 using dummy_hcd [ 742.453397][T12852] usb 3-1: Using ep0 maxpacket: 8 [ 742.483318][T12940] usb 1-1: Using ep0 maxpacket: 32 [ 742.573653][T12852] usb 3-1: New USB device found, idVendor=0565, idProduct=0002, bcdDevice=84.e0 [ 742.583053][T12852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.592999][T12852] usb 3-1: config 0 descriptor?? [ 742.603851][T12940] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 742.614891][T12940] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 742.783768][T12940] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 742.793591][T12940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.801932][T12940] usb 1-1: Product: syz [ 742.806390][T12940] usb 1-1: Manufacturer: syz [ 742.811051][T12940] usb 1-1: SerialNumber: syz [ 742.823509][ T5] usb 2-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00 [ 742.832684][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.845780][ T5] usb 2-1: config 0 descriptor?? [ 742.864036][T12852] kaweth 3-1:0.0: Firmware present in device. [ 742.889930][ T5] go7007 2-1:0.0: Direct firmware load for go7007/go7007fw.bin failed with error -2 [ 742.899700][ T5] WIS XMen or compatible: unable to load firmware from file "go7007/go7007fw.bin" [ 742.909432][ T5] go7007: probe of 2-1:0.0 failed with error -12 [ 743.063727][T12852] kaweth 3-1:0.0: Statistics collection: 0 [ 743.069930][T12852] kaweth 3-1:0.0: Multicast filter limit: 0 [ 743.076332][T12852] kaweth 3-1:0.0: MTU: 0 [ 743.080784][T12852] kaweth 3-1:0.0: Read MAC address 00:00:00:00:00:00 [ 743.088885][ T5] usb 2-1: USB disconnect, device number 77 [ 743.143912][T12940] usb 1-1: 0:2 : does not exist [ 743.170682][T12940] usb 1-1: USB disconnect, device number 105 18:46:53 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c92465e5f9cc2d3fbf0322168078aba9d7ae45b0051a1221af2772a9567bb821942ce72590f1bf41d20d4c000000279bd612811df1fcaa94a96d58db92af7f9298918ae95b745777a1968e48d46358c8735e3b009f9d01000000000000005b5895e126de3d6d7c6949c6a87cf3ab2fbe80d1028d6e727a596c761e274e8f7bf745addbe19bd7642d38323564278e0410a966da6a254b9c2fa9c5d27796310a13c91878b74c9d615a", 0xde}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:46:53 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x47, 0x66, 0x8, 0x4dd, 0x8003, 0xf156, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x2, 0x1}}]}}]}}, 0x0) 18:46:53 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)={'syz0'}, 0x4) 18:46:53 executing program 0: syz_usb_connect$uac1(0x0, 0xa3, &(0x7f0000001840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x91, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @processing_unit={0xd, 0x24, 0x7, 0x0, 0x0, 0x0, "188628ae4b1d"}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x5, "40e513e1"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x0, 0x6}, @selector_unit={0x8, 0x24, 0x5, 0x6, 0x2, "ef5d1e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 743.728734][T12852] kaweth 3-1:0.0: kaweth interface created at eth1 [ 743.926145][T12852] usb 3-1: USB disconnect, device number 69 [ 743.966293][ T5] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 743.973675][T12940] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 744.223894][T12940] usb 4-1: Using ep0 maxpacket: 8 [ 744.243315][ T5] usb 1-1: Using ep0 maxpacket: 32 [ 744.344114][T12940] usb 4-1: New USB device found, idVendor=04dd, idProduct=8003, bcdDevice=f1.56 [ 744.354208][T12940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.373905][ T5] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 744.385222][ T5] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 744.386128][T12940] usb 4-1: config 0 descriptor?? [ 744.446763][T12940] safe_serial 4-1:0.0: safe_serial converter detected [ 744.494604][T12940] usb 4-1: safe_serial converter now attached to ttyUSB0 [ 744.566034][ T5] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 744.575605][ T5] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.584595][ T5] usb 1-1: Product: syz [ 744.588923][ T5] usb 1-1: Manufacturer: syz [ 744.593898][ T5] usb 1-1: SerialNumber: syz [ 744.642205][ T2808] usb 4-1: USB disconnect, device number 6 [ 744.659154][ T2808] safe_serial ttyUSB0: safe_serial converter now disconnected from ttyUSB0 [ 744.669066][ T2808] safe_serial 4-1:0.0: device disconnected [ 744.696302][T12852] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 744.943383][T12852] usb 3-1: Using ep0 maxpacket: 8 [ 744.954170][ T5] usb 1-1: 0:2 : does not exist [ 744.970226][ T5] usb 1-1: USB disconnect, device number 106 [ 745.063867][T12852] usb 3-1: New USB device found, idVendor=0565, idProduct=0002, bcdDevice=84.e0 [ 745.073247][T12852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.083650][T12852] usb 3-1: config 0 descriptor?? [ 745.353614][T12852] kaweth 3-1:0.0: Firmware present in device. [ 745.393611][T12852] kaweth 3-1:0.0: Statistics collection: 0 [ 745.399556][T12852] kaweth 3-1:0.0: Multicast filter limit: 0 [ 745.405712][T12852] kaweth 3-1:0.0: MTU: 0 [ 745.410071][T12852] kaweth 3-1:0.0: Read MAC address 00:00:00:00:00:00 [ 745.428708][T12940] usb 4-1: new high-speed USB device number 7 using dummy_hcd 18:46:55 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2e, 0xa7, 0x53, 0x8, 0x565, 0x2, 0x84e0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1a, 0x5b, 0xb}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0xac, &(0x7f0000000600), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 18:46:55 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, 0x0, 0x0) 18:46:55 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x14, 0x33, 0x58, 0x40, 0x15c2, 0x3f, 0xa639, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe2, 0xa5, 0xc6}}]}}]}}, 0x0) 18:46:55 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0xd7, 0xd5, 0x96, 0x8, 0x4fc, 0x504a, 0xe204, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe1, 0x3e, 0x76}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0xac, &(0x7f0000000ac0)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) [ 745.533920][T12852] kaweth: probe of 3-1:0.0 failed with error -5 [ 745.600318][T12852] usb 3-1: USB disconnect, device number 70 18:46:55 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, 0x0, 0x0) [ 745.703461][T12940] usb 4-1: Using ep0 maxpacket: 8 18:46:55 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/224, 0xe0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r0, &(0x7f00000017c0)="2dbabd8af0eb4376ef7d7ded64ed0f053847cbc2a60151f45cd715eddb4a765033b87968ec76e02098aee11d0626f632617a8b6bfda6740fed93c73e523a017d2f", 0x41, 0x8001, 0x0, 0x0) write$binfmt_misc(r0, 0x0, 0x0) [ 745.823706][T12940] usb 4-1: New USB device found, idVendor=04dd, idProduct=8003, bcdDevice=f1.56 [ 745.833523][T12940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.847700][T12940] usb 4-1: config 0 descriptor?? [ 745.883667][T12853] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 745.903655][ T5] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 745.907346][T12940] safe_serial 4-1:0.0: safe_serial converter detected [ 745.961109][T12940] usb 4-1: safe_serial converter now attached to ttyUSB0 [ 746.043362][T12852] usb 3-1: new high-speed USB device number 71 using dummy_hcd 18:46:56 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb0, 0x16, 0xda, 0x40, 0x525, 0x2888, 0xf172, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xeb, 0x19, 0xa3}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 746.119619][ T2808] usb 4-1: USB disconnect, device number 7 [ 746.134128][ T2808] safe_serial ttyUSB0: safe_serial converter now disconnected from ttyUSB0 [ 746.144292][ T2808] safe_serial 4-1:0.0: device disconnected [ 746.153324][T12853] usb 1-1: Using ep0 maxpacket: 8 [ 746.273876][ T5] usb 2-1: New USB device found, idVendor=15c2, idProduct=003f, bcdDevice=a6.39 [ 746.273936][T12853] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=e2.04 [ 746.274055][T12853] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.284030][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.306314][T12853] usb 1-1: config 0 descriptor?? [ 746.317037][ T5] usb 2-1: config 0 descriptor?? [ 746.322349][T12852] usb 3-1: Using ep0 maxpacket: 8 [ 746.357274][ T5] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 746.365774][ T5] imon 2-1:0.0: unable to initialize intf0, err -19 [ 746.373310][ T5] imon:imon_probe: failed to initialize context! [ 746.376918][T12853] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 746.379857][ T5] imon 2-1:0.0: unable to register, err -19 [ 746.474012][T12852] usb 3-1: New USB device found, idVendor=0565, idProduct=0002, bcdDevice=84.e0 [ 746.483874][T12900] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 746.491960][T12852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.502253][T12852] usb 3-1: config 0 descriptor?? [ 746.559088][ T2808] usb 2-1: USB disconnect, device number 78 18:46:56 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x47, 0x66, 0x8, 0x4dd, 0x8003, 0xf156, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x2, 0x1}}]}}]}}, 0x0) 18:46:56 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c92465e5f9cc2d3fbf0322168078aba9d7ae45b0051a1221af2772a9567bb821942ce72590f1bf41d20d4c000000279bd612811df1fcaa94a96d58db92af7f9298918ae95b745777a1968e48d46358c8735e3b009f9d01000000000000005b5895e126de3d6d7c6949c6a87cf3ab2fbe80d1028d6e727a596c761e274e8f7bf745addbe19bd7642d38323564278e0410a966da6a254b9c2fa9c5d27796310a13c91878b74c9d615a", 0xde}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 746.795974][T12852] kaweth 3-1:0.0: Firmware present in device. [ 746.863803][T12900] usb 5-1: New USB device found, idVendor=0525, idProduct=2888, bcdDevice=f1.72 [ 746.874117][T12900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.888388][T12900] usb 5-1: config 0 descriptor?? [ 746.966194][T12940] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 747.003747][T12852] kaweth 3-1:0.0: Statistics collection: 0 [ 747.011417][T12852] kaweth 3-1:0.0: Multicast filter limit: 0 [ 747.018830][T12852] kaweth 3-1:0.0: MTU: 0 [ 747.024104][T12852] kaweth 3-1:0.0: Read MAC address 00:00:00:00:00:00 [ 747.043800][T12853] gspca_sunplus: reg_r err -71 [ 747.049400][T12853] sunplus: probe of 1-1:0.0 failed with error -71 [ 747.069303][T12853] usb 1-1: USB disconnect, device number 107 [ 747.148508][T12900] cdc_subset 5-1:0.0 usb0: register 'cdc_subset' at usb-dummy_hcd.4-1, Epson USB Device, ae:a0:70:e7:e5:4a [ 747.233358][T12940] usb 4-1: Using ep0 maxpacket: 8 [ 747.353969][T12940] usb 4-1: New USB device found, idVendor=04dd, idProduct=8003, bcdDevice=f1.56 [ 747.363288][T12940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.372327][ T17] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 747.388181][T12900] usb 5-1: USB disconnect, device number 40 [ 747.395080][T12900] cdc_subset 5-1:0.0 usb0: unregister 'cdc_subset' usb-dummy_hcd.4-1, Epson USB Device [ 747.404160][T12940] usb 4-1: config 0 descriptor?? [ 747.447110][T12940] safe_serial 4-1:0.0: safe_serial converter detected [ 747.484419][T12940] usb 4-1: safe_serial converter now attached to ttyUSB0 [ 747.657313][T12940] usb 4-1: USB disconnect, device number 8 [ 747.679311][T12852] kaweth 3-1:0.0: kaweth interface created at eth1 [ 747.705312][T12940] safe_serial ttyUSB0: safe_serial converter now disconnected from ttyUSB0 [ 747.715378][T12940] safe_serial 4-1:0.0: device disconnected [ 747.733858][ T17] usb 2-1: New USB device found, idVendor=15c2, idProduct=003f, bcdDevice=a6.39 [ 747.743343][ T17] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.756119][ T17] usb 2-1: config 0 descriptor?? [ 