[ OK ] Found device /dev/ttyS0. [ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started System Logging Service. [ OK ] Started getty on tty2-tty6 if dbus and logind are not available. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.165' (ECDSA) to the list of known hosts. 2020/09/12 07:24:22 fuzzer started 2020/09/12 07:24:22 dialing manager at 10.128.0.26:39491 2020/09/12 07:24:23 syscalls: 3168 2020/09/12 07:24:23 code coverage: enabled 2020/09/12 07:24:23 comparison tracing: enabled 2020/09/12 07:24:23 extra coverage: enabled 2020/09/12 07:24:23 setuid sandbox: enabled 2020/09/12 07:24:23 namespace sandbox: enabled 2020/09/12 07:24:23 Android sandbox: /sys/fs/selinux/policy does not exist 2020/09/12 07:24:23 fault injection: enabled 2020/09/12 07:24:23 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/09/12 07:24:23 net packet injection: enabled 2020/09/12 07:24:23 net device setup: enabled 2020/09/12 07:24:23 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/09/12 07:24:23 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/09/12 07:24:23 USB emulation: enabled 2020/09/12 07:24:23 hci packet injection: enabled 07:28:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x10}]}}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) syzkaller login: [ 419.828165][ T8493] IPVS: ftp: loaded support on port[0] = 21 [ 420.275382][ T8493] chnl_net:caif_netlink_parms(): no params data found [ 420.450122][ T8493] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.458201][ T8493] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.467695][ T8493] device bridge_slave_0 entered promiscuous mode [ 420.487673][ T8493] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.495637][ T8493] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.505051][ T8493] device bridge_slave_1 entered promiscuous mode [ 420.559785][ T8493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.576281][ T8493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.624630][ T8493] team0: Port device team_slave_0 added [ 420.637779][ T8493] team0: Port device team_slave_1 added [ 420.682007][ T8493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.689220][ T8493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.715983][ T8493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.737867][ T8493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.745469][ T8493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.771615][ T8493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.829897][ T8493] device hsr_slave_0 entered promiscuous mode [ 420.839974][ T8493] device hsr_slave_1 entered promiscuous mode [ 421.102249][ T8493] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 421.131981][ T8493] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 421.178481][ T8493] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 421.195837][ T8493] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 421.479075][ T8493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.515848][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 421.525400][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 421.546153][ T8493] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.566848][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 421.577055][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 421.586532][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.593747][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.639896][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 421.649143][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 421.659320][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 421.668797][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.676254][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.685367][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 421.696181][ T27] Bluetooth: hci0: command 0x0409 tx timeout [ 421.696247][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 421.741277][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 421.754800][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 421.769864][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 421.784313][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 421.794857][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 421.836694][ T8493] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 421.847441][ T8493] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 421.862517][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 421.872396][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 421.882652][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 421.892252][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 421.936401][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 421.955922][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 421.963544][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 421.997317][ T8493] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.060571][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 422.070781][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 422.133308][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 422.142967][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 422.173757][ T8493] device veth0_vlan entered promiscuous mode [ 422.183351][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 422.192811][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 422.228986][ T8493] device veth1_vlan entered promiscuous mode [ 422.312556][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 422.323313][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 422.343129][ T8493] device veth0_macvtap entered promiscuous mode [ 422.364861][ T8493] device veth1_macvtap entered promiscuous mode [ 422.416511][ T8493] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.424336][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 422.433991][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 422.443350][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 422.453301][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 422.478370][ T8493] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.509516][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 422.519775][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 422.867336][ C0] hrtimer: interrupt took 46440 ns [ 422.944018][ T8714] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 422.989594][ T8714] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 422.998975][ T8714] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 423.301927][ T8717] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 423.318097][ T8717] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 423.327386][ T8717] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 07:29:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x10}]}}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) [ 423.652776][ T8719] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 423.700605][ T8719] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 423.709433][ T8719] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 423.785224][ T3365] Bluetooth: hci0: command 0x041b tx timeout 07:29:02 executing program 0: pipe(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x10}]}}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) [ 424.172132][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 424.188543][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 424.196305][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 424.425189][ T8726] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 424.441975][ T8726] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 424.449748][ T8726] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 07:29:02 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={0x0, 0x800}, 0x8) ftruncate(r2, 0x200002) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 07:29:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={0x0, 0x800}, 0x8) ftruncate(r2, 0x200002) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 07:29:03 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0xfffe, 0x0, 0x0, 0xb3550aa4ba878254}, 0x9c) [ 425.854815][ T3365] Bluetooth: hci0: command 0x040f tx timeout 07:29:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000000)=[0x1f, 0xfffff743], 0x2, 0x800, 0x0, 0xffffffffffffffff}) ioctl$TCSETAW(r2, 0x5407, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={0x0, 0x800}, 0x8) ftruncate(r3, 0x200002) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 07:29:04 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000357373082505a0a433cf0000100109021b0001ef0000000904564435d0000f2009058521"], 0x0) [ 427.014805][ T27] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 427.274666][ T27] usb 1-1: Using ep0 maxpacket: 8 [ 427.405844][ T27] usb 1-1: config 239 has an invalid interface number: 86 but max is 0 [ 427.414177][ T27] usb 1-1: config 239 has no interface number 0 [ 427.420763][ T27] usb 1-1: too many endpoints for config 239 interface 86 altsetting 68: 53, using maximum allowed: 30 [ 427.432104][ T27] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 427.443605][ T27] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has invalid wMaxPacketSize 0 [ 427.454060][ T27] usb 1-1: config 239 interface 86 altsetting 68 has 1 endpoint descriptor, different from the interface descriptor's value: 53 [ 427.467973][ T27] usb 1-1: config 239 interface 86 has no altsetting 0 [ 427.576084][ T27] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=cf.33 [ 427.585475][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 427.593624][ T27] usb 1-1: SerialNumber: syz [ 427.916254][ T27] usbtest 1-1:239.86: couldn't get endpoints, -71 [ 427.923064][ T27] usbtest: probe of 1-1:239.86 failed with error -71 [ 427.983434][ T3365] Bluetooth: hci0: command 0x0419 tx timeout [ 427.990360][ T27] usb 1-1: USB disconnect, device number 2 07:29:06 executing program 1: getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000)={0x7, 0x7, 0x4}, &(0x7f0000000040)=0x28) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000080)={0xf407, {{0x2, 0x4e24, @private=0xa010100}}, 0x1, 0x6, [{{0x2, 0x4e22, @remote}}, {{0x2, 0x4e23, @remote}}, {{0x2, 0x4e23, @rand_addr=0x64010102}}, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e21, @rand_addr=0x64010101}}, {{0x2, 0x4e20, @empty}}]}, 0x390) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/mISDNtimer\x00', 0x1, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000480)=0x4) setsockopt$RDS_RECVERR(0xffffffffffffffff, 0x114, 0x5, &(0x7f00000004c0), 0x4) execveat(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', &(0x7f0000000600)=[&(0x7f0000000540)='/dev/mISDNtimer\x00', &(0x7f0000000580)='/dev/mISDNtimer\x00', &(0x7f00000005c0)='}\\(\xab]%}{\'\x00'], &(0x7f0000000640), 0x100) ptrace$getenv(0x4201, 0xffffffffffffffff, 0x1, &(0x7f0000000680)) r1 = syz_open_dev$audion(&(0x7f00000006c0)='/dev/audio#\x00', 0x6, 0x509000) sendmsg$AUDIT_SET(r1, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, 0x3e9, 0x800, 0x70bd28, 0x25dfdbfc, {0x51, 0x1, 0x2, 0xffffffffffffffff, 0x0, 0x7fff, 0xa9, 0x8d5e, 0x0, 0x4}, ["", "", "", "", "", "", "", "", ""]}, 0x38}}, 0x844) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x2c, r2, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008801}, 0x4) sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}}, 0x20080011) memfd_create(&(0x7f0000000a40)='}\\(\xab]%}{\'\x00', 0x5) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0xe8, 0x13, 0x800, 0x70bd27, 0x25dfdbfc, {0xa, 0xff, 0x4, 0x3f, {0x4e20, 0x4e23, [0x8, 0x5, 0xfffffffd, 0x101], [0x2, 0x3f, 0x401, 0x5], 0x0, [0x7, 0x7]}, 0x0, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x92, 0x1, "005bef78cfa14c9f078e0e8856f5849aaf0b41272c8fc8a4524039ac370212758c845d5016668cfe4a8031876b25e3467c70ed99af3686e46b82510d3a759c954ee9515f26ade90432599b7618115c89c5685bb27f9cc05beeb50fd2bf35b8821e8dcd1aef90c3f7c86e96efcdd0c87e804b0c49e24bcf6e864960472150b7eda40ef9c800eca329d43008a10de3"}, @INET_DIAG_REQ_BYTECODE={0x8, 0x1, "e9d573e0"}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4010}, 0x20000040) r3 = accept4(r1, &(0x7f0000000d00)=@rc={0x1f, @none}, &(0x7f0000000d80)=0x80, 0x180800) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f0000000dc0)={'mangle\x00'}, &(0x7f0000000e40)=0x54) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x88, 0x0, 0x2, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x10040000}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x80}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @CTA_EXPECT_MASTER={0xc, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @dev={0xfe, 0x80, [], 0x25}}}}]}, @CTA_EXPECT_MASK={0x18, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @private=0xa010100}}}]}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x10008080}, 0x4000010) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x7008002}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x24, 0x0, 0x4591ba893612a3a1, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000084}, 0x4004084) [ 428.644573][ T27] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 428.904526][ T27] usb 1-1: Using ep0 maxpacket: 8 [ 429.034735][ T27] usb 1-1: config 239 has an invalid interface number: 86 but max is 0 [ 429.043159][ T27] usb 1-1: config 239 has no interface number 0 [ 429.049784][ T27] usb 1-1: too many endpoints for config 239 interface 86 altsetting 68: 53, using maximum allowed: 30 [ 429.061185][ T27] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 429.072671][ T27] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has invalid wMaxPacketSize 0 [ 429.083155][ T27] usb 1-1: config 239 interface 86 altsetting 68 has 1 endpoint descriptor, different from the interface descriptor's value: 53 [ 429.096653][ T27] usb 1-1: config 239 interface 86 has no altsetting 0 [ 429.175309][ T27] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=cf.33 [ 429.184673][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 429.192824][ T27] usb 1-1: SerialNumber: syz [ 429.525087][ T27] usbtest 1-1:239.86: couldn't get endpoints, -71 [ 429.532037][ T27] usbtest: probe of 1-1:239.86 failed with error -71 07:29:07 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000357373082505a0a433cf0000100109021b0001ef0000000904564435d0000f2009058521"], 0x0) [ 429.584072][ T27] usb 1-1: USB disconnect, device number 3 [ 430.106984][ T27] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 430.133198][ T8786] IPVS: ftp: loaded support on port[0] = 21 [ 430.364751][ T27] usb 1-1: Using ep0 maxpacket: 8 [ 430.548443][ T27] usb 1-1: config 239 has an invalid interface number: 86 but max is 0 [ 430.557031][ T27] usb 1-1: config 239 has no interface number 0 [ 430.563465][ T27] usb 1-1: too many endpoints for config 239 interface 86 altsetting 68: 53, using maximum allowed: 30 [ 430.574829][ T27] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 430.586264][ T27] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has invalid wMaxPacketSize 0 [ 430.596574][ T27] usb 1-1: config 239 interface 86 altsetting 68 has 1 endpoint descriptor, different from the interface descriptor's value: 53 [ 430.609969][ T27] usb 1-1: config 239 interface 86 has no altsetting 0 [ 430.642596][ T8786] chnl_net:caif_netlink_parms(): no params data found [ 430.737188][ T27] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=cf.33 [ 430.747201][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 430.755517][ T27] usb 1-1: SerialNumber: syz [ 430.879783][ T8786] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.888061][ T8786] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.897539][ T8786] device bridge_slave_0 entered promiscuous mode [ 430.930245][ T8786] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.937757][ T8786] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.947166][ T8786] device bridge_slave_1 entered promiscuous mode [ 430.999744][ T8786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.016911][ T8786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.067456][ T8786] team0: Port device team_slave_0 added [ 431.082598][ T8786] team0: Port device team_slave_1 added [ 431.155038][ T27] usbtest 1-1:239.86: couldn't get endpoints, -71 [ 431.161789][ T27] usbtest: probe of 1-1:239.86 failed with error -71 [ 431.196228][ T8786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.203306][ T8786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.225566][ T27] usb 1-1: USB disconnect, device number 4 [ 431.229828][ T8786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 431.369843][ T8786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 431.377540][ T8786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.403654][ T8786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.472362][ T8786] device hsr_slave_0 entered promiscuous mode [ 431.482946][ T8786] device hsr_slave_1 entered promiscuous mode [ 431.497348][ T8786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 431.505940][ T8786] Cannot create hsr debugfs directory 07:29:10 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000357373082505a0a433cf0000100109021b0001ef0000000904564435d0000f2009058521"], 0x0) [ 431.888056][ T8786] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 431.938869][ T8786] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 431.997036][ T8786] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 432.049222][ T8786] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 432.095011][ T8708] Bluetooth: hci1: command 0x0409 tx timeout [ 432.217834][ T27] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 432.430916][ T8786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.461657][ T3365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 432.471250][ T3365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 432.480157][ T27] usb 1-1: Using ep0 maxpacket: 8 [ 432.497349][ T8786] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.521950][ T3365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 432.531823][ T3365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 432.542066][ T3365] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.549412][ T3365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.595936][ T3365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 432.605423][ T3365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 432.615081][ T3365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 432.624505][ T3365] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.631721][ T3365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.640762][ T3365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 432.651581][ T3365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 432.674698][ T27] usb 1-1: config 239 has an invalid interface number: 86 but max is 0 [ 432.683109][ T27] usb 1-1: config 239 has no interface number 0 [ 432.689765][ T27] usb 1-1: too many endpoints for config 239 interface 86 altsetting 68: 53, using maximum allowed: 30 [ 432.701317][ T27] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 432.712987][ T27] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has invalid wMaxPacketSize 0 [ 432.723441][ T27] usb 1-1: config 239 interface 86 altsetting 68 has 1 endpoint descriptor, different from the interface descriptor's value: 53 [ 432.737420][ T27] usb 1-1: config 239 interface 86 has no altsetting 0 [ 432.749239][ T3365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 432.759774][ T3365] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 432.771761][ T3365] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 432.789753][ T3365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 432.800590][ T3365] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 432.826913][ T27] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=cf.33 [ 432.836116][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 432.844422][ T27] usb 1-1: SerialNumber: syz [ 432.865168][ T3365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 432.875335][ T3365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 432.884809][ T3365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 432.894364][ T3365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 432.932226][ T8786] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 433.038686][ T3365] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 433.046546][ T3365] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 433.083481][ T8786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 433.147558][ T3365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 433.157917][ T3365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 433.234727][ T27] usbtest 1-1:239.86: couldn't get endpoints, -71 [ 433.241525][ T27] usbtest: probe of 1-1:239.86 failed with error -71 [ 433.292907][ T3365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 433.302761][ T3365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 433.315530][ T27] usb 1-1: USB disconnect, device number 5 [ 433.341011][ T8786] device veth0_vlan entered promiscuous mode [ 433.367347][ T9014] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 433.377197][ T9014] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 433.436001][ T8786] device veth1_vlan entered promiscuous mode [ 433.518690][ T9014] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 433.528558][ T9014] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 433.537906][ T9014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 433.547770][ T9014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 433.570457][ T8786] device veth0_macvtap entered promiscuous mode [ 433.593349][ T8786] device veth1_macvtap entered promiscuous mode [ 433.609814][ T9014] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 433.619167][ T9014] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 433.669591][ T8786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 433.680592][ T8786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.694256][ T8786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 433.714517][ T9014] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 433.724535][ T9014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 07:29:12 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000357373082505a0a433cf0000100109021b0001ef0000000904564435d0000f2009058521"], 0x0) [ 433.820904][ T8786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 433.831558][ T8786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.845235][ T8786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 433.862122][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 433.872264][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 434.176311][ T3365] Bluetooth: hci1: command 0x041b tx timeout [ 434.315099][ T8711] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 434.555858][ T8711] usb 1-1: Using ep0 maxpacket: 8 07:29:12 executing program 1: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x0, @multicast2}, {0x2, 0x0, @loopback}, {0x2, 0x0, @broadcast}, 0x9f5568c493cb6acb}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) [ 434.675747][ T8711] usb 1-1: config 239 has an invalid interface number: 86 but max is 0 [ 434.684315][ T8711] usb 1-1: config 239 has no interface number 0 [ 434.690746][ T8711] usb 1-1: too many endpoints for config 239 interface 86 altsetting 68: 53, using maximum allowed: 30 [ 434.702186][ T8711] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 434.713654][ T8711] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has invalid wMaxPacketSize 0 [ 434.724083][ T8711] usb 1-1: config 239 interface 86 altsetting 68 has 1 endpoint descriptor, different from the interface descriptor's value: 53 [ 434.737697][ T8711] usb 1-1: config 239 interface 86 has no altsetting 0 [ 434.825405][ T8711] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=cf.33 [ 434.834765][ T8711] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 434.842914][ T8711] usb 1-1: SerialNumber: syz 07:29:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x900}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x54) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x4000, 0x0) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000200)='NLBL_CALIPSO\x00') r8 = openat2(r6, &(0x7f0000000480)='./file0\x00', &(0x7f0000000500)={0x600080, 0x145, 0x13}, 0x18) ioctl$SOUND_MIXER_READ_VOLUME(r8, 0x80044d08, &(0x7f0000000540)) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x44, r7, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0xfffffffffffffc92}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x20000010) sendmsg$NLBL_CALIPSO_C_REMOVE(r6, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x4c, r7, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4d615beb1ec6183d}, 0x840) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0xfffffffffffffdf6, &(0x7f0000000280)={&(0x7f0000001940)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8}]}, 0x20}}, 0x0) [ 435.083428][ T9048] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 435.110428][ T9048] device bridge1 entered promiscuous mode [ 435.174342][ T8711] usbtest 1-1:239.86: couldn't get endpoints, -71 [ 435.181083][ T8711] usbtest: probe of 1-1:239.86 failed with error -71 [ 435.216032][ T8711] usb 1-1: USB disconnect, device number 6 [ 435.305428][ T9048] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 435.364975][ T9052] device bridge1 entered promiscuous mode 07:29:13 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100002ece394058200510e6c9000000016d613fdb073cf5c3000904000000d09dd000b0d4b5e85753ba341bbb931bbadcd8bedda53edd0e6cc354b01f450c0b85b8ae04f4aec1638c6494fd9c3662a4aa54b05d7852c36609e0e5d3c0dfbba219bd276cbb76b9cb7b6ba3f5248593328d9e43011e331f619b8094e06a2e9e1315f3ce3076cc3f76cb123784159abac8e2adfae5c7f05f4c6d85829d49cf8407aefbd3942a8cb83f84d460a51ab01326155581aa97d4c7111d8b7a3775a03049fc429b8c13b0b6bf47f34571fa5f9cde30e70cdf74b63c63ab38e37e909d"], 0x0) 07:29:13 executing program 0: [ 436.004212][ T9014] usb 2-1: new high-speed USB device number 2 using dummy_hcd 07:29:14 executing program 0: [ 436.258624][ T27] Bluetooth: hci1: command 0x040f tx timeout 07:29:14 executing program 0: [ 436.416087][ T9014] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 436.423840][ T9014] usb 2-1: can't read configurations, error -61 [ 436.594213][ T9014] usb 2-1: new high-speed USB device number 3 using dummy_hcd 07:29:14 executing program 0: syz_usb_connect(0x0, 0x2d, 0x0, 0x0) [ 437.005061][ T9014] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 437.013009][ T9014] usb 2-1: can't read configurations, error -61 [ 437.042085][ T9014] usb usb2-port1: attempt power cycle 07:29:15 executing program 0: syz_usb_connect(0x0, 0x2d, 0x0, 0x0) [ 437.786558][ T9014] usb 2-1: new high-speed USB device number 4 using dummy_hcd 07:29:16 executing program 0: syz_usb_connect(0x0, 0x2d, 0x0, 0x0) [ 438.075340][ T9014] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 438.083159][ T9014] usb 2-1: can't read configurations, error -61 [ 438.274877][ T9014] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 438.334292][ T27] Bluetooth: hci1: command 0x0419 tx timeout [ 438.534399][ T9014] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 438.542071][ T9014] usb 2-1: can't read configurations, error -61 [ 438.564624][ T9014] usb usb2-port1: unable to enumerate USB device 07:29:16 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[], 0x0) 07:29:16 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c00000024000705ff00"/20, @ANYRES32=r2, @ANYBLOB="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"], 0x6c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 438.889652][ T9099] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 438.900830][ T9099] netem: change failed [ 438.928093][ T9100] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 438.937498][ T9100] netem: change failed 07:29:17 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c00000024000705ff00"/20, @ANYRES32=r2, @ANYBLOB="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"], 0x6c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 439.073957][ T9014] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 439.215340][ T9104] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 439.224711][ T9104] netem: change failed 07:29:17 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x58, 0xba, 0xe9, 0x20, 0x424, 0x9905, 0xed16, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xe9, 0x0, 0x1, 0xeb, 0xce, 0x10, 0x0, [], [{{0x9, 0x5, 0xb}}]}}]}}]}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/209, 0xd1}, {&(0x7f0000000100)=""/31, 0x1f}], 0x2) r2 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x4a00, 0x600201) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@private2, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4e20, 0x0, 0x4e21, 0x0, 0x2, 0xc0, 0x20, 0x89}, {0x80000000, 0x0, 0xff, 0x98, 0x1f, 0x5, 0x1, 0x81}, {0x6, 0x7, 0xcb, 0x173}, 0x6, 0x6e6bb7, 0x2, 0x0, 0x2, 0x3}, {{@in6=@remote, 0x4d5, 0x2b}, 0xa, @in=@broadcast, 0x3501, 0x3, 0x0, 0x3, 0x400, 0x8}}, 0xe8) [ 439.346675][ T9014] usb 1-1: device descriptor read/64, error 18 [ 439.745811][ T9014] usb 1-1: device descriptor read/64, error 18 [ 439.774028][ T3365] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 440.014019][ T9014] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 440.027210][ T3365] usb 2-1: Using ep0 maxpacket: 32 [ 440.144718][ T3365] usb 2-1: config 0 has an invalid interface number: 233 but max is 0 [ 440.153068][ T3365] usb 2-1: config 0 has no interface number 0 [ 440.159508][ T3365] usb 2-1: config 0 interface 233 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 440.284088][ T9014] usb 1-1: device descriptor read/64, error 18 [ 440.325791][ T3365] usb 2-1: New USB device found, idVendor=0424, idProduct=9905, bcdDevice=ed.16 [ 440.335289][ T3365] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.343415][ T3365] usb 2-1: Product: syz [ 440.347967][ T3365] usb 2-1: Manufacturer: syz [ 440.352696][ T3365] usb 2-1: SerialNumber: syz [ 440.417358][ T3365] usb 2-1: config 0 descriptor?? [ 440.457161][ T3365] smsc95xx v1.0.6 [ 440.460965][ T3365] smsc95xx 2-1:0.233 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 440.471744][ T3365] smsc95xx: probe of 2-1:0.233 failed with error -22 [ 440.672445][ T8706] usb 2-1: USB disconnect, device number 6 [ 440.725345][ T9014] usb 1-1: device descriptor read/64, error 18 [ 440.844619][ T9014] usb usb1-port1: attempt power cycle 07:29:19 executing program 2: r0 = fsmount(0xffffffffffffffff, 0x1, 0xd) getsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, &(0x7f0000000080)) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x134, 0x0, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}]}, 0x134}, 0x1, 0x0, 0x0, 0x4000080}, 0x1) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000340)={0x9c0000, 0x3533, 0x9, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0xcd882954914858fc, 0x800, [], @string=&(0x7f00000002c0)=0x9}}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000380)={0x5, 0x3, 0x1ff, {0x200, 0x7}, 0x8, 0x6}) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000400)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f0000000440)={0x0, 0x44614706ac22e420, @stop_pts=0x7}) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vcsu\x00', 0x64000, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000500)=0x2, 0x4) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000540)={0x0, 0xd9}, &(0x7f0000000580)=0x8) r3 = dup2(r1, r0) getsockopt$TIPC_CONN_TIMEOUT(r3, 0x10f, 0x82, &(0x7f00000005c0), &(0x7f0000000600)=0x4) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000640)) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000680)='/dev/vsock\x00', 0x603283, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r4, 0x40045612, &(0x7f00000006c0)=0x3) set_thread_area(&(0x7f0000000700)={0x5d8, 0xffffffffffffffff, 0x400, 0x0, 0x2, 0x1, 0x1}) ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f0000000740)) write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f0000000780)={0x8, 0x120, 0xfa00, {0x0, {0x6, 0x7, "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", 0x80, 0xfe, 0x9, 0x1, 0x0, 0x1, 0x6, 0x1}}}, 0x128) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000900)) [ 441.463792][ T8711] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 441.575914][ T9014] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 441.703956][ T8711] usb 2-1: Using ep0 maxpacket: 32 [ 441.764649][ T9014] usb 1-1: device descriptor read/8, error -61 07:29:20 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[], 0x0) [ 441.825158][ T8711] usb 2-1: config 0 has an invalid interface number: 233 but max is 0 [ 441.833496][ T8711] usb 2-1: config 0 has no interface number 0 [ 441.839991][ T8711] usb 2-1: config 0 interface 233 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 441.973904][ T9014] usb 1-1: device descriptor read/8, error -71 [ 442.005674][ T8711] usb 2-1: New USB device found, idVendor=0424, idProduct=9905, bcdDevice=ed.16 [ 442.015066][ T8711] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.023202][ T8711] usb 2-1: Product: syz [ 442.027686][ T8711] usb 2-1: Manufacturer: syz [ 442.032462][ T8711] usb 2-1: SerialNumber: syz [ 442.076987][ T8711] usb 2-1: config 0 descriptor?? [ 442.117068][ T8711] smsc95xx v1.0.6 [ 442.120851][ T8711] smsc95xx 2-1:0.233 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 442.132060][ T8711] smsc95xx: probe of 2-1:0.233 failed with error -22 [ 442.333252][ T8711] usb 2-1: USB disconnect, device number 7 07:29:20 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @sack_perm, @sack_perm, @mss={0x2, 0x40}, @mss={0x2, 0x3}], 0x5) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x60, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_NAT_SRC={0x48, 0x19, 0x0, 0x1, [@CTA_NAT_PROTO={0x44, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}]}, @CTA_TUPLE_REPLY={0x4}]}, 0x60}}, 0x0) [ 442.473867][ T9014] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 442.644529][ T9014] usb 1-1: device descriptor read/8, error -61 07:29:20 executing program 1: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_vlan\x00', 0x1000}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f7, &(0x7f0000000080)) [ 442.860570][ T9148] IPVS: ftp: loaded support on port[0] = 21 [ 442.915293][ T9014] usb 1-1: device descriptor read/8, error -61 [ 443.039831][ T9014] usb usb1-port1: unable to enumerate USB device 07:29:21 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x8ec3, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xb41, 0x0) splice(r2, 0x0, r4, 0x0, 0x8001, 0x2) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x181242, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r7, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x2}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r7, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40890}, 0x0) write(r3, &(0x7f0000000600)="da", 0x1) write$binfmt_elf64(r1, 0x0, 0x0) [ 443.394565][ T9148] chnl_net:caif_netlink_parms(): no params data found [ 443.588024][ T9148] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.595907][ T9148] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.605514][ T9148] device bridge_slave_0 entered promiscuous mode [ 443.628978][ T9148] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.636762][ T9148] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.653148][ T9148] device bridge_slave_1 entered promiscuous mode [ 443.681205][ T9287] tipc: Started in network mode [ 443.686575][ T9287] tipc: Own node identity 2, cluster identity 4711 [ 443.693125][ T9287] tipc: 