747.797843][ T17] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 747.805827][ T17] imon 2-1:0.0: unable to initialize intf0, err -19 [ 747.812676][ T17] imon:imon_probe: failed to initialize context! [ 747.819401][ T17] imon 2-1:0.0: unable to register, err -19 [ 747.833644][ T2808] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 747.884438][T12900] usb 3-1: USB disconnect, device number 71 [ 747.999167][ T5] usb 2-1: USB disconnect, device number 79 [ 748.103829][ T2808] usb 1-1: Using ep0 maxpacket: 8 [ 748.194152][T19029] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 748.246205][ T2808] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=e2.04 [ 748.256268][ T2808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 18:46:58 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x47, 0x66, 0x8, 0x4dd, 0x8003, 0xf156, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x2, 0x1}}]}}]}}, 0x0) [ 748.324367][ T2808] usb 1-1: config 0 descriptor?? [ 748.368510][ T2808] gspca_main: sunplus-2.14.0 probing 04fc:504a 18:46:58 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2e, 0xa7, 0x53, 0x8, 0x565, 0x2, 0x84e0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1a, 0x5b, 0xb}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0xac, &(0x7f0000000600), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 18:46:58 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x75, 0x74, 0xf2, 0x40, 0x50f, 0x180, 0xd765, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbe, 0x71, 0xa4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0xc, {0xfffffffffffffe1d, 0x0, "00000000000000020000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 748.624098][T19029] usb 5-1: New USB device found, idVendor=0525, idProduct=2888, bcdDevice=f1.72 [ 748.633431][T19029] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.719322][T19029] usb 5-1: config 0 descriptor?? 18:46:58 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x20, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000240)={0x0, 0x8, &(0x7f0000000200)="3e8a03b7ea1b244d"}) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x3508}) r1 = syz_open_dev$hidraw(0x0, 0x0, 0x10103e) write$hidraw(r1, &(0x7f0000000080)="8f734c3a7de7d4970ada54153ca62c8a7053d0f427e4e77b18c5bcaa6d81f111dd54", 0xfe91) [ 748.753882][ T5] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 748.774516][ T2808] gspca_sunplus: reg_w_riv err -71 [ 748.779990][ T2808] sunplus: probe of 1-1:0.0 failed with error -71 [ 748.838379][ T2808] usb 1-1: USB disconnect, device number 108 [ 748.977222][T12940] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 749.014114][ T5] usb 4-1: Using ep0 maxpacket: 8 [ 749.020294][T19029] cdc_subset: probe of 5-1:0.0 failed with error -71 [ 749.058023][T19029] usb 5-1: USB disconnect, device number 41 [ 749.144374][ T5] usb 4-1: New USB device found, idVendor=04dd, idProduct=8003, bcdDevice=f1.56 [ 749.153676][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.216544][ T5] usb 4-1: config 0 descriptor?? [ 749.224211][T12940] usb 3-1: Using ep0 maxpacket: 8 [ 749.237255][ T17] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 749.258277][ T5] safe_serial 4-1:0.0: safe_serial converter detected 18:46:59 executing program 4: syz_usb_connect(0x0, 0x38, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x4e, 0x6d, 0x5c, 0x8, 0x46d, 0x8c5, 0x5de6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0x1, 0x0, 0x0, [@generic={0x2}, @hid_hid={0x9}], [{{0x7, 0x5, 0x7}}]}}]}}]}}, 0x0) 18:46:59 executing program 0: r0 = syz_open_dev$hidraw(&(0x7f0000000140)='/dev/../raw#\x00', 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)="5c8f00cfe2bd28560a757e2768af") syz_usb_connect(0x0, 0x1, &(0x7f0000000080)=ANY=[@ANYPTR64=&(0x7f0000000380)=ANY=[@ANYPTR=&(0x7f0000000000)=ANY=[@ANYPTR64]]], 0x0) ioctl$HIDIOCAPPLICATION(r0, 0xc020660b, 0x20000000) [ 749.350797][T12940] usb 3-1: New USB device found, idVendor=0565, idProduct=0002, bcdDevice=84.e0 [ 749.360554][T12940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.371426][ T5] usb 4-1: safe_serial converter now attached to ttyUSB0 [ 749.434313][T12940] usb 3-1: config 0 descriptor?? [ 749.467311][ T5] usb 4-1: USB disconnect, device number 9 [ 749.494738][ T5] safe_serial ttyUSB0: safe_serial converter now disconnected from ttyUSB0 [ 749.504652][ T5] safe_serial 4-1:0.0: device disconnected [ 749.607356][ T17] usb 2-1: New USB device found, idVendor=050f, idProduct=0180, bcdDevice=d7.65 [ 749.617210][ T17] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.671298][ T17] usb 2-1: config 0 descriptor?? [ 749.704256][T12940] kaweth 3-1:0.0: Firmware present in device. [ 749.722826][ T17] ir_usb 2-1:0.0: IR Dongle converter detected 18:46:59 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c92465e5f9cc2d3fbf0322168078aba9d7ae45b0051a1221af2772a9567bb821942ce72590f1bf41d20d4c000000279bd612811df1fcaa94a96d58db92af7f9298918ae95b745777a1968e48d46358c8735e3b009f9d01000000000000005b5895e126de3d6d7c6949c6a87cf3ab2fbe80d1028d6e727a596c761e274e8f7bf745addbe19bd7642d38323564278e0410a966da6a254b9c2fa9c5d27796310a13c91878b74c9d615ae752a67e9373b0bc80f98ca3686a79c2dd0d6428fcbacb482ba7a33878f84fdc417a06cfa6", 0x103}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 749.804429][T12852] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 749.923867][T12940] kaweth 3-1:0.0: Statistics collection: 0 [ 749.930245][T12940] kaweth 3-1:0.0: Multicast filter limit: 0 [ 749.936657][T12940] kaweth 3-1:0.0: MTU: 0 [ 749.941413][T12940] kaweth 3-1:0.0: Read MAC address 00:00:00:00:00:00 [ 749.950496][ T17] usb 2-1: IRDA class descriptor not found, device not bound 18:47:00 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x47, 0x66, 0x8, 0x4dd, 0x8003, 0xf156, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x2, 0x1}}]}}]}}, 0x0) [ 750.093353][T12852] usb 5-1: Using ep0 maxpacket: 8 [ 750.152926][ T5] usb 2-1: USB disconnect, device number 80 [ 750.213575][T12852] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 750.224746][T12852] usb 5-1: New USB device found, idVendor=046d, idProduct=08c5, bcdDevice=5d.e6 [ 750.235253][T12852] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.247995][T12852] usb 5-1: config 0 descriptor?? [ 750.298480][T12852] uvcvideo: Found UVC 0.00 device (046d:08c5) [ 750.305732][T12852] uvcvideo: No valid video chain found. [ 750.403709][ T17] usb 4-1: new high-speed USB device number 10 using dummy_hcd 18:47:00 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x6c, 0x3, 0xe0, 0x8, 0x24c6, 0xd183, 0x4f36, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5d, 0x81}}]}}]}}, 0x0) [ 750.497783][ T5] usb 5-1: USB disconnect, device number 42 [ 750.589682][T12940] kaweth 3-1:0.0: kaweth interface created at eth1 [ 750.666225][ T17] usb 4-1: Using ep0 maxpacket: 8 [ 750.793714][ T5] usb 3-1: USB disconnect, device number 72 [ 750.796189][ T17] usb 4-1: New USB device found, idVendor=04dd, idProduct=8003, bcdDevice=f1.56 [ 750.809296][ T17] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.850175][ T17] usb 4-1: config 0 descriptor?? [ 750.896175][T19029] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 750.917560][ T17] safe_serial 4-1:0.0: safe_serial converter detected [ 750.934173][T12940] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 750.965286][ T17] usb 4-1: safe_serial converter now attached to ttyUSB0 [ 751.128893][ T17] usb 4-1: USB disconnect, device number 10 [ 751.142845][ T17] safe_serial ttyUSB0: safe_serial converter now disconnected from ttyUSB0 [ 751.145898][T19029] usb 1-1: Using ep0 maxpacket: 8 [ 751.153124][ T17] safe_serial 4-1:0.0: device disconnected [ 751.274386][T19029] usb 1-1: New USB device found, idVendor=24c6, idProduct=d183, bcdDevice=4f.36 [ 751.284111][T19029] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.293903][T12852] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 751.324077][T19029] usb 1-1: config 0 descriptor?? [ 751.334466][T12940] usb 2-1: New USB device found, idVendor=050f, idProduct=0180, bcdDevice=d7.65 [ 751.343895][T12940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.383198][T12940] usb 2-1: config 0 descriptor?? 18:47:01 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2e, 0xa7, 0x53, 0x8, 0x565, 0x2, 0x84e0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1a, 0x5b, 0xb}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0xac, &(0x7f0000000600), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 751.436874][T12940] ir_usb 2-1:0.0: IR Dongle converter detected [ 751.568578][T12853] usb 1-1: USB disconnect, device number 109 [ 751.583684][T12852] usb 5-1: Using ep0 maxpacket: 8 [ 751.654482][T12940] usb 2-1: IRDA class descriptor not found, device not bound [ 751.681545][T12940] usb 2-1: USB disconnect, device number 81 18:47:01 executing program 3: [ 751.715187][T12852] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 751.725765][T12852] usb 5-1: New USB device found, idVendor=046d, idProduct=08c5, bcdDevice=5d.e6 [ 751.735068][T12852] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.757197][T12852] usb 5-1: config 0 descriptor?? [ 751.803997][T12852] uvcvideo: Found UVC 0.00 device (046d:08c5) [ 751.811130][T12852] uvcvideo: No valid video chain found. 18:47:01 executing program 3: [ 751.863352][ T17] usb 3-1: new high-speed USB device number 73 using dummy_hcd 18:47:02 executing program 1: syz_open_dev$evdev(&(0x7f00000003c0)='/dev/input/event#\x00', 0x4000003, 0x0) 18:47:02 executing program 3: [ 752.006631][T12940] usb 5-1: USB disconnect, device number 43 18:47:02 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x36, 0x9d, 0xdd, 0x10, 0x1934, 0x1202, 0x8708, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xab, 0x8, 0xc1, 0x0, [], [{{0x9, 0x5, 0xd, 0x1e}}, {{0x9, 0x5, 0x8d, 0x2}}]}}]}}]}}, 0x0) [ 752.114988][ T17] usb 3-1: Using ep0 maxpacket: 8 18:47:02 executing program 3: syz_usb_connect(0x0, 0x0, 0x0, 0x0) [ 752.273629][ T17] usb 3-1: New USB device found, idVendor=0565, idProduct=0002, bcdDevice=84.e0 [ 752.283033][ T17] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.293763][ T17] usb 3-1: config 0 descriptor?? [ 752.383524][T12852] usb 1-1: new high-speed USB device number 110 using dummy_hcd 18:47:02 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x80004519, 0x0) [ 752.463707][T19029] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 752.566117][ T17] kaweth 3-1:0.0: Firmware present in device. [ 752.623508][T12852] usb 1-1: Using ep0 maxpacket: 8 18:47:02 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x50d, 0x3201, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x9, {0x9}}}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000080)=0x2) [ 752.703382][T19029] usb 2-1: Using ep0 maxpacket: 16 [ 752.753456][T12852] usb 1-1: New USB device found, idVendor=24c6, idProduct=d183, bcdDevice=4f.36 [ 752.762688][T12852] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.783517][ T17] kaweth 3-1:0.0: Statistics collection: 0 [ 752.789483][ T17] kaweth 3-1:0.0: Multicast filter limit: 0 [ 752.789584][ T17] kaweth 3-1:0.0: MTU: 0 [ 752.789694][ T17] kaweth 3-1:0.0: Read MAC address 00:00:00:00:00:00 [ 752.819193][T12852] usb 1-1: config 0 descriptor?? [ 752.825944][T19029] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 0 [ 752.835723][T19029] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 18:47:02 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="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", 0x103}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:47:02 executing program 3: syz_usb_connect(0x0, 0x0, 0x0, 0x0) [ 752.845764][T19029] usb 2-1: New USB device found, idVendor=1934, idProduct=1202, bcdDevice=87.08 [ 752.855121][T19029] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.911292][T19029] usb 2-1: config 0 descriptor?? [ 752.958605][T19029] f81534 2-1:0.0: unsupported endpoint max packet size [ 753.084635][T12852] usb 1-1: USB disconnect, device number 110 [ 753.093478][ T5] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 753.158147][T19029] usb 2-1: USB disconnect, device number 82 [ 753.333363][ T5] usb 5-1: Using ep0 maxpacket: 8 [ 753.448333][ T17] kaweth 3-1:0.0: kaweth interface created at eth1 [ 753.453456][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 753.466257][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 753.479354][ T5] usb 5-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 753.488711][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.500543][ T5] usb 5-1: config 0 descriptor?? 18:47:03 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0xea, 0x8d, 0xfe, 0x40, 0x157e, 0x3006, 0xc850, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xab, 0x83, 0x7d}}]}}]}}, 0x0) [ 753.698066][ T2808] usb 3-1: USB disconnect, device number 73 [ 753.933863][T19029] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 754.014142][T12900] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 754.044209][ T5] usbhid 5-1:0.0: can't add hid device: -71 [ 754.050682][ T5] usbhid: probe of 5-1:0.0 failed with error -71 [ 754.076303][ T5] usb 5-1: USB disconnect, device number 44 [ 754.183862][T19029] usb 2-1: Using ep0 maxpacket: 16 18:47:04 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2e, 0xa7, 0x53, 0x8, 0x565, 0x2, 0x84e0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1a, 0x5b, 0xb}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0xac, &(0x7f0000000600), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 18:47:04 executing program 3: syz_usb_connect(0x0, 0x0, 0x0, 0x0) [ 754.303953][T19029] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 0 [ 754.313991][T19029] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 754.324068][T19029] usb 2-1: New USB device found, idVendor=1934, idProduct=1202, bcdDevice=87.08 [ 754.333710][T19029] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.401782][T19029] usb 2-1: config 0 descriptor?? [ 754.423796][T12900] usb 1-1: New USB device found, idVendor=157e, idProduct=3006, bcdDevice=c8.50 [ 754.433232][T12900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.446595][T12900] usb 1-1: config 0 descriptor?? [ 754.466688][T19029] f81534 2-1:0.0: unsupported endpoint max packet size [ 754.508584][T12900] usb 1-1: error -2 when submitting rx urb [ 754.515258][T12900] usb 1-1: Failed to submit rx cmd [ 754.525109][T12900] ar5523: probe of 1-1:0.0 failed with error -2 [ 754.673392][ T17] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 754.686847][T12852] usb 2-1: USB disconnect, device number 83 [ 754.697822][T12900] usb 1-1: USB disconnect, device number 111 [ 754.763495][ T5] usb 5-1: new high-speed USB device number 45 using dummy_hcd 18:47:04 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x47, 0x66, 0x0, 0x4dd, 0x8003, 0xf156, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x2, 0x1}}]}}]}}, 0x0) [ 754.913992][ T17] usb 3-1: Using ep0 maxpacket: 8 [ 755.003685][ T5] usb 5-1: Using ep0 maxpacket: 8 [ 755.033520][ T17] usb 3-1: New USB device found, idVendor=0565, idProduct=0002, bcdDevice=84.e0 [ 755.042913][ T17] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.054361][ T17] usb 3-1: config 0 descriptor?? [ 755.123736][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 755.135597][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 755.148797][ T5] usb 5-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 755.158117][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.168199][ T5] usb 5-1: config 0 descriptor?? 18:47:05 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x77, 0x5c, 0xd6, 0x8, 0x525, 0xa4a0, 0xbfc7, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xd1, 0xba, 0x41, 0x0, [], [{{0x7, 0x5, 0x38b, 0xffffffffffffffff}}]}}]}}]}}, 0x0) [ 755.173726][T19029] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 755.323907][ T17] kaweth 3-1:0.0: Firmware present in device. [ 755.443343][T19029] usb 4-1: device descriptor read/64, error 18 [ 755.473347][T12900] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 755.535095][ T17] kaweth 3-1:0.0: Statistics collection: 0 [ 755.541102][ T17] kaweth 3-1:0.0: Multicast filter limit: 0 [ 755.547340][ T17] kaweth 3-1:0.0: MTU: 0 [ 755.551687][ T17] kaweth 3-1:0.0: Read MAC address 00:00:00:00:00:00 [ 755.563374][T12852] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 755.713575][ T5] usbhid 5-1:0.0: can't add hid device: -71 [ 755.719987][ T5] usbhid: probe of 5-1:0.0 failed with error -71 [ 755.732773][ T5] usb 5-1: USB disconnect, device number 45 18:47:05 executing program 4: syz_open_dev$hidraw(&(0x7f0000000140)='/dev/../raw#\x00', 0x0, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x40) [ 755.823394][T12852] usb 2-1: Using ep0 maxpacket: 8 [ 755.836360][T19029] usb 4-1: device descriptor read/64, error 18 [ 755.847190][T12900] usb 1-1: New USB device found, idVendor=157e, idProduct=3006, bcdDevice=c8.50 [ 755.856586][T12900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 18:47:05 executing program 4: syz_usb_connect$uac1(0x2, 0xa6, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x94, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0]}, @selector_unit={0xa, 0x24, 0x5, 0x0, 0x0, "34477d31c2"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x5f, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 755.888753][T12900] usb 1-1: config 0 descriptor?? [ 755.955897][T12900] usb 1-1: error -2 when submitting rx urb [ 755.961863][T12900] usb 1-1: Failed to submit rx cmd [ 755.974320][T12852] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 755.979856][T12900] ar5523: probe of 1-1:0.0 failed with error -2 [ 755.985098][T12852] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 18:47:06 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="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", 0x103}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 755.985211][T12852] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=bf.c7 [ 756.002456][T12852] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.052272][T12852] usb 2-1: config 0 descriptor?? [ 756.097074][T12852] usbtest 2-1:0.0: Linux gadget zero [ 756.102554][T12852] usbtest 2-1:0.0: high-speed {control in/out int-in} tests (+alt) [ 756.103716][T19029] usb 4-1: new high-speed USB device number 12 using dummy_hcd 18:47:06 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="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", 0x116}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 756.155768][T12940] usb 1-1: USB disconnect, device number 112 [ 756.194104][ T17] kaweth 3-1:0.0: Error setting receive filter [ 756.200679][ T17] kaweth: probe of 3-1:0.0 failed with error -5 [ 756.228921][ T17] usb 3-1: USB disconnect, device number 74 18:47:06 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="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", 0x116}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 756.300908][T12900] usb 2-1: USB disconnect, device number 84 [ 756.337256][ T5] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 756.383819][T19029] usb 4-1: device descriptor read/64, error 18 18:47:06 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r0, 0x40044590, 0x0) 18:47:06 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2e, 0xa7, 0x53, 0x8, 0x565, 0x2, 0x84e0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1a, 0x5b, 0xb}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0xac, &(0x7f0000000600), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 756.707235][ T5] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 756.716496][ T5] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 756.730689][ T5] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 756.823961][T19029] usb 4-1: device descriptor read/64, error 18 [ 756.933811][ T5] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 756.943534][ T5] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.951998][ T5] usb 5-1: Product: syz [ 756.956495][ T5] usb 5-1: Manufacturer: syz [ 756.961335][ T5] usb 5-1: SerialNumber: syz [ 756.968854][T19029] usb usb4-port1: attempt power cycle 18:47:07 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20d6, 0xcb17, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 757.063459][T12900] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 757.085268][ T17] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 757.284024][ T5] usb 5-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 757.292771][ T5] usb 5-1: found format II with max.bitrate = 0, frame size=0 [ 757.300745][ T5] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 757.307445][T12900] usb 3-1: Using ep0 maxpacket: 8 [ 757.343421][ T17] usb 2-1: Using ep0 maxpacket: 8 [ 757.344074][ T2808] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 757.365068][ T5] usb 5-1: USB disconnect, device number 46 [ 757.423798][T12900] usb 3-1: New USB device found, idVendor=0565, idProduct=0002, bcdDevice=84.e0 [ 757.434064][T12900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.446990][T12900] usb 3-1: config 0 descriptor?? [ 757.466752][ T17] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 757.477327][ T17] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 757.488530][ T17] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=bf.c7 [ 757.497793][ T17] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.509111][ T17] usb 2-1: config 0 descriptor?? [ 757.557319][ T17] usbtest 2-1:0.0: Linux gadget zero [ 757.562810][ T17] usbtest 2-1:0.0: high-speed {control in/out int-in} tests (+alt) [ 757.595465][ T2808] usb 1-1: Using ep0 maxpacket: 8 [ 757.683533][T19029] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 757.713622][ T2808] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 757.725306][ T2808] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 757.739421][ T2808] usb 1-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.40 [ 757.739489][ T2808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.750776][T12900] kaweth 3-1:0.0: Firmware present in device. [ 757.765837][ T5] usb 2-1: USB disconnect, device number 85 [ 757.787641][ T2808] usb 1-1: config 0 descriptor?? 