32-bit node address hash set to 2 [ 443.792782][ T9148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.881291][ T9148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 07:29:22 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x8ec3, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xb41, 0x0) splice(r2, 0x0, r4, 0x0, 0x8001, 0x2) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x181242, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r7, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x2}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r7, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40890}, 0x0) write(r3, &(0x7f0000000600)="da", 0x1) write$binfmt_elf64(r1, 0x0, 0x0) [ 444.052410][ T9148] team0: Port device team_slave_0 added [ 444.105752][ T9148] team0: Port device team_slave_1 added [ 444.208167][ T9148] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.215830][ T9148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.242045][ T9148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.374541][ T9148] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.381622][ T9148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.408175][ T9148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.492484][ T9148] device hsr_slave_0 entered promiscuous mode [ 444.506546][ T9148] device hsr_slave_1 entered promiscuous mode [ 444.517712][ T9148] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 444.526226][ T9148] Cannot create hsr debugfs directory 07:29:22 executing program 1: r0 = memfd_create(&(0x7f00000000c0)='\xba\xc9\x99v\xad\xe8J\x81\x93\x97d\xcc\b\xebt\x88\x12\xe8\xf6dXS\x04d/)\xf1Ft\xab\xf9\x15\xb8q\x8fs\xb1B\xa7E\xe9\t\xed&S\x12,\x05\x81\x94\x17f{\xadn\xb8vju\xb9(\x9a\xfe\x1d`\xca\xcf,8~\x96\xd1\xe3\xb0_\xb8\xdc\xff\x13\xca\x9e\xaf\xd1\xf16\x19\xaa,\x1d\x80\xe8r\x8a\x82\xd3\xbbm:\xde\xab\x13r\x8cbzTL8\xfc\x0e\xbdm\xc4\xa7', 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000040)={0xf5}, 0x1) syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES64], 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r1, 0xc0385720, &(0x7f0000000080)={0x1}) [ 444.737242][ T8708] Bluetooth: hci2: command 0x0409 tx timeout [ 444.982566][ T9148] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 445.025412][ T8712] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 445.040636][ T9148] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 445.120709][ T9148] netdevsim netdevsim2 netdevsim2: renamed from eth2 07:29:23 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[], 0x0) [ 445.208719][ T9148] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 445.294928][ T8712] usb 2-1: device descriptor read/64, error 18 [ 445.664153][ T9148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.672560][ T8708] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 445.685296][ T8712] usb 2-1: device descriptor read/64, error 18 [ 445.754223][ T3365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 445.763070][ T3365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 445.806550][ T9148] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.839147][ T3365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 445.849219][ T3365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 445.860676][ T3365] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.867966][ T3365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.955975][ T8712] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 445.959632][ T9014] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 445.972466][ T9014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 445.982526][ T9014] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 445.991865][ T9014] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.999143][ T9014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.008142][ T9014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 446.018853][ T9014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 446.029536][ T9014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 446.039820][ T9014] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 446.049987][ T8708] usb 1-1: device descriptor read/64, error 18 [ 446.064738][ T3365] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 446.101180][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 446.111887][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 446.157836][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 446.167751][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 446.177300][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 446.186725][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 446.219800][ T9148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 446.264446][ T8712] usb 2-1: device descriptor read/64, error 18 [ 446.297087][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 446.306371][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 446.348403][ T9148] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 446.427071][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 446.437502][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 446.483876][ T8708] usb 1-1: device descriptor read/64, error 18 [ 446.507605][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 446.518572][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 446.543227][ T9148] device veth0_vlan entered promiscuous mode [ 446.556835][ T8706] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 446.566147][ T8706] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 446.605312][ T9148] device veth1_vlan entered promiscuous mode [ 446.656659][ T8712] usb 2-1: device descriptor read/64, error 18 [ 446.696554][ T8706] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 446.706207][ T8706] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 446.715908][ T8706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 446.726027][ T8706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 446.751463][ T9148] device veth0_macvtap entered promiscuous mode [ 446.771346][ T8708] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 446.776077][ T8712] usb usb2-port1: attempt power cycle [ 446.814510][ T3365] Bluetooth: hci2: command 0x041b tx timeout [ 446.828002][ T9148] device veth1_macvtap entered promiscuous mode [ 446.901970][ T9148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 446.913098][ T9148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.923170][ T9148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 446.933774][ T9148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.947728][ T9148] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 446.956574][ T8706] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 446.966736][ T8706] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 446.976327][ T8706] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 446.986387][ T8706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 447.017120][ T9148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 447.029202][ T9148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.039279][ T9148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 447.050090][ T9148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.064235][ T9148] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 447.072242][ T8708] usb 1-1: device descriptor read/64, error 18 [ 447.073749][ T8706] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 447.088815][ T8706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 447.506072][ T8712] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 447.525680][ T8708] usb 1-1: device descriptor read/64, error 18 [ 447.647274][ T8708] usb usb1-port1: attempt power cycle [ 447.684426][ T8712] usb 2-1: device descriptor read/8, error -61 07:29:26 executing program 1: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0}, 0x1810, 0x0, 0x0, 0x1, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x21, 0x3, 0x2) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000340)=ANY=[@ANYRESHEX], 0x1c2) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) shutdown(r1, 0x7fba12080a2ee945) accept$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000001c0)=0x1c) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) socket$pptp(0x18, 0x1, 0x2) unshare(0x40000000) openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x40000, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x6c}}, 0x0) mmap(&(0x7f0000974000/0x2000)=nil, 0x2000, 0x3, 0x8031, 0xffffffffffffffff, 0x3000) socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 07:29:26 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000202505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905010308000000008904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000100)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 447.895611][ T8712] usb 2-1: device descriptor read/8, error -71 [ 448.082899][ T9397] sg_write: data in/out 1717986882/408 bytes for SCSI command 0x0-- guessing data in; [ 448.082899][ T9397] program syz-executor.1 not setting count and/or reply_len properly [ 448.247471][ T9397] IPVS: ftp: loaded support on port[0] = 21 [ 448.406089][ T8708] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 448.543690][ T9014] usb 3-1: new high-speed USB device number 2 using dummy_hcd 07:29:26 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) [ 448.584445][ T8708] usb 1-1: device descriptor read/8, error -71 [ 448.803751][ T9014] usb 3-1: Using ep0 maxpacket: 32 [ 448.809403][ T8708] usb 1-1: device descriptor read/8, error -71 [ 448.847206][ T9401] sg_write: data in/out 1717986882/408 bytes for SCSI command 0x0-- guessing data in; [ 448.847206][ T9401] program syz-executor.1 not setting count and/or reply_len properly [ 448.883015][ T9426] IPVS: ftp: loaded support on port[0] = 21 [ 448.905647][ T8706] Bluetooth: hci2: command 0x040f tx timeout [ 448.966945][ T9014] usb 3-1: config 1 has an invalid descriptor of length 137, skipping remainder of the config [ 448.977448][ T9014] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 448.986658][ T9014] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 449.107475][ T8709] tipc: TX() has been purged, node left! [ 449.267578][ T9014] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 449.276870][ T9014] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.285161][ T9014] usb 3-1: Product: syz [ 449.289459][ T9014] usb 3-1: Manufacturer: syz [ 449.294269][ T9014] usb 3-1: SerialNumber: syz 07:29:27 executing program 1: sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="100200a200ddef364e494a2666a0a13f15d694d0e6ab4bc3bea1f2d34ba4016d6980e3c18cd52f1c0d384d598f601ea34a69003816732459ba1a99837ab8", @ANYRES16, @ANYRES64], 0x3}}, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x00', 0x0) r1 = dup(r0) execveat(r1, &(0x7f00000000c0)='\x00', &(0x7f0000000140), 0x0, 0x1000) [ 449.326804][ T8708] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 449.428416][ T9014] cdc_ncm 3-1:1.0: bind() failure [ 449.534997][ T8708] usb 1-1: device descriptor read/8, error -61 07:29:27 executing program 1: socket$inet6_sctp(0xa, 0x5, 0x84) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x21a0a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="b93d301f000000ee"], 0x34}}, 0x0) r1 = socket(0x1e, 0x5, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/udmabuf\x00', 0x2) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) listen(r1, 0x0) accept$packet(r1, 0x0, 0x0) close(r1) userfaultfd(0x80400) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair(0x0, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000340)={{0xa, 0x4e20, 0x0, @local, 0x2}, {0xa, 0x4e24, 0x8, @mcast2, 0x1}, 0x439, [0xfffffffd, 0x9, 0x76, 0x2, 0x6, 0x3f, 0x9, 0x90d]}, 0x5c) ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f0000000300)) r3 = socket$inet(0x2, 0x3, 0x20000000084) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x83, 0x0, &(0x7f0000001280)) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000012c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYRES16, @ANYRES16=0x0, @ANYRES32, @ANYRESDEC, @ANYBLOB="080006000600000006000100", @ANYBLOB="019beae817ffffffc420e08aaa9dd606872cf4354ce56fdf02c88fd56dde4240d924caea4b73db5ea502bea34e9741d3915d355a959c186342e51f9e935f60af5dc773dad545b6c24b5a1b203b6ca4ecb01cf254bfec01db33df1228dedbb8ebe3daa3fd000000d41e2a041dca7b28a176749eed592a52d5d09004d7e9c6bd2acda015075a3fd7a5892d68436cd23b5246a269f454cfa78753c4f5035f58b4431fcd5e35a5bec43a9de74063e5549920043680f5260abdb27b3414bcfab5571d84454a303ecf", @ANYRESDEC], 0x5c}, 0x1, 0x0, 0x0, 0x88a0}, 0x24000050) [ 449.805631][ T8708] usb 1-1: device descriptor read/8, error -61 [ 449.856534][ T9460] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 449.924072][ T8708] usb usb1-port1: unable to enumerate USB device [ 450.655912][ T9465] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 07:29:29 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0xea59}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="40800200108a0000040014000000000200000000"], 0x2c}}, 0x0) pipe(0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000100)={0x3, 0x5, 0xfff}) [ 450.895887][ T8709] tipc: TX() has been purged, node left! [ 450.951090][ T9470] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 450.975566][ T12] Bluetooth: hci2: command 0x0419 tx timeout [ 450.989150][ T9471] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 07:29:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f0000000380)={0x3, 0x1, 0x18}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f00000001c0)={0x7b}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x1040000007, 0x1, 0x0, 0x2, 0x4cb], 0x2000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, &(0x7f0000000240)) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x44140}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0}, 0x4000) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 451.268049][ T9476] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 07:29:29 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$FBIOPAN_DISPLAY(r3, 0x4606, &(0x7f0000000300)={0x1000, 0x384, 0x10, 0x78, 0x7, 0xb67, 0x0, 0x0, {0x1, 0x7, 0x1}, {0x0, 0x3, 0x1}, {0x401, 0x7fffffff, 0x1}, {0x3, 0x400}, 0x1, 0x0, 0x1fb, 0x5, 0x0, 0x8001, 0x8, 0x80000000, 0x81, 0x5, 0x8, 0xff, 0x19, 0x0, 0x1, 0x5}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0xcc}, 0x1, 0x0, 0x0, 0xc000}, 0x200c0) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', r1, 0x29, 0x5, 0x1, 0x7fffffff, 0x1, @private0, @private0, 0x8000, 0x7800, 0x2, 0x2}}) 07:29:30 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) 07:29:30 executing program 1: set_mempolicy(0x1, &(0x7f0000000040)=0xfffffffffffffffb, 0x2) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x27) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto(r0, &(0x7f0000000280)="4ec790635dc6364db2c67d1b30b7ce3d83ff569600e9682705da2006f43780958d49b2c3eb6dbae79a279ad48b4aa52e7cbf8bc6557f77a79ccdb6490d07738162fe47c09a779ed896dc75869ab632fa833a19cae0bf52b8a7f6450f128861af8f6aedf01f444cc909b66680fb857de5e36a24f3d17454a314d7610e7e0d542d5b5c7a7ce8a0dead32124fe9a34aeedde45a948e81264ee346fbd138d9bfdad02b14935109371e15bacf6fe774c70625e168a21f0b9c1c17f0c13c8551f904a70e23633111ac222edf8eb53ae513d7746fb101", 0xd3, 0x5, &(0x7f0000000080)=@sco, 0x80) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40042409, 0x1) 07:29:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="fc0000004900071f0f0a250409000700bd2380ffffff00000000e29321003f0000000000000000000000ffff0000000000001ec28656aaa79bb94b46fe000000bc000200000300f92fbe780196370d1151ffff33d450000000e5d18064b1ed548d59c40a366c57c6a55e00000100d07302ade01720d7d5bbab820f06f70ce5190a60aa47e9883997f391064e763b6f380f5bd92c83170e5bba4a463a1e00566f91cfded815b2ccd243f295ed94e0ad91bd0734babc7c737d67013375533417e583df0200000000000000a6b567b4d57155514bd8a1ad05b0454e64e00ccf00000000cf000000000000000000000000000000008f4746adc4b59eaa419b5ba70fa3407921bc3cf45fbad2e09f0a23550a0642f1ebe550079cf2b75f82a6285ceaf4f085b1703e44a88bdda50a4aee375558a89286dab7b9aebeac9831c0eba4f7cfb27adb7da107fee8be135ea145f76f4c83b11a57013a8eaaf88f7a0b187286b5d54a063c3bd8755fc18ee7e2d399b386319b16a9bedae5d8d59be144ea97623963bf62327a475857b6df5fa708c9ec4e9d14353c32cb0259156316ab1a5dc7f8afdb4b1514d686a73661bb302bd26aa1363a6e76854f", 0x1b7) [ 452.209083][ T9014] usb 3-1: USB disconnect, device number 2 [ 452.343483][ T8706] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 452.432414][ T9504] IPVS: ftp: loaded support on port[0] = 21 07:29:30 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) truncate(&(0x7f0000000500)='./bus\x00', 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) [ 452.613519][ T8706] usb 1-1: device descriptor read/64, error 18 [ 452.737594][ T9526] IPVS: ftp: loaded support on port[0] = 21 07:29:31 executing program 1: unshare(0x60060280) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) getpgrp(0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat2(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)={0x80, 0xe2, 0x1}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) io_uring_enter(r7, 0x1cc3, 0xf0d8, 0x0, &(0x7f0000000100)={[0x2]}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r3, r1, 0x0, r5}, 0x10) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000000080)=0x5) ioctl$sock_ifreq(r0, 0x8933, &(0x7f0000000180)={'tunl0\x00', @ifru_map={0x2, 0xbf9, 0x4, 0x32, 0x9}}) [ 452.863220][ T28] audit: type=1800 audit(1599895771.061:2): pid=9530 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15732 res=0 [ 452.975708][ T28] audit: type=1804 audit(1599895771.141:3): pid=9531 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/newroot/3/file0/bus" dev="sda1" ino=15732 res=1 [ 452.996372][ T28] audit: type=1800 audit(1599895771.181:4): pid=9531 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15734 res=0 [ 453.015162][ T28] audit: type=1804 audit(1599895771.201:5): pid=9531 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/newroot/3/file0/file0/bus" dev="sda1" ino=15734 res=1 [ 453.054690][ T8706] usb 1-1: device descriptor read/64, error 18 07:29:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000100)="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") bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000140)="dd", 0x0}, 0x20) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in=@multicast1, @in6=@local}}, {{@in6=@remote}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98e8}}, 0xe8) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f00000000c0)={0x0, 0x0, [0x4d0, 0x0, 0x3, 0x2, 0xda0]}) [ 453.131109][ T9542] IPVS: ftp: loaded support on port[0] = 21 [ 453.356664][ T8706] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 453.601487][ T9580] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 453.634477][ T8706] usb 1-1: device descriptor read/64, error 18 07:29:32 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$AUDIT_ADD_RULE(r2, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000140)={0x464, 0x3f3, 0x100, 0x70bd29, 0x25dfdbfd, {0x2, 0x1, 0x16, [0x1f, 0x1, 0xffff94d8, 0x8, 0x401, 0x9, 0xfffff001, 0x8, 0x3, 0x5, 0x401, 0x0, 0x6, 0x7ff, 0x8000, 0x7, 0x0, 0x4, 0x800, 0x729c, 0x6, 0xda1d, 0x1, 0x4d, 0xdcf, 0x9, 0x2, 0x2, 0x5, 0x200, 0x7, 0x4, 0x1, 0x6, 0x80000000, 0x4, 0x5, 0x8, 0x2, 0x3, 0x1, 0x0, 0x7, 0x8000, 0x1, 0x2, 0x1, 0x7, 0x7, 0x9, 0x3, 0x60000000, 0x80000001, 0x2, 0x81, 0xfa6b, 0x1, 0x8, 0x2, 0x8f, 0x3, 0x9, 0x101, 0x2435], [0x9, 0x1c8d2fa2, 0x5b3, 0x400, 0x400, 0x7, 0x4, 0x0, 0x1ff, 0x25, 0x76a, 0x400, 0x5, 0x6, 0xe75, 0x45, 0x99, 0x5, 0x7f, 0x4d, 0x1f, 0x51701339, 0x239a, 0x8, 0xffffd6e4, 0x7fffffff, 0x5, 0x2, 0xc4, 0x3f45, 0x7, 0x8, 0x5, 0x3, 0x9, 0xab, 0x6, 0x5, 0x10001, 0x3, 0x0, 0x7, 0x1000, 0x5, 0x2, 0x3, 0x47d5, 0x1, 0x4, 0xffffffff, 0x6, 0x0, 0x8000, 0xcde2, 0xc1e, 0x5, 0x2, 0x101, 0x8, 0x36c1, 0xa0, 0x7, 0x1, 0x8], [0xff, 0x3, 0x42, 0x63a, 0x2, 0x3, 0x68983835, 0x1, 0x8, 0x4, 0x6, 0x1, 0x9, 0x6, 0x8, 0x0, 0x7, 0x0, 0x1, 0x0, 0x4, 0x8001, 0x401, 0x401, 0x7, 0x5, 0x8000000, 0xfffffffe, 0x0, 0x2, 0x525, 0x1f, 0xe549, 0x4000000, 0x5, 0x6, 0x6, 0x2, 0x0, 0x40e6, 0x6, 0x6, 0x4, 0xfffffffc, 0x80000001, 0x8001, 0x1f, 0x7f, 0x101, 0x80, 0xa79, 0x7, 0x7fffffff, 0x9, 0x4, 0x0, 0xde, 0x3, 0x2, 0x4, 0xbe13, 0x400, 0x1, 0x3], [0x0, 0xfffffffd, 0x8, 0x554a2ca2, 0xffffffff, 0x7, 0x0, 0x9, 0x6, 0x2ce5d57f, 0x5, 0x3, 0x3, 0xb4, 0xe22, 0x8, 0x15b9c60, 0x7ff, 0xfffffffd, 0xe0e, 0x1, 0xd05b, 0x5, 0x3ff, 0x1ff, 0x6, 0x4, 0xfff, 0x1, 0x6, 0x7, 0x400, 0x3f, 0x81, 0x3, 0x7, 0x2, 0x9, 0x8, 0x1f, 0x80, 0x7, 0x55, 0x1, 0x10000, 0x221, 0x9, 0x2, 0x3, 0x8, 0x4, 0x8, 0x5, 0x5d2, 0x81, 0x80, 0x2, 0x9, 0x1, 0x3bbf, 0xfff, 0x6368aa9a, 0xb0, 0x6], 0x44, ['/dev/net/tun\x00', '/dev/net/tun\x00', '/dev/net/tun\x00', '/dev/net/tun\x00', '+\x00', '.((\xbe/^\x00', '!:]#)\x00', '\x00']}, ["", "", ""]}, 0x464}, 0x1, 0x0, 0x0, 0x4000880}, 0x24000812) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r3 = socket(0x1, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'syzkaller1\x00'}) ioctl$TCGETS(r2, 0x5401, &(0x7f0000000040)) socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) [ 454.023183][ T8706] usb 1-1: device descriptor read/64, error 18 [ 454.150418][ T8706] usb usb1-port1: attempt power cycle 07:29:32 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) ptrace(0x4217, 0xffffffffffffffff) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e0a10000000e8bd6efb250009000e000100400000ff050005001201", 0x2e}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e00000010008108030f80ecdb4cb92e0a480e0a10000000e3bd6efb250009000e00030040fefeff050005001201", 0x2e}], 0x1}, 0x0) [ 454.863177][ T8706] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 454.984712][ T9614] @þþÿ: renamed from team0 07:29:33 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) [ 455.133159][ T8706] usb 1-1: device descriptor read/8, error -71 [ 455.344085][ T8706] usb 1-1: device descriptor read/8, error -71 [ 455.540115][ T9614] 8021q: adding VLAN 0 to HW filter on device @þþÿ [ 455.833801][ T8706] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 456.035274][ T8706] usb 1-1: device descriptor read/8, error -61 [ 456.207343][ T9623] 8021q: adding VLAN 0 to HW filter on device @þþÿ [ 456.227996][ T8709] tipc: TX() has been purged, node left! [ 456.303775][ T8706] usb 1-1: device descriptor read/8, error -61 07:29:34 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000001740)=ANY=[@ANYBLOB="12010000fbb930102404009d490b00000001090212000100003f000904"], 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000001780)={{0x3, 0x3, 0x10001, 0x8, 0x20, 0xff}, 0x282, [0x7, 0xf8, 0x7, 0x2, 0xff, 0x0, 0x30, 0x3, 0x3, 0x1000, 0x7, 0xffffff81, 0x16, 0x45, 0x0, 0xffffffff, 0x3, 0x7, 0xff, 0x3, 0x8, 0xffff8000, 0x6, 0x0, 0x7, 0x3f, 0xf98, 0x0, 0x80, 0x1ff, 0x8, 0x1, 0x20, 0x2, 0x9, 0xff, 0x40, 0x6e188918, 0x81, 0x5, 0x40, 0x4, 0x3, 0x9, 0x100, 0x8, 0x2, 0x8, 0x2431, 0x2, 0xe6f, 0x0, 0x5, 0x9b, 0xfad3, 0xd7, 0x10000, 0xcd5, 0x1, 0x8, 0x401, 0x4, 0x3ff, 0x2, 0x2, 0x3, 0x6d, 0x4, 0x3, 0x2, 0xff, 0x1, 0x1, 0x7, 0x401, 0x2, 0x800, 0x3, 0x101, 0x2, 0x4, 0x5, 0x10000, 0x4, 0x9, 0x7, 0x200, 0xcf, 0x0, 0x7, 0x9, 0x80000001, 0x80, 0xcf70, 0x4, 0x80000001, 0x5acc, 0x1, 0x6, 0xb8, 0x7, 0x4e2, 0x80, 0x4, 0x7, 0xfffffff9, 0x4, 0x1000, 0x8, 0x9, 0x9b62, 0x8, 0xb61, 0xd1c1, 0x87de, 0xd81e, 0x5, 0xfffffc00, 0x8, 0x8, 0x9, 0x3e1f, 0x1, 0x3f, 0x0, 0x4, 0x3, 0x43, 0xffffffff, 0x8, 0xb37, 0x81, 0x7fff, 0x7f, 0x1, 0x0, 0x196, 0x6, 0x3b493c99, 0x0, 0x6, 0x5, 0x7, 0x8, 0x1000, 0xf02b, 0x8000, 0x4bc0000, 0x7, 0x4, 0x46, 0x1, 0x1000, 0x80, 0x80000001, 0x0, 0x7fffffff, 0x8171, 0x7, 0xe0, 0x8, 0x3, 0x9, 0x6, 0x7f, 0x81, 0x1, 0xa5, 0x0, 0x5, 0x4, 0x1, 0x0, 0x1f, 0x9, 0x873, 0x0, 0x800, 0xffffffff, 0x0, 0x5, 0x5, 0x200, 0x4, 0x1, 0x10000, 0x401, 0x76, 0x3f, 0x6, 0xc0, 0x1, 0x6, 0xfaf, 0x51, 0x6, 0x9, 0x3, 0x9, 0x9db5, 0x8, 0x6, 0x5, 0x5, 0x4, 0x1, 0xfff80000, 0x9, 0x4, 0x7fff, 0x7, 0x9, 0x42a4, 0x37, 0x400, 0x9, 0x1, 0x4, 0x5, 0xfff, 0x2, 0x7ff, 0x8000, 0x6, 0x7bea0002, 0x3, 0x4, 0xffffffff, 0xc0000000, 0x80, 0x0, 0x1, 0xfffffeff, 0x7fffffff, 0x9, 0x1, 0x7, 0xbb2c, 0x10001, 0x80000001, 0xffffffff, 0x2, 0x7ff, 0x3f, 0x0, 0x94, 0x4, 0x8, 0x1, 0x4, 0x8, 0x5, 0xf7, 0x7, 0x1, 0x6, 0xb9da, 0x9e56, 0x3, 0x401, 0xca, 0x7, 0x622a, 0x5, 0x5, 0xa5, 0x1, 0x3, 0x7, 0x4, 0x0, 0x1, 0x9000, 0xdf6b, 0xc3e, 0x4, 0x3, 0x1, 0x400, 0x101, 0x8ba, 0x3, 0x7, 0x6, 0xffff, 0x7fffffff, 0x8000, 0x401, 0x1f, 0x6, 0x4, 0x0, 0x3, 0xf7f9, 0x67, 0xffffff01, 0x0, 0x7, 0x8, 0x10001, 0x6, 0x10000, 0x1f, 0x7, 0x71f, 0x81, 0x1, 0x14, 0x48, 0x80, 0x7fffffff, 0x2, 0x4, 0x1000, 0x9, 0x2, 0xffffff0a, 0x82, 0x9, 0x7, 0x3, 0xaddb, 0xfffffc01, 0x971, 0x8cbb, 0x2, 0x7, 0x5, 0xa300000, 0x9, 0x1, 0x1, 0x1503, 0x4, 0xffffffff, 0x7, 0x7, 0x0, 0x3, 0x0, 0x9, 0x4, 0x9f, 0x5, 0xbf4, 0x9, 0x80000001, 0x10000, 0x1, 0xf5, 0x7921155b, 0x8, 0x4, 0x9, 0x2, 0x5, 0x13e1, 0x80e, 0xffffffe1, 0x6, 0x6b, 0x81, 0x7fff, 0x6, 0x1800000, 0x1f, 0x8, 0x20002000, 0x7f, 0x6, 0x8, 0xfffffffc, 0x20, 0x800, 0x7ff, 0x6, 0xfffffff8, 0x7fffffff, 0x5, 0x81, 0x508a26c3, 0x9, 0xffff, 0x0, 0x7fffffff, 0x81, 0xab, 0x0, 0x7fff, 0xbde, 0x1, 0x56636223, 0x0, 0xffffffff, 0x80, 0x1f, 0x40, 0xffff, 0x9, 0x6, 0x7, 0x0, 0xfffffffc, 0x7fff, 0x1, 0x2, 0x3ff, 0xffffff8e, 0x7fff, 0xffffffff, 0x2, 0x800, 0x4bd, 0x3, 0x7, 0x2, 0xfff, 0x5, 0x1, 0x0, 0x0, 0x101, 0xffffffab, 0x40, 0x1a9, 0x1f, 0x4, 0x3, 0x4, 0x98, 0x4, 0x7ff, 0x7, 0x5, 0x80, 0x706, 0x4, 0x7, 0x10000, 0x0, 0x7, 0x2, 0x741, 0xdd9e, 0x1000, 0x0, 0x3, 0xfff, 0x7, 0xfffffffc, 0x1c0, 0x40, 0x8, 0x8, 0x28, 0x80000001, 0x7, 0xfffffffb, 0x9, 0xfffffffb, 0x0, 0x0, 0x7ff, 0x2, 0x175, 0x6, 0x3, 0x8b, 0x2, 0x4, 0x1f, 0x3, 0xff, 0x2, 0x1, 0x6, 0x1f, 0x4, 0xffffffff, 0x80000001, 0x5, 0x737, 0x9, 0x4, 0xfffffffc, 0x8, 0xcba, 0x3, 0x7fffffff, 0xdc99, 0x3, 0x2, 0x7ff, 0x7, 0x4, 0x81, 0x493, 0x800, 0x6, 0x75221427, 0x8, 0x8, 0x98c9, 0x808, 0x2, 0x4, 0x80, 0x8c2, 0x1, 0xb4, 0x7fffffff, 0x2, 0xfffffff9, 0x10001, 0x800, 0x4, 0x5, 0x600, 0x9, 0x7, 0xcd, 0x4, 0x6, 0x5, 0x8, 0x8, 0x869, 0x1, 0x8478, 0x670d, 0x5, 0x3ff, 0x500, 0x9, 0x0, 0x4, 0x6, 0x10001, 0x7, 0x400, 0xa8, 0x81, 0x80000000, 0xef, 0x0, 0x0, 0xffff, 0xa6, 0x914, 0x468, 0x7, 0x7, 0x5, 0x9, 0x1, 0x100, 0x80000001, 0x1f, 0x5, 0x3, 0x27, 0x1, 0x0, 0xe7c, 0x5, 0xffff, 0x4d, 0xfffffd33, 0xffff, 0x4, 0x1, 0x6, 0x3629d7f8, 0x400, 0x5, 0x7, 0x8, 0x3, 0x1f97, 0x8, 0x9, 0x4, 0x6, 0x8, 0x0, 0x2, 0x1, 0x800, 0x7, 0x1, 0x3, 0x3f, 0x81, 0x8, 0x7, 0x0, 0x7, 0x4, 0xcf, 0x4881, 0xcf, 0xffffff17, 0x1, 0x0, 0xb7, 0x3, 0x15, 0x4, 0x810, 0x1, 0x8, 0x229, 0x4, 0x7, 0x179c, 0x8, 0x1ff, 0x5, 0x597, 0x3, 0x4, 0x20, 0x101, 0xddb7, 0x5, 0x200, 0x7, 0x10000, 0xe444, 0xc37d, 0x5c, 0x5, 0x1, 0x2, 0x3000, 0x1, 0x60, 0x4, 0x9, 0x9, 0x5, 0x2, 0xd7d, 0x6, 0x5, 0x10001, 0xfffffffe, 0x4, 0xff1, 0x3, 0x7, 0x69, 0x60000000, 0x6b, 0x6, 0x8, 0xe6c, 0x4, 0x1, 0x3, 0x200, 0x4, 0x7ff, 0x6, 0x1, 0x838c, 0x6, 0x9, 0x80000, 0x5, 0x9, 0x401, 0x100, 0x1, 0x7, 0x6, 0x1, 0xea, 0xffffffff, 0x39d, 0x0, 0xfff, 0x2, 0x8, 0x3, 0x3ff, 0x1f55, 0x7fff, 0x5, 0x3b21, 0xfffff801, 0x8, 0x4, 0x80000001, 0x2, 0x2, 0x6, 0x6, 0x7, 0x3, 0xfffffff8, 0x0, 0x7, 0x0, 0x5, 0x1, 0x9, 0x7, 0x9, 0x0, 0x3, 0xff, 0xffffffff, 0x1f9e, 0x0, 0x1f, 0x1, 0x401, 0x1, 0x0, 0x3, 0x1000000, 0x2, 0x400, 0x71, 0x0, 0x1, 0x6, 0x5, 0x4, 0x7, 0xa4, 0x1000, 0x7fffffff, 0x101, 0x6, 0xfffffffa, 0x3, 0x3, 0x4a2f, 0x8, 0x3ff, 0x7fffffff, 0x4, 0x6, 0x4b2, 0x0, 0x9, 0x9, 0x7fffffff, 0x3, 0x8, 0x2d, 0x9a, 0x4, 0x80, 0x400, 0x2, 0x7f, 0x5, 0x4, 0x6, 0xd0, 0x7fff, 0x8, 0x5, 0xef, 0x2, 0x1, 0x1f, 0x7fffffff, 0x80000000, 0x6, 0x4, 0x10000000, 0x8, 0x2, 0x2, 0x8000, 0x4, 0x81, 0x8000, 0x4, 0x7, 0x5, 0x10000, 0x6, 0x6, 0x0, 0x5, 0x5, 0x0, 0x8, 0x1ff, 0xb36e, 0x7, 0x101, 0x7, 0x3f, 0x7, 0x20, 0x8, 0x1f, 0x10001, 0x8f9, 0x4, 0x81, 0x3, 0xfffffffd, 0x7, 0x1f, 0x7, 0x8, 0x7fff, 0x2, 0x6, 0x7ff, 0x2, 0x1, 0x401, 0x5, 0x9, 0x4, 0x0, 0xc1a4, 0x1, 0x7, 0x3, 0x5, 0x6e, 0x0, 0x0, 0x4, 0x8, 0x2, 0xa8000000, 0xb4, 0x6, 0xd529, 0x9, 0xfffffffb, 0x3f, 0xfffeffff, 0xffff, 0x5, 0x4, 0x18000000, 0x4, 0x9, 0x9, 0x3c9, 0xdc4, 0x9, 0x20, 0x1ff, 0x3ff, 0x101, 0x9, 0x1000, 0x3, 0x3, 0x8, 0x1, 0x0, 0x3, 0x800, 0x3, 0xffffffff, 0x401, 0x8, 0x101, 0x80000000, 0x80000001, 0x2, 0x7ff, 0x1, 0x8, 0xaf2c, 0x3, 0x8001, 0x6, 0x0, 0x1, 0x2255, 0x3, 0x9, 0xffffffff, 0x5, 0x3f, 0x9, 0x2, 0xffffffff, 0x0, 0x98, 0x2, 0x1abf, 0x101, 0x9, 0x5d6d, 0x8, 0x6, 0xfffffffa, 0x0, 0x1, 0x4, 0x0, 0x9, 0x6, 0x0, 0x8, 0xfff, 0x5, 0x6, 0x8, 0x5, 0x9, 0x872, 0xffffffc1, 0x4, 0x3, 0x7, 0x9, 0x8, 0x0, 0x6, 0x0, 0xff, 0x101, 0x726e, 0x2, 0x1, 0x3f, 0x0, 0x3e00000, 0x77e55362, 0x7, 0xd5, 0xfffffffe, 0x7fffffff, 0x50000000, 0x7fffffff, 0x1fffc00, 0x0, 0xafcd, 0x40000000, 0x1f, 0x100, 0xaf0f, 0x9, 0x8927, 0x3, 0x6, 0x7fffffff, 0x4, 0x7, 0x1, 0x7252debc, 0x514b, 0x1ff, 0x6, 0x200, 0xfffff826, 0xc2f, 0xffff, 0x800, 0xffffffff, 0x3, 0x7, 0x0, 0x5, 0x42de5b85, 0xfffff6f0, 0x513, 0x0, 0x4d, 0x81, 0x3ff, 0x51, 0x7, 0x1, 0x0, 0xfffffff7, 0x200, 0x38000, 0x7, 0x400, 0x2, 0x6a15, 0x7, 0x8, 0x0, 0x0, 0x5, 0x4, 0xffffffff, 0x7, 0x7f, 0xffffff33, 0xb287, 0x8, 0x1000, 0x101, 0x80000000, 0x0, 0xff, 0x4, 0xfffff800, 0x4, 0x6, 0x8, 0x1, 0x101, 0x6, 0x200, 0x5, 0x6, 0xffff, 0x7, 0x5, 0x4, 0x2, 0x6, 0x24d, 0x9]}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000d00)=ANY=[@ANYBLOB="38000000100004000000000000", @ANYRES32=r3, @ANYBLOB="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", @ANYRESOCT], 0x38}, 0x1, 0x0, 0x0, 0x4800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="03000000000000003000128008000100736974002400028008000100", @ANYRES32=r3, @ANYBLOB="08000300e000000106000d000600000006000e009c000000"], 0x50}}, 0x8080) [ 456.424119][ T8706] usb usb1-port1: unable to enumerate USB device 07:29:34 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000000)={0x7, 0x3, 0x4, 0x6, 'syz0\x00', 0x20}) syz_open_dev$ptys(0xc, 0x3, 0x1) [ 456.773691][ T8706] usb 3-1: new high-speed USB device number 3 using dummy_hcd 07:29:35 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0xf0, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r1 = fsmount(0xffffffffffffffff, 0x1, 0x73) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000040)=0xd6) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) [ 457.014106][ T8706] usb 3-1: Using ep0 maxpacket: 16 [ 457.133456][ T8706] usb 3-1: New USB device found, idVendor=0424, idProduct=9d00, bcdDevice= b.49 [ 457.142748][ T8706] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.201725][ T8706] usb 3-1: config 0 descriptor?? [ 457.334649][ T8708] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 457.463298][ T8706] smscufx: Failed to read register index 0x00003000 [ 457.470044][ T8706] smscufx: error -71 reading 0x3000 register from device [ 457.471009][ T8706] smscufx: probe of 3-1:0.0 failed with error -71 [ 457.570176][ T8706] usb 3-1: USB disconnect, device number 3 [ 457.725791][ T8708] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.737093][ T8708] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 457.747267][ T8708] usb 2-1: New USB device found, idVendor=056a, idProduct=00f0, bcdDevice= 0.40 [ 457.756646][ T8708] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.891740][ T8708] usb 2-1: config 0 descriptor?? [ 458.244535][ T8706] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 458.246687][ T8708] usbhid 2-1:0.0: can't add hid device: -71 [ 458.258552][ T8708] usbhid: probe of 2-1:0.0 failed with error -71 [ 458.280449][ T8708] usb 2-1: USB disconnect, device number 12 07:29:36 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000357373082505a0a433cf000010010902"], 0x0) [ 458.483099][ T8706] usb 3-1: Using ep0 maxpacket: 16 [ 458.603934][ T8706] usb 3-1: New USB device found, idVendor=0424, idProduct=9d00, bcdDevice= b.49 [ 458.613364][ T8706] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.674288][ T8706] usb 3-1: config 0 descriptor?? [ 458.754558][ T8708] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 458.853494][ T8711] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 458.953017][ T8706] smscufx: Failed to read register index 0x00003000 [ 458.959696][ T8706] smscufx: error -71 reading 0x3000 register from device [ 458.960643][ T8706] smscufx: probe of 3-1:0.0 failed with error -71 [ 459.076743][ T8706] usb 3-1: USB disconnect, device number 4 [ 459.105238][ T8711] usb 1-1: Using ep0 maxpacket: 8 07:29:37 executing program 2: r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)=0x8001, 0xfffffde8) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsu\x00', 0x20400, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r2, &(0x7f00000017c0)=ANY=[@ANYBLOB="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", @ANYBLOB="a0d3325f254e39ce8276b4a096b8779d61ff62c145e6cf", @ANYRES32=0x0], 0x3cb) r3 = socket(0x10, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, 0x0, 0xa08) r4 = socket$kcm(0x2b, 0x200000000000001, 0x0) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x24000014) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @loopback}}, 0x201, 0x1cf}, 0x90) write(r3, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff00000000000000", 0x1e5) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000440)) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x80200, 0x0) recvfrom$inet(r5, &(0x7f00000002c0)=""/168, 0xa8, 0x12000, &(0x7f0000000200)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10) recvmmsg(r3, &(0x7f0000002ec0), 0x29e, 0x1a, &(0x7f00000001c0)={0x77359400}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) [ 459.143644][ T8708] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.155172][ T8708] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.165308][ T8708] usb 2-1: New USB device found, idVendor=056a, idProduct=00f0, bcdDevice= 0.40 [ 459.174603][ T8708] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.226050][ T8711] usb 1-1: config 0 has no interfaces? [ 459.286495][ C0] sd 0:0:1:0: [sg0] tag#883 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 459.297087][ C0] sd 0:0:1:0: [sg0] tag#883 CDB: Test Unit Ready [ 459.303762][ C0] sd 0:0:1:0: [sg0] tag#883 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.313542][ C0] sd 0:0:1:0: [sg0] tag#883 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.323321][ C0] sd 0:0:1:0: [sg0] tag#883 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.333139][ C0] sd 0:0:1:0: [sg0] tag#883 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.342846][ T8708] usb 2-1: config 0 descriptor?? [ 459.347936][ C0] sd 0:0:1:0: [sg0] tag#883 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.357713][ C0] sd 0:0:1:0: [sg0] tag#883 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.367484][ C0] sd 0:0:1:0: [sg0] tag#883 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.377254][ C0] sd 0:0:1:0: [sg0] tag#883 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.387028][ C0] sd 0:0:1:0: [sg0] tag#883 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.396794][ C0] sd 0:0:1:0: [sg0] tag#883 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.406572][ C0] sd 0:0:1:0: [sg0] tag#883 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.416403][ C0] sd 0:0:1:0: [sg0] tag#883 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.426171][ C0] sd 0:0:1:0: [sg0] tag#883 CDB[c0]: 00 00 00 00 00 00 00 00 [ 459.453767][ T8711] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=cf.33 [ 459.463236][ T8711] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 459.471390][ T8711] usb 1-1: SerialNumber: syz [ 459.509446][ T8711] usb 1-1: config 0 descriptor?? [ 459.760065][ T9014] usb 1-1: USB disconnect, device number 19 [ 459.841484][ T8708] wacom 0003:056A:00F0.0001: unknown main item tag 0x0 [ 459.848727][ T8708] wacom 0003:056A:00F0.0001: unknown main item tag 0x0 [ 459.855981][ T8708] wacom 0003:056A:00F0.0001: unknown main item tag 0x0 [ 459.863304][ T8708] wacom 0003:056A:00F0.0001: unknown main item tag 0x0 [ 459.870518][ T8708] wacom 0003:056A:00F0.0001: unknown main item tag 0x0 [ 459.997912][ T8708] wacom 0003:056A:00F0.0001: hidraw0: USB HID v0.00 Device [HID 056a:00f0] on usb-dummy_hcd.1-1/input0 [ 460.020554][ C1] sd 0:0:1:0: [sg0] tag#884 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 460.031104][ C1] sd 0:0:1:0: [sg0] tag#884 CDB: Test Unit Ready [ 460.037830][ C1] sd 0:0:1:0: [sg0] tag#884 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.047632][ C1] sd 0:0:1:0: [sg0] tag#884 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.057427][ C1] sd 0:0:1:0: [sg0] tag#884 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.067237][ C1] sd 0:0:1:0: [sg0] tag#884 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.077051][ C1] sd 0:0:1:0: [sg0] tag#884 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.086885][ C1] sd 0:0:1:0: [sg0] tag#884 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.096674][ C1] sd 0:0:1:0: [sg0] tag#884 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.106455][ C1] sd 0:0:1:0: [sg0] tag#884 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.116281][ C1] sd 0:0:1:0: [sg0] tag#884 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.126091][ C1] sd 0:0:1:0: [sg0] tag#884 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.135897][ C1] sd 0:0:1:0: [sg0] tag#884 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.145670][ C1] sd 0:0:1:0: [sg0] tag#884 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.155462][ C1] sd 0:0:1:0: [sg0] tag#884 CDB[c0]: 00 00 00 00 00 00 00 00 [ 460.262847][ T8708] usb 2-1: USB disconnect, device number 13 07:29:38 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) 07:29:38 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000357373082505a0a433cf000010010902"], 0x0) [ 460.953275][ T8711] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 461.025427][ T9014] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 461.283755][ T9014] usb 1-1: Using ep0 maxpacket: 8 [ 461.314104][ T8711] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.325518][ T8711] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.335574][ T8711] usb 2-1: New USB device found, idVendor=056a, idProduct=00f0, bcdDevice= 0.40 [ 461.344922][ T8711] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.373585][ T8711] usb 2-1: config 0 descriptor?? [ 461.424231][ T9014] usb 1-1: config 0 has no interfaces? [ 461.515864][ T9014] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=cf.33 [ 461.525187][ T9014] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 461.533567][ T9014] usb 1-1: SerialNumber: syz 07:29:39 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000357373082505a0a433cf000010010902"], 0x0) [ 461.645342][ T9014] usb 1-1: config 0 descriptor?? [ 461.723863][ T8711] usbhid 2-1:0.0: can't add hid device: -71 [ 461.730202][ T8711] usbhid: probe of 2-1:0.0 failed with error -71 07:29:40 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x242000, 0x100) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x88, 0x0, 0xc00, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}]}, 0x88}}, 0x24008070) r1 = openat$mice(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/input/mice\x00', 0x220) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000200)={0x1, r0}) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x90, r2, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'gre0\x00'}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000015}, 0x40000) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/autofs\x00', 0x212200, 0x0) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, 0x7, 0xa, 0x3, 0x0, 0x0, {0xc, 0x0, 0x9}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}, 0x58}}, 0x44) r4 = geteuid() ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x9, 0xffffffff, {0xffffffffffffffff}, {0xee00}, 0x0, 0x6}) statx(r3, &(0x7f0000000640)='./file0\x00', 0x800, 0x40, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r3, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='system.posix_acl_access\x00', &(0x7f0000000800)={{}, {0x1, 0x6}, [{0x2, 0x0, r4}, {0x2, 0x4, r5}, {0x2, 0x3, 0xee00}], {0x4, 0x2}, [{0x8, 0xc, r6}, {0x8, 0x4, 0xffffffffffffffff}, {0x8, 0x2, r7}], {0x10, 0x1}, {0x20, 0xe}}, 0x54, 0x2) r8 = syz_io_uring_complete(0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r8, 0x81) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r8, 0x89f9, &(0x7f0000000d40)={'ip6tnl0\x00', &(0x7f0000000cc0)={'syztnl0\x00', 0x0, 0xbacb04f3d9ae8e81, 0x8, 0x3, 0x6, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, 0x8000, 0x20, 0xfffffe01}}) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000d80)={@loopback, @dev, 0x0}, &(0x7f0000000dc0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000ec0)={'team0\x00', 0x0}) getsockname$packet(r3, &(0x7f00000010c0)={0x11, 0x0, 0x0}, &(0x7f0000001100)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000002240)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002200)={&(0x7f0000001640)={0xb94, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [{{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8, 0x6, r9}}}]}}, {{0x8}, {0x234, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0xc, 0x4, [{0x1000, 0xff, 0xf7, 0x4}]}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r11}, {0x268, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0xc, 0x4, [{0x800, 0x1f, 0x5, 0x80000001}]}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r12}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x24, 0x4, [{0x1, 0x4, 0x0, 0x6}, {0x7, 0x10, 0x0, 0x6}, {0x3, 0xa3, 0x1, 0x401}, {0x20, 0x2, 0x8, 0x2}]}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xffffff33}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x159d}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0xffffc1e5}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x80}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x80}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x2f6}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xfffeffff}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x80}}, {0x8}}}]}}]}, 0xb94}, 0x1, 0x0, 0x0, 0x1}, 0x0) [ 461.795342][ T8711] usb 2-1: USB disconnect, device number 14 [ 461.886550][ T9014] usb 1-1: USB disconnect, device number 20 07:29:40 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000200)="148daf5426aff2fdf4f56dcee7e5f2941ed49af22e66d093b6a1be170f02b00693b912322356d89601bf8fdc7cb3da1be6d45cb425689843ab6ec0ad66c3a9ca81ce5038f94eb3967f03cf3b6a6eb840e0cecc0722670a3b3203b621aed4bdfa53778061b0d3ff959d7be729c298fba6af6cbba2d776c4d91de9aec133347b784d8139749155da8f03af729959ea75b980937577b0e73f009e", 0x99) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e22, 0x6c09, @loopback, 0x8}}, 0x5, 0x0, 0x3ff, 0xfffff001, 0x0, 0x3, 0x2}, &(0x7f0000000080)=0x9c) r1 = dup(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x7) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000480)='/dev/dsp1\x00', 0x200, 0x0) r4 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1201d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff800000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x440, 0xa, 0x0, 0x8, 0x100000001, 0x4, 0x7}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_hci(r7, 0x0, 0x3, &(0x7f0000000340)=""/239, &(0x7f0000000440)=0xef) dup(r5) fcntl$dupfd(r0, 0x0, r7) syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x5, 0x200) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r6, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r6) syz_open_procfs(0x0, &(0x7f0000272000)) [ 462.202684][ T27] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 462.442675][ T27] usb 3-1: Using ep0 maxpacket: 8 07:29:40 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000357373082505a0a433cf000010010902"], 0x0) [ 462.598836][ T27] usb 3-1: config 0 has no interfaces? 07:29:40 executing program 1: connect$inet(0xffffffffffffffff, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) openat$sndseq(0xffffffffffffff9c, 0x0, 0x2) listen(0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) r1 = dup(r0) writev(r1, &(0x7f00000002c0)=[{&(0x7f00000003c0)="82a75419398688ec1ca956d350d9d8fd240d8f01f3149463723444cf", 0x1c}], 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) r3 = socket$inet(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, 0x0, &(0x7f0000000040)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r5, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x2}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80118000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x110, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x401}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4081}, 0x4000000) set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) [ 462.693539][ T27] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=cf.33 [ 462.702859][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 462.711071][ T27] usb 3-1: SerialNumber: syz [ 462.805898][ T27] usb 3-1: config 0 descriptor?? [ 462.999918][ T9753] IPVS: ftp: loaded support on port[0] = 21 [ 463.022763][ T8706] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 463.067346][ T9014] usb 3-1: USB disconnect, device number 5 [ 463.263768][ T8706] usb 1-1: Using ep0 maxpacket: 8 [ 463.386528][ T8706] usb 1-1: config 0 has no interfaces? [ 463.433113][ T9782] IPVS: ftp: loaded support on port[0] = 21 [ 463.463553][ T8706] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=cf.33 [ 463.473176][ T8706] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 463.481334][ T8706] usb 1-1: SerialNumber: syz [ 463.638106][ T8706] usb 1-1: config 0 descriptor?? [ 463.706843][ T8554] tipc: TX() has been purged, node left! 07:29:42 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f0000000100)={{0x4, 0x9}, 'port1\x00', 0x80, 0x1000, 0x5, 0x1, 0x0, 0x0, 0x7, 0x0, 0x1, 0x57}) ioctl$PPPIOCGFLAGS1(r2, 0x8004745a, &(0x7f0000000040)) sendmmsg$inet_sctp(r0, &(0x7f0000001500)=[{&(0x7f00000000c0)=@in={0x2, 0x4e20, @broadcast}, 0x10, 0x0}], 0x1, 0x0) [ 463.887781][ T8711] usb 1-1: USB disconnect, device number 21 07:29:42 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="0300"]) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700000000000000000000000050c63a0aff0b2f520e35ff23a47bb2e9d44a49e108d42bf1784c7a6816d4927c68ab9d89403e791a888359622c300092ece8f26a777d4dfe4a4f321230c077bdc45697171d91b34c8dab3a77678f7107fc040bc4af577237d1e7d61b676dceb56b041503c21e6b18f1e7c2ceb1", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f0000000000)=0x7fffffff, 0x4) sendmmsg$inet6(r2, &(0x7f0000001840)=[{{&(0x7f0000000100)={0xa, 0x4621, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0xfffffffffffffc8f}}], 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) keyctl$get_persistent(0x3, r4, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000580)={{{@in6=@private1, @in=@loopback, 0x4e20, 0x0, 0x4e21, 0x0, 0x2, 0x20, 0x80, 0x3b, r1, r4}, {0xfe20, 0x4, 0x823, 0x77e83849, 0x66c, 0x1ff, 0x1, 0x2}, {0x7, 0x8001, 0x0, 0x1}, 0x1, 0x0, 0x0, 0x1, 0x3, 0x2}, {{@in6=@private0, 0x4d3, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x3502, 0x3, 0x3, 0xc2, 0x200, 0x7, 0x8001}}, 0xe8) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='fuse\x00', 0x24001, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0xee01, @ANYBLOB="2cfab905b3601e8eab3d", @ANYRESDEC=0x0, @ANYBLOB=',default_permissions,default_permissions,allow_other,default_permissions,blksize=0x0000000000001c00,max_read=0x00000000000000de,blksize=0x0000000000000400,default_permissions,default_permissions,euid<', @ANYRESDEC=r4, @ANYBLOB=',subj_user=rootmode,context=sysadm_u,\x00']) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0x0, r5}, 0x50) r6 = socket$key(0xf, 0x3, 0x2) chmod(&(0x7f0000000080)='./file0/../file0/file0\x00', 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) syz_fuse_handle_req(r0, &(0x7f0000004340)="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", 0x2000, &(0x7f00000069c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, r7}}}, 0x0, 0x0, 0x0, 0x0}) [ 464.088497][ T9816] fuse: Bad value for 'group_id' [ 464.127222][ T9817] fuse: Bad value for 'group_id' [ 464.173053][ T9814] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 464.315878][ T9825] IPVS: ftp: loaded support on port[0] = 21 07:29:42 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000357373082505a0a433cf0000100109021b0001ef000000090456"], 0x0) 07:29:42 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000008d2c75a0c19d61663bad6d71101800000000006700000019"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xfffffffe}, 0x10}, 0x78) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000100)) get_thread_area(&(0x7f00000000c0)={0x7, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1}) [ 464.951755][ T9825] chnl_net:caif_netlink_parms(): no params data found 07:29:43 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000000)={0x8, 'ip6gre0\x00', {'veth1\x00'}, 0x1}) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f0000000140)="0c268a927f1f6588b967481241ba7860073ef65ac618e7ef2447db5cbec2a0191d24bfded8974895ab03f5b4834ff922b3f1e0b02bd697a03059bcecc7a95625a1a07e758044ab4ea6f7ae55d98fecf90b1a7509bf746bec66baf8a70c2577", 0xffffffffffffff54, 0x41, 0x0, 0x11) connect(r0, &(0x7f0000000200)=@un=@abs, 0x80) [ 465.062692][ T27] usb 1-1: new high-speed USB device number 22 using dummy_hcd 07:29:43 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000000)={0x8, 'ip6gre0\x00', {'veth1\x00'}, 0x1}) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f0000000140)="0c268a927f1f6588b967481241ba7860073ef65ac618e7ef2447db5cbec2a0191d24bfded8974895ab03f5b4834ff922b3f1e0b02bd697a03059bcecc7a95625a1a07e758044ab4ea6f7ae55d98fecf90b1a7509bf746bec66baf8a70c2577", 0xffffffffffffff54, 0x41, 0x0, 0x11) connect(r0, &(0x7f0000000200)=@un=@abs, 0x80) [ 465.281979][ T9825] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.289684][ T9825] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.299340][ T9825] device bridge_slave_0 entered promiscuous mode [ 465.352998][ T27] usb 1-1: Using ep0 maxpacket: 8 [ 465.416201][ T9825] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.423752][ T9825] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.433523][ T9825] device bridge_slave_1 entered promiscuous mode [ 465.475466][ T27] usb 1-1: config 239 has an invalid interface number: 86 but max is 0 [ 465.484257][ T27] usb 1-1: config 239 has an invalid descriptor of length 0, skipping remainder of the config [ 465.494900][ T27] usb 1-1: config 239 has no interface number 0 [ 465.655969][ T27] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=cf.33 [ 465.665361][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 465.673789][ T27] usb 1-1: SerialNumber: syz [ 465.676540][ T9825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.789507][ T9825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.809217][ T27] usbtest 1-1:239.86: couldn't get endpoints, -22 [ 465.816567][ T27] usbtest: probe of 1-1:239.86 failed with error -22 07:29:44 executing program 1: dup(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x60, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x13}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}]}, 0x60}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r4, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r4, 0x7}}, 0x10) [ 465.972061][ T9825] team0: Port device team_slave_0 added [ 466.011317][ T8706] usb 1-1: USB disconnect, device number 22 [ 466.032882][ T9825] team0: Port device team_slave_1 added [ 466.168343][ T9825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.172530][ T8711] Bluetooth: hci3: command 0x0409 tx timeout [ 466.175651][ T9825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.207558][ T9825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active 07:29:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f0000000140)={0x7, 'ipvlan1\x00', {0x1}, 0x1f}) r2 = socket$kcm(0x10, 0x2, 0x10) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000040)) mq_timedreceive(r1, &(0x7f0000000180)=""/128, 0x80, 0x3, &(0x7f0000000200)={0x0, 0x3938700}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video37\x00', 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="1800000034000535a4abd32b80180025042482c1c8f83e37", 0x18}], 0x1}, 0x0) [ 466.459208][ T9825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.466364][ T9825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.492607][ T9825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.614302][ T9825] device hsr_slave_0 entered promiscuous mode [ 466.643409][ T9825] device hsr_slave_1 entered promiscuous mode [ 466.659536][ T9825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 466.668129][ T9825] Cannot create hsr debugfs directory [ 467.286401][ T9825] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 467.339659][ T9825] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 467.380729][ T9825] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 467.436885][ T9825] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 468.009446][ T9825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.220869][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 468.229881][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 468.303894][ T9825] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.367163][ T27] Bluetooth: hci3: command 0x041b tx timeout [ 468.429944][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 468.439797][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 468.449277][ T27] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.456559][ T27] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.638999][ T8710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 468.648340][ T8710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 468.658640][ T8710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 468.668061][ T8710] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.675417][ T8710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.684416][ T8710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 468.695221][ T8710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 468.706000][ T8710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 468.716364][ T8710] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 468.738201][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 468.782128][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 468.792723][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 468.882023][ T9825] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 468.893305][ T9825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 468.910194][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 468.920165][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 468.930232][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 468.939676][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 468.966572][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 469.027669][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 469.036534][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 469.080359][ T9825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.154394][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 469.164569][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 469.250265][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 469.260702][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 469.289673][ T9825] device veth0_vlan entered promiscuous mode [ 469.302357][ T9014] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 469.311261][ T9014] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 469.359443][ T9825] device veth1_vlan entered promiscuous mode [ 469.444128][ T9014] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 469.453613][ T9014] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 469.463034][ T9014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 469.472723][ T9014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 469.509952][ T9825] device veth0_macvtap entered promiscuous mode [ 469.538669][ T9825] device veth1_macvtap entered promiscuous mode [ 469.605739][ T9825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 469.616405][ T9825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.627067][ T9825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 469.637601][ T9825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.647585][ T9825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 469.658108][ T9825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.671788][ T9825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 469.724503][ T9014] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 469.734148][ T9014] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 469.744052][ T9014] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 469.754100][ T9014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 469.897379][ T9825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 469.908026][ T9825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.918153][ T9825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 469.928776][ T9825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.938851][ T9825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 469.949419][ T9825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.963612][ T9825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 469.977733][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 469.987912][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 470.413773][ T27] Bluetooth: hci3: command 0x040f tx timeout 07:29:49 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x62, 0x38cf92688215bdfc) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000005c0)={0x0, 0x6, 0x450, 0x0, 0xe}) listen(0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0x54) getsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0xc, &(0x7f00000002c0)=""/176, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000003c0)={r1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) readlinkat(r4, &(0x7f0000000380)='./file0\x00', &(0x7f0000000400)=""/209, 0xd1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x230, 0x98, 0xd0, 0xd0, 0x0, 0xd0, 0x198, 0x1d0, 0x1d0, 0x198, 0x1d0, 0x3, 0x0, {[{{@ip={@local, @remote, 0x0, 0xffffff00, 'veth1_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x7fff, 0x0, '\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) 07:29:49 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000357373082505a0a433cf0000100109021b0001ef000000090456"], 0x0) 07:29:49 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000000000000052dfd0db9d200000095000000000000d3fc0000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) r0 = syz_open_dev$audion(&(0x7f0000001240)='/dev/audio#\x00', 0x2, 0xc000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x20, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4000040) 07:29:49 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@local, @in6=@remote}, {@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x49, 0x2, {{'ecb(cipher_null)\x00'}, 0x8, '['}}]}, 0x13c}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair(0x4, 0x6, 0x6, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x3aeaf439bd053627}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)={0xf8, r2, 0x800, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xffe3, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1, 0x3, 0x1}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0x0, 0x1, 'netdevsim\x00'}, {0x0, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x0, 0x1, 'pci\x00'}, {0x0, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x10001, 0x0) ioctl$FIGETBSZ(r6, 0x2, &(0x7f0000000100)) r7 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000940)={'sit0\x00', 0x0, 0x29, 0xff, 0x3f, 0x7, 0x1, @empty, @remote, 0x700, 0x1, 0x4, 0x8}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r10, &(0x7f0000000a80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x4c, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x200}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x40000) ioctl$VT_GETSTATE(r7, 0x5603, &(0x7f0000000040)={0xffd, 0x7, 0xffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000180), 0xf1, 0x0) [ 471.297422][ T27] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 471.553034][ T27] usb 1-1: Using ep0 maxpacket: 8 07:29:49 executing program 3: tkill(0x0, 0x2a) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd000000080001000a081000418e00000004fcff", 0x58}], 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000}}, 0x0, 0x0, 0x30, 0x0, "5b2e47e1fd74791fbd99b550c579c35861669746fdecd6d2293934c12437790c6186fa25b662469e83cebc0578a4c207467514ba39c8896a31c9da1b62eb56c4fb50777a92d419edf893865b1e3bc288"}, 0xd8) [ 471.685002][ T27] usb 1-1: config 239 has an invalid interface number: 86 but max is 0 [ 471.693907][ T27] usb 1-1: config 239 has an invalid descriptor of length 0, skipping remainder of the config [ 471.704460][ T27] usb 1-1: config 239 has no interface number 0 [ 471.835083][ T27] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=cf.33 [ 471.844304][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 471.853148][ T27] usb 1-1: SerialNumber: syz 07:29:50 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x8) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000200)={0x5, [[0x6, 0x2, 0x6, 0x0, 0x101, 0x5, 0xa38, 0x7], [0xb2, 0x101, 0x3, 0x5, 0x4, 0x3, 0x7, 0x6], [0x1000, 0x40, 0x4, 0x100, 0x7, 0x5, 0xffff, 0xff]], [], [{0x8, 0x7, 0x1, 0x1, 0x1, 0x1}, {0xfffffc00, 0x5, 0x0, 0x1}, {0x9, 0x1ff}, {0xff, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x1, 0x5}, {0x3ff, 0x5, 0x0, 0x1, 0x0, 0x1}, {0x7, 0xfff, 0x1, 0x0, 0x0, 0x1}, {0x2, 0x1f, 0x0, 0x0, 0x0, 0x1}, {0xc7f, 0x5, 0x1}, {0x80, 0xfffffff7, 0x1, 0x1, 0x1}, {0x7ef, 0x179e, 0x1, 0x1, 0x1}], [], 0x1}) ioctl$sock_inet6_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000040)) getsockopt$inet6_tcp_int(r2, 0x6, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r5 = shmget(0x0, 0x1000, 0x780012c9, &(0x7f0000ffa000/0x1000)=nil) shmat(r5, &(0x7f0000ffe000/0x2000)=nil, 0xc800) shmctl$SHM_LOCK(r5, 0xb) syz_emit_ethernet(0x66, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffff033ab2050014810800450200580000000000299078000000000000000024806558000000002060080080009cb74f8c50ec32fe000010000000c104000000000000080022eb000000002000000002000000000000000000000008006558000000003de7d6e298de609e659ef9daefe61a7c640fac82edcbb9786e7de55f05047dcd23b654eaa1953c904c99666fa37b7ef3600ce0649e67f14ae4ee8b8e5ede3a1ffcf70d1289c4b131f6ffffbd96e92eddab718c8dbaa46ed173f20f78a3a1b275260101421844b546"], 0x0) [ 471.978264][ T27] usbtest 1-1:239.86: couldn't get endpoints, -22 [ 471.985622][ T27] usbtest: probe of 1-1:239.86 failed with error -22 [ 472.181429][ T8711] usb 1-1: USB disconnect, device number 23 07:29:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a0f06c4c18d72d68366baa100ed", 0x60}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x4, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}, 0x21}, r5, 0x0, r4, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:29:50 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000400100323200000000000109022400010000000009040000010300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="0000360000003600eb000000000000000021c107b9e8c008a03a22c604a04db428a49e9e2446"], 0x0, 0x0, 0x0, 0x0}, 0x0) [ 472.492264][ T27] Bluetooth: hci3: command 0x0419 tx timeout 07:29:51 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000357373082505a0a433cf0000100109021b0001ef000000090456"], 0x0) [ 472.854817][ T27] usb 2-1: new high-speed USB device number 15 using dummy_hcd 07:29:51 executing program 3: ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f00000000c0)=0x100000) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'team0\x00', {0x2, 0x4e24, @private=0xa010101}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b7000000000000003c00000000000000ffff694d0770e81602240000000000008e1a77872f3fda0ffa0b071593764efc"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xb579, &(0x7f000000cf3d)=""/195}, 0x48) [ 473.243721][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.254910][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 473.265015][ T27] usb 2-1: New USB device found, idVendor=0001, idProduct=3232, bcdDevice= 0.00 [ 473.274352][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.384477][ T8710] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 473.476004][ T27] usb 2-1: config 0 descriptor?? 07:29:51 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000)=0x22e6, 0x4) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x1b, 0x5b, 0x39, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a}}, 0x40) [ 473.663347][ T8710] usb 1-1: Using ep0 maxpacket: 8 [ 473.783426][ T8710] usb 1-1: config 239 has an invalid interface number: 86 but max is 0 [ 473.791995][ T8710] usb 1-1: config 239 has an invalid descriptor of length 0, skipping remainder of the config [ 473.802543][ T8710] usb 1-1: config 239 has no interface number 0 [ 473.902288][ T8710] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=cf.33 [ 473.911531][ T8710] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 473.920063][ T8710] usb 1-1: SerialNumber: syz 07:29:52 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3a) io_setup(0xb66e, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'team_slave_0\x00', &(0x7f0000000140)=@ethtool_channels={0x3d}}) [ 473.967371][ T27] hid-generic 0003:0001:3232.0002: unknown main item tag 0x0 [ 473.975149][ T27] hid-generic 0003:0001:3232.0002: unknown main item tag 0x0 [ 473.982950][ T27] hid-generic 0003:0001:3232.0002: unknown main item tag 0x0 [ 473.991157][ T27] hid-generic 0003:0001:3232.0002: unknown main item tag 0x0 [ 473.998945][ T27] hid-generic 0003:0001:3232.0002: unknown main item tag 0x0 [ 474.006695][ T27] hid-generic 0003:0001:3232.0002: unknown main item tag 0x0 [ 474.018138][ T27] hid-generic 0003:0001:3232.0002: unknown main item tag 0x0 [ 474.025862][ T27] hid-generic 0003:0001:3232.0002: unknown main item tag 0x0 [ 474.033568][ T27] hid-generic 0003:0001:3232.0002: unknown main item tag 0x2 [ 474.041345][ T27] hid-generic 0003:0001:3232.0002: unbalanced collection at end of report description [ 474.051706][ T27] hid-generic: probe of 0003:0001:3232.0002 failed with error -22 [ 474.149902][ T8710] usbtest 1-1:239.86: couldn't get endpoints, -22 [ 474.157503][ T8710] usbtest: probe of 1-1:239.86 failed with error -22 [ 474.198486][ T27] usb 2-1: USB disconnect, device number 15 [ 474.346663][ T8711] usb 1-1: USB disconnect, device number 24 07:29:52 executing program 3: perf_event_open(&(0x7f0000000240)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x14f) syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x6, 0xc0301) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f65a612ad90c", 0xa}], 0x1, 0x0, 0xfffffe38, 0x200008d5}], 0x1, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x14f) socket$bt_rfcomm(0x1f, 0x1, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) fsmount(0xffffffffffffffff, 0x0, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0xa0}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r5, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r4, &(0x7f0000000000)="98", 0x3e80000000}]) [ 474.660591][ C1] sd 0:0:1:0: [sg0] tag#837 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 474.671237][ C1] sd 0:0:1:0: [sg0] tag#837 CDB: Test Unit Ready [ 474.677968][ C1] sd 0:0:1:0: [sg0] tag#837 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.687770][ C1] sd 0:0:1:0: [sg0] tag#837 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.697522][ C1] sd 0:0:1:0: [sg0] tag#837 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.707316][ C1] sd 0:0:1:0: [sg0] tag#837 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.717105][ C1] sd 0:0:1:0: [sg0] tag#837 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.726865][ C1] sd 0:0:1:0: [sg0] tag#837 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.736649][ C1] sd 0:0:1:0: [sg0] tag#837 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.746417][ C1] sd 0:0:1:0: [sg0] tag#837 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.756179][ C1] sd 0:0:1:0: [sg0] tag#837 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.765925][ C1] sd 0:0:1:0: [sg0] tag#837 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.775661][ C1] sd 0:0:1:0: [sg0] tag#837 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.785399][ C1] sd 0:0:1:0: [sg0] tag#837 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.795143][ C1] sd 0:0:1:0: [sg0] tag#837 CDB[c0]: 00 00 00 00 00 00 00 00 07:29:53 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000357373082505a0a433cf0000100109021b0001ef0000000904564435d0000f"], 0x0) 07:29:53 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000340)="cf311045e305920622e8fd0c47d350cbe8b23ed43ac5036e7fb6c127bf9f1fe6c910d0") ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000100)={0x1, 'ip6_vti0\x00', 0x4}, 0x18) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffffffff}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000380)=0x8, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r1, &(0x7f0000000180)="2e773aa3fd75c6b084b280137617c8ed47e5afef6be400481e839d76ae85ed160df5aebe4558566864380120caacb5571fa9c87beececde589296889142d99c7386ec9dca64914a7a2578724e5dbde0079251e9f445f91241bb27aa9b929ef10767985baa4fa63f1c0b4c40e74ca24928e85660ba11c27a67caa1579d74f91dbf1d132d67b3acf1a3e769d8dc29d3914", &(0x7f0000000240)=""/173}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_GET_STATS(r4, 0x80f86406, &(0x7f0000000080)=""/89) [ 475.085289][ T8710] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 475.410280][T10170] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6_vti0, syncid = 4, id = 0 [ 475.473358][ T8710] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.484717][ T8710] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.495052][ T8710] usb 2-1: New USB device found, idVendor=0001, idProduct=3232, bcdDevice= 0.00 [ 475.502027][ T12] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 475.504284][ T8710] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 07:29:53 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x10000, 0x0) ioctl$SNDCTL_MIDI_INFO(r1, 0xc074510c, &(0x7f00000000c0)={"5a226750b757340d77ae30d68c17278b307d5816eac202cc7dc50ce0ca82", 0x40, 0x38000, 0x0, [0x4, 0xfffffffe, 0x9, 0x3, 0x7fffffff, 0x40, 0xff, 0xee14, 0x0, 0x7, 0x8, 0x10000, 0x40, 0xfffffffc, 0x401, 0x7fff, 0x10000, 0x9]}) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r5, 0x800442d4, &(0x7f0000000000)=0x9) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) [ 475.642373][ T8710] usb 2-1: config 0 descriptor?? 