18:47:08 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x47, 0x66, 0x0, 0x4dd, 0x8003, 0xf156, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x2, 0x1}}]}}]}}, 0x0) [ 757.984029][T12900] kaweth 3-1:0.0: Statistics collection: 0 [ 757.990122][T12900] kaweth 3-1:0.0: Multicast filter limit: 0 [ 757.996542][T12900] kaweth 3-1:0.0: MTU: 0 [ 758.000944][T12900] kaweth 3-1:0.0: Read MAC address 00:00:00:00:00:00 [ 758.033772][ T17] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 758.277508][ T2808] hid-generic 0003:20D6:CB17.0005: unknown main item tag 0x0 [ 758.292584][ T2808] hid-generic 0003:20D6:CB17.0005: hidraw0: USB HID v0.00 Device [HID 20d6:cb17] on usb-dummy_hcd.0-1/input0 [ 758.313635][T19029] usb 4-1: device descriptor read/64, error 18 18:47:08 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xe2, 0x7e, 0x7d, 0x40, 0x16c0, 0x5df, 0x75ce, 0x0, 0x80000001, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3}}]}}]}}, 0x0) [ 758.433726][ T17] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 758.442632][ T17] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 758.454419][ T17] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 758.479342][ T5] usb 1-1: USB disconnect, device number 113 [ 758.625072][ T17] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 758.634670][ T17] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.642752][ T17] usb 5-1: Product: syz [ 758.642830][ T17] usb 5-1: Manufacturer: syz [ 758.651726][ T17] usb 5-1: SerialNumber: syz [ 758.656885][T12900] kaweth 3-1:0.0: Error setting receive filter [ 758.663478][T12900] kaweth: probe of 3-1:0.0 failed with error -5 [ 758.675941][T12900] usb 3-1: USB disconnect, device number 75 [ 758.684238][ T2808] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 758.703812][T19029] usb 4-1: device descriptor read/64, error 18 18:47:09 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x34, 0xdc, 0x8f, 0x8, 0x471, 0x330, 0x395a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc5, 0x8f, 0x33}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001d80)={0xac, &(0x7f0000001a40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0xac, &(0x7f0000000480)={0x0, 0x0, 0x1, "11"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 758.983605][T19029] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 759.006253][ T17] usb 5-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 759.015106][ T17] usb 5-1: found format II with max.bitrate = 0, frame size=0 [ 759.022823][ T17] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 759.103705][ T17] usb 5-1: USB disconnect, device number 47 [ 759.165541][ T2808] usb 2-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=75.ce [ 759.174975][ T2808] usb 2-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 759.183383][ T2808] usb 2-1: Product: syz 18:47:09 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2e, 0xa7, 0x53, 0x8, 0x565, 0x2, 0x84e0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1a, 0x5b, 0xb}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0xac, &(0x7f0000000600), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 759.233666][ T2808] usb 2-1: config 0 descriptor?? [ 759.263577][T12940] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 759.290341][T19029] usb 4-1: device descriptor read/64, error 18 18:47:09 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c92465e5f9cc2d3fbf0322168078aba9d7ae45b0051a1221af2772a9567bb821942ce72590f1bf41d20d4c000000279bd612811df1fcaa94a96d58db92af7f9298918ae95b745777a1968e48d46358c8735e3b009f9d01000000000000005b5895e126de3d6d7c6949c6a87cf3ab2fbe80d1028d6e727a596c761e274e8f7bf745addbe19bd7642d38323564278e0410a966da6a254b9c2fa9c5d27796310a13c91878b74c9d615ae752a67e9373b0bc80f98ca3686a79c2dd0d6428fcbacb482ba7a33878f84fdc417a06cfa6d91426d3160fb649591b6d9523a05bf6c09be9", 0x116}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 759.483664][ T17] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 759.496403][T12852] usb 2-1: USB disconnect, device number 86 [ 759.503856][T12940] usb 1-1: Using ep0 maxpacket: 8 [ 759.603643][T12900] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 759.623708][T12940] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 759.635885][T12940] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 759.649061][T12940] usb 1-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.40 [ 759.658334][T12940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.669146][T12940] usb 1-1: config 0 descriptor?? [ 759.684350][T19029] usb 4-1: device descriptor read/64, error 18 [ 759.736240][ T17] usb 5-1: Using ep0 maxpacket: 8 [ 759.803966][T19029] usb usb4-port1: unable to enumerate USB device [ 759.853721][ T17] usb 5-1: New USB device found, idVendor=0471, idProduct=0330, bcdDevice=39.5a [ 759.862906][ T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.873269][T12900] usb 3-1: Using ep0 maxpacket: 8 [ 759.881353][ T17] usb 5-1: config 0 descriptor?? [ 759.930623][ T17] gspca_main: sonixj-2.14.0 probing 0471:0330 [ 759.993763][T12900] usb 3-1: New USB device found, idVendor=0565, idProduct=0002, bcdDevice=84.e0 [ 760.003953][T12900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.017277][T12900] usb 3-1: config 0 descriptor?? 18:47:10 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000005380)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f00000004c0)="97") syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000900)="13") syz_usb_ep_read(r0, 0x0, 0xc4, &(0x7f0000000000)=""/196) [ 760.193846][T12940] usbhid 1-1:0.0: can't add hid device: -71 [ 760.200876][T12940] usbhid: probe of 1-1:0.0 failed with error -71 [ 760.214061][T12940] usb 1-1: USB disconnect, device number 114 [ 760.283782][T12900] kaweth 3-1:0.0: Firmware present in device. [ 760.290480][T19029] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 760.503982][T12900] kaweth 3-1:0.0: Statistics collection: 0 [ 760.512304][T12900] kaweth 3-1:0.0: Multicast filter limit: 0 [ 760.518833][T12900] kaweth 3-1:0.0: MTU: 0 [ 760.523376][T12900] kaweth 3-1:0.0: Read MAC address 00:00:00:00:00:00 [ 760.623448][T12940] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 760.733648][T19029] usb 2-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=75.ce [ 760.743901][T19029] usb 2-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 760.752882][T19029] usb 2-1: Product: syz [ 760.760416][T19029] usb 2-1: config 0 descriptor?? [ 760.903553][T12940] usb 1-1: Using ep0 maxpacket: 8 18:47:11 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x47, 0x66, 0x0, 0x4dd, 0x8003, 0xf156, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x2, 0x1}}]}}]}}, 0x0) [ 761.010152][T12852] usb 2-1: USB disconnect, device number 87 [ 761.054002][T12940] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 761.067352][T12940] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 761.076680][T12940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.089018][T12940] usb 1-1: config 0 descriptor?? [ 761.138969][T12940] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 761.163655][T12900] kaweth 3-1:0.0: Error setting receive filter [ 761.170091][T12900] kaweth: probe of 3-1:0.0 failed with error -5 [ 761.204190][T12900] usb 3-1: USB disconnect, device number 76 18:47:11 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000140)={0x0, 0x0, 0x66, {0x66, 0x0, "04971b9ba99beaabc8764f22243386a3950f11792753e3556659aba70bd4a283b5e07c75be5606c1c2c3ae9dd9dfcc899a872b2efb2ab3219ba07e94080418d6a41ba99b0ac54a686995a07abca082b6132e8901f1f2d7fb0b49149c0ac24cb503d5caa4"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 761.383557][T12853] usb 4-1: new high-speed USB device number 15 using dummy_hcd 18:47:11 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2e, 0xa7, 0x53, 0x8, 0x565, 0x2, 0x84e0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1a, 0x5b, 0xb}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0xac, &(0x7f0000000600), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 761.663534][ T17] gspca_sonixj: i2c_w8 err -71 [ 761.668990][T12853] usb 4-1: device descriptor read/64, error 18 [ 761.695201][ T17] sonixj: probe of 5-1:0.0 failed with error -71 [ 761.721852][ T17] usb 5-1: USB disconnect, device number 48 [ 761.754212][T12852] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 761.993492][T12852] usb 2-1: Using ep0 maxpacket: 8 [ 762.033489][T12900] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 762.063647][T12853] usb 4-1: device descriptor read/64, error 18 [ 762.113679][T12852] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 762.125039][T12852] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 762.138814][T12852] usb 2-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00 [ 762.148325][T12852] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.162279][T12852] usb 2-1: config 0 descriptor?? [ 762.293551][T12900] usb 3-1: Using ep0 maxpacket: 8 [ 762.333524][T12853] usb 4-1: new high-speed USB device number 16 using dummy_hcd 18:47:12 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="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", 0x11f}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 762.423750][T12900] usb 3-1: New USB device found, idVendor=0565, idProduct=0002, bcdDevice=84.e0 [ 762.423810][ T17] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 762.441114][T12900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.471917][T12900] usb 3-1: config 0 descriptor?? 18:47:12 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c92465e5f9cc2d3fbf0322168078aba9d7ae45b0051a1221af2772a9567bb821942ce72590f1bf41d20d4c000000279bd612811df1fcaa94a96d58db92af7f9298918ae95b745777a1968e48d46358c8735e3b009f9d01000000000000005b5895e126de3d6d7c6949c6a87cf3ab2fbe80d1028d6e727a596c761e274e8f7bf745addbe19bd7642d38323564278e0410a966da6a254b9c2fa9c5d27796310a13c91878b74c9d615ae752a67e9373b0bc80f98ca3686a79c2dd0d6428fcbacb482ba7a33878f84fdc417a06cfa6d91426d3160fb649591b6d9523a05bf6c09be99b46692a885d573ba5", 0x11f}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 762.605735][T12853] usb 4-1: device descriptor read/64, error 18 [ 762.647434][T12852] hid (null): invalid report_count -1683383525 [ 762.653780][T12852] hid (null): invalid report_size 8783 [ 762.670668][ T17] usb 5-1: Using ep0 maxpacket: 8 [ 762.733786][T12900] kaweth 3-1:0.0: Firmware present in device. [ 762.793747][ T17] usb 5-1: New USB device found, idVendor=0471, idProduct=0330, bcdDevice=39.5a [ 762.803037][ T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.813693][ T17] usb 5-1: config 0 descriptor?? [ 762.859654][ T17] gspca_main: sonixj-2.14.0 probing 0471:0330 [ 762.874030][T12852] usb 2-1: string descriptor 0 read error: -71 [ 762.894141][T12852] uclogic 0003:5543:3031.0006: failed retrieving string descriptor #200: -71 [ 762.903828][T12852] uclogic 0003:5543:3031.0006: failed retrieving pen parameters: -71 [ 762.912098][T12852] uclogic 0003:5543:3031.0006: failed probing pen v2 parameters: -71 [ 762.920705][T12852] uclogic 0003:5543:3031.0006: failed probing parameters: -71 [ 762.928648][T12852] uclogic: probe of 0003:5543:3031.0006 failed with error -71 [ 762.940593][T12852] usb 2-1: USB disconnect, device number 88 [ 762.943789][T12900] kaweth 3-1:0.0: Statistics collection: 0 [ 762.952588][T12900] kaweth 3-1:0.0: Multicast filter limit: 0 [ 762.958823][T12900] kaweth 3-1:0.0: MTU: 0 [ 762.963353][T12900] kaweth 3-1:0.0: Read MAC address 00:00:00:00:00:00 [ 763.003539][T12853] usb 4-1: device descriptor read/64, error 18 [ 763.124493][T12853] usb usb4-port1: attempt power cycle 18:47:13 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x34, 0xdc, 0x8f, 0x8, 0x471, 0x330, 0x395a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc5, 0x8f, 0x33}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001d80)={0xac, &(0x7f0000001a40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0xac, &(0x7f0000000480)={0x0, 0x0, 0x1, "11"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 763.207773][T19029] usb 1-1: USB disconnect, device number 115 [ 763.225726][ T17] gspca_sonixj: reg_w1 err -71 [ 763.235107][ T17] sonixj: probe of 5-1:0.0 failed with error -71 18:47:13 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000005380)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f00000004c0)="97") syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000900)="13") syz_usb_ep_read(r0, 0x0, 0xc4, &(0x7f0000000000)=""/196) [ 763.252755][ T17] usb 5-1: USB disconnect, device number 49 [ 763.584191][T12900] kaweth 3-1:0.0: Error setting receive filter [ 763.590591][T12900] kaweth: probe of 3-1:0.0 failed with error -5 [ 763.611812][T12900] usb 3-1: USB disconnect, device number 77 [ 763.623841][T12852] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 763.753914][T19029] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 763.773379][ T17] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 763.833604][T12853] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 763.873455][T12852] usb 2-1: Using ep0 maxpacket: 8 [ 763.993388][T19029] usb 1-1: Using ep0 maxpacket: 8 [ 764.013767][T12852] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 764.024963][T12852] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 764.038041][T12852] usb 2-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00 [ 764.047324][T12852] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.056617][ T17] usb 5-1: Using ep0 maxpacket: 8 [ 764.064010][T12852] usb 2-1: config 0 descriptor?? 18:47:14 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2e, 0xa7, 0x53, 0x8, 0x565, 0x2, 0x84e0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1a, 0x5b, 0xb}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0xac, &(0x7f0000000600), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 764.113634][T19029] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 764.126825][T19029] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 764.136240][T19029] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.146504][T12853] usb 4-1: device descriptor read/64, error 18 [ 764.195793][ T17] usb 5-1: New USB device found, idVendor=0471, idProduct=0330, bcdDevice=39.5a [ 764.205080][ T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.254288][T19029] usb 1-1: config 0 descriptor?? [ 764.289351][ T17] usb 5-1: config 0 descriptor?? [ 764.304308][T19029] usbhid 1-1:0.0: couldn't find an input interrupt endpoint 18:47:14 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000004000)={{0x12, 0x1, 0x0, 0xfa, 0x42, 0xd5, 0x20, 0x134c, 0x4, 0x15f3, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x9, 0x5e, 0x4b, 0x0, [], [{}]}}]}}]}}, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x3, 0x0) syz_open_dev$evdev(&(0x7f0000003b40)='/dev/input/event#\x00', 0x3, 0x0) [ 764.347434][ T17] gspca_main: sonixj-2.14.0 probing 0471:0330 18:47:14 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000140)={0x0, 0x0, 0x66, {0x66, 0x0, "04971b9ba99beaabc8764f22243386a3950f11792753e3556659aba70bd4a283b5e07c75be5606c1c2c3ae9dd9dfcc899a872b2efb2ab3219ba07e94080418d6a41ba99b0ac54a686995a07abca082b6132e8901f1f2d7fb0b49149c0ac24cb503d5caa4"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 764.574585][T12852] usbhid 2-1:0.0: can't add hid device: -71 [ 764.580835][T12852] usbhid: probe of 2-1:0.0 failed with error -71 [ 764.592137][T12852] usb 2-1: USB disconnect, device number 89 [ 764.593729][T19029] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 764.713394][T12853] usb 4-1: device descriptor read/64, error -71 [ 764.843406][T19029] usb 3-1: Using ep0 maxpacket: 8 [ 764.963511][T12852] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 764.963900][T19029] usb 3-1: New USB device found, idVendor=0565, idProduct=0002, bcdDevice=84.e0 [ 764.980942][T19029] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.983674][T12853] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 764.997828][T19029] usb 3-1: config 0 descriptor?? [ 765.223587][T12852] usb 2-1: Using ep0 maxpacket: 8 [ 765.233358][T12853] usb 4-1: Using ep0 maxpacket: 32 [ 765.263725][T19029] kaweth 3-1:0.0: Firmware present in device. [ 765.344013][T12852] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 765.355364][T12852] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 765.368716][T12852] usb 2-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00 [ 765.379071][T12852] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.388895][T12853] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 765.400070][T12853] usb 4-1: New USB device found, idVendor=134c, idProduct=0004, bcdDevice=15.f3 [ 765.409833][T12853] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.420736][T12852] usb 2-1: config 0 descriptor?? [ 765.434330][T12853] usb 4-1: config 0 descriptor?? [ 765.463935][T19029] kaweth 3-1:0.0: Statistics collection: 0 [ 765.470152][T19029] kaweth 3-1:0.0: Multicast filter limit: 0 [ 765.476461][T19029] kaweth 3-1:0.0: MTU: 0 [ 765.480894][T19029] kaweth 3-1:0.0: Read MAC address 00:00:00:00:00:00 [ 765.495048][T12853] hub 4-1:0.0: ignoring external hub 18:47:15 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c92465e5f9cc2d3fbf0322168078aba9d7ae45b0051a1221af2772a9567bb821942ce72590f1bf41d20d4c000000279bd612811df1fcaa94a96d58db92af7f9298918ae95b745777a1968e48d46358c8735e3b009f9d01000000000000005b5895e126de3d6d7c6949c6a87cf3ab2fbe80d1028d6e727a596c761e274e8f7bf745addbe19bd7642d38323564278e0410a966da6a254b9c2fa9c5d27796310a13c91878b74c9d615ae752a67e9373b0bc80f98ca3686a79c2dd0d6428fcbacb482ba7a33878f84fdc417a06cfa6d91426d3160fb649591b6d9523a05bf6c09be99b46692a885d573ba5", 0x11f}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:47:15 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="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", 0x124}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 765.844581][T12853] usb 4-1: USB disconnect, device number 18 [ 765.894977][T12852] hid (null): invalid report_count -1683383525 [ 765.901424][T12852] hid (null): invalid report_size 8783 [ 766.093446][ T17] gspca_sonixj: i2c_w8 err -71 [ 766.123667][T19029] kaweth 3-1:0.0: Error setting receive filter [ 766.131076][T19029] kaweth: probe of 3-1:0.0 failed with error -5 [ 766.133603][ T17] sonixj: probe of 5-1:0.0 failed with error -71 [ 766.147482][T12852] usb 2-1: string descriptor 0 read error: -71 [ 766.156871][T19029] usb 3-1: USB disconnect, device number 78 [ 766.174407][ T17] usb 5-1: USB disconnect, device number 50 [ 766.184388][T12852] uclogic 0003:5543:3031.0007: failed retrieving string descriptor #200: -71 [ 766.193711][T12852] uclogic 0003:5543:3031.0007: failed retrieving pen parameters: -71 [ 766.201990][T12852] uclogic 0003:5543:3031.0007: failed probing pen v2 parameters: -71 [ 766.211423][T12852] uclogic 0003:5543:3031.0007: failed probing parameters: -71 [ 766.219403][T12852] uclogic: probe of 0003:5543:3031.0007 failed with error -71 [ 766.237977][T12852] usb 2-1: USB disconnect, device number 90 18:47:16 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000005380)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f00000004c0)="97") syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000900)="13") syz_usb_ep_read(r0, 0x0, 0xc4, &(0x7f0000000000)=""/196) [ 766.367399][T12900] usb 1-1: USB disconnect, device number 116 18:47:16 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x34, 0xdc, 0x8f, 0x8, 0x471, 0x330, 0x395a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc5, 0x8f, 0x33}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001d80)={0xac, &(0x7f0000001a40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0xac, &(0x7f0000000480)={0x0, 0x0, 0x1, "11"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 766.603423][T12853] usb 4-1: new high-speed USB device number 19 using dummy_hcd 18:47:16 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2e, 0xa7, 0x53, 0x8, 0x565, 0x2, 0x84e0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1a, 0x5b, 0xb}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0xac, &(0x7f0000000600), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 18:47:16 executing program 1: syz_usb_connect$uac1(0x0, 0x87, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x8, 0x24, 0x4, 0x2, 0x3, "f42348"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}, @as_header={0x7, 0x24, 0x1, 0x0, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 766.783723][T12900] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 766.853429][T12853] usb 4-1: Using ep0 maxpacket: 32 [ 766.933435][T19029] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 766.973539][T12853] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 766.988891][T12853] usb 4-1: New USB device found, idVendor=134c, idProduct=0004, bcdDevice=15.f3 [ 766.998302][T12853] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.009639][T12853] usb 4-1: config 0 descriptor?? [ 767.015418][T12852] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 767.043598][T12900] usb 1-1: Using ep0 maxpacket: 8 [ 767.054786][T12853] hub 4-1:0.0: ignoring external hub [ 767.095312][ T2808] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 767.173826][T12900] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 767.187583][T12900] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 767.197398][T12900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.207298][T19029] usb 5-1: Using ep0 maxpacket: 8 [ 767.214222][T12900] usb 1-1: config 0 descriptor?? [ 767.258822][T12900] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 767.274197][T12852] usb 3-1: Using ep0 maxpacket: 8 [ 767.324104][T19029] usb 5-1: New USB device found, idVendor=0471, idProduct=0330, bcdDevice=39.5a [ 767.333425][T19029] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.343849][T19029] usb 5-1: config 0 descriptor?? [ 767.384169][T12853] usb 4-1: USB disconnect, device number 19 [ 767.392743][T19029] gspca_main: sonixj-2.14.0 probing 0471:0330 [ 767.403864][T12852] usb 3-1: New USB device found, idVendor=0565, idProduct=0002, bcdDevice=84.e0 [ 767.413397][T12852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.427140][T12852] usb 3-1: config 0 descriptor?? [ 767.463782][ T2808] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 767.473992][ T2808] usb 2-1: config 1 has no interface number 1 [ 767.480591][ T2808] usb 2-1: too many endpoints for config 1 interface 2 altsetting 3: 244, using maximum allowed: 30 [ 767.492027][ T2808] usb 2-1: config 1 interface 2 altsetting 3 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 767.504570][ T2808] usb 2-1: config 1 interface 2 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 244 [ 767.519036][ T2808] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 767.531111][ T2808] usb 2-1: config 1 interface 2 has no altsetting 2 18:47:17 executing program 3: syz_usb_connect$uac1(0x0, 0x93, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0x9, 0x24, 0x8, 0x0, 0x0, 0x0, "d84e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x3, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x0, 0x0, 0x8}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x32b, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 767.693740][ T2808] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 767.694238][T12852] kaweth 3-1:0.0: Firmware present in device. [ 767.702959][ T2808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.717942][ T2808] usb 2-1: Product: syz [ 767.722260][ T2808] usb 2-1: Manufacturer: syz [ 767.727250][ T2808] usb 2-1: SerialNumber: syz [ 767.893677][T12900] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 767.904530][T12852] kaweth 3-1:0.0: Statistics collection: 0 [ 767.910955][T12852] kaweth 3-1:0.0: Multicast filter limit: 0 [ 767.917521][T12852] kaweth 3-1:0.0: MTU: 0 [ 767.921949][T12852] kaweth 3-1:0.0: Read MAC address 00:00:00:00:00:00 [ 768.087756][ T2808] usb 2-1: USB disconnect, device number 91 [ 768.264306][T12900] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 768.273554][T12900] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 768.282903][T12900] usb 4-1: config 1 has no interface number 1 [ 768.289722][T12900] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 768.453929][T12900] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 