07:29:53 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff6377cdb5b524347c47478bdfdb968f3b27e59aa146175dd106736d173f0fc7cd6e26710000000049d2e181baf9459c5c953148c6801d2c0945a08ba8c552fc99a742000080812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026bd7360627ec60cb274e00da970000e096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000000000000000000000000f390d71cc6092c0100b049f3fc65d61c2b3c65f2f80a61ea6e457ebc93981b20e03b86d4e999bba83a7b0ee0ce7f000600cff8ca2996e518e3f4175311d24317f9ebfeb82ee2469fb21be3d037359f71819709c81886a0ecfea4342b11a5dbb27622cd9f9d843a8d25f196ab6f2dc045421b725eafe10f9cb42a5094d878d0d9c2a5c74633a687a135308e49ce118c81517ac7bb2994ccc7e054d3f18cb770e4908dd3deaafaab51144c1e1b86b6291f5e73ff040000005f01eb88910285f6dd69048821b68b5f2e9cecb34ad400003100007a6e3cdf09bc1a8e99592b3c4fbdc777d8532e0d70be3e431198daca0f4be445cfdfcf0d12a01a9221c844e28a6c53a26058375113fdd3bb6e53262f83e7c80ba677320b12c843464f2d96463acc1f4ebcf33068b222499f8b119e2072d4efea53dc01cf640840ab9a9dd6b9c80f3c7f5b67bd20d5c0349548c64db5dddbffafe7da8b4f277dbf9d80e6e596575e6b44c483adc4b5fdeaaa47149da1a68ed2b54ba936757ed7e97544517f32a976ef3c66e033da46bfa31468eba625d264673301883128266b6201eacdfe51736c31f7feb6f6030a10e69c903927a5c11effd62911abc770261c2eeb0a7c7f08bb280c4fc342717c43d8e2192f121cedce1b0440d42644ff87aec60a58a490e012785e2d04eba58a52cc9f15d9e9bcec24a3230a7bff038000000000003a3964045af092de789b7ef8ce392c4704d324b954be4d817cc3a5d5096e15b1aceeaf5631a8e510ad0c0467e033ce6c4e989c2e0f8b947ad687df3f5a18a26163815865e05ca718ece427f792ce459abdaf4f37ba61dc88567451000000000000000000da5fad4927bcc92b26fc45d76e64a428397381d2e46d6adc68cf5da791865bb3a834ecb6ed99147efcc54bcb21c16ccc8e65a5fc0b336a01c1fb7ea7632e9eef404b16867bec7ab5ed9604a5f0496f5b974848e02e7c1f1e8963cb608adb66979a5d28771337190d87bc6a41e0071e429c40518009e449006457bc3b9e34a98472682fd9758c963c7b89f4f6e5"], 0x14f) socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$system_posix_acl(0x0, &(0x7f0000000100)='system.posix_acl_default\x00', 0x0, 0x5c, 0x2) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') mkdirat(r1, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f0000000180)='./file0\x00', r1, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) dup(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305839, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x7fffffd}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x3, 0x5844, 0x1, 0x21, 0xffffffffffffffff, 0x3}, 0x40) [ 475.713667][ T8710] usb 2-1: can't set config #0, error -71 [ 475.752768][ T8710] usb 2-1: USB disconnect, device number 16 [ 475.753752][ T12] usb 1-1: Using ep0 maxpacket: 8 [ 475.884018][ T12] usb 1-1: config 239 has an invalid interface number: 86 but max is 0 [ 475.892554][ T12] usb 1-1: config 239 has an invalid descriptor of length 0, skipping remainder of the config [ 475.903140][ T12] usb 1-1: config 239 has no interface number 0 [ 475.909564][ T12] usb 1-1: too many endpoints for config 239 interface 86 altsetting 68: 53, using maximum allowed: 30 [ 475.920900][ T12] usb 1-1: config 239 interface 86 altsetting 68 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 475.954345][ T12] usb 1-1: config 239 interface 86 has no altsetting 0 [ 475.972382][ C1] sd 0:0:1:0: [sg0] tag#838 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 475.982953][ C1] sd 0:0:1:0: [sg0] tag#838 CDB: Test Unit Ready [ 475.989504][ C1] sd 0:0:1:0: [sg0] tag#838 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 475.999321][ C1] sd 0:0:1:0: [sg0] tag#838 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.009149][ C1] sd 0:0:1:0: [sg0] tag#838 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.018998][ C1] sd 0:0:1:0: [sg0] tag#838 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.028821][ C1] sd 0:0:1:0: [sg0] tag#838 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.038646][ C1] sd 0:0:1:0: [sg0] tag#838 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.048557][ C1] sd 0:0:1:0: [sg0] tag#838 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.058360][ C1] sd 0:0:1:0: [sg0] tag#838 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.068151][ C1] sd 0:0:1:0: [sg0] tag#838 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.077934][ C1] sd 0:0:1:0: [sg0] tag#838 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.087674][ C1] sd 0:0:1:0: [sg0] tag#838 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.097434][ C1] sd 0:0:1:0: [sg0] tag#838 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.101536][T10181] IPVS: ftp: loaded support on port[0] = 21 [ 476.107151][ C1] sd 0:0:1:0: [sg0] tag#838 CDB[c0]: 00 00 00 00 00 00 00 00 [ 476.342787][ T12] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=cf.33 [ 476.352230][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 476.360391][ T12] usb 1-1: SerialNumber: syz 07:29:54 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x14f) socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$system_posix_acl(0x0, &(0x7f0000000100)='system.posix_acl_default\x00', 0x0, 0x5c, 0x2) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') mkdirat(r1, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f0000000180)='./file0\x00', r1, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) dup(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305839, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x7fffffd}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x3, 0x5844, 0x1, 0x21, 0xffffffffffffffff, 0x3}, 0x40) [ 476.537776][ T12] usbtest 1-1:239.86: couldn't get endpoints, -22 [ 476.544774][ T12] usbtest: probe of 1-1:239.86 failed with error -22 [ 476.697540][ C1] sd 0:0:1:0: [sg0] tag#839 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 476.708291][ C1] sd 0:0:1:0: [sg0] tag#839 CDB: Test Unit Ready [ 476.715073][ C1] sd 0:0:1:0: [sg0] tag#839 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.724835][ C1] sd 0:0:1:0: [sg0] tag#839 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.734587][ C1] sd 0:0:1:0: [sg0] tag#839 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.744331][ C1] sd 0:0:1:0: [sg0] tag#839 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.745940][ T8711] usb 1-1: USB disconnect, device number 25 [ 476.754080][ C1] sd 0:0:1:0: [sg0] tag#839 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.754195][ C1] sd 0:0:1:0: [sg0] tag#839 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.779597][ C1] sd 0:0:1:0: [sg0] tag#839 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.789356][ C1] sd 0:0:1:0: [sg0] tag#839 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.799122][ C1] sd 0:0:1:0: [sg0] tag#839 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.808875][ C1] sd 0:0:1:0: [sg0] tag#839 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.818648][ C1] sd 0:0:1:0: [sg0] tag#839 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.828399][ C1] sd 0:0:1:0: [sg0] tag#839 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.838141][ C1] sd 0:0:1:0: [sg0] tag#839 CDB[c0]: 00 00 00 00 00 00 00 00 07:29:55 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x14f) socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$system_posix_acl(0x0, &(0x7f0000000100)='system.posix_acl_default\x00', 0x0, 0x5c, 0x2) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') mkdirat(r1, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f0000000180)='./file0\x00', r1, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) dup(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305839, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x7fffffd}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x3, 0x5844, 0x1, 0x21, 0xffffffffffffffff, 0x3}, 0x40) [ 477.078266][ C1] sd 0:0:1:0: [sg0] tag#840 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 477.088879][ C1] sd 0:0:1:0: [sg0] tag#840 CDB: Test Unit Ready [ 477.095555][ C1] sd 0:0:1:0: [sg0] tag#840 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.105316][ C1] sd 0:0:1:0: [sg0] tag#840 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.115074][ C1] sd 0:0:1:0: [sg0] tag#840 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.124871][ C1] sd 0:0:1:0: [sg0] tag#840 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.134749][ C1] sd 0:0:1:0: [sg0] tag#840 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.144499][ C1] sd 0:0:1:0: [sg0] tag#840 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.154244][ C1] sd 0:0:1:0: [sg0] tag#840 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.163981][ C1] sd 0:0:1:0: [sg0] tag#840 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.173735][ C1] sd 0:0:1:0: [sg0] tag#840 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.183491][ C1] sd 0:0:1:0: [sg0] tag#840 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.193234][ C1] sd 0:0:1:0: [sg0] tag#840 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.202990][ C1] sd 0:0:1:0: [sg0] tag#840 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.212732][ C1] sd 0:0:1:0: [sg0] tag#840 CDB[c0]: 00 00 00 00 00 00 00 00 07:29:55 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x14f) socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$system_posix_acl(0x0, &(0x7f0000000100)='system.posix_acl_default\x00', 0x0, 0x5c, 0x2) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') mkdirat(r1, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f0000000180)='./file0\x00', r1, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) dup(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305839, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x7fffffd}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x3, 0x5844, 0x1, 0x21, 0xffffffffffffffff, 0x3}, 0x40) 07:29:55 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000357373082505a0a433cf0000100109021b0001ef0000000904564435d0000f"], 0x0) [ 477.666589][ C1] sd 0:0:1:0: [sg0] tag#841 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 477.677168][ C1] sd 0:0:1:0: [sg0] tag#841 CDB: Test Unit Ready [ 477.683840][ C1] sd 0:0:1:0: [sg0] tag#841 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.693598][ C1] sd 0:0:1:0: [sg0] tag#841 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.703358][ C1] sd 0:0:1:0: [sg0] tag#841 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.713158][ C1] sd 0:0:1:0: [sg0] tag#841 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.722907][ C1] sd 0:0:1:0: [sg0] tag#841 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.732669][ C1] sd 0:0:1:0: [sg0] tag#841 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.742404][ C1] sd 0:0:1:0: [sg0] tag#841 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.752145][ C1] sd 0:0:1:0: [sg0] tag#841 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.761897][ C1] sd 0:0:1:0: [sg0] tag#841 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.771599][ C1] sd 0:0:1:0: [sg0] tag#841 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.781358][ C1] sd 0:0:1:0: [sg0] tag#841 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.791095][ C1] sd 0:0:1:0: [sg0] tag#841 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.800844][ C1] sd 0:0:1:0: [sg0] tag#841 CDB[c0]: 00 00 00 00 00 00 00 00 07:29:56 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff6377cdb5b524347c47478bdfdb968f3b27e59aa146175dd106736d173f0fc7cd6e26710000000049d2e181baf9459c5c953148c6801d2c0945a08ba8c552fc99a742000080812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026bd7360627ec60cb274e00da970000e096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000000000000000000000000f390d71cc6092c0100b049f3fc65d61c2b3c65f2f80a61ea6e457ebc93981b20e03b86d4e999bba83a7b0ee0ce7f000600cff8ca2996e518e3f4175311d24317f9ebfeb82ee2469fb21be3d037359f71819709c81886a0ecfea4342b11a5dbb27622cd9f9d843a8d25f196ab6f2dc045421b725eafe10f9cb42a5094d878d0d9c2a5c74633a687a135308e49ce118c81517ac7bb2994ccc7e054d3f18cb770e4908dd3deaafaab51144c1e1b86b6291f5e73ff040000005f01eb88910285f6dd69048821b68b5f2e9cecb34ad400003100007a6e3cdf09bc1a8e99592b3c4fbdc777d8532e0d70be3e431198daca0f4be445cfdfcf0d12a01a9221c844e28a6c53a26058375113fdd3bb6e53262f83e7c80ba677320b12c843464f2d96463acc1f4ebcf33068b222499f8b119e2072d4efea53dc01cf640840ab9a9dd6b9c80f3c7f5b67bd20d5c0349548c64db5dddbffafe7da8b4f277dbf9d80e6e596575e6b44c483adc4b5fdeaaa47149da1a68ed2b54ba936757ed7e97544517f32a976ef3c66e033da46bfa31468eba625d264673301883128266b6201eacdfe51736c31f7feb6f6030a10e69c903927a5c11effd62911abc770261c2eeb0a7c7f08bb280c4fc342717c43d8e2192f121cedce1b0440d42644ff87aec60a58a490e012785e2d04eba58a52cc9f15d9e9bcec24a3230a7bff038000000000003a3964045af092de789b7ef8ce392c4704d324b954be4d817cc3a5d5096e15b1aceeaf5631a8e510ad0c0467e033ce6c4e989c2e0f8b947ad687df3f5a18a26163815865e05ca718ece427f792ce459abdaf4f37ba61dc88567451000000000000000000da5fad4927bcc92b26fc45d76e64a428397381d2e46d6adc68cf5da791865bb3a834ecb6ed99147efcc54bcb21c16ccc8e65a5fc0b336a01c1fb7ea7632e9eef404b16867bec7ab5ed9604a5f0496f5b974848e02e7c1f1e8963cb608adb66979a5d28771337190d87bc6a41e0071e429c40518009e449006457bc3b9e34a98472682fd9758c963c7b89f4f6e5"], 0x14f) socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$system_posix_acl(0x0, &(0x7f0000000100)='system.posix_acl_default\x00', 0x0, 0x5c, 0x2) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') mkdirat(r1, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f0000000180)='./file0\x00', r1, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) dup(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305839, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x7fffffd}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x3, 0x5844, 0x1, 0x21, 0xffffffffffffffff, 0x3}, 0x40) [ 478.022921][ T8711] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 478.262372][ T8711] usb 1-1: Using ep0 maxpacket: 8 [ 478.317242][ C1] sd 0:0:1:0: [sg0] tag#842 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 478.327810][ C1] sd 0:0:1:0: [sg0] tag#842 CDB: Test Unit Ready [ 478.334498][ C1] sd 0:0:1:0: [sg0] tag#842 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 478.344254][ C1] sd 0:0:1:0: [sg0] tag#842 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 478.354011][ C1] sd 0:0:1:0: [sg0] tag#842 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 478.363770][ C1] sd 0:0:1:0: [sg0] tag#842 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 478.373526][ C1] sd 0:0:1:0: [sg0] tag#842 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 478.382379][ T8711] usb 1-1: config 239 has an invalid interface number: 86 but max is 0 [ 478.383258][ C1] sd 0:0:1:0: [sg0] tag#842 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 478.391640][ T8711] usb 1-1: config 239 has an invalid descriptor of length 0, skipping remainder of the config [ 478.401152][ C1] sd 0:0:1:0: [sg0] tag#842 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 478.411482][ T8711] usb 1-1: config 239 has no interface number 0 [ 478.421012][ C1] sd 0:0:1:0: [sg0] tag#842 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 478.427478][ T8711] usb 1-1: too many endpoints for config 239 interface 86 altsetting 68: 53, using maximum allowed: 30 [ 478.436967][ C1] sd 0:0:1:0: [sg0] tag#842 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 478.448201][ T8711] usb 1-1: config 239 interface 86 altsetting 68 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 478.457724][ C1] sd 0:0:1:0: [sg0] tag#842 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 478.471202][ T8711] usb 1-1: config 239 interface 86 has no altsetting 0 [ 478.480717][ C1] sd 0:0:1:0: [sg0] tag#842 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 478.497297][ C1] sd 0:0:1:0: [sg0] tag#842 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 478.507131][ C1] sd 0:0:1:0: [sg0] tag#842 CDB[c0]: 00 00 00 00 00 00 00 00 07:29:56 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/224}) write$binfmt_script(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="2321202e2f66696c65300ad29a2b50126169c922442a84a4ef4f270b9992dba21d22eae2b1806f2684672451180649d7a3df06b493e8bacb27e65664cff52f99c549b3548a5a8f0a64fa46edcf303abac0adffaaaee8fdc3c1e7b4605c7cc129266d9f9c8dc902fbf0f5db07d2e00c0834d712853eb72ddf9fdb68c3717f4b390540b070c62035a8a5061cad2e1ad6dffa9bf8f806e7de5b61c11f5e548cd1ead4aeebad4dfbbdc1850af40d3d1192bf488265e718de1d6e9d52fdf8d557015dc48fa69c5926dfd6f1d2f49ffba012c08c01a19f22d23cbb95f7bbf3c4392b198c6a7a79253da7f5822c135256ea95c9b0f3190eddf2e9c4f9eb5157b7a62c03e325b7e61ac56cce466db83241dbea74844533d0e56d726c567964c9e300dcf321fa5f2cee553365145a0336a8dab9d7ef645311e5d26337f14c40e102ae03bf519c0403ea5b1c74e6320d2426592fc66356a6cc9f874fcd56deb9d502f8e07a947adeeabe20b639164e8eca05e159122a27154688d2f71eafa14c5670082a845b3aadd98446701958ac60df6861dac0075fb6e5ec96fd9b4c03e5e57ebfc76d88b42771f41e8a5d3560bcf081fffb31cf732e132adc0152ffd7e3e2df1d4c5c3e17fa0faa60c5619b8a2d9c3404f58a36f4b7f394258e732782a463e22606d03aebb64e53408394e18e1efc12b753c1bb5f52a69ba30d60170659801d30a68a9cc7a9abae418ae6b1fc"], 0x206) [ 478.851333][ T8554] tipc: TX() has been purged, node left! 07:29:57 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122dc0109058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = creat(0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="e30fb803"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x20100, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001214020029bd7000ffdbdf2508001500070000800800150100000000080001000200000008000100020000104be8ba2e76f5690600b09a36464c32d49337e91ed5a05bfd0e7ff7467c756a861a6a1bdfa2e391f197d0177de65952f287cffd9bab78dcb8b9af500000000100"/121], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x5e, 0x0) flock(r1, 0x8) ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f0000000040)={0x1, 0x0, 0x7, 0x0, "f617d2b28930879d1a03acd47314e39745192ee5635b5fc7a4e7f239da61a65d"}) [ 479.136822][ T8711] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=cf.33 [ 479.146219][ T8711] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 479.154602][ T8711] usb 1-1: SerialNumber: syz [ 479.207853][ T8711] usbtest 1-1:239.86: couldn't get endpoints, -22 [ 479.214662][ T8711] usbtest: probe of 1-1:239.86 failed with error -22 07:29:57 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x9, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r3, 0x4) close(r2) socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004800070fab092500090007000a060000000000000001369321000100ff0100000005d00000000000000398996c92773411419da79bb94b46fe000000bc0002", 0x43) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/zoneinfo\x00', 0x0, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000001c0)={0x5, 0x0, [{0x408, 0x0, 0xffffffff90755acc}, {0xb16, 0x0, 0xe0}, {0x96b, 0x0, 0x3}, {0x25a, 0x0, 0x800}, {0x28d, 0x0, 0x10001}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) dup(r5) socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x6) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) [ 479.272338][ T9014] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 479.412406][ T8711] usb 1-1: USB disconnect, device number 26 [ 479.512657][ T9014] usb 4-1: Using ep0 maxpacket: 16 [ 479.664278][ T9014] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 479.675272][ T9014] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 479.686458][ T9014] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 479.697173][ T9014] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 479.710276][ T9014] usb 4-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 479.719532][ T9014] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.886295][ T9014] usb 4-1: config 0 descriptor?? 07:29:58 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000357373082505a0a433cf0000100109021b0001ef0000000904564435d0000f"], 0x0) 07:29:58 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001740)=ANY=[@ANYBLOB="12010000fbb930102404009d490b000000010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000140)={0x40, 0x3, 0xae, "f37ea40582b81c60c02d4ef8af05881a10088ad2d25a0e3dd685a918158fc5038cbb3b2b06349a3572373b59af58dc9bd9b4f35e35145126d9822629843d778689d6da242a30201d4b1c0dc0f4b4ccd860681e127791a78cd4f25f4a68d3bbc34dbe4380be4231c01b7d1e06def0573ce88d9eadf92acbed56f4ad390fa1ec2057e47a38ca51abbba9bd2f21b5010bebaf7b77a3021cba77976df226d2432bc7148eabd48affb9fc4954c86cd9cd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x0, 0x714, &(0x7f0000000880)={{0x12, 0x1, 0x200, 0xaf, 0x34, 0x0, 0x40, 0x50d, 0x4, 0xa589, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x702, 0x4, 0x3f, 0x7, 0x40, 0x79, [{{0x9, 0x4, 0xeb, 0x73, 0x1, 0x95, 0x70, 0xd3, 0x3, [], [{{0x9, 0x5, 0xe, 0x2, 0x40, 0x1, 0x1, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x20, 0x2000}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x9}]}}]}}, {{0x9, 0x4, 0x90, 0x8, 0xf, 0xff, 0xff, 0xff, 0xa0, [@uac_control={{0xa, 0x24, 0x1, 0x1}, [@input_terminal={0xc, 0x24, 0x2, 0x4, 0x200, 0x2, 0x8, 0x1000, 0x3, 0x8f}]}, @cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "5085a6"}, {0x5, 0x24, 0x0, 0x38c2}, {0xd, 0x24, 0xf, 0x1, 0xec0f, 0x6096, 0x7ff, 0x7}, {0x6, 0x24, 0x1a, 0x9, 0x4}, [@network_terminal={0x7, 0x24, 0xa, 0x75, 0x5, 0x3b, 0xf6}, @mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x3, 0x2}, @obex={0x5, 0x24, 0x15, 0x101}, @mbim_extended={0x8, 0x24, 0x1c, 0xfffe, 0x4, 0xfff}]}], [{{0x9, 0x5, 0x4, 0x8, 0x20, 0x81, 0x80, 0x88, [@uac_iso={0x7, 0x25, 0x1, 0x41, 0xa9, 0x3}, @generic={0xf3, 0x8, "22d1d6df196ce408cd04d4015cef97d18b7f09628c6f8016bd8de6c9cab8186ec196aee554782b1983d5e47cd6daca0da8c55edcada56826f42c55a354c2c705ba4647dad250d24f3a82d4668e31fb562c9230b5e8920976efec6d6c88cf1e83a3ebb26607bb42034f3328b405ba7792743ff0c43fefc23c29809e47058487fd6501f52a3c3dc35ac297f42fa7f051666fddba34aee9dd63b09b79dd4918696f715ce22600b31f240f0b757017f30af0d57fb63199131f8fd0a74b021b1a4bca82db80824159bb6b216edc00d497bab226e2d4aaee862cd5c363ad1dae1ee9e51811d6746d5ea47422da0f046bc03bce04"}]}}, {{0x9, 0x5, 0x1, 0x3, 0x40, 0x6, 0x3f}}, {{0x9, 0x5, 0xe, 0x3, 0x3ff, 0x3f, 0xab, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2f, 0x8d50}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x7f, 0x1}]}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0xc0, 0x1, 0xb8}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0x7f, 0x1f, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0xc60a}, @generic={0x23, 0x30, "6109e4218dbc41744ed4d08dfd76639e34b307b29f48c977ab7619e1862a594c8e"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x6b, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x5}, @generic={0x75, 0x7, "ab5c1491fed93114ae7a321de8f91458cb76e9fc478492d9821aa31a116b8ba0e8f78c492b3ba5268c972d3d3e8eab8276dcafc7384e3378ee7e429eb331a57728908529eb0d91229bfe91a0ee80f45acc1b15a12f3c1c8513920eac07cf9f49498b19eb190142e4a1fbb1207e2c70bca2332a"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0x9, 0x81, 0x75, [@generic={0x5e, 0x22, "e621530e390ebeddd5723ef8fee148a9b470b97c998272b7cd1d811b9f86200080b7d966c35cb401fc32398ec392ca26f701e63a388eb00449bfa2e8b3dd3c48c14d7c36e03bc6511c642a4d3554a9a0b9c7d673a7b83f349d27356e"}]}}, {{0x9, 0x5, 0xf, 0x1, 0x3ff, 0x5, 0x20, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x3f}]}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0xf7, 0xb5, 0x50}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0x80, 0x7f, 0x97, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x7}]}}, {{0x9, 0x5, 0xc, 0x1c, 0x10, 0x1, 0x0, 0x1, [@generic={0x4f, 0xb, "10ca7a1feeb03a8483cd136042ff232e2863ea0aaa66a123dd909a8eddda0714236e204901ffd1107d341d4189354156909e927e08da2dcf011fef1dacedad913963bb9aa94fb20a7a8c178a5b"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x20, 0xfffc}]}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0x1, 0x5c, 0x6f, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xcd, 0x100}]}}, {{0x9, 0x5, 0x1, 0x10, 0x20, 0x2, 0x5b, 0x7f}}, {{0x9, 0x5, 0x2, 0x1, 0x20, 0x1, 0x80, 0x16, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x2, 0x1000}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x3}]}}, {{0x9, 0x5, 0x6, 0x2, 0x3ff, 0x81, 0x5, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x8, 0x1}]}}]}}, {{0x9, 0x4, 0xc5, 0x81, 0xb, 0x38, 0x8d, 0x31, 0x5, [@uac_control={{0xa, 0x24, 0x1, 0xfff, 0xcb}, [@processing_unit={0xa, 0x24, 0x7, 0x5, 0x2, 0x0, "02888c"}, @feature_unit={0xf, 0x24, 0x6, 0x6, 0x2, 0x4, [0x7, 0x1, 0x6, 0xa], 0x3}, @extension_unit={0xd, 0x24, 0x8, 0x1, 0x81, 0x8, "8949f29e90f2"}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x205, 0x1, 0x3, 0x2, 0x1, 0x40}, @extension_unit={0x7, 0x24, 0x8, 0x6, 0x7, 0xff}]}], [{{0x9, 0x5, 0x8, 0x1, 0x200, 0xff, 0x7, 0x0, [@generic={0x84, 0x4, "665cc3421560363560839ec941be493fee05ccee06e5112ed332b045812116a70cca659e309b3d1caedb246709d12c5f8389fc0181f3ef6a7621276002e2059965a411b8ade3d687ba2cd7b77f1aecaf337c993b01b7f4a6dbc323a24b549bbd61ef172e417050c0595cedfd0237c7fb0cdf63934cd762df0cf84a22ea735023cf7a"}]}}, {{0x9, 0x5, 0x9, 0x2, 0x3ff, 0x7, 0x7, 0x7f, [@generic={0x4d, 0x22, "3ea1a7f375df091f7fbf571627a8f40ac880136a27d76e30a533a3533cb24864a58b116c408eacd8de5773757243a88916c0afad60bd9b6bd62259938553b53b77a27b643104540abbf44f"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x40, 0x1}]}}, {{0x9, 0x5, 0x0, 0xd, 0x20, 0x2, 0x8, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xf8}]}}, {{0x9, 0x5, 0xf, 0x7, 0x20, 0x40, 0x81, 0x7f}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x81, 0xf1, 0x6}}, {{0x9, 0x5, 0x8, 0x10, 0x20, 0xff, 0x0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0x4080}]}}, {{0x9, 0x5, 0x2, 0x10, 0x10, 0x3, 0x0, 0x0, [@generic={0xd8, 0x21, "eaa8878c176136f4e43639cd2c220cbb4d46a84ce7b00991d3b600f538f2fe40376615bb1f5e6354302be52a68934bc6187c7fdb60527ea5b26ccae803a4ef49f87835194781af6b40f043255498012ce3d95c398729170f043763dec32c7666849b313112c2b7457363781f13603a4573c058759d6d86b33e29662a57e87fc44b9cff6c499f34410cad74745ed4b45813fe2e10692f07dd61999f3f63661c1ba30a5fc4a788eea1752bcab69501553502c4f7afd3c7eab1e80c02e31bc14e22b69fee8da4ac54e13c814f6d939b4e4fda002e21dc31"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x4}]}}, {{0x9, 0x5, 0x8, 0x10, 0x40, 0x8, 0x82, 0x8}}, {{0x9, 0x5, 0x6, 0x3, 0x8, 0x6, 0x4, 0x8}}, {{0x9, 0x5, 0x6, 0x1, 0x200, 0x7f, 0x1, 0x40, [@generic={0xe7, 0x7, "94144fa02fe2f9344c93b42c84329c2fadf6bfcb66c897ad7ed051f46130beff3e51bffb36fbecac412db7bbcb7c29513b1df5f1050f3b80e598ba5f31f83d8cefb2905cbe0a68567a85f3a3bbbff69200e432bd5755dbf85d3b0eb9ca354c05ff51a690784a222c18a01fe65535e2a8b0b6e4cfa56b5d010b43a282184c39c1ec9de49bda696e3019dc5327b2c2e88b3e3b4ab8574c2ca9cd2a879e7a7d69d58badf1e85f96883014914d884971904ff4a8c99d5969e38b556bb0fbad990ee3b6f3371f0cef40d2be1595e5a78685794c38f8f93df740ae43cf15920224c7cc3f89f0dca5"}]}}, {{0x9, 0x5, 0xd, 0x3, 0x8, 0x2, 0x1, 0x5}}]}}, {{0x9, 0x4, 0x2, 0x80, 0x1, 0x94, 0x22, 0xe9, 0x1f, [], [{{0x9, 0x5, 0xe, 0x0, 0x440, 0x0, 0x20, 0x3e}}]}}]}}]}}, &(0x7f00000003c0)={0x8, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x0, 0x7, 0x7, 0x40, 0x1f}, 0xbb, &(0x7f0000000080)={0x5, 0xf, 0xbb, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x28, 0x7, 0x8, 0x8}, @generic={0x91, 0x10, 0x1, "8f142ddcc0e32102c1ab22608a62722c3c9d765fdaf46179a3f163b3032737fe34fb498a051ea8d77627a4ba8afcdcbbeb159453c833a7186105656595a89cc589c4faecef93c775ce99c2639bd5f39a4a8e47be5bc82edf70aa09c469765d95c1ffcaf2ad4b3a8d9623ecc0c7bf5564b0b2574185dc72c04562e4ab1bb8a2e04fc3b49c42c08f433791f0b744ca"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x38, 0xe0, 0x100}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "08be16b63cfb3e0638c5d904a7f1778e"}]}, 0x4}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000040)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getpid() r3 = getpid() rt_tgsigqueueinfo(r3, r2, 0x16, &(0x7f0000000000)) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x38, 0x3e9, 0x20, 0x70bd2d, 0x25dfdbfc, {0x1, 0x1, 0x0, r3, 0x101, 0x9, 0xdd9, 0x8001, 0x0, 0x5a6}, ["", "", "", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x404}, 0x4000000) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 480.450233][ T9014] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5013.0003/input/input8 [ 480.478416][ T9014] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5013.0003/input/input9 [ 480.563278][ T9014] kye 0003:0458:5013.0003: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.3-1/input0 [ 480.592188][ T8711] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 480.657345][ T9014] usb 4-1: USB disconnect, device number 2 [ 480.831737][ T8711] usb 1-1: Using ep0 maxpacket: 8 07:29:59 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdirat(r1, &(0x7f0000000080)='./file0\x00', 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000380)={0x0, 0x9, 0x1, [0x0, 0x80000001, 0x1, 0x0, 0x2], [0x4, 0x1, 0xff, 0x8, 0x0, 0x5, 0x1f, 0x9, 0x182, 0xec9, 0x4, 0x4, 0x9, 0x4, 0x0, 0x39e6, 0x4, 0x4, 0x0, 0x7, 0xffffffff, 0x0, 0xb8f, 0x6, 0xc4, 0x5, 0x3, 0x101, 0x4, 0xffff, 0x6, 0x7, 0x7d, 0x6a, 0x9, 0x10000, 0xd2e, 0x5, 0x800, 0x400, 0x0, 0x8000, 0x3, 0x6, 0x101, 0x8, 0x1ff, 0x1f, 0x0, 0x6d5fa80, 0x6, 0x8, 0x6, 0xfdd, 0x3, 0x1e, 0x20, 0x58, 0x80000000, 0x1ff, 0x800, 0x0, 0x7, 0x55a, 0x8001, 0xffff, 0x400, 0x6, 0x6, 0x8, 0x1f, 0x80, 0x9, 0x77ab, 0x3676fb7, 0x9, 0x1, 0xffffffff, 0x7f, 0xfffffffffffff801, 0x100000000, 0xa2b, 0x5, 0x100000001, 0x6, 0x5, 0x20, 0x0, 0xfe, 0x1000, 0x1, 0x8, 0x1000, 0x1, 0x1, 0x9b, 0x2, 0x6d, 0x0, 0x6f6, 0x2, 0x20, 0x4, 0x800, 0x2, 0x1, 0x9, 0x3, 0xfffffffffffffe01, 0xff, 0x401, 0x800, 0x1, 0x3ff, 0xffff, 0xfffffffffffffff8, 0xc49, 0x4, 0x6, 0xff, 0xfb]}) ioctl$NBD_SET_SIZE(r3, 0xab02, 0x7f) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000940)={{r1}, 0x0, 0x6, @inherit={0x60, &(0x7f00000000c0)={0x0, 0x3, 0x8, 0x7, {0x0, 0x0, 0x16, 0x7, 0x9}, [0x5, 0x6, 0x800]}}, @devid=r4}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="4c70dfa87036d01db69f5679bcad0e081fb2183cf98cf5bafadf9abd5937a84f8fc0d08f26c16a59c14973488f251c29bfd0ddac66c50f870803d7d43242aa09203c4e258aac406b9f348a18d6578e9ee043f8da676665b8e2fec77ce916cb3456ed540c4ae997a8de54188721132a441b07219a029b232765ad7a3b32eb3a06f875a17fc425e9b4bf3872a6d7e746b8fb29ea7db418293c1ddc9e3116d065c1cddc6c5b798b6e3a42f4fb4b04d1da1351a2", @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x1f, 0x0, 0xd6a09a}}, 0x50) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r5, &(0x7f00000042c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00(`qH\x00', 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f00000021c0)="869ca9ef212e2c8d1554c48485c766fe6e216123013788e1cd108ee8db07f41e5162c4f9e4cd1fb6d0d9d4c11bd3949d77817ba92325ec1c1ecc025cb0419210866f1970a9559a832e10890ca9ffb6adc916459de661bb4578d904c5e0af3ab91ce83bab19767bb967d9d6518cc901471fa4914333ae36e73a3bccb704e316f663df7fb82f83d4f7a62f5f089e08de8d12bd95313f6dc1d752178cc1ef6cf981abbdecab59ec424be13dec2432225363d9af9ebd8e4ea3f96b98d908302c1dd41d5d664f3bd6dc3bae7c001a37e0898ea5fed6816fdcc4ed9a3f2132fd2befaaa045a0a0e1ba75683da40a8a991a568eb3d6697b3144b0dc292b6abd219cdb8200c1946dc7c7a4b0128d6b6c1f4e9b7d4e3fc4b75682496b4cf5f3f20c4777dab419883c086ded23ff6791a2235d58ca3563ae3398b4c954a682d351ee1fcb1491cd51cd17e1b1e6732c71106045dc92241de8db523da05ebd84b29afbf17c7f1319668e1c024867253fcda48049f15b055ac95695498fd5ad4cce59ad73e6cd4ca591b6e92a94b58dbcc84720a234656aa6eb267a81e677414bee85efac8e962784d82c3d549457aede2863ab01f5df06b98ebb7e702f767b4f80e1d63da53e20769f4596021305808b708b5f7fdef8dcdbcb95060c0eac58d9a7721ccb0162cf096a9e14e523e0389151a790bf6fd37406d7d19a02ebf2a2afdb19286a669c963c9c3d7388c0470978d050bd46137d699a13e6eee480af7e64cd74b5e9a2fb2c6f420e221237c21bfadedfd9d26b377feedb8dd42ab3db3ab7071f32015961b6b81d284616d0f3b2c56bfdc8fcb9b7d464ad6c713136624c4c06bb460d79622fcd0d09097fcbb6b38208386262efeaa1753d68c6a5e41577b328a9ab746743bdc954ad24b4ff60af820ee92d42115e4ec84fb4dbd546b28190187888b3b2bbd58417947b14051488ca589885a55958ac6d22be8df89a0c30b3a30913e6bb11c74265a832fa2a965051a10daad884c4e2b1b9d2f3ccea4e414d42756e757641d85c93fa18db04b4dcb7e1457afa581420653ba90cd6bc76f7c45241148a411a9160b231bddc4dcc2f8ed30e3c7bce404c35f92a8c16822ce0e380017ddb1a31dbd0e94fbcca1f2f2b7f7e04543e7848f903f0b2eae6ffd2023d2cdb0ac97d0b7d208fbc484993f07f4441a03a898f0d3720344f6cf6f2fa1f1c828c99a37eba7969d1743315e149efb8b8250ae28ac7a1f484638b52ea17aba674147fd93ca40429b145d5b3c8e47c09564b06043f9da66bfcec62ed09a5e282d3fc08f856a22b9f9566958cbcbadff3a079be6545d6d9bd5f6ad21b73c2983b64548a02256d7113fb3fc1d660bf4cfe5724530441c06c9199faf1c1cfd8e31eab4f8190a5d06a7367a3fd8782770a09946317a3dbe0e8c3820d7cfe534500ca3dd0f208917f98f89178fea02d6b542028fe420a6948d41f1c30a1ed53c91cb06faa4be1baeeb6eb7a8f2d9f1c03b8516ee0815bd4f70ca665f05ccb777808d2f19bcf56a1475164a205970ec6376454e5bd9a799cf11255f12abf333b359f5b5e6a0ba0252649d45ea7d72d3efc73f06d40d2ad21e8558d4fbf59b3c45fadbc2d6e0fadddb737e302a675c315061289854de7eb11bc92dfb78570888f029b8428884c6066f556c494420333e1bb6b4e7f9bf8c2b02b07d90c0797ccef0806e5afe78737c775a3e6c668e99dd22645a173c7b679edc6e2ae7bc2e4a6ebd77374a80399ba47ff8ac03fbeaff1217e5af107d89192eff399b9284379443a040723811c16c95fb064ff58fd228113dc105863c3764b613eecbbb71f7198ad5e1ff8293be5fd1c318a39c84e2acb84a31bbdbe1a82cfa69ca070bd6d5c17ee5d50fac6dd55f79dac549fa17dcc60805330e9186b96286ac2ac8d0daedb5485bdfcb795fa48dc942d52c486af060d006bc472699ae6d9e1715c43feeabe59591fdff4f1ea1ceddefcb83fdc0c8a78e3f0df2cc182ad87f5d7ba2895ec8d749517433e65901764f68edc229cffcf03780f47dd246211dc6d9e158a130039f52d01d8edda193f777d2995d94d3f1c7815dfc1bf0bb9ca11ff6969284952bad3b57dccb9b6f2a0f21df1f094f45176ac8a68e1c9bfae07d958ed6b87ada1abb89604012ded10d0e8341a932e1fbecf35ff19f7a89c40825ca0386ec4692a199544ac1775adedc59cb8d251e8fa79f5d157f95d761d7d3f27be88c22334ba10faa367c2c60c3fab27a010100814bbf5df8ef866e45edd8031d8856fd6ad1e7c1fa6811e6dba0a7427a703bb3e050b4e09bfdade24b5d804b124684d6ef5279d5ad61c1c331cb47ba0c8985cd6d32c8ada5c11704ed47246f0e5eaa31d3038d801f1ebc3d0c890d84ecf473b5c2d2dfb53acf96c29fc000ab35508e3cd4c5c320a39186aa5482f033703b7727432ea2d77f2a1f1452eadc66160d3b6e599a6f3e1d8c39bee2d1a67a7c9364d6bcfbf15cfd9c70752079ddeb1aeb0d1a71a64da05af25ec09520c0e6ecfaeb1ffcab0d48d74015281c9e6d381143cf39f35b78bbe3e05ffa68f24784ad1441e342c53c8ebbb894d8a3c6367b3629b81cdaade1fe0a9cb6d057ab7378726484801e1e3ab3279fe59ca9f9ed19a1b39c9394b8d0030e3961be80175a7dfe23d84c7d3d0a090fbb7da82313056d56594be735d76a3fc67ded208609bd520e3aea215bd20f321fef2d9da4e9f83213d68091a442f437837ac0c362b2a6ae39c398a449bfc99595521d5dc3c5eb843117cd5490a09818011a9b0012344dc9ee0a8cd6a7c53693276fd8ad3402e09e5a95ffb715ef0438796d295e32f4a9aa55d181393f1231fd6d2b7f05d71daa15d7f835ee3585c33abe61d066ce31e02d4408ad36ea6e9685214f703116c64e97c0ce538c50003a6028e4cef2d9b095e51aaa91541df5230a19effc40a60593677b33b6c6887e6267d688843037ddd5585a4522f761e208baa498a942db38190907492d0f5a38d9c42377b2c46db708606b5af67e9f71ac3ff49db3eb82883d247175001eef2ec65e43c122c876ff7cc0fa8b77cb8ec5248fbf6c555f0859fc294a9a5d2d6d0ce1a9789c0b8e619f9c624324e711dd6390ed2709e906b14ac5b43680c103863181c3fda748f8fe7b1866046ccbadb545912415af0ce66d928f600072d17c29119ad404f9231a787bbced27d0536ce9de8cba09906206956763b808f013644cbca2510c29588b8ee492971a5bbdf8c1154b0dfa55247026cedd158dd24581fcad8f4a26b7e9d4b41709bed347f596aaf2d7a98a380921eda616bbe24618eaee8d23408643aeef224c701ffae01a73b279cb5004470db4aa15b8e033575fa49dbf8263bcf3694e73ac2f05f3e26919aa5771b114489fcf62daef19b42a94e9da182d901044982cedda0cda48b36852d41bad8216e899d69ead6aa2faa2a8427970c33f1c664cacfa7bd26e9dcf1a7b4ba7b019495e28b5884ea94e25dfc87bcabd669f2688c8691e0bc8b3d80edd3e30803a817f6b4f6c0c03d86ebf5043f1752f8557a1f2df82e01af48d9aea943d4e2853bab32296c80460bdd0c3b86207afde161034ca63d4c93c159d7ba1a46d24064237a319771c416a78c3aed7a04ea9592d4c28855546a47488cb200aa8ed572340b6a9ff652dd794a55444c2ff0b75bf3b5106a3863c2687507c8d738f480d208a906c054975fccc62580820de5ff985a479c1e4addbf69a430cf8e09e3a033434b3a33d347004b233efc4477ec919d4b79a95d34b697ff8bff9b4458eb2defd1237701c954e228131881dff89f0c14683840aab28d1a463f5b4f82daa0a34723b67c7b5b917e51374d9b7bace74a4156be380fc12966c80bf14a91c5e67ed76ed6b3cda745ae15b304a38e82dcc6d06ee8e42a233b66b88c4c2fa371bd2c6a9af44c3f751e7dcdc443f17f817f13a3fd1cc56ceb0f857a0d2f0f5aaca4f6b40cb3d2a1dd1152f9ef04c2e3ca53a9ea5da4fdeec12658769c07d306a8555943a7d32fb257bc2d933d4994e0176d20ef20745afdd19dd999481dd24a83fd8ea026934f178ba2ba38a4f597ca0d7cc04af7186b9b490d85a9f638ca3b6299f653493aecef654d4aad3bfd0df3e728ae7827e6b6b9d01e8971e710737c9de29bbf18e41c2af05291f96b4a24fdd306d30024d988b1efbb79aa2912c7838634c6a9ca697cb186fd2f76d44391c47c247b9c6e5e86b20f42cc4042978bc20d478cc25c6702c20cb85715b9a733f3df638701b06fdbfd4f76224fe25790da13b01e81a890576ec78c263c63bcf759279955399d8bbbb00945c53af4ad20e326353a8fa491b2a7f74394700eef8d0be1684fcd1efe1