768.463377][T12900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.471482][T12900] usb 4-1: Product: syz [ 768.475911][T12900] usb 4-1: Manufacturer: syz [ 768.480758][T12900] usb 4-1: SerialNumber: syz [ 768.573740][T12852] kaweth 3-1:0.0: Error setting receive filter [ 768.580592][T12852] kaweth: probe of 3-1:0.0 failed with error -5 [ 768.600848][T12852] usb 3-1: USB disconnect, device number 79 [ 768.753493][ T2808] usb 2-1: new high-speed USB device number 92 using dummy_hcd 18:47:18 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="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", 0x124}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 768.804146][T12900] usb 4-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 768.812841][T12900] usb 4-1: found format II with max.bitrate = 0, frame size=0 [ 768.820984][T12900] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc 18:47:18 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c92465e5f9cc2d3fbf0322168078aba9d7ae45b0051a1221af2772a9567bb821942ce72590f1bf41d20d4c000000279bd612811df1fcaa94a96d58db92af7f9298918ae95b745777a1968e48d46358c8735e3b009f9d01000000000000005b5895e126de3d6d7c6949c6a87cf3ab2fbe80d1028d6e727a596c761e274e8f7bf745addbe19bd7642d38323564278e0410a966da6a254b9c2fa9c5d27796310a13c91878b74c9d615ae752a67e9373b0bc80f98ca3686a79c2dd0d6428fcbacb482ba7a33878f84fdc417a06cfa6d91426d3160fb649591b6d9523a05bf6c09be99b46692a885d573ba599041fde6a", 0x124}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 768.863708][T12900] usb 4-1: USB disconnect, device number 20 18:47:19 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2e, 0xa7, 0x53, 0x8, 0x565, 0x2, 0x84e0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1a, 0x5b, 0xb}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0xac, &(0x7f0000000600), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 769.114515][ T2808] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 769.123854][ T2808] usb 2-1: config 1 has no interface number 1 [ 769.130101][ T2808] usb 2-1: too many endpoints for config 1 interface 2 altsetting 3: 244, using maximum allowed: 30 [ 769.130228][ T2808] usb 2-1: config 1 interface 2 altsetting 3 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 769.152310][ T2808] usb 2-1: config 1 interface 2 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 244 [ 769.165821][ T2808] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 769.177184][ T2808] usb 2-1: config 1 interface 2 has no altsetting 2 [ 769.213297][T19029] gspca_sonixj: i2c_w8 err -71 [ 769.243882][T19029] sonixj: probe of 5-1:0.0 failed with error -71 [ 769.256132][T19029] usb 5-1: USB disconnect, device number 51 [ 769.343664][ T2808] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 769.353710][ T2808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.362299][ T2808] usb 2-1: Product: syz [ 769.366854][ T2808] usb 2-1: Manufacturer: syz [ 769.371570][ T2808] usb 2-1: SerialNumber: syz 18:47:19 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000005380)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f00000004c0)="97") syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000900)="13") syz_usb_ep_read(r0, 0x0, 0xc4, &(0x7f0000000000)=""/196) [ 769.431607][T12900] usb 1-1: USB disconnect, device number 117 [ 769.463384][T12852] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 769.493775][T12853] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 769.713522][T12852] usb 3-1: Using ep0 maxpacket: 8 [ 769.714086][ T2808] usb 2-1: USB disconnect, device number 92 18:47:19 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x34, 0xdc, 0x8f, 0x8, 0x471, 0x330, 0x395a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc5, 0x8f, 0x33}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001d80)={0xac, &(0x7f0000001a40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0xac, &(0x7f0000000480)={0x0, 0x0, 0x1, "11"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 769.838496][T12852] usb 3-1: New USB device found, idVendor=0565, idProduct=0002, bcdDevice=84.e0 [ 769.848230][T12852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.857866][T12853] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 769.866876][T12853] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 769.876119][T12853] usb 4-1: config 1 has no interface number 1 18:47:20 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2c, 0xb2, 0x82, 0x8, 0x1ba6, 0x1, 0x1f54, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xe2, 0x0, 0x0, 0xfe, 0x59, 0xc2}}]}}]}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 769.882368][T12853] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 769.883363][T12900] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 769.915003][T12852] usb 3-1: config 0 descriptor?? [ 770.073774][T12853] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 770.083907][T12853] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.084677][T19029] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 770.092044][T12853] usb 4-1: Product: syz [ 770.104289][T12853] usb 4-1: Manufacturer: syz [ 770.109164][T12853] usb 4-1: SerialNumber: syz [ 770.144622][T12900] usb 1-1: Using ep0 maxpacket: 8 [ 770.183794][T12852] kaweth 3-1:0.0: Firmware present in device. [ 770.263679][T12900] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 770.273667][ T17] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 770.276931][T12900] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 770.293809][T12900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.305744][T12900] usb 1-1: config 0 descriptor?? [ 770.360740][T12900] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 770.370735][T19029] usb 5-1: Using ep0 maxpacket: 8 [ 770.394026][T12852] kaweth 3-1:0.0: Statistics collection: 0 [ 770.400192][T12852] kaweth 3-1:0.0: Multicast filter limit: 0 [ 770.406550][T12852] kaweth 3-1:0.0: MTU: 0 [ 770.410983][T12852] kaweth 3-1:0.0: Read MAC address 00:00:00:00:00:00 [ 770.433849][T12853] usb 4-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 770.442541][T12853] usb 4-1: found format II with max.bitrate = 0, frame size=0 [ 770.450351][T12853] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 770.489347][T12853] usb 4-1: USB disconnect, device number 21 [ 770.503992][T19029] usb 5-1: New USB device found, idVendor=0471, idProduct=0330, bcdDevice=39.5a [ 770.513369][T19029] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.535860][ T17] usb 2-1: Using ep0 maxpacket: 8 [ 770.549019][T19029] usb 5-1: config 0 descriptor?? [ 770.608071][T19029] gspca_main: sonixj-2.14.0 probing 0471:0330 18:47:20 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xa8, 0xbc, 0xb2, 0x8, 0xe41, 0x5051, 0x8243, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x14, 0xdf, 0xf7}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) [ 770.653721][ T17] usb 2-1: config 0 has an invalid interface number: 226 but max is 0 [ 770.662149][ T17] usb 2-1: config 0 has no interface number 0 [ 770.668880][ T17] usb 2-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=1f.54 [ 770.678324][ T17] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.707178][ T17] usb 2-1: config 0 descriptor?? [ 770.762833][ T17] as10x_usb: device has been detected [ 770.769878][ T17] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 770.819332][ T17] usb 2-1: DVB: registering adapter 0 frontend 0 (Abilis Systems DVB-Titan)... [ 770.840674][ T17] usb 2-1: Direct firmware load for as102_data1_st.hex failed with error -2 [ 770.849760][ T17] as10x_usb: unable to locate firmware file: as102_data1_st.hex [ 770.858022][ T17] Registered device Abilis Systems DVB-Titan [ 770.959936][ T2808] usb 2-1: USB disconnect, device number 93 [ 770.985721][ T2808] Unregistered device Abilis Systems DVB-Titan [ 770.992802][ T2808] as10x_usb: device has been disconnected [ 771.044328][T12900] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 771.053953][T12852] kaweth 3-1:0.0: Error setting receive filter [ 771.060596][T12852] kaweth: probe of 3-1:0.0 failed with error -5 [ 771.080049][T12852] usb 3-1: USB disconnect, device number 80 [ 771.283418][T12900] usb 4-1: Using ep0 maxpacket: 8 [ 771.403810][T12900] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 771.412023][T12900] usb 4-1: config 0 has no interface number 0 [ 771.418489][T12900] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=82.43 [ 771.427812][T12900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.439890][T12900] usb 4-1: config 0 descriptor?? [ 771.490381][T12900] snd_usb_pod 4-1:0.1: Line 6 Pocket POD found 18:47:21 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2e, 0xa7, 0x53, 0x8, 0x565, 0x2, 0x84e0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1a, 0x5b, 0xb}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0xac, &(0x7f0000000600), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 771.694169][T12900] snd_usb_pod 4-1:0.1: endpoint not available, using fallback values [ 771.702563][T12900] snd_usb_pod 4-1:0.1: invalid control EP [ 771.708614][T12900] snd_usb_pod 4-1:0.1: cannot start listening: -22 [ 771.715490][T12900] snd_usb_pod 4-1:0.1: Line 6 Pocket POD now disconnected [ 771.723434][T12900] snd_usb_pod: probe of 4-1:0.1 failed with error -22 [ 771.743654][T12852] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 771.893490][ T17] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 771.906415][T12900] usb 4-1: USB disconnect, device number 22 18:47:22 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="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", 0x126}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 771.983592][T12852] usb 2-1: Using ep0 maxpacket: 8 [ 772.103821][T12852] usb 2-1: config 0 has an invalid interface number: 226 but max is 0 [ 772.112248][T12852] usb 2-1: config 0 has no interface number 0 [ 772.118892][T12852] usb 2-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=1f.54 [ 772.128188][T12852] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.137655][ T17] usb 3-1: Using ep0 maxpacket: 8 [ 772.146875][T12852] usb 2-1: config 0 descriptor?? [ 772.195725][T12852] as10x_usb: device has been detected [ 772.202419][T12852] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 772.254198][ T17] usb 3-1: New USB device found, idVendor=0565, idProduct=0002, bcdDevice=84.e0 [ 772.263699][ T17] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.281858][T12852] usb 2-1: DVB: registering adapter 0 frontend 0 (Abilis Systems DVB-Titan)... [ 772.293062][ T17] usb 3-1: config 0 descriptor?? [ 772.303338][T12852] usb 2-1: Direct firmware load for as102_data1_st.hex failed with error -2 [ 772.312184][T12852] as10x_usb: unable to locate firmware file: as102_data1_st.hex [ 772.320676][T12852] Registered device Abilis Systems DVB-Titan [ 772.387604][T12900] usb 2-1: USB disconnect, device number 94 [ 772.395036][T19029] gspca_sonixj: i2c_w8 err -71 [ 772.417127][T12900] Unregistered device Abilis Systems DVB-Titan [ 772.429075][T19029] sonixj: probe of 5-1:0.0 failed with error -71 [ 772.441625][T12900] as10x_usb: device has been disconnected [ 772.450505][T19029] usb 5-1: USB disconnect, device number 52 18:47:22 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000005380)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f00000004c0)="97") syz_usb_ep_read(r0, 0x0, 0xc4, &(0x7f0000000000)=""/196) [ 772.536754][T12852] usb 1-1: USB disconnect, device number 118 [ 772.566335][ T17] kaweth 3-1:0.0: Firmware present in device. [ 772.713476][ T2808] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 772.763627][ T17] kaweth 3-1:0.0: Statistics collection: 0 [ 772.769776][ T17] kaweth 3-1:0.0: Multicast filter limit: 0 [ 772.776152][ T17] kaweth 3-1:0.0: MTU: 0 [ 772.780547][ T17] kaweth 3-1:0.0: Read MAC address 00:00:00:00:00:00 18:47:22 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x34, 0xdc, 0x8f, 0x8, 0x471, 0x330, 0x395a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc5, 0x8f, 0x33}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001d80)={0xac, &(0x7f0000001a40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0xac, &(0x7f0000000480)={0x0, 0x0, 0x1, "11"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 18:47:23 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2c, 0xb2, 0x82, 0x8, 0x1ba6, 0x1, 0x1f54, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xe2, 0x0, 0x0, 0xfe, 0x59, 0xc2}}]}}]}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 772.963578][ T2808] usb 4-1: Using ep0 maxpacket: 8 [ 772.984085][T12852] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 773.093824][ T2808] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 773.101955][ T2808] usb 4-1: config 0 has no interface number 0 [ 773.108475][ T2808] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=82.43 [ 773.117702][ T2808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.130620][ T2808] usb 4-1: config 0 descriptor?? [ 773.179976][ T2808] snd_usb_pod 4-1:0.1: Line 6 Pocket POD found [ 773.213652][T12853] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 773.223508][T12852] usb 1-1: Using ep0 maxpacket: 8 [ 773.303668][T12900] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 773.344142][T12852] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 773.357403][T12852] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 773.366649][T12852] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.383734][ T2808] snd_usb_pod 4-1:0.1: set_interface failed [ 773.386902][T12852] usb 1-1: config 0 descriptor?? [ 773.390070][ T2808] snd_usb_pod 4-1:0.1: Line 6 Pocket POD now disconnected [ 773.402482][ T2808] snd_usb_pod: probe of 4-1:0.1 failed with error -71 [ 773.414054][ T17] kaweth 3-1:0.0: Error setting receive filter [ 773.421312][ T17] kaweth: probe of 3-1:0.0 failed with error -5 [ 773.421748][ T2808] usb 4-1: USB disconnect, device number 23 [ 773.453882][T12852] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 773.466903][ T17] usb 3-1: USB disconnect, device number 81 [ 773.513583][T12853] usb 5-1: Using ep0 maxpacket: 8 [ 773.563490][T12900] usb 2-1: Using ep0 maxpacket: 8 [ 773.643701][T12853] usb 5-1: New USB device found, idVendor=0471, idProduct=0330, bcdDevice=39.5a [ 773.653014][T12853] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.667790][T12853] usb 5-1: config 0 descriptor?? [ 773.683570][T12900] usb 2-1: config 0 has an invalid interface number: 226 but max is 0 [ 773.691864][T12900] usb 2-1: config 0 has no interface number 0 [ 773.698262][T12900] usb 2-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=1f.54 [ 773.708227][T12900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.718780][T12900] usb 2-1: config 0 descriptor?? [ 773.729856][T12853] gspca_main: sonixj-2.14.0 probing 0471:0330 18:47:23 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xc2, 0x12, 0xb9, 0x8, 0x694, 0x1, 0xeb88, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x61, 0xae, 0x46, 0x0, [], [{{0x9, 0x5, 0xf, 0x1f}}, {{0x9, 0x5, 0x83, 0xb}}]}}]}}]}}, 0x0) [ 773.811664][T12900] as10x_usb: device has been detected [ 773.819162][T12900] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 773.867610][T12852] usb 1-1: USB disconnect, device number 119 [ 773.908618][T12900] usb 2-1: DVB: registering adapter 0 frontend 0 (Abilis Systems DVB-Titan)... [ 773.928538][T12900] usb 2-1: Direct firmware load for as102_data1_st.hex failed with error -2 [ 773.938273][T12900] as10x_usb: unable to locate firmware file: as102_data1_st.hex 18:47:24 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2e, 0xa7, 0x53, 0x8, 0x565, 0x2, 0x84e0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1a, 0x5b, 0xb}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0xac, &(0x7f0000000600), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 773.946178][T12900] Registered device Abilis Systems DVB-Titan [ 773.992617][T12900] usb 2-1: USB disconnect, device number 95 [ 774.033912][T12900] Unregistered device Abilis Systems DVB-Titan [ 774.050181][T12900] as10x_usb: device has been disconnected [ 774.133581][ T17] usb 4-1: new high-speed USB device number 24 using dummy_hcd 18:47:24 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000005380)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f00000004c0)="97") syz_usb_ep_read(r0, 0x0, 0xc4, &(0x7f0000000000)=""/196) [ 774.343568][T12940] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 774.394679][ T17] usb 4-1: Using ep0 maxpacket: 8 18:47:24 executing program 1: syz_open_dev$sndtimer(0x0, 0x0, 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f00000001c0)="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", 0x1000) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') lseek(r0, 0x0, 0x2) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000000)=""/249) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) r1 = add_key$keyring(&(0x7f0000001240)='\xe5\x15W\x05\xe0\xec+\xda', &(0x7f0000001280)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) request_key(0x0, 0x0, &(0x7f0000000280)='em1vmnet0\x00', r1) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0, r1) r2 = geteuid() getgroups(0x2, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff]) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000740)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\a\xd2\x8f(.\xf6\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e\xab\x8d\xed\xa6\\\x1c\xc3\x97\x94\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\x15v$\xc5\xbc\x11N\t\x9ej5)\x00\x00\x009\x8c4\xc4\x88C\xa2B\x8b\x81\v\xea\t\xf0\x8fw\a\f\x15\xe2\xd0q\xbb\t\xbf\x85\x98~\v\xd8D\xab9(\xf6.\x15\xcd2-\xf2\xc4\xd8\x00a\xd5\xd9\xb5Z\xd7\xb4\xac\x1d_+k\xd6\x8ag\xdceHE\xd5\x1c\x8a\xbd#\xcc\x82\xc2\xc2(\xb6\xe1\x99p\x9b\xa3D\xd2\x91\x96\xef\x05\fv\x16\x14\xcc\xea\x9d\x11w\x1e\xb5VG\x9ad\x9a`=^h\x8c8\xc9\"\x1eO\xb5vk\xc9\v\x17\x95\xf7\x19\x99\x99\x92\xc3\xc0\x8a\x18\xc7\"g\xd7B\x8f\x85\x18\xf3\x02\xa7\xb6\x83\x92\xefY\xef\x85\x92\x10E\x18\xbc\xacy\xd6\xa7Wh\xcd\xd0\xfa\xcc\x01\xeb\xdf\xad\xfd\xb0\xee\xfb\xc2(\x8cj\xd0uj{4\xb2\xe1p\x88u6\x9a;\xaa\x9f+J\x9e\xe3\xcc\xc7O\xad\x84\x8c;\x92~,\x15\xb2\x97\f~\xa0W\x16\x8b\a\x88\xaa\xe4C\xaf\x90\xdf\x7f\xe51\x00/n\xb5f\x1a\x8c+\xea<\xe3N@\x9e\xec\xbe{\x90x\xc6\xd7\xeeI\x1d\xcbY\xe1\x01\xd2d\xae\xd1(>\xa3\xa9\x93\x16\xc6G\x94|\x00\x00\x00\x00\x00\x00\x00\x00\x91\x00+/pF\xfa]\xc4\xb3\xfc~\x13\xc3\x8aV\xa5\n\xe9H\xad\xf5\xa7{\x90\b\x9bb\xb8gY\xdb', 0x2761, 0x0) write$cgroup_pid(r3, &(0x7f0000000080), 0xfffffe38) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x660c, 0x0) getresgid(&(0x7f0000000700), &(0x7f0000001d00), &(0x7f0000001d40)) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r4, 0x5411, &(0x7f00000011c0)) getegid() keyctl$chown(0x4, r1, r2, 0x0) [ 774.513610][ T17] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 774.524739][ T17] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 774.535972][ T17] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=eb.88 [ 774.545260][ T17] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.557303][ T17] usb 4-1: config 0 descriptor?? [ 774.603405][T12940] usb 3-1: Using ep0 maxpacket: 8 [ 774.703685][T12852] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 774.724466][T12940] usb 3-1: New USB device found, idVendor=0565, idProduct=0002, bcdDevice=84.e0 [ 774.733956][T12940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.753772][T12940] usb 3-1: config 0 descriptor?? [ 774.814243][ T17] legousbtower 4-1:0.0: LEGO USB Tower firmware version is 128.136 build 65535 [ 774.847897][ T17] legousbtower 4-1:0.0: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 774.887209][ T17] usb 4-1: USB disconnect, device number 24 [ 774.897995][ T17] legousbtower 4-1:0.0: LEGO USB Tower #-160 now disconnected [ 774.943879][T12852] usb 1-1: Using ep0 maxpacket: 8 18:47:25 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="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", 0x126}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 775.023701][T12940] kaweth 3-1:0.0: Firmware present in device. 18:47:25 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="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", 0x126}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 775.064592][T12852] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 775.077935][T12852] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 775.087921][T12852] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.103410][T12852] usb 1-1: config 0 descriptor?? [ 775.149386][T12852] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 775.226531][T12940] kaweth 3-1:0.0: Statistics collection: 0 [ 775.232518][T12940] kaweth 3-1:0.0: Multicast filter limit: 0 [ 775.239033][T12940] kaweth 3-1:0.0: MTU: 0 [ 775.243923][T12940] kaweth 3-1:0.0: Read MAC address 00:00:00:00:00:00 18:47:25 executing program 1: setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080), 0x4) socket$inet_tcp(0x2, 0x1, 0x0) lsetxattr$security_evm(&(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0xe28}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000000200)=""/39, 0x27, 0x0) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0xfffffffffffffe5d, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 775.313516][T12853] gspca_sonixj: i2c_w8 err -71 [ 775.343772][T12853] sonixj: probe of 5-1:0.0 failed with error -71 [ 775.374069][T12853] usb 5-1: USB disconnect, device number 53 [ 775.441912][T20159] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 775.449892][T20159] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 775.486908][T20159] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 775.566813][T19781] usb 1-1: USB disconnect, device number 120 [ 775.575645][T12852] usb 4-1: new high-speed USB device number 25 using dummy_hcd 18:47:25 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x34, 0xdc, 0x8f, 0x8, 0x471, 0x330, 0x395a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc5, 0x8f, 0x33}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001d80)={0xac, &(0x7f0000001a40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0xac, &(0x7f0000000480)={0x0, 0x0, 0x1, "11"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) [ 775.825490][T12852] usb 4-1: Using ep0 maxpacket: 8 [ 775.923985][T12940] kaweth 3-1:0.0: Error setting receive filter [ 775.930472][T12940] kaweth: probe of 3-1:0.0 failed with error -5 [ 775.943616][T12852] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 775.955498][T12852] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 775.966624][T12852] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=eb.88 [ 775.976110][T12852] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.990087][T12940] usb 3-1: USB disconnect, device number 82 [ 776.002861][T12852] usb 4-1: config 0 descriptor?? 