b5e276ef20e852d84b0b7ad5bac93749ab2e581e696fc88fcd846bfa7519921f35dab85bedddc17f73d23ec4fa52acba6836a51e4e4765458596afefb6f012adff555d8357b917cafb110e0bc246e714a030d0e242c35302644404c2e89280bc34243d095923aedfdb882bc9be2849285ac0bae98d3c62c5da26c543d8e75294e558eb2bb060033215cf254d9dba92a9add494f8840cfaa94d46886cd21f16687c78e4566d3a6a4d29aa81d57bfe8a89159fa108ef07f3edb02ae9fe5d83c06c53778a4b8e31555eb8bde0d5358252870a451329e35686436887920c486b9e93a09fce2d26698b23fd1f9cbe178ef1a0717418797fd879029cdca7176904ddca174d15e0ba061598053f1603fbda3d2ccc3a4d683a51229bb078c7e7eca95789fbdee4b3a73e22c2b6e95732a4246e560697b28538220ce9679bd37904dc2f0389293efcbf11486ae04fd61b20722d3cbbc07a7d1257f53607904b9cb1ac86b600c296684c0340937ce9a998fd65c58be1aff7164d2dbcece1525a2abbb57de90574ae547e1f19877e1a0fbf46421c441daf748ea5ffb97fe2fd8b29fd0f415c6e3eacff87e7899e6f66e5fda165cdd55ed14d8f3a1d0b497b9c356967fa59f62627883817501f2bb78e44a5ffebc5931b5890a9e232d3953bf92b20e7732aeda6060caddc8472fe7bdbc40c98ef0359bc1062c58a7aa2a76bcf575674fd676cd17590ec8d994135336145733d3f8509ead2c2873c547954c60b67861f02d7ecf1b39c72566fca203cfb7abff275aece7664a14889d2fd9865308ebacc7cd01956aae4163473040b1bcaef7c634de759730d52760dae1a291906c4d2ed1063e32f32bfab556520404182760665e8f631e458d10fc814931e17e8e42eb29f74fb56aa0bd4e40ead30bf2027548d686fe62faa82ec9be3649f2e2df9b6bf68e01ba96b32dc47cdbab490e0f95d60d423f18d4f10ffc2eaf9ede26429ce80322202099bea96b2d8fce6d19755e391a112b4b6d10105747a25e9428cd22d9d4270baebf6744109e574f9645136b8db7a2cc8b24afe80bad72dc034f438a61baf577fd29076c00ff4b7dc51fd94c344ff868cfc727e8fe4718701602d6f92f70dabe871751e40b881a33212b6e0ad187199e22214ed8fd8dca332a7df07b31b81095f5e3491c7b214f6faa801ee9639ce1d518d7f2453eebd8590d7c2e2588131180e9698ee1c8c23361f583f0ac0bd1a3d202d6c9afa0c87f0e0b9096a62bfbd62e210c91c883dfad75a077f1b884310f58b93192f3406f0e804dc92992c20bc6bf90f5ea7320de44e54df04392a38ec95abec13d845243d03b254ec7dbaf9f79a34b423a75cf3037e76d78c0d272445be13b200b227c47fb5ee493bc211990f9a282965258f148e019403423c287fa9968e6a60852a40c36557f6ff7b23c82cd69b076f3a767834759d271af1da0be984b651102fa0ed0b3e23689766fcbdaee5aca474ba95eff3ad3e8fb4c35f7ecc90b731022ef0739c16df3b4dd7c810335f3fe82ec2ba045bdb1f0e7beb90a22eeac56fb0fa1c3254cc62ba0f586383a12afec72e5ba1ed3fe2b8f22d362f88164b02d159101a60f577fc2acfc529c394f72ee3b9eef159d6a83dec23b95cd85e7be956b211965b3b933c8a8629d805233a4c26773f63b70b0c03dfbc0f0c7a1805eef651d4a4d0180d675ba3d7263a9cdfb4de9bcf3dba447d4534cae2d393f0297e9d95237f619621865fbbaabfc6a94114bdbdd5a62661b0750e60904f7a08e5c9c2ac51c162792d2fb1fd08eb815fc53ff99d3ccce80b880638f04cec07ec2e63da285efd616222580150e9720c2deb9e423bb6e279e9f21fcace7af89dd053ac7db58a3f1005ecffbb61d250a1ff777cbdb55338e5e8858b306206b3424d0c117ae6bf7d91321c00133712074ff99ebd55e680fa00ea211e504ec2ad630a2e177145be3023743152d661c02d2d33febc87ffa9d89c14278ab30b6cdd9b5d772943d139b7de0d09500ce3d6d4ede1bdca1de879d3ab52264b3e792c53961274c7cb4adb2e113c9bd3c6b204904d92269c77d47e50c8163755966664943067ccfd216985cbb5ab35365eaf2d928106d24a47aa1d616a48e038f57b43fdd0bc34d42dece1dc971e768d07a79cc10be601e51869ee5fb5a0cdfc23fb1731d816fba153c1d25109fbbddce2a6ab46d39220d28781755200dfe8f9e40e881dc7ca419d9f04638b523fc84b4b9ce013f837f87d11a3349ecd2199e041f79a420a388dd1ed32ef93fc5b308c7aab95cee018d81370b56d27b206cf432b05112de0c4afffdd85877e054f1d99a5b73b804c58b6d29c2bdb9e33c0a2c107a9b14ef9bdeb3fbea6f02d64b2f352d88ad38d10fa9d6f58069b4e03a91c07dbe88478f3c8a72d8b1804bc2867b4e04a96ecb004c1013be626fcb85e03f59df0fcd19ca688a4f7f597feef56401252255b8038293796a0b7005aef925de9115a17fbf5f10ce028fc594078acfd757acf1f4349110b085b5b5d4098e79312464916a416d901d4f846fd0ece77b30829a00b1141cea7dbca4d130f8ca57730f297d58a4f370d00be77baf0e6f8225638b59ebe4ec718deff4b74aa89fd12a4c6abdbdc6a2cedf1bb196374a717ea515bed4ad31ba1cf78776f1a0fc79f8451697cc797adbb0e7ca23bdfa2ce99d45ed09414872d5bdc62f22b84680158075ee86820afd95090053488166afb9410b05e22d9fa533e613aa8e511dfe605fa3e33c4df4e15ca2d0c184617742c701fb93f4efdefc47292760d041c1205965986152f0d345fba22d882819467102c9f56dbffc129fed095352cf79f709b038ddac56d82392b859060da81f0b828ec9bbdf5f530fce9e7bec70e11762cfbcad348b3e3eb72e96b85c2c3a6268b61d57376d9084da6e1a90fae4cdcc55dd6d4af18ae80149f41b99b94fd33c2deb537eabd8f91c5781b4619474868851c6b2fd85b5ba4098c8f0afbed0cdc3d5141a8739fac6e489ce8402ec31a24f7c32a57e5e68546f47cbb329d70cc49417b09c35d514410181e6b3fdbd10423b131a39e72de42df2c224ee79d69f1f69f1fca311042aa754844a801590d26d7ccb5281d3e00f245cd2bf49bcc4317ebd4a5dc314676b8df6a9e2e3e92308ccdb34f36234f52d444601bd099128243828b8a2754b3e33bcc6a9d80a8710574ae6d329ae0df506e75a10013accbd4f3d3e7bcd54e06e0a350411f4a26230fc8d11d3ebbc1f8a389de89b9e0a28edc5226162255537fb3835ac09b77aa7cc1b8faa2eed965cb0177d5d9ea5d6a4df793e4cba4b426e7013dfa104cb889404c4c0d9ea2610310fc07979dcb6918364243a1a8fdb968a5431a7af742ad9a0357486a1cd638d4bab9d8b3125f75ea15171a0723c63aed601f868058464b531e67bddf48de2080f45ff919aa574578309a58bf24a829d5f4bb93e19d7ae957c68cb56691291cdcd5e6fe8651a26195f314268a5c63dd127e99ee4d28d8cdc40433b231ebac455092bfe3707708492cbb447c6c6071d90a821ff6e8cb8d77acfc04bdd7fa8ce22eb39c4b6c7c43fe10bda59d9b1958c6bb913d834860043e84e764ba05b3ddc2df8c3ab5729e56d967223b55d05539bedb7b37f277ce4e2c83288bd07e382bc8aee994e2909f1055aa82ff435d51b31b68cca701390fd8baf2af7aff335556a831f1ac7ec0333bd258fa1ace4cb5c78f0cc106f1489477a327ef4453b9de94c88ca1693705fde0be336cd70d6ee58eabac5b93b22669f3f8758861e3df650a9ad9f60e9f9b1fa9ffd6e80bab70bdfe060b3e83f1be81b5ad6ecf88f2ddcb8fc7f221506f9d6e2c75e544d368f2c7d2c1806c7255371339e280590d392e5d76cbc2f8f3d0e2b9d41b6b44c08cf3ace56f92b1d6d00b9ed248250dcf782d9e14105be8d4ef231b0a750516fdfb4cf7b4bdf2715e1193a12445472dd47d6a40417604bc9373406464900ac7ff409ebb800f1946450a2010cc957ba7bef9091f8b6cfe3e5f7c6293aed73f157c1e6bf86f708c9225514d2e1fc8c6b007ada08feca3eac92b1ca239138576c7a34ed6f03aa4af22950cbfdf7d51f558b2fbdb7b719987b04ae57af2852a21f4416a69ec33f8483024b3f791759b2af515c1a04dcef476bdc3799c10b76e467d1c56bf84192181eb3408afe7d833401334093a232f012707362b9f89facde3a1032a9bdb84e87d454bcb66e01bb6793c8d3d85c8f0b78c4a453567869914079773146ce488642bd28f743929053729d2f2afd5c1dd6653e2aae07a62d45a78bf667e9cc5b7ea15178cb68c9e04524b81cc648c66049193e96fd4633602ba486b546ed9de2d53e49e9ad0ac293238a43e7a212c3af0e0a1c939b5713869f950c0141b698af895ef0e354837e00b4bd343d35408f8da8e2418ed81dd811c30866c4d92b70956a835185c738cb677986ceb81b902b4c31a20e9d817ab16a8e48420ae8351152a5d14bfb2c2b3c92f0852bdd4bfa295b4d2d1dd12c55317f7201e2a487323636937c11dcf0c7964cbba1dc16c5fac163c5b132e59f43bebba212d5ad170cef1b22bd23e087eb0072d12bd27f4cd0920a40189e67c51b957ae4f135039ec230464ad031ffc7b9f5b8f0eac798b4289678f625a2a722a93e328dc2f358e735dd3d7e894e7d469722000431a01a2344a1c9dba1b65771a24a903e9971efacf2c6f3794fe163e96f79d288313559482bc5099e05cd87f7d9a8034ad8d74cb6dde019a93a28899355453708f07103841a97d9b447eb3fd586342650052c13f204bcdb6dd0f822a7132f1d6636e6ae9a7e2f88f5b54d89bacd7f15672605c2c106492b3dc5075f3f82867ac249c3329a7a2dc72188b643c155652a05e2dcecc40a802063175073e6fe362e0bdd015c7f8f310074400fc2a71358cfa4271b110434fe6badb7db83b09c3b94daf79e056bcfc409b39ec1d13737135314f16fe926ea93d18ec41beaa73e32ee2d9443921ea39e1f8db6ad689988c56c9d58bc8c04ac69299014d9e3312026c1668ef534eb8a67cd50eefdb0363e36cfdf3e42d2c4e1fcf051aff5720ee0a305f8d16245c70881d26b3df434ba62d80b1202a867a017744b4b5b2dc5ca8a69fb76e707014913fab77ee864d69139828bde94e6d8ed5176157a05bfb7a89e66794a0922f25cb96505f4ac66f669da735bc2edeb2c9b376005c63f9ffb947c61a3a0ab0da8d484b657365959a3b65208260fce4b05e83329b726126b0bc640561ae73a1f112c53982903a4a62890bf10f93671a2db88f0249b84c6c5d6fb727bd25572df36a12f802f0ebc545cfd6107c9dc1d02873a7c2169daff99edfc74c904d83fcebae34f45e1ffab96473fd9bda4f00f38cac454d9329b9f929d3030d5800d796e8187c50f2fdbc3fa7826f0dcc9d43c3c0d41dba58a8a73ce849b37b007fbb1bd8ea356eb3d08f016bb8ea35a87f72dd50007f74ecca29d3dbbeeb01bc9f5d99b5d8f378f6b71ee02506e09bdf6bd6a3fef3726517840cc66ab6db33a87bd7eaf0a1c8f1b51b6315d3159f22fa413bbf8cee523acde55d5105066e2adfc8cf74634586141ff0a94c697d43c80ab7b77f7c486b59d60915ee3edf8fc8a111680d2cf20800ddeff12524191fa66a71f144d1116e92e06f9fcc74d3cc0dc772f1c203c59b7781a51d14f7fa37a88e2f85b35a13dea5bbdf5151b94df84dcca13a0509d01684443f190425b43629ecfe6b52c92c56470a9f94f1e7c467507c982f26bb859f5544e72aa6139b189ff79a8288a73b68531bde6b646aa156184b7c17342a7dd05e459294c4406bbaf8bc5f86a9be47936287a0124dabef9c191871b3bc0f3a4a617dc825006d643b31cb822b2669f0af96020804ad1347195cb2485b39e2b799ff4a1673d7d9deaa48319c5ff5173ec197f6c01aca36b12fcf827767500c0d767f5171b490acab23feec0fe355fe74bcdac8c5b385991213e38f792827941d8806c1c48f63574277b8869a5fd59bf21969687e4bfc9fadff874b1b14207aacb7cee23b260f33028af1b9f641b49bc74babc3f59f0cde3fc041d288e06040a25f44291174fb8d2e7e7aaec995ea639d02a1f6a565d9c099b9a7c860906c659e65d8d734d9f78af3c566f3e3b24cdf4a87e91d81537805dab2c5b55ec875f2ca237b5407a3b13440c1d2b61d5c3fa7c24fe6ebf59c33a417a85b36405c7247f33bf172825976b1a97b7668197540584477ed8b27c14ed3607183429319033ed651a283ce37ac2f8254d5f9f61c2c1df071f297f1435c219d49bab7ecb838ef4cad856885c1867310f6d83f0554b7608b7263398b55805f87ace09e4999993ef1edb381d7b5d88c89adf35f661d272b16729f9ade9aea2a328620245e75407764f3ce84cb841f022ed0e9d886daa11eccd775b43f8c2b05913d6aba897ab4fa21db6b9c7d31f87a2207daf989f85cb8abfc354d3f0fb3cb0ce71f8c16c6b2ec6b9dd091e7ca99e2e0402419c9a5617dd421464877015edb46f18cd9f5b5b6127ab2198e2aa65b724d7340f54b021299d16fdf4ab5595d0f3c8e8e73e012561fbe568425f509b1e7ea418549919315aeae3a46810784414b1909f80e873030d5f7a9ccd4a5dde4e9fbf0792dc52bc03ea7396d80ff32a24d859a9052012a36a9ee5ec7952cc593c7ec86060a4e96667082bf25257ac37d661f2a0f59f2b153f1baece02b6e8bb2f48ac96862b9600399de87ffbb8674c92f95e6503bbaa00fdec505ccb60eb674b8c47ac7bc74439c8f48fcea8eaf95cad031ee53613fe6e6ae853c28f778d028d63980296aadef6929b6fc94314ff2db0a9e05874421b19c7a30b2ce09cca256f642b57da9ebfc62b4f5d4f65edde45a47e2679b3f2dfa201e25a303816e7634616648bb832baa517d6e16860f2d27848b429f45c9d5ab52b4e91588f0cfa0e67b7db73d4809da75e322605d299bdeca5ba18209f5da0df8a40477117b6b0f1f35008ffddbb0c41f7b6de0b75e282de3bfacc1a5c7f64b1e9a62129d6524a076e31f5850adae40d208f9d53abd215069ab6037cc4666c0ee59bc7431a78ef17526d1959228cf33099869a87817fcad6f13761e0c0b8bbcaed9eb811bbdf322a45b747bd05657e6be0050c79dcdf96ad802027f32b474ad32e92cce5560502618ebc71a2d58b", 0x2000, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="100000900000000000e3ffffff000000554dcdf255238029958de62490e757b1f1ff1b8bea2868aa01ac65ef50cb78f76f3eeec228e64e83ed7521189eda51eb8f8ec947f6ecc982762521a5ba643a7f4059413cb4119d8bde8c677c597176d645ed042b7d71c9de114f3ded6d38ecaf7a06e2bdbf87701649c4c8006e5c2e996d630c65a41b1caf9ba474b9b3b3d78c1e6829f6be9aa2b54f8a08eea80217e536f6"], 0x0, 0x0}) getdents(r6, 0x0, 0x0) [ 480.952344][ T8711] usb 1-1: config 239 has an invalid interface number: 86 but max is 0 [ 480.960894][ T8711] usb 1-1: config 239 has an invalid descriptor of length 0, skipping remainder of the config [ 480.971631][ T8711] usb 1-1: config 239 has no interface number 0 [ 480.978060][ T8711] usb 1-1: too many endpoints for config 239 interface 86 altsetting 68: 53, using maximum allowed: 30 [ 480.989456][ T8711] usb 1-1: config 239 interface 86 altsetting 68 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 481.003151][ T8711] usb 1-1: config 239 interface 86 has no altsetting 0 [ 481.016811][ T8710] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 481.272575][ T8710] usb 2-1: Using ep0 maxpacket: 16 [ 481.294414][ T8711] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=cf.33 [ 481.303717][ T8711] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 481.312030][ T8711] usb 1-1: SerialNumber: syz 07:29:59 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) recvmsg$kcm(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000000c0)=""/113, 0x71}], 0x1}, 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x880c0, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000380)={0x8, 0x0, [{0x40000000, 0x2, 0x56b7e34b6ff6977d, 0xffff8001, 0x0, 0x4, 0x8001}, {0xc0000001, 0x81, 0x5, 0x3ff, 0x1, 0x6, 0x2}, {0xc0000000, 0x1, 0x1, 0x2c, 0x20a5, 0xff, 0x7}, {0x4, 0x20, 0x3, 0x75f, 0x3, 0xfff, 0x4}, {0x40000001, 0x7ff, 0x2, 0x3f, 0x3, 0x0, 0xff}, {0x4, 0x9, 0x1, 0x2, 0x16, 0x7, 0x7}, {0x80000019, 0xebd, 0x1, 0x4, 0x7, 0xd9a, 0x5}, {0x7, 0x929e, 0x3, 0xffffffc0, 0x3f, 0x2e, 0x6}]}) close(r1) sendmsg$kcm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="b8", 0x1}], 0x1}, 0x0) [ 481.406059][ T8710] usb 2-1: New USB device found, idVendor=0424, idProduct=9d00, bcdDevice= b.49 [ 481.415350][ T8710] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.417726][ T8711] usbtest 1-1:239.86: couldn't get endpoints, -22 [ 481.430147][ T8711] usbtest: probe of 1-1:239.86 failed with error -22 [ 481.442780][ T9014] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 481.499965][ T8710] usb 2-1: config 0 descriptor?? [ 481.619576][ T8712] usb 1-1: USB disconnect, device number 27 [ 481.705859][ T9014] usb 4-1: Using ep0 maxpacket: 16 [ 481.823514][ T9014] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 481.834645][ T9014] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.845814][ T9014] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.855790][ T9014] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 07:30:00 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x10000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r4, &(0x7f0000000300)={0x3000002d}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f2, &(0x7f0000000080)='ip6tnl0\x00') ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000f40)={0x0, 0x6, 0x6, 0x1}) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000001340)={r5, 0x1, 0x4010000000, 0x1}) r6 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x3, 0xa4800) r7 = dup3(r6, r6, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@private1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@local}}, &(0x7f00000002c0)=0xe8) fsetxattr$security_capability(r6, &(0x7f0000000100)='security.capability\x00', &(0x7f0000000280)=@v3={0x3000000, [{0x21cc, 0x3}, {0xe323, 0x800}], r8}, 0x18, 0x0) [ 481.868949][ T9014] usb 4-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 481.878205][ T9014] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.009908][ T9014] usb 4-1: config 0 descriptor?? [ 482.184549][T10275] udc-core: couldn't find an available UDC or it's busy [ 482.191820][T10275] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 07:30:00 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000c72d7e200304b3f369d0010203018906000000000000000904000002bd704a0009050302000000000009050c020000000000"], 0x0) 07:30:00 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000357373082505a0a433cf0000100109021b0001ef0000000904564435d0000f200905"], 0x0) [ 482.393449][ T9014] usbhid 4-1:0.0: can't add hid device: -71 [ 482.399784][ T9014] usbhid: probe of 4-1:0.0 failed with error -71 [ 482.442600][ T9014] usb 4-1: USB disconnect, device number 3 07:30:00 executing program 2: r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x1ff}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1a000}], 0x1}, 0x0) r1 = dup(r0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0x8001}, @in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x40, @local, 0x4}, @in6={0xa, 0x4e23, 0x0, @private2, 0x96c1}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x23}}, @in={0x2, 0x4e1e, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e22, 0x2256, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, @in={0x2, 0x4e20, @remote}], 0xb0) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x303, &(0x7f0000000440)=[{&(0x7f00000015c0)=""/4096, 0xfffc}], 0x1, 0x0, 0x10}}], 0xffffff1f, 0x0, 0x0) [ 482.534121][ T8710] smscufx: Failed to read register index 0x00003008 [ 482.540875][ T8710] smscufx: ufx_lite_reset error reading 0x3008 [ 482.540900][ T8710] smscufx: error -32 resetting device [ 482.548158][ T8710] smscufx: probe of 2-1:0.0 failed with error -32 [ 482.844505][ T8712] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 483.015325][ T9014] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 483.092911][ T8712] usb 1-1: Using ep0 maxpacket: 8 [ 483.215426][ T8712] usb 1-1: config 239 has an invalid interface number: 86 but max is 0 [ 483.224073][ T8712] usb 1-1: config 239 has no interface number 0 [ 483.230487][ T8712] usb 1-1: too many endpoints for config 239 interface 86 altsetting 68: 53, using maximum allowed: 30 [ 483.241871][ T8712] usb 1-1: config 239 interface 86 altsetting 68 has an invalid endpoint with address 0x0, skipping [ 483.252910][ T8712] usb 1-1: config 239 interface 86 altsetting 68 has 1 endpoint descriptor, different from the interface descriptor's value: 53 [ 483.266383][ T8712] usb 1-1: config 239 interface 86 has no altsetting 0 [ 483.353471][ T8712] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=cf.33 [ 483.355444][ T9014] usb 4-1: Using ep0 maxpacket: 32 [ 483.362897][ T8712] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 483.376070][ T8712] usb 1-1: SerialNumber: syz [ 483.524057][ T9014] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 483.531931][ T9014] usb 4-1: can't read configurations, error -61 07:30:01 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt(r0, 0x7fffffff, 0xfffffff8, &(0x7f0000000080)="d0e0f7a586c62ebe857d9581ced93d1c9117e7b08f8e282ab60c0ae74404e3618737158407db8be73ebeb73145f651232d75a1ad0c729523992e0995c07442a9dd17fbea6432528b", 0x48) pipe(&(0x7f0000000100)) socket(0x2, 0xa, 0x0) socket$netlink(0x10, 0x3, 0x1) pipe(&(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="ffffa888000000005000128009000100766c616e000000004000028006000100000000000c0002000e0000000a000000280003800c000100d90f0000010000800c00010008000000ad0000000c00010002000000ffffffff08000500", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="0a000100aaaaaaaaaabb0000"], 0x8c}, 0x1, 0x0, 0x0, 0x4044801}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f0000000000)={@my=0x1}) [ 483.711674][ T9014] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 483.716315][ T8712] usbtest 1-1:239.86: couldn't get endpoints, -22 [ 483.726216][ T8712] usbtest: probe of 1-1:239.86 failed with error -22 07:30:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket(0x1e, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000280)={{{@in=@multicast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@local}}, &(0x7f0000000080)=0xe8) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl1\x00', r3, 0x29, 0x2, 0x6, 0x1d1f, 0x0, @empty, @private2, 0x80, 0x7800, 0x9, 0x8}}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="ff7f000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, &(0x7f0000000980)={0x1000000, 0x2118}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', r3, 0x2f, 0x1f, 0x5f, 0x1, 0x24, @remote, @ipv4={[], [], @remote}, 0x7, 0x7, 0x9, 0x28}}) ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, &(0x7f00000009c0)) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)={0x370, 0x0, 0x0, 0x70bd2b, 0x25dfdbff, {}, [{{0x8, 0x1, r4}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r3}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r3}, {0x60, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x2c, 0x4, [{0x7, 0x81, 0x3, 0xfd}, {0x100, 0x2, 0x1, 0x5}, {0x8, 0x35, 0x8}, {0x4, 0x69, 0xe1, 0x1}, {0x100, 0x5, 0x80, 0x2}]}}}]}}, {{0x8, 0x1, r3}, {0x168, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x24, 0x4, [{0xea, 0x7f, 0x84, 0x82}, {0x7fff, 0x0, 0x3, 0xfff}, {0x3, 0x86, 0x79, 0xffffff80}, {0x5, 0x3f, 0x9a, 0x3f}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x24, 0x4, [{0x4, 0x4, 0x48, 0x5}, {0x7, 0x1, 0xbd, 0x3}, {0x7, 0x3f, 0x7f, 0x3}, {0x5, 0x7, 0x1, 0x1}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0xbd}}, {0x8, 0x7, 0x2}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r3}}}]}}]}, 0x370}, 0x1, 0x0, 0x0, 0x20000000}, 0x48011) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x8, 0x1, {0x81000000}}]}]}]}]}, 0x40}}, 0x0) [ 483.809384][ T8712] usb 1-1: USB disconnect, device number 28 [ 483.816242][T10073] usb 2-1: USB disconnect, device number 17 [ 483.829576][T10350] syz-executor.2 uses obsolete (PF_INET,SOCK_PACKET) [ 483.926431][T10350] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 483.944975][T10350] device vlan2 entered promiscuous mode [ 483.978048][ T9014] usb 4-1: Using ep0 maxpacket: 32 [ 484.054321][T10366] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 484.079029][T10366] device veth3 entered promiscuous mode [ 484.115151][T10358] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 484.133692][T10358] device vlan2 entered promiscuous mode [ 484.183152][ T9014] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 484.190883][ T9014] usb 4-1: can't read configurations, error -61 [ 484.236086][ T9014] usb usb4-port1: attempt power cycle 07:30:02 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000357373082505a0a433cf0000100109021b0001ef0000000904564435d0000f200905"], 0x0) 07:30:02 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000100)=0x3, 0x2) listen(r0, 0x3f) r1 = socket$unix(0x1, 0x5, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x40000, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="dc000000000100000000000000000000db5f33e6f13acb06bb257c693a007737ccea648e725f31d14cfedc0c7fd212f03b437a781af688bbc08ec5804977dbd1c89ba602abbe9411041602be4b1d1355a8467b6e160008a289776fd42e09e2067d626bf4c4833ad8dc210aeef1b866f145b499beed68bbca5f3a73e3d51e19ee3e8c6528a96686382f7630b9cc870ec255c1f8c5db77c93eef", @ANYRES64=r0], 0x18}, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) connect(r3, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmmsg$unix(r3, &(0x7f0000000000), 0xfffffffffffffe4d, 0x0) close(r0) close(r1) getitimer(0x2, &(0x7f0000000000)) 07:30:02 executing program 1: r0 = socket$kcm(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) io_setup(0x5f, &(0x7f00000000c0)=0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0) io_submit(r2, 0x8, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r3, &(0x7f0000000040), 0x65}]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) r6 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000080)='rose0\x00', 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="130000004300817491bc655067d7aee4050c00", 0x13}], 0x1}, 0x0) 07:30:03 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x27a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') creat(&(0x7f0000000300)='./bus\x00', 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x1) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f00000000c0)=@req={0x28, &(0x7f0000000040)={'veth0\x00', @ifru_addrs=@ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3}}}) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ioctl$KVM_GET_SREGS(r1, 0x8138ae83, &(0x7f0000000100)) sendfile(r2, r3, 0x0, 0x80001d00c0d0) [ 484.817680][ T12] usb 1-1: new high-speed USB device number 29 using dummy_hcd 07:30:03 executing program 2: r0 = socket$inet(0x2, 0x200000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0, 0x47b}, &(0x7f0000000040)=0x8) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0100000019000000000000000000726f7365300000000000000000000000726f73653000000000000000000000007465616d5f736c6176655f310000000064756d6d7930000000000000000000000180c2000000000000000000ffffffffffff0000000000000000d00000000801000038010000706b74747970650000000000000000000000000000000000000000000000000008000000000000000000000000010000706b747479706500000000000000000000000000000000000000000000000000080000000000000000000000000000006d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000d30800000000000072656469726563740000000000000000000000000000000000000000000000000800000000000000feff00fc0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff01000000030000000000000080357665746831000000000000000000000074756e6c30000000000000000000000074756e6c300000000000000000000000766c616e300000000000000000000000aaaaaaaaaabb000000000000aaaaaaaaaa0000000000000000000001000000010000380100006367726f75700000000000000000e7550000000000000000000000000000000008000000000000000000000000000000617270000000000000000000000000000000000000000000000000000000000038000000001800000000000000030000456a8758000000007f0000010000000072ce35f341210040000000000000000000000000000000000000000000000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaabb0000fdffffff00000000"]}, 0x3a8) [ 484.983186][ T9014] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 485.061547][ T12] usb 1-1: Using ep0 maxpacket: 8 [ 485.073721][ T9014] usb 4-1: Using ep0 maxpacket: 32 [ 485.182409][ T12] usb 1-1: config 239 has an invalid interface number: 86 but max is 0 [ 485.190982][ T12] usb 1-1: config 239 has no interface number 0 [ 485.197757][ T12] usb 1-1: too many endpoints for config 239 interface 86 altsetting 68: 53, using maximum allowed: 30 [ 485.209099][ T12] usb 1-1: config 239 interface 86 altsetting 68 has an invalid endpoint with address 0x0, skipping [ 485.220318][ T12] usb 1-1: config 239 interface 86 altsetting 68 has 1 endpoint descriptor, different from the interface descriptor's value: 53 [ 485.233841][ T12] usb 1-1: config 239 interface 86 has no altsetting 0 [ 485.265307][ T9014] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 485.273363][ T9014] usb 4-1: can't read configurations, error -61 [ 485.451529][ T9014] usb 4-1: new high-speed USB device number 7 using dummy_hcd 07:30:03 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000000c0)={{0x1b, 0x5d, 0x32, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_DISCSIGNAL(r2, 0x8010550e, &(0x7f0000000040)={0x6, &(0x7f0000000000)="86e05a5f403e3627f3ed13433bf5c868b757a576539f4fb1cb04bd2a36877123d1203093c8e8aaf49b803f4ff2160874363dec381706b4"}) [ 485.493330][ T12] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=cf.33 [ 485.502663][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 485.510823][ T12] usb 1-1: SerialNumber: syz 07:30:03 executing program 3: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x61, 0x18, 0x2, [@struct, @enum]}}, 0x0, 0x32}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x40) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 485.811806][ T9014] usb 4-1: device descriptor read/8, error -71 [ 485.917042][ T12] usbtest 1-1:239.86: couldn't get endpoints, -22 [ 485.923887][ T12] usbtest: probe of 1-1:239.86 failed with error -22 [ 486.010329][ T12] usb 1-1: USB disconnect, device number 29 07:30:04 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0xc0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$P9_RWRITE(r5, &(0x7f0000000000)={0xb, 0x77, 0x1, 0x40}, 0xb) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) dup3(r6, r3, 0x0) 07:30:04 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ashmem\x00', 0x400100, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000000)={0x7, 0x8, 0xff, 0x6, 0x9}) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x9f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x100}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0xc0, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x611ed, 0x100}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xe8445}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e22}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x1}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x5}, @IFLA_GRE_OKEY={0x8, 0x5, 0x9c8e}, @IFLA_GRE_LOCAL={0x14, 0x6, @dev={0xfe, 0x80, [], 0x2d}}]}}}, @IFLA_MASTER={0x8}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x2}, @IFLA_MTU={0x8, 0x4, 0x5}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xeb8c}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) [ 486.051527][ T9014] usb 4-1: device descriptor read/8, error -71 [ 486.183143][ T9014] usb usb4-port1: unable to enumerate USB device 07:30:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macvlan0\x00'}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000cc0)={0x0, 0x7, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x814, 0x2, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1a, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6}]}}}]}, 0x3c}}, 0x0) ioctl$HIDIOCGFLAG(r3, 0x8004480e, &(0x7f0000000000)) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000300)={r7}, 0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000080)={r7, 0x2}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000c40)={r7, 0x1}, 0x8) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000000180)={{0x5, 0x5, 0xfffffff9, 0x6, 'syz1\x00', 0x7fff}, 0x0, [0x9, 0x0, 0x2, 0x657e, 0x9, 0x3, 0x4, 0x7f, 0x6, 0x55f, 0xb5, 0x7, 0x4, 0x7fff, 0x800, 0x0, 0xd8, 0x3, 0x5, 0x100000001, 0x1f, 0x2, 0x2, 0x0, 0xef5, 0x101, 0x8000, 0x3, 0x0, 0x1f, 0x9, 0x4, 0x4, 0x8, 0xfffffffffffffff9, 0x101, 0x2, 0x3, 0x4, 0x8000, 0x8, 0x8, 0x1, 0x1, 0xa7, 0x8, 0x5, 0x3a, 0x10000, 0xe6a, 0x4, 0x5, 0x3, 0x2ef2, 0x81, 0x3, 0x7, 0x9, 0x40, 0xf2, 0x4, 0x4, 0x11a7, 0x9, 0x4, 0x3, 0x0, 0x7f, 0x6, 0x800, 0x1, 0x1657, 0x2, 0x1, 0x2f, 0xb1, 0x3, 0x3, 0x0, 0x2, 0x6, 0x0, 0x9, 0x1, 0x4, 0x10000, 0x84a, 0x5, 0x8c, 0x4, 0x401, 0x19, 0x5e, 0x7ff, 0x10000000000, 0x2, 0x7ff, 0xcf, 0x81, 0xc731, 0x3ff, 0x7, 0x6, 0x1000, 0x1, 0x0, 0x9cda, 0x7, 0x80000000, 0x2, 0x6, 0x4, 0x1, 0x3, 0x1f, 0x3, 0xc82, 0x0, 0xffffffff, 0x1, 0x9, 0x0, 0x8, 0x6, 0x6, 0xb5e, 0x7, 0x5]}) writev(r1, &(0x7f0000000b80)=[{&(0x7f0000000700)="17ae473574fc797765abcaae50c30dab3d024e700cc793547bdf162e3368c5b3f39e63a173bebbb7bad35695f2dfc5a6fed62ed5d4f60658818428e49bcb27b1ba67ca0a048200c5c5e1325ed61095dddf8802efd67b16527b01bf73eb7fc0d56586412ab97799781268d8a625eccb821b5ed619bab99c41dbaa8a2a12d124720360f46770b3bcd72af296efcb945a6646f7a6b4fced78f8869043906c6bef1895", 0xa1}, {&(0x7f00000007c0)="96208f7a5ff9ecfb3ac7df2783c9fd6d78bb95342749fc1d7ba46fc4113e6387264af42793399931e69c0da708f44b288a83bb7d4c7cbe0565b5438f3453a396fadddc0d179b97c3649bb25ea80ea8786ae296b8562aeedb522661575d7b004e866a563b5507c05cd16fc4cdc7d49d9b12e09bb981eb1f83dd66f6d4ae1ed61244f786f708ea9d069264a1abb09ca8d6d272db", 0x93}, {&(0x7f0000000880)="48e044db559e4fb3f77cd9cd1a5efd39f72bcafbc3ae2ae7012deb32f6db5d4a72e06aa2eed4ce15a206f1bf3f6d3c1744341e092644c869fa7abb88262f8ca9838d7bdd64f7d756404dfde22d16157a91bb129564286594d82b977847e7c24c899f849b675769122c10b0e8e3ab1fe70db603951a34f5c3ea21b5d0a0314dad822af336b8d33d7d31b13041f6670d621eb7b4669c72ec648624fca444", 0x9d}, {&(0x7f0000000080)="b141e89b0a57", 0x6}, {&(0x7f0000000940)="eee5386288fdba5a7b9df8470d158c784fd9fede6ff04e16f48a54845cc3a288017b9c57310b2e7b1c00198e25fa55ff06cd81de3418c985402b390be2971094e11913a53c5e05a7612c5d00316cf84eec4df8be48c00a3178b7d51cf4ace08a55896aac56018cd9ac74c993b7809a5f9f10e773358fdeb73335c09dda5c721d752964aa5b8627f8c2a3784e2cd61c86aece8414ba4c5246779ce3bc19e22c", 0x9f}, {&(0x7f00000000c0)="7740e102e23e756c408363cd052b1543043bae9a3e5f2d8739461e8f309edcae973d0dc9f5aa5fb0197847e06b01038bc73b5eadde5af835", 0x38}, {&(0x7f0000000a00)="bb37eea4994e48b39a2654a817bfb8d4311397ec6bcc82d211988c3088d9d99fd3e0ccf7d8b87c6fda1cf67dd64302504e5a729cdc5e30e818404ac7e68d10dcd5851f0f6f69783e68dd4950bb697b0826c11001bc10d07e7b074cf7c16fde9f645ddc2651c2a9716db1fb6cdd38e113d6e2391e65d490f1b81c0b0c176fec", 0x7f}, {&(0x7f0000000680)="8e49ca2a05d5e458ce96136933c503", 0xf}, {&(0x7f0000000a80)="3720220381ef672bd3d620f03381e8e60a6623c83c4f3b89a3f98e64affa0d3056c41e2c47a6abd6299a4dfd4aad2fcba5547b1da5ea58d9db3d8e6db68b02dde01457bc7e4ac38351c2dfd316c48205e25e6238e8916929294ae77106915d890fa4729b573cd515029eee465d8272f2c3ca357776f11379015b0733e9b5b1a92cc07dd55c1db3cf867bb6902a716095ce98e2984ca3549fc6ec023f33ab0c636f20a03fbc64bc7a183d9b6b627b6a2384bf094fcf25f64e5c00c2069fbfa7d5e0109ac5ebeb073d86743db98658734042b278dee099bf015e5de1ca04ea82d8cb96aa2e771ff3e408e78f95d176d11e56c75d8dac", 0xf5}], 0x9) [ 486.431608][T10420] device ip6gre1 entered promiscuous mode 07:30:04 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000357373082505a0a433cf0000100109021b0001ef0000000904564435d0000f200905"], 0x0) 07:30:04 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f000095dffc)) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, {0x0, @in={{0x2, 0x4f24, @dev={0xac, 0x14, 0x14, 0x41}}}, 0x0, 0x4, 0x0, 0x100000, 0x80000000}}, &(0x7f0000000780)=0xb0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000380)={0x0, 0x84, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @rand_addr=0x64010101}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e23, 0x6, @private1={0xfc, 0x1, [], 0x1}, 0x81}, @in6={0xa, 0x4e22, 0x10000, @private1, 0x10000}, @in6={0xa, 0x4e22, 0x7fff, @private1}]}, &(0x7f00000003c0)=0x10) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x8b05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x1, @perf_bp={0x0}, 0xc98, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) set_mempolicy(0x3, &(0x7f0000000040)=0x8, 0xce) socket(0x2c, 0x80000, 0x80002) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x5, 0x100) write$binfmt_misc(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"/1649], 0x155) ioctl$DRM_IOCTL_GET_UNIQUE(0xffffffffffffffff, 0xc0106401, &(0x7f0000000480)={0x2, &(0x7f0000000440)=""/2}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x80, @remote}, {0x2, 0x0, @broadcast}, {0x2, 0x4e21, @empty}, 0x9c96a42f48eba6fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001fffc, 0x0, 0x3}) bind(0xffffffffffffffff, &(0x7f0000000080)=@in={0x2, 0x4e20, @dev}, 0x80) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x2380, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4, 0x9, @private2, 0x1f}]}, &(0x7f00000001c0)=0x10) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000200)=@v1={0x0, @adiantum, 0x10, "ef0ed9c000ba9a6b"}) 07:30:05 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x200000, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) [ 487.113207][ T12] usb 1-1: new high-speed USB device number 30 using dummy_hcd 07:30:05 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0xf9) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[@ANYBLOB="00000000eb6996e209a818e2b6a9f494d7782512bc6b00c2666b3c3151de3e95e151e911aaf06f557b0fa0db6325d73f71d95c0260d38dbbadb6a3e0699cd32fca41957550aca78468a5dfa38c93080c2ce980bd3aeedbee246aeba6fc1d90fae03674c0b1f39f18d76c5a3d58c8c33d5cf34a8dec898eed6f00"/132, @ANYRES16=r5, @ANYBLOB="c18f0000000000000000050000000c0099000000000003000000"], 0x20}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f00000008c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000526bd7000fbdba28fa78b32ab773ab9df25180000000c0099006308923403000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000040)={0x6, 0x7fffffff, 0x0, 'queue1\x00', 0x3}) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$MISDN_TIME_STAMP(r6, 0x0, 0x1, &(0x7f0000000140), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640)='/proc/capi/capi20ncci\x00', 0x200, 0x0) ioctl$SNDCTL_DSP_STEREO(r7, 0xc0045003, &(0x7f0000000680)) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000780)={0x2, 0x4e23, @private=0xa010102}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x4040840) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000001c0)={'syz0\x00', {0x8b40, 0x0, 0x1, 0xffe0}, 0x15, [0x3, 0x2, 0x5, 0x0, 0x9, 0x4, 0x80000001, 0x6, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x7ff, 0x4, 0x2, 0x2, 0x7, 0x3, 0x6, 0x5, 0x60b, 0x6, 0xfffffe01, 0x3, 0x5, 0x4, 0xfff, 0x1, 0xbf8, 0x7fff, 0x1, 0x20, 0x7, 0x4, 0x5, 0x7fffffff, 0x2, 0xffffffff, 0x0, 0xfffffffa, 0x8000, 0x4, 0x1, 0x7, 0x8, 0x6, 0xb138, 0x9, 0x1000040, 0x0, 0x4, 0x7, 0x6, 0x4, 0x7fff, 0x9, 0x8, 0x3f, 0x7fffffff, 0x7, 0x5, 0x4], [0x7fffffff, 0xa57, 0x6, 0x5, 0x20, 0x3, 0x1, 0x41a, 0x5, 0x0, 0x8, 0xbb4, 0x0, 0x101, 0x13, 0x9, 0x8, 0xf59, 0x4, 0x8, 0x2, 0x5, 0x7, 0xffff, 0xffffffe0, 0x5, 0x562384d2, 0xe7d8, 0xffffffff, 0x7, 0x101, 0x10000, 0x401, 0x9, 0x800, 0x81, 0x2, 0x4, 0x9da, 0x9, 0x1, 0x9, 0x7, 0x7, 0x9, 0x4, 0x6, 0x2, 0x6, 0x40, 0x3, 0x1, 0x0, 0x800, 0xffff0000, 0x3ff, 0x7, 0xd2e, 0x4, 0x140, 0x4, 0x92, 0x7fff, 0x9], [0x0, 0x9, 0x5, 0x2, 0xee, 0xfffffffa, 0x6e800000, 0x800, 0x4, 0x0, 0xfffffffc, 0x1, 0x5, 0x6, 0xfdb5, 0x4, 0x8, 0xffff, 0x7, 0x7ff, 0xfffff000, 0x6, 0x3, 0x7, 0x6, 0x2019bf16, 0xff, 0x5, 0x5, 0x9, 0x7f, 0x0, 0x7, 0x32f, 0x9, 0x10001, 0xffff, 0x1f, 0x1, 0x2, 0x7, 0x2, 0x10001, 0x0, 0xfffffffa, 0xffff, 0x1, 0x2, 0xfffffe01, 0x20, 0x8, 0x800, 0x8, 0x7, 0x0, 0x3, 0xffffffff, 0x6, 0x1, 0x1, 0x2, 0x1b, 0x2, 0x800], [0x1f, 0xd9b, 0xce, 0x3, 0x1, 0x1, 0x7f, 0x0, 0x1, 0xfffffff9, 0x8, 0xffff8001, 0x7, 0x2555, 0x8000, 0x7f, 0x0, 0x200, 0x590, 0x94, 0x8001, 0x5, 0x9, 0xffffff01, 0x7f, 0x4, 0x4, 0xd15, 0x401, 0x1, 0x0, 0x80000000, 0x0, 0x1f, 0x80000000, 0x7f, 0x2, 0x401, 0x7, 0x6, 0xffff, 0x3ff, 0x5, 0x800, 0x8, 0x9d, 0x1, 0x26e225f3, 0x9, 0xffffffff, 0x2, 0x8001, 0x8, 0x6a3, 0x381b, 0xfffffff7, 0x8, 0x1f, 0x2b5147cd, 0x8, 0x3c, 0x9, 0xfff, 0x992]}, 0x45c) [ 487.352198][ T12] usb 1-1: Using ep0 maxpacket: 8 [ 487.474364][ T12] usb 1-1: config 239 has an invalid interface number: 86 but max is 0 [ 487.483040][ T12] usb 1-1: config 239 has no interface number 0 [ 487.489468][ T12] usb 1-1: too many endpoints for config 239 interface 86 altsetting 68: 53, using maximum allowed: 30 [ 487.501282][ T12] usb 1-1: config 239 interface 86 altsetting 68 has an invalid endpoint with address 0x0, skipping [ 487.512401][ T12] usb 1-1: config 239 interface 86 altsetting 68 has 1 endpoint descriptor, different from the interface descriptor's value: 53 [ 487.525892][ T12] usb 1-1: config 239 interface 86 has no altsetting 0 07:30:05 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000018105e04da07000000001e0109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00034400000004034e"], 0x0, 0x0}, 0x0) connect(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x2c, "89a9e9a0f60569f09e5c1ee29307f85946d21c934359230bf77fbbefb888f057d5d11567ca3528f91a766ec0fafb4d993b25f1ce52f12624c13691bb1299cb3abce8afccda78bffbaf609411b8507a86ad69575df012f18f6ce4519a69c553e5bf9b1a50d272dfd4ed62a510924aa3a2bfb97fc56d25056e1fea3c60cca0"}, 0x80) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002222000000962303020f0158270c4ac2c206e53f070d0000002a9000170900be0083"], 0x0}, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000040)) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x2, 0x1) 07:30:05 executing program 2: ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000300)=""/223, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x200000000001, r1}) read$FUSE(r1, &(0x7f0000000400)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$BLKRRPART(r1, 0x125f, 0x0) getgroups(0x1, &(0x7f0000000040)=[r2]) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth0_to_team\x00', &(0x7f0000000140)=@ethtool_drvinfo={0x3, "db74f392ec6e2cfee8da9f7343c5df123efe3ecaffce844b87dda2d401e61e0e", "2992ac494a76912dfca13edaa6cb8165113653f21c71a1fa86639851f79c979b", "7034446893e04a4577741a098895e9ccf49eb0413610c5c6185f35cf1be21aff", "850a08a5cc6d3b9ccf83beb129897e0d07374bdce9658400569fd701a4de1e27", "d21d1dcb2f3405b45e2c727f487a95c24839aa4555b1a82cfb5308b0ffaac0a4", "50d83a648e66fe936ea30eb4", 0x3, 0x7, 0x401, 0x0, 0x1000}}) [ 487.794451][ T12] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=cf.33 [ 487.803798][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 487.812168][ T12] usb 1-1: SerialNumber: syz [ 488.167430][ T12] usbtest 1-1:239.86: couldn't get endpoints, -22 [ 488.174440][ T12] usbtest: probe of 1-1:239.86 failed with error -22 07:30:06 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x23}, 0x1c) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x80000, 0x0) sendmmsg$inet6(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="f69a4243474cabd59716fb7e541db003dddafbedbf6f7c82161f4277a4e04b790dbbf2d571c5503e", 0x28}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}], 0x28}}], 0x2, 0x0) [ 488.233920][ T9014] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 488.268073][ T12] usb 1-1: USB disconnect, device number 30 [ 488.491543][ T9014] usb 2-1: Using ep0 maxpacket: 16 [ 488.612146][ T9014] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 488.623351][ T9014] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 488.633544][ T9014] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 488.772599][ T9014] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 488.782137][ T9014] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 488.790351][ T9014] usb 2-1: SerialNumber: syz 07:30:07 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000357373082505a0a433cf0000100109021b0001ef0000000904564435d0000f20090585"], 0x0) [ 488.860086][ T9014] usb 2-1: config 0 descriptor?? 