18:47:26 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000005380)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f00000004c0)="97") syz_usb_ep_read(r0, 0x0, 0xc4, &(0x7f0000000000)=""/196) [ 776.103440][T12900] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 776.164655][T20166] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 776.203604][T20166] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 776.256301][T12852] legousbtower 4-1:0.0: LEGO USB Tower firmware version is 128.136 build 65535 [ 776.277666][T12852] legousbtower 4-1:0.0: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 776.305836][T12852] usb 4-1: USB disconnect, device number 25 [ 776.324829][T12852] legousbtower 4-1:0.0: LEGO USB Tower #-160 now disconnected [ 776.343910][T12900] usb 5-1: Using ep0 maxpacket: 8 18:47:26 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0xe28}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000000200)=""/39, 0x27, 0x0) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0xfffffffffffffe5d, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 18:47:26 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2e, 0xa7, 0x53, 0x8, 0x565, 0x2, 0x84e0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1a, 0x5b, 0xb}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 776.471570][T12900] usb 5-1: New USB device found, idVendor=0471, idProduct=0330, bcdDevice=39.5a [ 776.480925][T12900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.492773][ T2808] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 776.543476][T12900] usb 5-1: config 0 descriptor?? [ 776.592606][T12900] gspca_main: sonixj-2.14.0 probing 0471:0330 [ 776.726635][T20176] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 776.765013][ T2808] usb 1-1: Using ep0 maxpacket: 8 18:47:26 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xc2, 0x12, 0xb9, 0x8, 0x694, 0x1, 0xeb88, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x61, 0xae, 0x46, 0x0, [], [{{0x9, 0x5, 0xf, 0x1f}}, {{0x9, 0x5, 0x83, 0xb}}]}}]}}]}}, 0x0) [ 776.781898][T20176] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 776.893556][T12852] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 776.893719][ T2808] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 776.915112][ T2808] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 776.924395][ T2808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.934823][ T2808] usb 1-1: config 0 descriptor?? [ 776.988975][ T2808] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 777.123877][T12940] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 777.133776][T12852] usb 3-1: Using ep0 maxpacket: 8 [ 777.254326][T12852] usb 3-1: New USB device found, idVendor=0565, idProduct=0002, bcdDevice=84.e0 [ 777.263870][T12852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.279456][T12852] usb 3-1: config 0 descriptor?? [ 777.363586][T12940] usb 4-1: Using ep0 maxpacket: 8 [ 777.389533][T19781] usb 1-1: USB disconnect, device number 121 [ 777.457722][ T1041] device bridge_slave_1 left promiscuous mode [ 777.464792][ T1041] bridge0: port 2(bridge_slave_1) entered disabled state [ 777.483703][T12940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 777.495186][T12940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 777.506418][T12940] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=eb.88 [ 777.515615][T12940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.525901][T12940] usb 4-1: config 0 descriptor?? [ 777.531230][ T1041] device bridge_slave_0 left promiscuous mode [ 777.538666][ T1041] bridge0: port 1(bridge_slave_0) entered disabled state [ 777.556379][T12852] kaweth 3-1:0.0: Firmware present in device. [ 777.783859][T12940] legousbtower 4-1:0.0: LEGO USB Tower firmware version is 128.136 build 65535 [ 777.811931][T12940] legousbtower 4-1:0.0: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 777.864954][T12940] usb 4-1: USB disconnect, device number 26 [ 777.874956][T12940] legousbtower 4-1:0.0: LEGO USB Tower #-160 now disconnected 18:47:28 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000005380)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000900)="13") syz_usb_ep_read(r0, 0x0, 0xc4, &(0x7f0000000000)=""/196) [ 777.973759][T12900] gspca_sonixj: reg_w1 err -71 [ 778.004629][T12900] ===================================================== [ 778.011626][T12900] BUG: KMSAN: uninit-value in sd_init+0x1640/0x87f0 [ 778.013255][T12900] CPU: 0 PID: 12900 Comm: kworker/0:3 Not tainted 5.4.0-rc3+ #0 [ 778.013255][T12900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 778.013255][T12900] Workqueue: usb_hub_wq hub_event [ 778.013255][T12900] Call Trace: [ 778.013255][T12900] dump_stack+0x191/0x1f0 [ 778.013255][T12900] kmsan_report+0x14a/0x2f0 [ 778.013255][T12900] __msan_warning+0x73/0xf0 [ 778.013255][T12900] sd_init+0x1640/0x87f0 [ 778.013255][T12900] ? sd_config+0x4d0/0x4d0 [ 778.013255][T12900] gspca_dev_probe2+0xe93/0x2230 [ 778.013255][T12900] gspca_dev_probe+0x346/0x3b0 [ 778.013255][T12900] sd_probe+0x8d/0xa0 [ 778.013255][T12900] ? i2c_w+0x980/0x980 [ 778.013255][T12900] usb_probe_interface+0xd19/0x1310 [ 778.013255][T12900] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 778.013255][T12900] ? usb_register_driver+0x860/0x860 [ 778.013255][T12900] really_probe+0xd91/0x1f90 [ 778.013255][T12900] driver_probe_device+0x1ba/0x510 [ 778.013255][T12900] __device_attach_driver+0x5b8/0x790 [ 778.013255][T12900] bus_for_each_drv+0x28e/0x3b0 [ 778.013255][T12900] ? deferred_probe_work_func+0x400/0x400 [ 778.013255][T12900] __device_attach+0x489/0x750 [ 778.013255][T12900] device_initial_probe+0x4a/0x60 [ 778.013255][T12900] bus_probe_device+0x131/0x390 [ 778.013255][T12900] device_add+0x25b5/0x2df0 [ 778.013255][T12900] usb_set_configuration+0x309f/0x3710 [ 778.013255][T12900] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 778.013255][T12900] generic_probe+0xe7/0x280 [ 778.013255][T12900] ? usb_choose_configuration+0xae0/0xae0 [ 778.013255][T12900] usb_probe_device+0x146/0x200 [ 778.013255][T12900] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 778.013255][T12900] ? usb_register_device_driver+0x500/0x500 [ 778.013255][T12900] really_probe+0xd91/0x1f90 [ 778.013255][T12900] driver_probe_device+0x1ba/0x510 [ 778.013255][T12900] __device_attach_driver+0x5b8/0x790 [ 778.013255][T12900] bus_for_each_drv+0x28e/0x3b0 [ 778.013255][T12900] ? deferred_probe_work_func+0x400/0x400 [ 778.013255][T12900] __device_attach+0x489/0x750 [ 778.013255][T12900] device_initial_probe+0x4a/0x60 [ 778.013255][T12900] bus_probe_device+0x131/0x390 [ 778.013255][T12900] device_add+0x25b5/0x2df0 [ 778.013255][T12900] usb_new_device+0x23e5/0x2fb0 [ 778.013255][T12900] hub_event+0x581d/0x72f0 [ 778.013255][T12900] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 778.013255][T12900] ? led_work+0x720/0x720 [ 778.013255][T12900] ? led_work+0x720/0x720 [ 778.013255][T12900] process_one_work+0x1572/0x1ef0 [ 778.013255][T12900] worker_thread+0x111b/0x2460 [ 778.013255][T12900] kthread+0x4b5/0x4f0 [ 778.013255][T12900] ? process_one_work+0x1ef0/0x1ef0 [ 778.013255][T12900] ? kthread_blkcg+0xf0/0xf0 [ 778.013255][T12900] ret_from_fork+0x35/0x40 [ 778.013255][T12900] [ 778.013255][T12900] Uninit was created at: [ 778.013255][T12900] kmsan_internal_poison_shadow+0x60/0x110 [ 778.013255][T12900] kmsan_slab_alloc+0xaa/0x130 [ 778.013255][T12900] kmem_cache_alloc_trace+0x8c5/0xd20 [ 778.013255][T12900] gspca_dev_probe2+0x30d/0x2230 [ 778.013255][T12900] gspca_dev_probe+0x346/0x3b0 [ 778.013255][T12900] sd_probe+0x8d/0xa0 [ 778.013255][T12900] usb_probe_interface+0xd19/0x1310 [ 778.013255][T12900] really_probe+0xd91/0x1f90 [ 778.013255][T12900] driver_probe_device+0x1ba/0x510 [ 778.013255][T12900] __device_attach_driver+0x5b8/0x790 [ 778.013255][T12900] bus_for_each_drv+0x28e/0x3b0 [ 778.013255][T12900] __device_attach+0x489/0x750 [ 778.013255][T12900] device_initial_probe+0x4a/0x60 [ 778.013255][T12900] bus_probe_device+0x131/0x390 [ 778.013255][T12900] device_add+0x25b5/0x2df0 [ 778.013255][T12900] usb_set_configuration+0x309f/0x3710 [ 778.013255][T12900] generic_probe+0xe7/0x280 [ 778.013255][T12900] usb_probe_device+0x146/0x200 [ 778.013255][T12900] really_probe+0xd91/0x1f90 [ 778.013255][T12900] driver_probe_device+0x1ba/0x510 [ 778.013255][T12900] __device_attach_driver+0x5b8/0x790 [ 778.013255][T12900] bus_for_each_drv+0x28e/0x3b0 [ 778.013255][T12900] __device_attach+0x489/0x750 [ 778.013255][T12900] device_initial_probe+0x4a/0x60 [ 778.013255][T12900] bus_probe_device+0x131/0x390 [ 778.013255][T12900] device_add+0x25b5/0x2df0 [ 778.013255][T12900] usb_new_device+0x23e5/0x2fb0 [ 778.013255][T12900] hub_event+0x581d/0x72f0 [ 778.013255][T12900] process_one_work+0x1572/0x1ef0 [ 778.013255][T12900] worker_thread+0x111b/0x2460 [ 778.013255][T12900] kthread+0x4b5/0x4f0 [ 778.013255][T12900] ret_from_fork+0x35/0x40 [ 778.013255][T12900] ===================================================== [ 778.013255][T12900] Disabling lock debugging due to kernel taint [ 778.013255][T12900] Kernel panic - not syncing: panic_on_warn set ... [ 778.013255][T12900] CPU: 0 PID: 12900 Comm: kworker/0:3 Tainted: G B 5.4.0-rc3+ #0 [ 778.013255][T12900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 778.013255][T12900] Workqueue: usb_hub_wq hub_event [ 778.013255][T12900] Call Trace: [ 778.013255][T12900] dump_stack+0x191/0x1f0 [ 778.013255][T12900] panic+0x3c9/0xc1e [ 778.013255][T12900] kmsan_report+0x2e8/0x2f0 [ 778.013255][T12900] __msan_warning+0x73/0xf0 [ 778.013255][T12900] sd_init+0x1640/0x87f0 [ 778.013255][T12900] ? sd_config+0x4d0/0x4d0 [ 778.013255][T12900] gspca_dev_probe2+0xe93/0x2230 [ 778.013255][T12900] gspca_dev_probe+0x346/0x3b0 [ 778.013255][T12900] sd_probe+0x8d/0xa0 [ 778.013255][T12900] ? i2c_w+0x980/0x980 [ 778.013255][T12900] usb_probe_interface+0xd19/0x1310 [ 778.013255][T12900] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 778.013255][T12900] ? usb_register_driver+0x860/0x860 [ 778.013255][T12900] really_probe+0xd91/0x1f90 [ 778.013255][T12900] driver_probe_device+0x1ba/0x510 [ 778.013255][T12900] __device_attach_driver+0x5b8/0x790 [ 778.013255][T12900] bus_for_each_drv+0x28e/0x3b0 [ 778.013255][T12900] ? deferred_probe_work_func+0x400/0x400 [ 778.013255][T12900] __device_attach+0x489/0x750 [ 778.013255][T12900] device_initial_probe+0x4a/0x60 [ 778.013255][T12900] bus_probe_device+0x131/0x390 [ 778.013255][T12900] device_add+0x25b5/0x2df0 [ 778.013255][T12900] usb_set_configuration+0x309f/0x3710 [ 778.013255][T12900] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 778.013255][T12900] generic_probe+0xe7/0x280 [ 778.013255][T12900] ? usb_choose_configuration+0xae0/0xae0 [ 778.013255][T12900] usb_probe_device+0x146/0x200 [ 778.013255][T12900] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 778.013255][T12900] ? usb_register_device_driver+0x500/0x500 [ 778.013255][T12900] really_probe+0xd91/0x1f90 [ 778.013255][T12900] driver_probe_device+0x1ba/0x510 [ 778.013255][T12900] __device_attach_driver+0x5b8/0x790 [ 778.013255][T12900] bus_for_each_drv+0x28e/0x3b0 [ 778.013255][T12900] ? deferred_probe_work_func+0x400/0x400 [ 778.013255][T12900] __device_attach+0x489/0x750 [ 778.013255][T12900] device_initial_probe+0x4a/0x60 [ 778.013255][T12900] bus_probe_device+0x131/0x390 [ 778.013255][T12900] device_add+0x25b5/0x2df0 [ 778.013255][T12900] usb_new_device+0x23e5/0x2fb0 [ 778.013255][T12900] hub_event+0x581d/0x72f0 [ 778.013255][T12900] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 778.013255][T12900] ? led_work+0x720/0x720 [ 778.013255][T12900] ? led_work+0x720/0x720 [ 778.013255][T12900] process_one_work+0x1572/0x1ef0 [ 778.013255][T12900] worker_thread+0x111b/0x2460 [ 778.013255][T12900] kthread+0x4b5/0x4f0 [ 778.013255][T12900] ? process_one_work+0x1ef0/0x1ef0 [ 778.013255][T12900] ? kthread_blkcg+0xf0/0xf0 [ 778.013255][T12900] ret_from_fork+0x35/0x40 [ 778.013255][T12900] Kernel Offset: disabled [ 778.013255][T12900] Rebooting in 86400 seconds..