07:30:07 executing program 2: syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="ff7f000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000b00)={0x11, 0x0, 0x0}, &(0x7f0000000b40)=0x14) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000780), 0xc, &(0x7f0000000dc0)={&(0x7f0000000b80)={0x240, 0x0, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x4}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x240}, 0x1, 0x0, 0x0, 0x844}, 0x4000004) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$sock_buf(r5, 0x1, 0x1f, &(0x7f00000005c0)=""/45, &(0x7f0000000600)=0x2d) r6 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') r8 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000680)='/dev/cachefiles\x00', 0x44000, 0x0) ioctl$FBIOGET_VSCREENINFO(r8, 0x4600, &(0x7f00000006c0)) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r6, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x4a4, r7, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0xac, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1000}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @private=0xa0100fc}}}}]}, @TIPC_NLA_NODE={0x274, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_NODE_ID={0xf8, 0x3, "4b8e43ed9de6dc2dad3270bf18d17b71b6b578ff642e1c6fabbcd4c89dc8970ae3bf1618104bb17813b66436898b08340a69d828155dd95d8d8fe9617562ce5931b2ae40b70cf5aaf901f3474bd25f98cfd84df09485a8d199802a67e41e726c5c0a291b1a65a9de707a2231917cb970e4a88bfcdd471949966356f13e2197d628f162eabd8234da6ed1c2fdc59b0d9edf0edf1fe50c9344c57efe917973dd45efe7646da770df6037cbb1f6e41470a6177581f3b5340b2031e7c1a619126e5da733c553e3fcef64e63ef95e6108763e6f0921bec5829f7530eaeac90eabfc7458e5f6294c909287dce567a9887ddae5afb8aa86"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ID={0x78, 0x3, "2ffadc27fae1a8f8cf119bf8e611bbff7f08bc3a215c875c2ad9f45f55d91835a48677989718718e60910e3fe15981ce8c75be6c4e9ae2ad4f47b28c923f128f6324c9b99ae6808a5e8ac83be66bccc673758ea39c944a40407e214c099ee5e2ce1f56de9725da4e32ee38395b28e02deb37b036"}, @TIPC_NLA_NODE_ID={0xe3, 0x3, "863f2de6e24c4469a5e8a5b86cd3f1820bf4552fc5f2ba28c68cf9cda7dbdef5494edbe6adaa910ebcd2d73780324a46918731d03982c6c3f80a74cb321325b051b93df8f099d1371d53d2cd7af99ea180796a1d5ebc741dabc616f3760f3398b9c7717923b84b3012c164934a680b1b4f4e8e29ac743852ca5f8b265f1c3b6d42b1fad48b189eba09e90c661435a6a740996218a653291c1a88f113723ad51d7d37c76b11224885dfeab448ef66eeb87929251133dd25b860f93124dc27d0febad3544859e10e33876b722a5e33b3517a4d80ddcd557d010aa5e64819f049"}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffff23}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK={0xb4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1dc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}]}, 0x4a4}, 0x1, 0x0, 0x0, 0xc804}, 0x800) [ 489.273793][ T8710] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 489.533563][ T8710] usb 1-1: Using ep0 maxpacket: 8 [ 489.568107][ T9014] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 489.576802][ T9014] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 489.642886][ T9014] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0004/input/input10 [ 489.664880][ T8710] usb 1-1: config 239 has an invalid interface number: 86 but max is 0 [ 489.673526][ T8710] usb 1-1: config 239 has no interface number 0 [ 489.679950][ T8710] usb 1-1: too many endpoints for config 239 interface 86 altsetting 68: 53, using maximum allowed: 30 [ 489.681566][ T8706] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 489.691298][ T8710] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has invalid wMaxPacketSize 0 [ 489.708946][ T8710] usb 1-1: config 239 interface 86 altsetting 68 has 1 endpoint descriptor, different from the interface descriptor's value: 53 [ 489.722398][ T8710] usb 1-1: config 239 interface 86 has no altsetting 0 [ 489.779806][ T9014] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 489.822255][ T9014] usb 2-1: USB disconnect, device number 18 [ 489.903064][ T8710] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=cf.33 [ 489.912444][ T8710] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 489.920629][ T8710] usb 1-1: SerialNumber: syz [ 490.011781][ T8706] usb 3-1: device descriptor read/64, error 18 [ 490.266836][ T8710] usbtest 1-1:239.86: couldn't get endpoints, -22 [ 490.273693][ T8710] usbtest: probe of 1-1:239.86 failed with error -22 [ 490.330019][ T8710] usb 1-1: USB disconnect, device number 31 [ 490.402407][ T8706] usb 3-1: device descriptor read/64, error 18 07:30:08 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x45e, 0x730, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f0000000240)={0x3, 0x3}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r5, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x20010040) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r5, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x48) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f00000000c0)=0xf7) r6 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x682}, &(0x7f0000000080)=0x8) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000180)={0x0, 0x0, 0x22, {0x22, 0x0, "831c8c6742458167e019aca8e75c8533a8c2b638b91db65ad534012e3c700251"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 490.602086][ T9014] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 490.671795][ T8706] usb 3-1: new full-speed USB device number 7 using dummy_hcd 07:30:09 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000357373082505a0a433cf0000100109021b0001ef0000000904564435d0000f20090585"], 0x0) [ 490.852791][ T9014] usb 2-1: Using ep0 maxpacket: 16 [ 490.935429][ T8710] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 490.951536][ T8706] usb 3-1: device descriptor read/64, error 18 [ 490.980422][ T9014] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 490.991797][ T9014] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 491.001853][ T9014] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 491.114276][ T9014] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 491.123726][ T9014] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 491.132130][ T9014] usb 2-1: SerialNumber: syz [ 491.190928][ T9014] usb 2-1: config 0 descriptor?? [ 491.341754][ T8706] usb 3-1: device descriptor read/64, error 18 [ 491.357667][ T8710] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.368854][ T8710] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 491.379044][ T8710] usb 4-1: New USB device found, idVendor=045e, idProduct=0730, bcdDevice= 0.00 [ 491.388343][ T8710] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.401777][ T12] usb 1-1: new high-speed USB device number 32 using dummy_hcd 07:30:09 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000018105e04da07000000001e0109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00034400000004034e"], 0x0, 0x0}, 0x0) connect(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x2c, "89a9e9a0f60569f09e5c1ee29307f85946d21c934359230bf77fbbefb888f057d5d11567ca3528f91a766ec0fafb4d993b25f1ce52f12624c13691bb1299cb3abce8afccda78bffbaf609411b8507a86ad69575df012f18f6ce4519a69c553e5bf9b1a50d272dfd4ed62a510924aa3a2bfb97fc56d25056e1fea3c60cca0"}, 0x80) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002222000000962303020f0158270c4ac2c206e53f070d0000002a9000170900be0083"], 0x0}, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000040)) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x2, 0x1) [ 491.464267][ T8706] usb usb3-port1: attempt power cycle [ 491.518713][ T8710] usb 4-1: config 0 descriptor?? [ 491.615559][ T9014] usbhid 2-1:0.0: can't add hid device: -71 [ 491.622648][ T9014] usbhid: probe of 2-1:0.0 failed with error -71 [ 491.642193][ T12] usb 1-1: Using ep0 maxpacket: 8 [ 491.680622][ T9014] usb 2-1: USB disconnect, device number 19 [ 491.763396][ T12] usb 1-1: config 239 has an invalid interface number: 86 but max is 0 [ 491.773623][ T12] usb 1-1: config 239 has no interface number 0 [ 491.780065][ T12] usb 1-1: too many endpoints for config 239 interface 86 altsetting 68: 53, using maximum allowed: 30 [ 491.791497][ T12] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has invalid wMaxPacketSize 0 [ 491.801929][ T12] usb 1-1: config 239 interface 86 altsetting 68 has 1 endpoint descriptor, different from the interface descriptor's value: 53 [ 491.815502][ T12] usb 1-1: config 239 interface 86 has no altsetting 0 [ 491.985447][ T12] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=cf.33 [ 491.994835][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 492.003337][ T12] usb 1-1: SerialNumber: syz [ 492.015265][ T8710] microsoft 0003:045E:0730.0005: unknown main item tag 0x2 [ 492.023005][ T8710] microsoft 0003:045E:0730.0005: unknown main item tag 0xe [ 492.030428][ T8710] microsoft 0003:045E:0730.0005: bogus close delimiter [ 492.038145][ T8710] microsoft 0003:045E:0730.0005: item 0 0 2 10 parsing failed [ 492.046357][ T8710] microsoft 0003:045E:0730.0005: parse failed [ 492.052971][ T8710] microsoft: probe of 0003:045E:0730.0005 failed with error -22 [ 492.132542][ T9014] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 492.203533][ T8706] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 492.306785][ T12] usbtest 1-1:239.86: couldn't get endpoints, -22 [ 492.312343][ T8710] usb 4-1: USB disconnect, device number 8 [ 492.314107][ T12] usbtest: probe of 1-1:239.86 failed with error -22 [ 492.382121][ T9014] usb 2-1: Using ep0 maxpacket: 16 [ 492.498353][ T12] usb 1-1: USB disconnect, device number 32 [ 492.512038][ T9014] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.523370][ T9014] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.533587][ T9014] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 07:30:10 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000357373082505a0a433cf0000100109021b0001ef0000000904564435d0000f20090585"], 0x0) [ 492.681744][ T8706] usb 3-1: device descriptor read/8, error -71 [ 492.795211][ T9014] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 492.804896][ T9014] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 492.813470][ T9014] usb 2-1: SerialNumber: syz 07:30:11 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000357373082505a0a433cf0000100109021b0001ef0000000904564435d0000f20090585"], 0x0) [ 492.893139][ T8706] usb 3-1: device descriptor read/8, error -71 [ 492.909680][ T9014] usb 2-1: config 0 descriptor?? [ 493.021825][ T8712] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 493.311364][ T8710] usb 1-1: new high-speed USB device number 33 using dummy_hcd 07:30:11 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000040)=""/70, &(0x7f00000000c0)=0x46) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000100)={@empty}, 0x14) sendto$phonet(0xffffffffffffffff, &(0x7f0000000140)="832f98904a41d500dc3a", 0xa, 0x0, &(0x7f0000000180)={0x23, 0x9, 0x2f, 0x6}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f00000001c0)=""/93, 0x5d}, {&(0x7f0000000240)=""/118, 0x76}, {&(0x7f00000002c0)=""/4096, 0x1000}], 0x3, &(0x7f0000001300)=""/20, 0x14}, 0x40) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000001380)=0x1) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x14, 0x0, 0x200, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x91}, 0x44080) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/nvram\x00', 0xa6be64d31014dffc, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r3, 0xc0389423, &(0x7f0000001540)={0x3, 0x20, [0x0, 0x1f, 0x776, 0x81], &(0x7f0000001500)=[0x0, 0x0, 0x0, 0x0]}) sendmsg$DEVLINK_CMD_PORT_SPLIT(r3, &(0x7f0000001800)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000017c0)={&(0x7f00000015c0)={0x1e0, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x5}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x5}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x5}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x6}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8, 0x9, 0x6}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x3}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8, 0x9, 0x5}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x5}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x8}}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x8840}, 0x20040841) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000001840)={0x0, 0x7, 0x10}, 0xc) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000001880)={r0}) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f00000018c0)={0x0, 0x9}, 0x8) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000001900)={0x0, 0x0}, &(0x7f0000001940)=0xc) ioprio_get$uid(0x0, r5) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000001980)=0x6, 0x4) r6 = open_tree(r3, &(0x7f00000019c0)='./file0\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r6, 0xc0045540, &(0x7f0000001a00)=0xffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000001b00)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x2c, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) [ 493.382185][ T8712] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 493.393588][ T8712] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 493.403948][ T8712] usb 4-1: New USB device found, idVendor=045e, idProduct=0730, bcdDevice= 0.00 [ 493.413241][ T8712] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.422576][ T8706] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 493.539080][ T8706] usb 3-1: Using ep0 maxpacket: 8 [ 493.572443][ T8710] usb 1-1: Using ep0 maxpacket: 8 [ 493.625319][ T9014] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 493.634049][ T9014] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 493.643976][ T8712] usb 4-1: config 0 descriptor?? [ 493.664656][ T8706] usb 3-1: config 239 has an invalid interface number: 86 but max is 0 [ 493.673183][ T8706] usb 3-1: config 239 has no interface number 0 [ 493.679736][ T8706] usb 3-1: too many endpoints for config 239 interface 86 altsetting 68: 53, using maximum allowed: 30 [ 493.691099][ T8706] usb 3-1: config 239 interface 86 altsetting 68 endpoint 0x85 has invalid wMaxPacketSize 0 [ 493.701519][ T8706] usb 3-1: config 239 interface 86 altsetting 68 has 1 endpoint descriptor, different from the interface descriptor's value: 53 [ 493.715098][ T8706] usb 3-1: config 239 interface 86 has no altsetting 0 [ 493.752033][ T8710] usb 1-1: config 239 has an invalid interface number: 86 but max is 0 [ 493.760551][ T8710] usb 1-1: config 239 has no interface number 0 [ 493.767176][ T8710] usb 1-1: too many endpoints for config 239 interface 86 altsetting 68: 53, using maximum allowed: 30 [ 493.779098][ T8710] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has invalid wMaxPacketSize 0 [ 493.789585][ T8710] usb 1-1: config 239 interface 86 altsetting 68 has 1 endpoint descriptor, different from the interface descriptor's value: 53 [ 493.803100][ T8710] usb 1-1: config 239 interface 86 has no altsetting 0 [ 493.859095][ T9014] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0006/input/input11 07:30:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000400000300c280000500030010000000"], 0x48}}, 0x0) [ 494.090433][ T9014] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 494.211507][ T8712] usbhid 4-1:0.0: can't add hid device: -71 [ 494.217867][ T8712] usbhid: probe of 4-1:0.0 failed with error -71 [ 494.261841][ T8706] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=cf.33 [ 494.271694][ T8706] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 494.280018][ T8706] usb 3-1: SerialNumber: syz [ 494.303873][ T9014] usb 2-1: USB disconnect, device number 20 [ 494.324866][ T8710] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=cf.33 [ 494.334335][ T8710] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 494.343028][ T8710] usb 1-1: SerialNumber: syz [ 494.347087][ T8712] usb 4-1: USB disconnect, device number 9 07:30:12 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)="2e00000025000511d25a802a8c63940d0424fcfa75376004000e000a00110002", 0x20}, {&(0x7f00000001c0)="6e62db35555f090b9c1b0f4255b4", 0xe}], 0x2}, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000040)={0x0, 0x0, 0x1, 0xffff, 0x3, [{0xff, 0x8, 0x3}, {0x8, 0x6, 0x8, [], 0xa07}, {0x47b9c766, 0x7fff, 0x80000001, [], 0x80b}]}) [ 494.716464][ T8706] usbtest 3-1:239.86: couldn't get endpoints, -22 [ 494.723420][ T8706] usbtest: probe of 3-1:239.86 failed with error -22 07:30:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000400000300c280000500030010000000"], 0x48}}, 0x0) [ 494.826593][ T8710] usbtest 1-1:239.86: couldn't get endpoints, -22 [ 494.833574][ T8710] usbtest: probe of 1-1:239.86 failed with error -22 [ 494.847851][ T8706] usb 3-1: USB disconnect, device number 9 [ 494.888672][T10605] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'. [ 494.955002][ T8710] usb 1-1: USB disconnect, device number 33 [ 495.072018][T10605] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'. 07:30:13 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xfffffffffffffffc}, 0x2882, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x3c) execveat(0xffffffffffffffff, &(0x7f0000000a80)='\x00', 0x0, 0x0, 0x800) r1 = dup(0xffffffffffffffff) write$P9_RGETATTR(r1, &(0x7f0000000400)={0xa0, 0x19, 0x0, {0x0, {0x0, 0x1000}, 0x0, 0x0, 0x0, 0x3fffffffffffc, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x42c8, 0x0, 0x0, 0x1f}}, 0xa0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0xcdf2, 0x0, 0x2}) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000280)={0x9, r2}) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x2, 0x46, 0x0, "0000000000000400"}, 0x22b) sendto$inet6(r0, &(0x7f00000002c0)="ecf46c6a7947d5e0e1d630c22898390385fcd28f842f4642fb5ddad963e63ebf5b3aec3b256903a8a3a90ad903196e1ee68871c24d7e06553b054400d12c5a2174a26116a24350b0fe2783714777e609dccbcda9e7d67c00000000", 0x5b, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x1802, @rand_addr, 0x1}, 0x1c) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r3, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') getdents(r4, &(0x7f0000000040)=""/46, 0x2e) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000000c0)) keyctl$dh_compute(0x17, &(0x7f0000000000), &(0x7f0000000040)=""/5, 0x5, &(0x7f0000000100)={&(0x7f0000000080)={'poly1305-generic\x00'}, &(0x7f00000000c0)="f0c6047c91b30b60d2b4ae1ba2033e374b30f7fe", 0x14}) keyctl$dh_compute(0x17, &(0x7f0000000340), &(0x7f0000000380)=""/2, 0x2, &(0x7f0000000a40)={&(0x7f00000003c0)={'ghash-clmulni\x00'}, &(0x7f00000009c0)="50aeecce66ef48e53c09bd1ccd95765fd6db82ff894e08d60f2c4ba1763c54a219899b385a5b70d5972bb4bce396e957b789fc8e0e9583e079888cee2c673544ad04a9", 0x43}) get_robust_list(r3, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa09000000000000000008a811d2a63457e73e2b00fe8000000000000090e547f52250a65e5400000000210000aafe80000000000000eb000000000000aa87000068d33e3b7ff86931df33be4fed859b7672ca8537c3e9ef51d3cbb56feb582fa0ab3401005d50ae95235a79157b2bee14c0a0ff8990538db3b6c922bc3206813d005e161fddd042c6ba39cef70a49df1245887c4b0989321fecbc90a47b5cec5870c2209a6d64cf9c67ab3b502a16a828139ab856f6194ca1ea0a9723371109ad201f269d00477dc89dc9f0bfa2b8124797f2170ff1bd588bf9b4fadb3405315ebd3f7ac85693f1b96dede7ec30778790cd186581177fe49d982394a8596028b6a0bd42178a087a9e610409b6a11bd8bf9a2d2fb4e7c61354207b2b34a996e399e8d0c952928da4f53030ea930600ebf012bdbeda263abaa7542c83e4abe76edc7bf371043d9a727aba4c3c252bbe1827b113d9d2fff8d76b22a5710d000000000000000000000000000006054eefaec9dd9244a0fe0dec2c78d7d048de709c3c221fdf1fd6e8e7c25cf83479dc608bdb97ef727fbc4b4987f2a7fdc51dd9fec710708148c95c05a8451e540b51e794fba431decb34c1d00100e46d3b478a362401c9cbc8b546f232f232eee875beea6649504f0e6063f0556ad7a3e795dfc527c34ea70d4083e272c514ad711fd8efd825a329817db760d1f0cd9dcc6f4a0fe4582ee8035426130acad5f15a8cdac8d7c5027b807f61b32a1f1889459b5cf7c3e1cd3a85cd0271d654b49d319e75d8e3773b4a00fc55f60a6dc5f386ce13562d0b6d9f3270ddccf2e6f52e7f874dfc468bb3fbc69fb7401fea300a87f9cca34649497752c88e9d3b469d35db8d68072f4359936f373b7711322216dad1a696555e34ad042343fd69a6141320a9ef87dc365f4a7f4b87d5bb2f992f96befbdb673ceca6db26196275b80dd26cc8d011cff8180d2cbfab0dea744b1f0f23cb29110a043861297ba838756cabd297"], 0x0) 07:30:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000400000300c280000500030010000000"], 0x48}}, 0x0) 07:30:13 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000c00)={{0x12, 0x1, 0x0, 0x8e, 0x35, 0x12, 0x20, 0x54c, 0x9a, 0x2d09, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0xe1, 0xcf}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000005c0)={0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00`8'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:30:14 executing program 0: r0 = add_key$keyring(&(0x7f00000005c0)='keyring\x00', &(0x7f0000000600)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000000)={0x68, 0x3}, 0xc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000380)='asymmetric\x00', &(0x7f0000000240)=@chain={'key_or_keyring:', 0x0, ':chain\x00'}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000380)='asymmetric\x00', &(0x7f0000000340)=@chain={'key_or_keyring:', 0x0, ':chain\x00'}) keyctl$instantiate(0xc, r0, &(0x7f0000000040)=ANY=[@ANYBLOB="6c6f6164737465643a747275737465643a20301f30303030303030303030303030303030303120656237633333333700"], 0x3c, 0xfffffffffffffffb) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000357373082505a0a433cf0000100109021b0001ef0000000904564435d0000f2009058521"], 0x0) [ 496.151859][ T8706] usb 2-1: new high-speed USB device number 21 using dummy_hcd 07:30:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000400000300c280000500030010000000"], 0x48}}, 0x0) [ 496.351086][ T8712] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 496.392142][ T8706] usb 2-1: Using ep0 maxpacket: 32 [ 496.593288][ T8712] usb 1-1: Using ep0 maxpacket: 8 07:30:14 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df000000000000000000000000080005400000002d0900010073797a300000000008000a40000000000900020073797a310000000008000f40000000000800034000000040140000001100010000000000000000000000000a98521eb034a29f22980470889a6fe77503162655e49dfc69d665f3cdbc67480df27baca37b576efa04d86c4cab071419e689756ecad2196ba59451"], 0x74}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000080)={0x5, 0x70, 0x64, 0x0, 0x7, 0x7e, 0x0, 0x400, 0x4003, 0x5, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040)}, 0x40, 0x6, 0x1, 0x9, 0x1, 0x20, 0x81}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000013c0)={'gretap0\x00', &(0x7f0000001380)={'erspan0\x00', 0x0, 0x7, 0x10, 0x7, 0x81, {{0x7, 0x4, 0x0, 0x3f, 0x1c, 0x67, 0x0, 0x81, 0x4, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x32}, {[@timestamp={0x44, 0x8, 0xfd, 0x0, 0x6, [0x7]}]}}}}}) sendmmsg(r0, &(0x7f00000009c0), 0x0, 0x2408c814) 07:30:14 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000400000300c280000500030010000000"], 0x48}}, 0x0) [ 496.672474][ T8706] usb 2-1: New USB device found, idVendor=054c, idProduct=009a, bcdDevice=2d.09 [ 496.682038][ T8706] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.690177][ T8706] usb 2-1: Product: syz [ 496.694678][ T8706] usb 2-1: Manufacturer: syz [ 496.699417][ T8706] usb 2-1: SerialNumber: syz [ 496.752142][ T8712] usb 1-1: config 239 has an invalid interface number: 86 but max is 0 [ 496.760592][ T8712] usb 1-1: config 239 has no interface number 0 [ 496.767166][ T8712] usb 1-1: too many endpoints for config 239 interface 86 altsetting 68: 53, using maximum allowed: 30 [ 496.778477][ T8712] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 496.789955][ T8712] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has invalid wMaxPacketSize 0 [ 496.800428][ T8712] usb 1-1: config 239 interface 86 altsetting 68 has 1 endpoint descriptor, different from the interface descriptor's value: 53 [ 496.813884][ T8712] usb 1-1: config 239 interface 86 has no altsetting 0 07:30:15 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000400000300c280000500030010000000"], 0x48}}, 0x0) [ 496.978514][ T8712] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=cf.33 [ 496.987982][ T8712] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 496.996422][ T8712] usb 1-1: SerialNumber: syz [ 497.121383][ T8706] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 497.143274][ T8706] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 497.176658][ T8706] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 497.326431][ T8706] usb 2-1: USB disconnect, device number 21 [ 497.335403][ T8712] usbtest 1-1:239.86: couldn't get endpoints, -71 [ 497.342444][ T8712] usbtest: probe of 1-1:239.86 failed with error -71 [ 497.363829][ T8706] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 497.409396][ T8712] usb 1-1: USB disconnect, device number 34 [ 497.425124][ T8706] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 497.472561][ T8706] visor 2-1:1.0: device disconnected [ 498.050918][ T8706] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 498.111655][ T8711] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 498.291481][ T8706] usb 1-1: Using ep0 maxpacket: 8 [ 498.352040][ T8711] usb 2-1: Using ep0 maxpacket: 32 [ 498.412115][ T8706] usb 1-1: config 239 has an invalid interface number: 86 but max is 0 [ 498.420774][ T8706] usb 1-1: config 239 has no interface number 0 [ 498.427211][ T8706] usb 1-1: too many endpoints for config 239 interface 86 altsetting 68: 53, using maximum allowed: 30 [ 498.438848][ T8706] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 498.450408][ T8706] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has invalid wMaxPacketSize 0 [ 498.460773][ T8706] usb 1-1: config 239 interface 86 altsetting 68 has 1 endpoint descriptor, different from the interface descriptor's value: 53 [ 498.474226][ T8706] usb 1-1: config 239 interface 86 has no altsetting 0 [ 498.561854][ T8706] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=cf.33 [ 498.571103][ T8706] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 498.579274][ T8706] usb 1-1: SerialNumber: syz [ 498.679934][T10665] IPVS: ftp: loaded support on port[0] = 21 [ 498.727984][ T8711] usb 2-1: New USB device found, idVendor=054c, idProduct=009a, bcdDevice=2d.09 [ 498.737316][ T8711] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.745632][ T8711] usb 2-1: Product: syz [ 498.749948][ T8711] usb 2-1: Manufacturer: syz [ 498.754800][ T8711] usb 2-1: SerialNumber: syz [ 498.942628][ T8706] usbtest 1-1:239.86: couldn't get endpoints, -71 [ 498.949380][ T8706] usbtest: probe of 1-1:239.86 failed with error -71 [ 498.991046][ T8711] usb 2-1: can't set config #1, error -71 [ 499.003756][ T8711] usb 2-1: USB disconnect, device number 22 [ 499.051810][ T8706] usb 1-1: USB disconnect, device number 35 [ 499.131559][ T8707] Bluetooth: hci4: command 0x0409 tx timeout [ 499.427774][T10665] chnl_net:caif_netlink_parms(): no params data found [ 500.074723][T10665] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.083287][T10665] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.093096][T10665] device bridge_slave_0 entered promiscuous mode [ 500.291581][T10665] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.298858][T10665] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.308716][T10665] device bridge_slave_1 entered promiscuous mode [ 500.651716][T10665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 500.739043][T10665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 500.957473][T10665] team0: Port device team_slave_0 added [ 501.067075][T10665] team0: Port device team_slave_1 added [ 501.211083][ T8706] Bluetooth: hci4: command 0x041b tx timeout [ 501.386758][T10665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 501.394320][T10665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.420786][T10665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 501.766777][T10665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 501.774350][T10665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.800726][T10665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 502.282796][T10665] device hsr_slave_0 entered promiscuous mode [ 502.421695][T10665] device hsr_slave_1 entered promiscuous mode [ 502.465865][T10665] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 502.473634][T10665] Cannot create hsr debugfs directory [ 503.124415][T10665] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 503.158965][T10665] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 503.208924][T10665] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 503.252396][T10665] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 503.316444][ T8707] Bluetooth: hci4: command 0x040f tx timeout [ 503.934837][T10665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 503.996374][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 504.005430][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 504.038082][T10665] 8021q: adding VLAN 0 to HW filter on device team0 [ 504.077378][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 504.088355][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 504.097749][ T8707] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.105051][ T8707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 504.163454][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 504.174554][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 504.184420][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 504.193738][ T8707] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.201042][ T8707] bridge0: port 2(bridge_slave_1) entered forwarding state [ 504.210075][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 504.220917][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 504.263486][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 504.273913][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 504.291672][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 504.301973][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 504.312315][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 504.333535][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 504.343511][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 504.369652][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 504.379432][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 504.406129][T10665] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 504.465447][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 504.473264][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 504.516956][T10665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 504.575777][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 504.586412][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 504.656039][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 504.666822][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 504.692520][T10665] device veth0_vlan entered promiscuous mode [ 504.702942][ T8706] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 504.712036][ T8706] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 504.758214][T10665] device veth1_vlan entered promiscuous mode [ 504.833535][ T8706] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 504.842941][ T8706] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 504.852408][ T8706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 504.862348][ T8706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 504.885556][T10665] device veth0_macvtap entered promiscuous mode [ 504.908305][T10665] device veth1_macvtap entered promiscuous mode [ 504.968946][T10665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 504.981627][T10665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.991708][T10665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 505.002307][T10665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.012315][T10665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 505.022923][T10665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.032954][T10665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 505.043559][T10665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.057597][T10665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 505.065857][ T8706] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 505.075442][ T8706] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 505.085004][ T8706] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 505.095108][ T8706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 505.131556][T10665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 505.142118][T10665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.152171][T10665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 505.162810][T10665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.172883][T10665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 505.183520][T10665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.193581][T10665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 505.204213][T10665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.218312][T10665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 505.226670][ T8706] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 505.236747][ T8706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 505.386172][ T8706] Bluetooth: hci4: command 0x0419 tx timeout 07:30:24 executing program 4: r0 = add_key$keyring(&(0x7f00000005c0)='keyring\x00', &(0x7f0000000600)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000000)={0x68, 0x3}, 0xc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000380)='asymmetric\x00', &(0x7f0000000240)=@chain={'key_or_keyring:', 0x0, ':chain\x00'}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000380)='asymmetric\x00', &(0x7f0000000340)=@chain={'key_or_keyring:', 0x0, ':chain\x00'}) keyctl$instantiate(0xc, r0, &(0x7f0000000040)=ANY=[@ANYBLOB="6c6f6164737465643a747275737465643a20301f30303030303030303030303030303030303120656237633333333700"], 0x3c, 0xfffffffffffffffb) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000357373082505a0a433cf0000100109021b0001ef0000000904564435d0000f2009058521"], 0x0) 07:30:24 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x14f) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$system_posix_acl(0x0, &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000a80)=ANY=[@ANYBLOB="020000000100060000000000020002c0304edb22351cb2d9febac8b2d2ed7e8a9b9e5041998c7996dfc637f385af3814ee1a96d400f067e35593e8fa55a93aa89e625a064e6c382b40a3d3045dc2f3ef0f3f2d93ca280b2abd8f2da2b2dbee57009c534b283da89199cf854e759131d105be62d1cebc11f662a3284f765a415851badda58e7293bb7faf4e38a70be2a532125115765c3ee97e55d5b6d7f06435784d26bfd06239670deff4812eca57df3a55cc9bb31fc761bf558313e4eaacca5531a2baf053ea31b6e9a165e708799b9923118874d4bf793e28f612", @ANYRES32=0x0, @ANYRES16=r1, @ANYBLOB='B0\x00\x00\n\x00', @ANYRESDEC=r0, @ANYRESOCT, @ANYRES64, @ANYRESHEX, @ANYRES16=r1], 0x5c, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000000c0)='./file0\x00') mkdirat(r2, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r2, &(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) dup(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305839, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x7fffffd}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x3, 0x5844, 0x1}, 0x40) 07:30:24 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000400000300c280000500030010000000"], 0x48}}, 0x0) 07:30:24 executing program 1: r0 = socket(0xf, 0x3, 0x2) accept$inet6(r0, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f0000000000)={{0x0, 0x0, @descriptor="7c8744008b7c675f"}}) 07:30:24 executing program 0: ioctl$SNDRV_PCM_IOCTL_FORWARD(0xffffffffffffffff, 0x40084149, &(0x7f0000000100)=0x5) ioctl$SNDCTL_SYNTH_ID(0xffffffffffffffff, 0xc08c5114, &(0x7f0000000000)={"f56337000c68a02dc3a47b0941a2e2d39d86e7b0c686ed9ea93bdae95264", 0x1, 0x1, 0x400, 0x0, 0x10001, 0x300, 0x7, 0x5, [0x4, 0x80000000, 0x0, 0x8001, 0x7, 0x3, 0x40, 0x1, 0x101, 0xffff, 0x10000, 0x9, 0x30ef, 0xfffffff7, 0xbb503ac, 0x4, 0x1bd0, 0xfff, 0x3]}) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000357373082505a0a433cf0000100109021b0001ef0000000904564435d0000f2009058521"], 0x0) [ 506.084113][ C1] sd 0:0:1:0: [sg0] tag#835 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 506.094727][ C1] sd 0:0:1:0: [sg0] tag#835 CDB: Test Unit Ready [ 506.101448][ C1] sd 0:0:1:0: [sg0] tag#835 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.111235][ C1] sd 0:0:1:0: [sg0] tag#835 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.121032][ C1] sd 0:0:1:0: [sg0] tag#835 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.130796][ C1] sd 0:0:1:0: [sg0] tag#835 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.140558][ C1] sd 0:0:1:0: [sg0] tag#835 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.150297][ C1] sd 0:0:1:0: [sg0] tag#835 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.160052][ C1] sd 0:0:1:0: [sg0] tag#835 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.169822][ C1] sd 0:0:1:0: [sg0] tag#835 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.179509][ C1] sd 0:0:1:0: [sg0] tag#835 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.189259][ C1] sd 0:0:1:0: [sg0] tag#835 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.199012][ C1] sd 0:0:1:0: [sg0] tag#835 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.208769][ C1] sd 0:0:1:0: [sg0] tag#835 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.218502][ C1] sd 0:0:1:0: [sg0] tag#835 CDB[c0]: 00 00 00 00 00 00 00 00 07:30:24 executing program 3: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000400000300c280000500030010000000"], 0x48}}, 0x0) 07:30:24 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x3f}, @NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x10001}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008004}, 0x8004000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="afdf23fc0000df01000020"], 0x24}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 07:30:24 executing program 2: socket$netlink(0x10, 0x3, 0xf) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180), 0x8) r1 = socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f00000003c0)={'tunl0\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}) readahead(r0, 0x6000, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) io_getevents(0x0, 0xdbf, 0x6, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000100)={0x77359400}) ioctl$sock_netdev_private(r4, 0x8923, &(0x7f0000000000)=':') sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYRES64=r4, @ANYRES32=r5, @ANYBLOB="080026bd719b3f7080000000000200000008060300", @ANYRES64, @ANYBLOB="34f68de25c0d0a87ea4ffd17092e4087cbcd6b9fa7ae4273b2cee9ecc41559362232e645187f14869847d71cc476fb73c67b6c4bc3741b3ed8e0ed7e8d0b45fcdeaaa405aeb5b315644d32ea5a2ada9fc603fb668dfe1e3389908eab6bd43faaaae25663d724f200160e864ed1143ee1a0519a0f438a47815f9b58e2161c4fadc758daab16cd60"], 0x5}, 0x1, 0x0, 0x0, 0xc040}, 0x8880) r6 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$USBDEVFS_REAPURBNDELAY(r6, 0x4008550d, &(0x7f0000000440)) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000, 0x10000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_REPLAY_PROTECT={0x5}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0) [ 506.693935][T10947] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 506.810268][ T27] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 506.889979][ T8708] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 507.041397][T10954] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 507.070132][ T27] usb 1-1: Using ep0 maxpacket: 8 07:30:25 executing program 3: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000400000300c280000500030010000000"], 0x48}}, 0x0) [ 507.149948][ T8708] usb 5-1: Using ep0 maxpacket: 8 [ 507.212662][ T27] usb 1-1: config 239 has an invalid interface number: 86 but max is 0 [ 507.221190][ T27] usb 1-1: config 239 has no interface number 0 [ 507.227618][ T27] usb 1-1: too many endpoints for config 239 interface 86 altsetting 68: 53, using maximum allowed: 30 [ 507.238938][ T27] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 507.250361][ T27] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has invalid wMaxPacketSize 0 [ 507.260726][ T27] usb 1-1: config 239 interface 86 altsetting 68 has 1 endpoint descriptor, different from the interface descriptor's value: 53 [ 507.274153][ T27] usb 1-1: config 239 interface 86 has no altsetting 0 [ 507.321568][ T8708] usb 5-1: config 239 has an invalid interface number: 86 but max is 0 [ 507.330431][ T8708] usb 5-1: config 239 has no interface number 0 [ 507.336865][ T8708] usb 5-1: too many endpoints for config 239 interface 86 altsetting 68: 53, using maximum allowed: 30 [ 507.348190][ T8708] usb 5-1: config 239 interface 86 altsetting 68 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 507.359626][ T8708] usb 5-1: config 239 interface 86 altsetting 68 endpoint 0x85 has invalid wMaxPacketSize 0 [ 507.369970][ T8708] usb 5-1: config 239 interface 86 altsetting 68 has 1 endpoint descriptor, different from the interface descriptor's value: 53 [ 507.383385][ T8708] usb 5-1: config 239 interface 86 has no altsetting 0 07:30:25 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x9}, &(0x7f0000000080)=0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="180000001400090400010000000000001200000004000080"], 0x18}}, 0x0) r3 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x7) fallocate(r3, 0x100000003, 0x6, 0x2da3) 07:30:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000040), &(0x7f00000000c0)=0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xaa, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x2c}}, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000002c0)={0x0, 0x118afa97ca37b3e8}) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f0000000100)={@any, 0x6, 0x0, 0xec8}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 507.750586][ T27] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=cf.33 [ 507.759985][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 507.768140][ T27] usb 1-1: SerialNumber: syz [ 507.781183][ T8708] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=cf.33 [ 507.790578][ T8708] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 507.798797][ T8708] usb 5-1: SerialNumber: syz 07:30:26 executing program 3: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000400000300c280000500030010000000"], 0x48}}, 0x0) [ 508.178308][ T27] usbtest 1-1:239.86: couldn't get endpoints, -71 [ 508.185364][ T27] usbtest: probe of 1-1:239.86 failed with error -71 [ 508.200520][ T8708] usbtest 5-1:239.86: couldn't get endpoints, -71 [ 508.252763][ T8708] usbtest: probe of 5-1:239.86 failed with error -71 [ 508.314912][ T27] usb 1-1: USB disconnect, device number 36 [ 508.339109][ T8708] usb 5-1: USB disconnect, device number 2 07:30:26 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc494) rename(&(0x7f0000000480)='./file0\x00', &(0x7f00000001c0)='./file1/file0\x00') clone(0x8000000000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lchown(&(0x7f0000000340)='./file1\x00', 0xffffffffffffffff, 0x0) 07:30:26 executing program 1: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x0, 0x0) read$dsp(r0, &(0x7f0000000000)=""/161, 0xa1) ioctl$SOUND_PCM_READ_BITS(r0, 0x80045005, &(0x7f0000000200)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000140)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x8500, 0x0) write$P9_RLOPEN(r1, &(0x7f0000000180)={0x18, 0xd, 0x2, {{0x80}, 0x1f}}, 0x18) 07:30:26 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000a78302206d040e0a4a466009601c090212000100000000090400000003"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='\x00', 0xfffffffffffffffc) keyctl$update(0x2, r1, &(0x7f00000000c0), 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="28000025591fe7b82f3afffc8707a044797da151bb9c3006f2ab9ee7bcdbf0555c3bfedb431afc91f93bcedd6e3a4a0e2678a0576b4da4d40ebe28ddd209a12c636adea9e1715c15b5b3ba11e36b5828ff4520365a72c37db347ee16a5dc7218b1246b3ae54c9edf4e0df145fac9", @ANYRES64=r4, @ANYBLOB="020208"], 0x28}}, 0x0) r5 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[@ANYRESDEC=r4], 0xfd14) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r4, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x24}}, 0x10) syz_usb_control_io$uac1(r0, 0x0, 0x0) 07:30:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) [ 508.910076][ T27] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 509.129911][ T8711] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 509.159798][ T27] usb 1-1: Using ep0 maxpacket: 8 [ 509.283728][ T27] usb 1-1: config 239 has an invalid interface number: 86 but max is 0 [ 509.292372][ T27] usb 1-1: config 239 has no interface number 0 [ 509.298796][ T27] usb 1-1: too many endpoints for config 239 interface 86 altsetting 68: 53, using maximum allowed: 30 [ 509.310292][ T27] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 509.321796][ T27] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has invalid wMaxPacketSize 0 [ 509.332202][ T27] usb 1-1: config 239 interface 86 altsetting 68 has 1 endpoint descriptor, different from the interface descriptor's value: 53 [ 509.345690][ T27] usb 1-1: config 239 interface 86 has no altsetting 0 [ 509.409831][ T8711] usb 3-1: device descriptor read/64, error 18 [ 509.563604][ T27] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=cf.33 [ 509.572867][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 509.581298][ T27] usb 1-1: SerialNumber: syz 07:30:27 executing program 0: setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(0xffffffffffffffff, 0x111, 0x3, 0x1, 0x4) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000357373082505a0a433cf0000100109021b0001ef0000000904564435d0000f2009058521"], 0x0) 07:30:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) [ 509.776480][ T27] usb 1-1: can't set config #239, error -71 [ 509.802599][ T8711] usb 3-1: device descriptor read/64, error 18 [ 509.817461][ T27] usb 1-1: USB disconnect, device number 37 07:30:28 executing program 4: mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @private=0xa010100}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x2400873d, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000800), 0xe}, 0x0, 0x272d, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r1, 0xc0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000780)={0x0, 0x5}, &(0x7f00000007c0)=0x8) tkill(0x0, 0x1004000000016) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0xbbf03096, 0x4) mq_notify(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x22}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1}, 0x10) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000100)={0x1, r1}) sendto$inet(r0, &(0x7f00000001c0)="0c268a927f1f6588b967481241ba0060f46ef65ac618ded8974895abeaf4b48304f922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a75118fbc7c99a785d7677a81e19a5e22acbf746bec66baefdb389b80247bad9a39b493", 0xfffffffffffffc66, 0x11, 0x0, 0x8) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f00000006c0)=""/84, &(0x7f0000000040)=0x54) 07:30:28 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x9) getsockname$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @private}, &(0x7f0000000040)=0x10) recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0, 0x0, 0x0, 0xff97}, 0xfffffffe}], 0x4000000000003be, 0x2000, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000480)=0x109, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) [ 510.073204][ T8711] usb 3-1: new high-speed USB device number 11 using dummy_hcd 07:30:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) [ 510.361648][ T8711] usb 3-1: device descriptor read/64, error 18 [ 510.459706][T10073] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 510.720387][T10073] usb 1-1: Using ep0 maxpacket: 8 [ 510.750301][ T8711] usb 3-1: device descriptor read/64, error 18 07:30:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) [ 510.856721][T10073] usb 1-1: config 239 has an invalid interface number: 86 but max is 0 [ 510.865233][T10073] usb 1-1: config 239 has no interface number 0 [ 510.870301][ T8711] usb usb3-port1: attempt power cycle [ 510.871837][T10073] usb 1-1: too many endpoints for config 239 interface 86 altsetting 68: 53, using maximum allowed: 30 [ 510.888389][T10073] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 510.900789][T10073] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has invalid wMaxPacketSize 0 [ 510.911231][T10073] usb 1-1: config 239 interface 86 altsetting 68 has 1 endpoint descriptor, different from the interface descriptor's value: 53 [ 510.924727][T10073] usb 1-1: config 239 interface 86 has no altsetting 0 [ 511.481676][T10073] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=cf.33 [ 511.491158][T10073] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 511.499598][T10073] usb 1-1: SerialNumber: syz 07:30:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 07:30:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=@newlink={0x58, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_REPLAY_PROTECT={0x5}, @IFLA_MACSEC_WINDOW={0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x58}}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x20000000, &(0x7f0000000000)="a58c1f9a1f2583852928fd1d20a3", &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000440)="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") [ 511.600488][ T8711] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 511.780825][ T8711] usb 3-1: device descriptor read/8, error -61 [ 512.020445][T10073] usbtest 1-1:239.86: couldn't get endpoints, -71 [ 512.027334][T10073] usbtest: probe of 1-1:239.86 failed with error -71 07:30:30 executing program 2: ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000040)=0x7fffffff) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x80, 0x0) ioctl$KVM_GET_XSAVE(r0, 0x9000aea4, &(0x7f0000000080)) [ 512.129854][ T8711] usb 3-1: device descriptor read/8, error -71 [ 512.138576][T10073] usb 1-1: USB disconnect, device number 38 [ 512.190059][T11049] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 07:30:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 07:30:31 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000002040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1038, 0x1410, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x44d}}}}]}}]}}, &(0x7f00000032c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0xe, {0xe, 0x0, "f845fad15fe95a4bcfe779c8"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000000)) syz_usb_control_io(r0, &(0x7f0000001d80)={0x2c, &(0x7f0000001b80)={0x0, 0x0, 0xc, {0xc, 0x0, "7552f32787000a97f302"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 07:30:31 executing program 2: socket$inet(0x2, 0x2, 0x0) socket$pppoe(0x18, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) socket(0x10, 0x3, 0x0) epoll_create(0x101e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000000)={'hsr0\x00', {0x2, 0x4e24, @dev}}) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001000074774270600fd5721540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005200d00000400000a0005c00009d35b0000009833abded4f6d208000000000000000506992581e2e592da4f80cb61f4df2c7ed053c63b66"], 0x50}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x0) 07:30:31 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000440)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000480)={0x628, r3, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x600, 0x8, 0x0, 0x1, [{0x270, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg='\xdb\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff'}, @WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @local}}, @WGPEER_A_ALLOWEDIPS={0x208, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}]}]}, {0x38c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g='\xd1s(\x99\xf6\x11\xcd\x89\x94\x03M\x7fA=\xc9Wc\x0eT\x93\xc2\x85\xac\xa4\x00e\xcbc\x11\xbeik'}, @WGPEER_A_ALLOWEDIPS={0x328, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @empty}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @local}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg='\xdb\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff'}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x628}}, 0x0) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r3, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x1f}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x42000) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000357373082505a0a433cf0000100109021b0001ef0000000904564435d0000f2009058521"], 0x0) r4 = signalfd4(r0, &(0x7f0000000140)={[0x2]}, 0x8, 0x80000) ioctl$EVIOCSKEYCODE(r4, 0x40084504, &(0x7f0000000180)=[0xffffff54, 0xae]) 07:30:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) [ 513.383639][T11070] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 513.392076][T11070] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 513.401525][T11070] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.2'. [ 513.439892][ T8708] usb 5-1: new high-speed USB device number 3 using dummy_hcd 07:30:31 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x54, 0xf2, 0x22, 0x40, 0x10c4, 0x80f6, 0x38f2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2c, 0x26, 0xa1}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000000)={0x44, &(0x7f00000001c0)={0x0, 0x0, 0x1, '!'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000100)=ANY=[@ANYBLOB="b94c60ae1a84ab52bed9ddee6a5d052bcd52728daef029d886427637d673b4d8"], 0x0, 0x0, 0x0, 0x0, 0x0}) [ 513.522034][ T9014] usb 1-1: new high-speed USB device number 39 using dummy_hcd 07:30:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) [ 513.690954][ T8708] usb 5-1: Using ep0 maxpacket: 8 07:30:32 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) r1 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="475ab6dc6f778b510e200c9afefec5376fac5bc99f4ab8b89cef1f9895735b13762d1824dd9f2c4bc4f07d93b8084d133d9b94ceeabd247090ae7255ae6681d2d8429e2bd29f52e8ab504f18d31f035a3a40c02773f67795fad050c6801351128a429f50edabab968c36d8a9d7eb69238d2237d67329dbe84d48b79d815453e4e1296fa24745bb92f507fa349df1c4d1aa4e459b4f518e255d92b2acf63a750855b1019541247931e1efd7f86ab7d9805c6fd2b29c0fa3ee93045ed6c434af09b5ecd82d129e8f9e7899d755cc369a39ae82ed6dac6e6c9d"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000008c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000001980)={0x14, 0x0, &(0x7f0000001940)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 513.780235][ T9014] usb 1-1: Using ep0 maxpacket: 8 [ 513.821294][ T8708] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 513.832649][ T8708] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 513.923503][ T9014] usb 1-1: config 239 has an invalid interface number: 86 but max is 0 [ 513.932178][ T9014] usb 1-1: config 239 has no interface number 0 [ 513.938602][ T9014] usb 1-1: too many endpoints for config 239 interface 86 altsetting 68: 53, using maximum allowed: 30 [ 513.950080][ T9014] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 513.961532][ T9014] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has invalid wMaxPacketSize 0 [ 513.971878][ T9014] usb 1-1: config 239 interface 86 altsetting 68 has 1 endpoint descriptor, different from the interface descriptor's value: 53 [ 513.985350][ T9014] usb 1-1: config 239 interface 86 has no altsetting 0 07:30:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) [ 514.160168][ T27] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 514.178711][ T8708] usb 5-1: string descriptor 0 read error: -22 [ 514.185389][ T8708] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.40 [ 514.194926][ T8708] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.254111][ T9014] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=cf.33 [ 514.263692][ T9014] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 514.269582][ T8707] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 514.272011][ T9014] usb 1-1: SerialNumber: syz 07:30:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0], 0x48}}, 0x0) [ 514.540177][ T27] usb 2-1: New USB device found, idVendor=10c4, idProduct=80f6, bcdDevice=38.f2 [ 514.549975][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.550666][ T8707] usb 3-1: device descriptor read/64, error 18 [ 514.601469][ T27] usb 2-1: config 0 descriptor?? [ 514.659232][ T27] cp210x 2-1:0.0: cp210x converter detected [ 514.689376][ T9014] usbtest 1-1:239.86: couldn't get endpoints, -71 [ 514.696230][ T9014] usbtest: probe of 1-1:239.86 failed with error -71 [ 514.740608][ T9014] usb 1-1: USB disconnect, device number 39 [ 514.761980][T11097] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 514.969381][ T8707] usb 3-1: device descriptor read/64, error 18 07:30:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0], 0x48}}, 0x0) [ 515.053337][ T8708] steelseries_srws1 0003:1038:1410.0007: unknown main item tag 0x0 [ 515.061624][ T8708] steelseries_srws1 0003:1038:1410.0007: unexpected long global item [ 515.070452][ T8708] steelseries_srws1 0003:1038:1410.0007: parse failed [ 515.077592][ T8708] steelseries_srws1: probe of 0003:1038:1410.0007 failed with error -22 [ 515.109573][ T27] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: 0 [ 515.117353][ T27] cp210x 2-1:0.0: GPIO initialisation failed: -5 [ 515.239145][ T8707] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 515.279168][T11109] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 515.310977][T10073] usb 5-1: USB disconnect, device number 3 [ 515.330265][ T27] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 515.353113][ T27] cp210x: probe of ttyUSB0 failed with error -71 [ 515.396241][ T27] usb 2-1: USB disconnect, device number 23 [ 515.404561][ T27] cp210x 2-1:0.0: device disconnected [ 515.439460][ T8706] usb 1-1: new high-speed USB device number 40 using dummy_hcd 07:30:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0], 0x48}}, 0x0) [ 515.520075][ T8707] usb 3-1: device descriptor read/64, error 18 [ 515.681870][ T8706] usb 1-1: Using ep0 maxpacket: 8 [ 515.767385][T11126] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 515.803495][ T8706] usb 1-1: config 239 has an invalid interface number: 86 but max is 0 [ 515.812040][ T8706] usb 1-1: config 239 has no interface number 0 [ 515.818459][ T8706] usb 1-1: too many endpoints for config 239 interface 86 altsetting 68: 53, using maximum allowed: 30 [ 515.829914][ T8706] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 515.841459][ T8706] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has invalid wMaxPacketSize 0 [ 515.852011][ T8706] usb 1-1: config 239 interface 86 altsetting 68 has 1 endpoint descriptor, different from the interface descriptor's value: 53 [ 515.865481][ T8706] usb 1-1: config 239 interface 86 has no altsetting 0 07:30:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB], 0x48}}, 0x0) [ 515.949472][ T8707] usb 3-1: device descriptor read/64, error 18 [ 516.069132][ T8707] usb usb3-port1: attempt power cycle [ 516.089135][T10073] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 516.097256][ T27] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 516.110368][ T8706] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=cf.33 [ 516.119784][ T8706] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 516.127945][ T8706] usb 1-1: SerialNumber: syz [ 516.204622][T11131] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 516.350519][ T27] usb 5-1: Using ep0 maxpacket: 8 [ 516.361454][ T8706] usb 1-1: can't set config #239, error -71 [ 516.392646][ T8706] usb 1-1: USB disconnect, device number 40 [ 516.491229][T10073] usb 2-1: New USB device found, idVendor=10c4, idProduct=80f6, bcdDevice=38.f2 [ 516.500584][T10073] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.511049][ T27] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.522188][ T27] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 516.580201][T10073] usb 2-1: config 0 descriptor?? [ 516.622799][T10073] cp210x 2-1:0.0: cp210x converter detected 07:30:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x8041, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [0xc0000103]}) dup2(r4, r3) 07:30:34 executing program 0: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x281380, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$CAN_RAW_JOIN_FILTERS(r3, 0x65, 0x6, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_ASSIGN_SET_INTX_MASK(r1, 0x4040aea4, &(0x7f0000000040)={0x3, 0x9, 0x1b, 0x0, 0x7}) syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201350000100109021b0001ef0000010904564435d000a5d5fe04fb3b10913c5485210d3db90d049ade168160a9abe935f3783bcad458303a9a737cbb3d66ea433ea885700e4a33524934d3bd67a1b1302ee8ff36b37156b3deab0a42e800ba83087dd2c59b659818f5624c1c03ec1ef0481188f564f0fcf08347efc43bbe6dc8aca1a9b8424c9377544c182ceeb123c794ed96d8f31d974adc2bba830a3702917aa06071b8be48000093f1789f123be1f81c7e5afb31d74985a937d5b0943bef0000"], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$ARPT_SO_GET_ENTRIES(r5, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x61, "7a50611ed9c9593765839c953a2a4a8a163f0e5c66e4cff65dfc1ad3091f092530fcae3eea79e4d73a57b4b86163a55d7ae16386be03d39b0df390bf642ddf7047b638e0bd9a74d4724a4a8855b2737876c9e9ccb14358595921d164cfcd22557d"}, &(0x7f00000002c0)=0x85) 07:30:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB], 0x48}}, 0x0) [ 516.741613][ T27] usb 5-1: string descriptor 0 read error: -71 [ 516.748149][ T27] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.40 [ 516.758042][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.778759][ T8707] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 516.835118][T11144] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 516.891941][ T27] usb 5-1: can't set config #1, error -71 07:30:35 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x54, 0xf2, 0x22, 0x40, 0x10c4, 0x80f6, 0x38f2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2c, 0x26, 0xa1}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000000)={0x44, &(0x7f00000001c0)={0x0, 0x0, 0x1, '!'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000100)=ANY=[@ANYBLOB="b94c60ae1a84ab52bed9ddee6a5d052bcd52728daef029d886427637d673b4d8"], 0x0, 0x0, 0x0, 0x0, 0x0}) [ 516.944651][ T27] usb 5-1: USB disconnect, device number 4 [ 516.949903][ T8707] usb 3-1: device descriptor read/8, error -61 [ 516.981627][T10073] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 516.989416][T10073] cp210x 2-1:0.0: querying part number failed [ 517.059399][T10073] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 517.066788][T10073] cp210x: probe of ttyUSB0 failed with error -71 07:30:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB], 0x48}}, 0x0) [ 517.160233][T11154] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 517.179778][ T8706] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 517.186081][T10073] usb 2-1: USB disconnect, device number 24 [ 517.195376][T10073] cp210x 2-1:0.0: device disconnected 07:30:35 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x116, &(0x7f0000000580)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x8, 0x0) [ 517.280122][ T8707] usb 3-1: device descriptor read/8, error -71 [ 517.417497][T11171] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 517.459456][ T8706] usb 1-1: device descriptor read/64, error 18 07:30:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000"], 0x48}}, 0x0) 07:30:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x8041, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [0xc0000103]}) dup2(r4, r3) [ 517.700144][T10073] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 517.705016][T11184] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 07:30:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000"], 0x48}}, 0x0) [ 517.848869][ T8706] usb 1-1: device descriptor read/64, error 18 [ 517.995630][T11188] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 518.099378][T10073] usb 2-1: New USB device found, idVendor=10c4, idProduct=80f6, bcdDevice=38.f2 [ 518.108790][T10073] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.119464][ T8706] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 518.144217][T11193] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 518.151530][T10073] usb 2-1: config 0 descriptor?? [ 518.211962][T10073] cp210x 2-1:0.0: cp210x converter detected 07:30:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000"], 0x48}}, 0x0) [ 518.388701][ T8706] usb 1-1: device descriptor read/64, error 18 07:30:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x8041, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [0xc0000103]}) dup2(r4, r3) [ 518.519242][T11200] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 518.630282][T11202] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 518.651812][T10073] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: 0 [ 518.659664][T10073] cp210x 2-1:0.0: GPIO initialisation failed: -5 07:30:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c00040004000003"], 0x48}}, 0x0) [ 518.789577][ T8706] usb 1-1: device descriptor read/64, error 18 [ 518.869503][T10073] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 518.876948][T10073] cp210x: probe of ttyUSB0 failed with error -71 [ 518.889443][T11210] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 518.913954][ T8706] usb usb1-port1: attempt power cycle [ 518.937522][T10073] usb 2-1: USB disconnect, device number 25 [ 518.997813][T10073] cp210x 2-1:0.0: device disconnected 07:30:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x8041, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [0xc0000103]}) dup2(r4, r3) [ 519.365756][T11222] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 519.628963][ T8706] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 519.722427][ T8706] usb 1-1: Invalid ep0 maxpacket: 9 07:30:38 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000357373082505a0a433cf0000100109021b0001ef0000000904564435d0000f2009058521"], 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r1 = open_tree(r0, &(0x7f0000000040)='./file0\x00', 0x0) ioctl$KVM_GET_SREGS(r1, 0x8138ae83, &(0x7f0000000100)) 07:30:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c00040004000003"], 0x48}}, 0x0) 07:30:38 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x54, 0xf2, 0x22, 0x40, 0x10c4, 0x80f6, 0x38f2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2c, 0x26, 0xa1}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000000)={0x44, &(0x7f00000001c0)={0x0, 0x0, 0x1, '!'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000100)=ANY=[@ANYBLOB="b94c60ae1a84ab52bed9ddee6a5d052bcd52728daef029d886427637d673b4d8"], 0x0, 0x0, 0x0, 0x0, 0x0}) 07:30:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x8041, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [0xc0000103]}) [ 519.881306][ T8706] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 520.008593][ T8706] usb 1-1: device descriptor read/8, error -71 [ 520.046010][T11237] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 520.111839][T11235] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 520.218525][ T8706] usb 1-1: device descriptor read/8, error -71 [ 520.312490][ T8708] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 520.342224][ T8706] usb usb1-port1: unable to enumerate USB device 07:30:38 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$dsp(r0, &(0x7f0000000040)=""/146, 0x92) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000100)=0x9) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000280)={0x3f, 0x1000}) r1 = socket(0x10, 0x80002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x200, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r5, 0x40206417, &(0x7f0000000240)={0x3, 0x8, 0x1, 0x7, 0x7, 0x6}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="44009d001000010400"/20, @ANYRES32=r4, @ANYBLOB="0102000000000000240012800b00010062726964676500001400028008000500000000000500170000000000"], 0x44}}, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924924924923aa, 0x0) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0)={r5}, 0x8) ioctl$CAPI_REGISTER(r8, 0x400c4301, &(0x7f0000000300)={0x0, 0x9, 0x2}) 07:30:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c00040004000003"], 0x48}}, 0x0) 07:30:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x8041, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [0xc0000103]}) [ 520.663274][T11248] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 520.703009][ T8708] usb 2-1: New USB device found, idVendor=10c4, idProduct=80f6, bcdDevice=38.f2 [ 520.712359][ T8708] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.718429][ T8706] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 520.765856][ T8708] usb 2-1: config 0 descriptor?? [ 520.816481][ T8708] cp210x 2-1:0.0: cp210x converter detected 07:30:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000400000300c280000500"], 0x48}}, 0x0) [ 520.901263][T11252] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 520.969048][ T8706] usb 1-1: Using ep0 maxpacket: 8 [ 521.088581][ T8706] usb 1-1: config 239 has an invalid interface number: 86 but max is 0 [ 521.097166][ T8706] usb 1-1: config 239 has no interface number 0 [ 521.103784][ T8706] usb 1-1: too many endpoints for config 239 interface 86 altsetting 68: 53, using maximum allowed: 30 [ 521.115128][ T8706] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 521.126727][ T8706] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has invalid wMaxPacketSize 0 [ 521.137179][ T8706] usb 1-1: config 239 interface 86 altsetting 68 has 1 endpoint descriptor, different from the interface descriptor's value: 53 [ 521.150629][ T8706] usb 1-1: config 239 interface 86 has no altsetting 0 [ 521.240734][ T8708] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: 0 [ 521.248931][ T8708] cp210x 2-1:0.0: GPIO initialisation failed: -5 07:30:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000400000300c280000500"], 0x48}}, 0x0) 07:30:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x8041, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [0xc0000103]}) [ 521.439154][ T8706] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=cf.33 [ 521.449539][ T8706] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 521.457702][ T8706] usb 1-1: SerialNumber: syz [ 521.468975][ T8708] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 521.476257][ T8708] cp210x: probe of ttyUSB0 failed with error -71 [ 521.567133][ T8708] usb 2-1: USB disconnect, device number 26 [ 521.575615][ T8708] cp210x 2-1:0.0: device disconnected 07:30:39 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x2000008, 0x10032, 0xffffffffffffffff, 0xea119000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) init_module(&(0x7f0000000000)='cpu.stat\x00', 0x9, &(0x7f0000000040)='\\.O,\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) [ 521.758442][T11280] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 07:30:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000400000300c280000500"], 0x48}}, 0x0) [ 521.862321][ T8706] usbtest 1-1:239.86: couldn't get endpoints, -71 [ 521.869621][ T8706] usbtest: probe of 1-1:239.86 failed with error -71 [ 521.887287][ T8706] usb 1-1: USB disconnect, device number 45 [ 522.588816][ T8706] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 522.829886][ T8706] usb 1-1: Using ep0 maxpacket: 8 [ 522.949352][ T8706] usb 1-1: config 239 has an invalid interface number: 86 but max is 0 [ 522.957787][ T8706] usb 1-1: config 239 has no interface number 0 [ 522.964525][ T8706] usb 1-1: too many endpoints for config 239 interface 86 altsetting 68: 53, using maximum allowed: 30 [ 522.975868][ T8706] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 522.987348][ T8706] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has invalid wMaxPacketSize 0 [ 522.997697][ T8706] usb 1-1: config 239 interface 86 altsetting 68 has 1 endpoint descriptor, different from the interface descriptor's value: 53 [ 523.011206][ T8706] usb 1-1: config 239 interface 86 has no altsetting 0 07:30:41 executing program 0: r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000040)={{0x2, 0x4e22, @local}, {0x6, @local}, 0x8, {0x2, 0x4e22, @loopback}, 'ip6gretap0\x00'}) syz_usb_connect(0x1, 0x2d, &(0x7f00000000c0)=ANY=[], 0x0) 07:30:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x8041, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [0xc0000103]}) 07:30:41 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x54, 0xf2, 0x22, 0x40, 0x10c4, 0x80f6, 0x38f2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2c, 0x26, 0xa1}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000000)={0x44, &(0x7f00000001c0)={0x0, 0x0, 0x1, '!'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000100)=ANY=[@ANYBLOB="b94c60ae1a84ab52bed9ddee6a5d052bcd52728daef029d886427637d673b4d8"], 0x0, 0x0, 0x0, 0x0, 0x0}) 07:30:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000400000300c280000500030010"], 0x48}}, 0x0) 07:30:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x8041, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [0xc0000103]}) [ 523.338193][ T8706] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=cf.33 [ 523.347382][ T8706] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 523.418446][ T8706] usb 1-1: can't set config #239, error -71 [ 523.472215][ T8706] usb 1-1: USB disconnect, device number 46 [ 523.586915][T11314] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 07:30:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000400000300c280000500"], 0x48}}, 0x0) [ 523.698583][ T9014] usb 2-1: new high-speed USB device number 27 using dummy_hcd 07:30:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x8041, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [0xc0000103]}) 07:30:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x8041, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [0xc0000103]}) [ 524.010291][ T8706] usb 1-1: new low-speed USB device number 47 using dummy_hcd [ 524.089425][ T9014] usb 2-1: New USB device found, idVendor=10c4, idProduct=80f6, bcdDevice=38.f2 [ 524.098928][ T9014] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.120874][T11328] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 07:30:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000400000300c280000500"], 0x48}}, 0x0) 07:30:42 executing program 5: read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x80010, r0, 0x7f) getpgid(0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000080)=""/61, 0x3d) ioctl$DRM_IOCTL_AGP_ENABLE(r0, 0x40086432, &(0x7f00000000c0)=0x6) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x14000, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, 0x13, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x810, r1, 0x9f025000) clock_getres(0x1, &(0x7f0000000340)) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x453, 0x2, 0x70bd27, 0x25dfdbfe, "f590f82e98b59eb14a1cda4137d20dddddae", [""]}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x4050) epoll_pwait(r0, &(0x7f0000000480)=[{}, {}, {}], 0x3, 0xfff, &(0x7f00000004c0)={[0x100000001]}, 0x8) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000500)={'raw\x00', 0x4, [{}, {}, {}, {}]}, 0x68) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000580), &(0x7f00000005c0)=0x8) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000600)='/proc/capi/capi20ncci\x00', 0x20000, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000940)={'gre0\x00', &(0x7f00000008c0)={'gretap0\x00', 0x0, 0x8, 0x0, 0x80000, 0x4, {{0x15, 0x4, 0x3, 0x0, 0x54, 0x64, 0x0, 0x8, 0x29, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x36}, {[@end, @timestamp_addr={0x44, 0x24, 0x8b, 0x1, 0x1, [{@multicast1, 0x9}, {@remote, 0x3ff}, {@local, 0x6}, {@empty, 0x1}]}, @ssrr={0x89, 0x1b, 0x1b, [@remote, @multicast1, @rand_addr=0x64010102, @multicast2, @dev={0xac, 0x14, 0x14, 0x2b}, @rand_addr=0x64010102]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000980)={'vxcan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000ec0)={'sit0\x00', &(0x7f0000000e40)={'ip6gre0\x00', 0x0, 0x2f, 0xff, 0x2, 0x5, 0x26, @private0, @mcast1, 0x700, 0x40, 0x1ff, 0x8000}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f00000010c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001080)={&(0x7f0000000f00)={0x160, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) syz_open_dev$midi(&(0x7f0000001100)='/dev/midi#\x00', 0x2, 0x6340) [ 524.124534][ T9014] usb 2-1: config 0 descriptor?? [ 524.228171][ T9014] cp210x 2-1:0.0: cp210x converter detected [ 524.288132][ T8706] usb 1-1: device descriptor read/64, error 18 [ 524.348051][T11337] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 07:30:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x8041, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [0xc0000103]}) 07:30:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000400000300c280000500"], 0x48}}, 0x0) [ 524.618345][ T9014] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: 0 [ 524.626245][ T9014] cp210x 2-1:0.0: GPIO initialisation failed: -5 [ 524.687842][ T8706] usb 1-1: device descriptor read/64, error 18 [ 524.745576][T11347] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 524.837988][ T9014] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 524.845444][ T9014] cp210x: probe of ttyUSB0 failed with error -71 [ 524.897720][ T9014] usb 2-1: USB disconnect, device number 27 [ 524.933137][ T9014] cp210x 2-1:0.0: device disconnected [ 524.963538][ T8706] usb 1-1: new low-speed USB device number 48 using dummy_hcd [ 525.240349][ T8706] usb 1-1: device descriptor read/64, error 18 [ 525.628807][ T8706] usb 1-1: device descriptor read/64, error 18 [ 525.750952][ T8706] usb usb1-port1: attempt power cycle [ 526.467810][ T8706] usb 1-1: new low-speed USB device number 49 using dummy_hcd [ 526.802035][T11376] IPVS: ftp: loaded support on port[0] = 21 07:30:45 executing program 0: io_setup(0x5f, &(0x7f00000000c0)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0) io_submit(r0, 0x8, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0x65}]) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000357373082505a0a433cf0000100109021b0001ef0000000904564435d0000f2009058521", @ANYRES32=r1], 0x0) 07:30:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x8041, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [0xc0000103]}) 07:30:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r1, 0x1, 0x0, 0x0, {0x4}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x28}}, 0x0) 07:30:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000400000300c2800005000300"], 0x48}}, 0x0) 07:30:45 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x54, 0xf2, 0x22, 0x40, 0x10c4, 0x80f6, 0x38f2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2c, 0x26, 0xa1}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000000)={0x44, &(0x7f00000001c0)={0x0, 0x0, 0x1, '!'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 526.888102][ T8706] usb 1-1: device descriptor read/8, error -71 [ 527.157710][ T8706] usb 1-1: device descriptor read/8, error -71 [ 527.467901][ T12] usb 2-1: new high-speed USB device number 28 using dummy_hcd 07:30:45 executing program 2: r0 = socket(0xa, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) 07:30:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x8041, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [0xc0000103]}) [ 527.830757][ T12] usb 2-1: New USB device found, idVendor=10c4, idProduct=80f6, bcdDevice=38.f2 [ 527.840196][ T12] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.972015][ T12] usb 2-1: config 0 descriptor?? [ 528.061631][ T12] cp210x 2-1:0.0: cp210x converter detected [ 528.170696][ T8706] usb 1-1: new high-speed USB device number 50 using dummy_hcd 07:30:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000400000300c2800005000300"], 0x48}}, 0x0) [ 528.318374][ T8706] usb 1-1: Using ep0 maxpacket: 8 [ 528.438641][ T8706] usb 1-1: config 239 has an invalid interface number: 86 but max is 0 [ 528.447081][ T8706] usb 1-1: config 239 has no interface number 0 [ 528.453960][ T8706] usb 1-1: too many endpoints for config 239 interface 86 altsetting 68: 53, using maximum allowed: 30 [ 528.465265][ T8706] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 528.476808][ T8706] usb 1-1: config 239 interface 86 altsetting 68 has 1 endpoint descriptor, different from the interface descriptor's value: 53 [ 528.490380][ T8706] usb 1-1: config 239 interface 86 has no altsetting 0 [ 528.502759][ T8712] Bluetooth: hci5: command 0x0409 tx timeout [ 528.509526][ T12] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 528.518616][ T12] cp210x 2-1:0.0: GPIO initialisation failed: -71 07:30:46 executing program 2: r0 = socket(0xa, 0x1, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40000140) [ 528.540582][ T12] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 528.548075][ T12] cp210x: probe of ttyUSB0 failed with error -71 [ 528.576763][ T12] usb 2-1: USB disconnect, device number 28 [ 528.584784][ T12] cp210x 2-1:0.0: device disconnected [ 528.638588][ T8706] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=cf.33 [ 528.647979][ T8706] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 528.656140][ T8706] usb 1-1: SerialNumber: syz [ 528.932263][T11376] chnl_net:caif_netlink_parms(): no params data found [ 529.070644][ T8706] usbtest 1-1:239.86: couldn't get endpoints, -71 [ 529.077776][ T8706] usbtest: probe of 1-1:239.86 failed with error -71 [ 529.140265][ T8706] usb 1-1: USB disconnect, device number 50 [ 529.241251][T11376] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.248710][T11376] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.258405][T11376] device bridge_slave_0 entered promiscuous mode [ 529.282345][T11376] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.290398][T11376] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.299977][T11376] device bridge_slave_1 entered promiscuous mode [ 529.361399][T11376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 529.387869][T11376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 529.453650][T11376] team0: Port device team_slave_0 added [ 529.479301][T11376] team0: Port device team_slave_1 added [ 529.536000][T11376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 529.543618][T11376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 529.569837][T11376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 529.683518][T11376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 529.690660][T11376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 529.716759][T11376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 529.899575][T11376] device hsr_slave_0 entered promiscuous mode [ 529.913449][T11376] device hsr_slave_1 entered promiscuous mode [ 529.922596][T11376] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 529.930708][T11376] Cannot create hsr debugfs directory [ 530.202201][T11376] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 530.229114][T11376] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 530.266162][T11376] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 530.290683][T11376] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 530.567186][ T8706] Bluetooth: hci5: command 0x041b tx timeout [ 531.624860][T11376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.678336][ T9014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 531.687650][ T9014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 531.712481][T11376] 8021q: adding VLAN 0 to HW filter on device team0 [ 531.743552][ T9014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 531.753533][ T9014] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 531.762983][ T9014] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.770414][ T9014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 531.789145][ T9014] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 531.836339][ T9014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 531.846364][ T9014] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 531.856043][ T9014] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.863374][ T9014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 531.924204][ T9014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 531.935523][ T9014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 531.946900][ T9014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 531.957499][ T9014] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 532.021488][T11376] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 532.032096][T11376] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 532.059751][T10073] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 532.069792][T10073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 532.080838][T10073] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 532.091165][T10073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 532.100835][T10073] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 532.111688][T10073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 532.121665][T10073] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 532.208264][ T9014] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 532.218129][ T9014] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 532.225789][ T9014] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 532.244627][T11376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 532.349667][ T8706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 532.359681][ T8706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 532.501107][ T9014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 532.510813][ T9014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 532.534319][T11376] device veth0_vlan entered promiscuous mode [ 532.550474][ T9014] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 532.560819][ T9014] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 532.593493][T11376] device veth1_vlan entered promiscuous mode [ 532.647065][ T8706] Bluetooth: hci5: command 0x040f tx timeout [ 532.676593][ T9014] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 532.685992][ T9014] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 532.695403][ T9014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 532.705390][ T9014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 532.728865][T11376] device veth0_macvtap entered promiscuous mode [ 532.745865][T11376] device veth1_macvtap entered promiscuous mode [ 532.758119][ T9014] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 532.767421][ T9014] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 532.806309][T11376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 532.817628][T11376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.827718][T11376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 532.838278][T11376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.848476][T11376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 532.859083][T11376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.869112][T11376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 532.879697][T11376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.889815][T11376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 532.900449][T11376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.913137][T11376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 532.923367][ T8706] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 532.933424][ T8706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 532.959297][T11376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 532.971585][T11376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.981683][T11376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 532.992299][T11376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.002360][T11376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 533.012942][T11376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.022955][T11376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 533.033580][T11376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.043596][T11376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 533.054207][T11376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.067107][T11376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 533.075646][T10073] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 533.085741][T10073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 07:30:51 executing program 5: r0 = socket(0xa, 0x5, 0x0) getpeername$packet(r0, 0x0, 0x0) 07:30:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x8041, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [0xc0000103]}) 07:30:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000400000300c2800005000300"], 0x48}}, 0x0) 07:30:51 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x54, 0xf2, 0x22, 0x40, 0x10c4, 0x80f6, 0x38f2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2c, 0x26, 0xa1}}]}}]}}, 0x0) 07:30:51 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x541b, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) 07:30:51 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000357373082505a0a433cf0000100109021b0001ef0000000904564435d0000f2009058521"], 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000040)={0x0, &(0x7f0000000000)=""/25}) 07:30:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000400000300c280000500030010"], 0x48}}, 0x0) 07:30:52 executing program 2: r0 = socket(0xa, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x6, 0x0, 0x0, 0x0) 07:30:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x8041, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [0xc0000103]}) [ 533.867158][ T12] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 533.872285][T10073] usb 1-1: new high-speed USB device number 51 using dummy_hcd 07:30:52 executing program 5: r0 = socket(0x2b, 0x1, 0x0) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) [ 534.028104][T11671] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 534.156972][T10073] usb 1-1: Using ep0 maxpacket: 8 07:30:52 executing program 2: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x802, 0x0) splice(r1, 0x0, r0, 0x0, 0x325, 0x0) [ 534.237794][ T12] usb 2-1: New USB device found, idVendor=10c4, idProduct=80f6, bcdDevice=38.f2 [ 534.247293][ T12] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.277016][T10073] usb 1-1: config 239 has an invalid interface number: 86 but max is 0 [ 534.285571][T10073] usb 1-1: config 239 has no interface number 0 [ 534.292253][T10073] usb 1-1: too many endpoints for config 239 interface 86 altsetting 68: 53, using maximum allowed: 30 [ 534.303996][T10073] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 534.315894][T10073] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has invalid wMaxPacketSize 0 07:30:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000400000300c280000500030010"], 0x48}}, 0x0) [ 534.326334][T10073] usb 1-1: config 239 interface 86 altsetting 68 has 1 endpoint descriptor, different from the interface descriptor's value: 53 [ 534.340378][T10073] usb 1-1: config 239 interface 86 has no altsetting 0 [ 534.349866][ T12] usb 2-1: config 0 descriptor?? [ 534.391765][ T12] cp210x 2-1:0.0: cp210x converter detected 07:30:52 executing program 5: msgrcv(0xffffffffffffffff, 0x0, 0xffffffffffffff79, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e22, 0x1, @empty, 0x400}}, [0x0, 0x6, 0x100000001, 0x9, 0x1f, 0x0, 0x300, 0x5, 0xfffffffffffff42b, 0x8, 0xf863, 0x5, 0x7, 0x0, 0x1f]}, &(0x7f0000000300)=0x100) msgrcv(0x0, &(0x7f0000001440)={0x0, ""/190}, 0xc6, 0x3, 0x3000) msgctl$IPC_RMID(0x0, 0x0) 07:30:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x8041, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [0xc0000103]}) [ 534.597081][ T12] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 534.604891][ T12] cp210x 2-1:0.0: querying part number failed [ 534.637507][T11689] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 534.662665][ T12] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 534.670164][ T12] cp210x: probe of ttyUSB0 failed with error -71 [ 534.737495][T10073] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=cf.33 [ 534.741492][ T8707] Bluetooth: hci5: command 0x0419 tx timeout [ 534.747114][T10073] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 534.755031][ T12] usb 2-1: USB disconnect, device number 29 [ 534.761304][T10073] usb 1-1: SerialNumber: syz [ 534.773882][ T12] cp210x 2-1:0.0: device disconnected 07:30:53 executing program 2: r0 = socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000004c0)={'ip6_vti0\x00', 0x0}) [ 535.254959][T10073] usbtest 1-1:239.86: couldn't get endpoints, -71 [ 535.261825][T10073] usbtest: probe of 1-1:239.86 failed with error -71 07:30:53 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x54, 0xf2, 0x22, 0x40, 0x10c4, 0x80f6, 0x38f2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2c, 0x26, 0xa1}}]}}]}}, 0x0) 07:30:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000400000300c280000500030010"], 0x48}}, 0x0) [ 535.340297][T10073] usb 1-1: USB disconnect, device number 51 [ 535.422876][T11718] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 535.706920][ T8710] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 535.946826][T10073] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 536.077529][ T8710] usb 2-1: New USB device found, idVendor=10c4, idProduct=80f6, bcdDevice=38.f2 [ 536.087610][ T8710] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.118587][ T8710] usb 2-1: config 0 descriptor?? [ 536.161958][ T8710] cp210x 2-1:0.0: cp210x converter detected [ 536.226887][T10073] usb 1-1: Using ep0 maxpacket: 8 [ 536.367949][ T8710] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 536.375576][ T8710] cp210x 2-1:0.0: querying part number failed [ 536.383233][T10073] usb 1-1: config 239 has an invalid interface number: 86 but max is 0 [ 536.391840][T10073] usb 1-1: config 239 has no interface number 0 [ 536.398593][T10073] usb 1-1: too many endpoints for config 239 interface 86 altsetting 68: 53, using maximum allowed: 30 [ 536.410253][T10073] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 536.421700][T10073] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has invalid wMaxPacketSize 0 [ 536.432055][T10073] usb 1-1: config 239 interface 86 altsetting 68 has 1 endpoint descriptor, different from the interface descriptor's value: 53 [ 536.445517][T10073] usb 1-1: config 239 interface 86 has no altsetting 0 [ 536.490624][ T8710] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 536.498452][ T8710] cp210x: probe of ttyUSB0 failed with error -71 [ 536.513736][ T8710] usb 2-1: USB disconnect, device number 30 [ 536.522122][ T8710] cp210x 2-1:0.0: device disconnected [ 536.584746][T10073] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=cf.33 [ 536.593965][T10073] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 536.602274][T10073] usb 1-1: SerialNumber: syz 07:30:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x8041, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [0xc0000103]}) 07:30:54 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x0, 0x101281) read$char_usb(r0, 0x0, 0x0) 07:30:54 executing program 2: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read(r0, &(0x7f0000000000)=""/120, 0x78) dup2(r0, r1) 07:30:54 executing program 0: io_setup(0x5f, &(0x7f00000000c0)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0xffff) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) io_submit(r0, 0x8, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0x65}]) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES32=r1], 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x101000, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x10, &(0x7f0000000100), &(0x7f00000001c0)=0x4) 07:30:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000400000300c280000500030010"], 0x48}}, 0x0) [ 536.826833][T10073] usbtest 1-1:239.86: couldn't get endpoints, -71 [ 536.833633][T10073] usbtest: probe of 1-1:239.86 failed with error -71 [ 536.921673][T10073] usb 1-1: USB disconnect, device number 52 07:30:55 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x54, 0xf2, 0x22, 0x40, 0x10c4, 0x80f6, 0x38f2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2c, 0x26, 0xa1}}]}}]}}, 0x0) 07:30:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000400000300c280000500030010"], 0x48}}, 0x0) 07:30:55 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x11, &(0x7f0000000000), 0x8) 07:30:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x8041, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [0xc0000103]}) 07:30:55 executing program 2: sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080), 0xc, 0x0}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x82, &(0x7f0000000080)=@assoc_value, &(0x7f00000000c0)=0x20000084) 07:30:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000400000300c280000500030010"], 0x48}}, 0x0) [ 537.516411][T10073] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 537.626657][ T8710] usb 2-1: new high-speed USB device number 31 using dummy_hcd 07:30:55 executing program 5: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) 07:30:55 executing program 2: socket(0x29, 0x0, 0x0) 07:30:56 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x8041, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [0xc0000103]}) [ 537.806853][T10073] usb 1-1: device descriptor read/64, error 18 07:30:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000400000300c280000500030010"], 0x48}}, 0x0) [ 538.009462][ T8710] usb 2-1: New USB device found, idVendor=10c4, idProduct=80f6, bcdDevice=38.f2 [ 538.018748][ T8710] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.095820][ T8710] usb 2-1: config 0 descriptor?? [ 538.140257][ T8710] cp210x 2-1:0.0: cp210x converter detected [ 538.197731][T10073] usb 1-1: device descriptor read/64, error 18 [ 538.347499][ T8710] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 538.355255][ T8710] cp210x 2-1:0.0: querying part number failed [ 538.411653][ T8710] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 538.420846][ T8710] cp210x: probe of ttyUSB0 failed with error -71 [ 538.466845][T10073] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 538.501423][ T8710] usb 2-1: USB disconnect, device number 31 [ 538.509606][ T8710] cp210x 2-1:0.0: device disconnected [ 538.766390][T10073] usb 1-1: device descriptor read/64, error 18 [ 539.166732][T10073] usb 1-1: device descriptor read/64, error 18 [ 539.290037][T10073] usb usb1-port1: attempt power cycle [ 540.007062][T10073] usb 1-1: new high-speed USB device number 55 using dummy_hcd 07:30:58 executing program 0: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x6, @mcast1, 0x1}, 0x1c) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000357373082505a0a433cf0000100109021b0001ef0000000904564435d0000f2009058521"], 0x0) 07:30:58 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_ifreq(r0, 0x8932, &(0x7f0000000080)={'netdevsim0\x00', @ifru_mtu=0x3}) 07:30:58 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x8041, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [0xc0000103]}) 07:30:58 executing program 2: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$KDSETMODE(r0, 0x5407, 0x401000) 07:30:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000400000300c280000500030010"], 0x48}}, 0x0) 07:30:58 executing program 1: syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x44, &(0x7f00000001c0)={0x0, 0x0, 0x1, '!'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 540.376139][T10073] usb 1-1: device descriptor read/8, error -71 [ 540.606166][T10073] usb 1-1: device descriptor read/8, error -71 07:30:59 executing program 5: setuid(0xee01) ioprio_set$uid(0x0, 0xee00, 0x2004) 07:30:59 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x8041, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [0xc0000103]}) 07:30:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000400000300c280000500030010"], 0x48}}, 0x0) 07:30:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x18, r1, 0x1, 0x0, 0x0, {0x9}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}}, 0x0) 07:30:59 executing program 1: syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x44, &(0x7f00000001c0)={0x0, 0x0, 0x1, '!'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:30:59 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [0xc0000103]}) [ 541.406035][T10073] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 541.497235][T10073] usb 1-1: Using ep0 maxpacket: 8 [ 541.636749][T10073] usb 1-1: config 239 has an invalid interface number: 86 but max is 0 [ 541.645185][T10073] usb 1-1: config 239 has no interface number 0 [ 541.651964][T10073] usb 1-1: too many endpoints for config 239 interface 86 altsetting 68: 53, using maximum allowed: 30 [ 541.663294][T10073] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 541.674726][T10073] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has invalid wMaxPacketSize 0 [ 541.685088][T10073] usb 1-1: config 239 interface 86 altsetting 68 has 1 endpoint descriptor, different from the interface descriptor's value: 53 [ 541.698884][T10073] usb 1-1: config 239 interface 86 has no altsetting 0 [ 541.967898][T10073] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=cf.33 [ 541.977167][T10073] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 541.985333][T10073] usb 1-1: SerialNumber: syz [ 542.308744][T10073] usbtest 1-1:239.86: couldn't get endpoints, -71 [ 542.315510][T10073] usbtest: probe of 1-1:239.86 failed with error -71 [ 542.398618][T10073] usb 1-1: USB disconnect, device number 56 07:31:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000540)={'ipvs\x00'}, &(0x7f0000000580)=0x1e) 07:31:01 executing program 5: r0 = socket$kcm(0xa, 0x1, 0x0) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x40000022) 07:31:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000100001040000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000400000300c280000500030010"], 0x48}}, 0x0) 07:31:01 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [0xc0000103]}) 07:31:01 executing program 1: syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x44, &(0x7f00000001c0)={0x0, 0x0, 0x1, '!'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:31:01 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000357373082505a0a433cf0000100109021b0001ef0000000904564435d0000f2009058521"], 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x177) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010208"], 0x28}}, 0x0) r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRESDEC=r1], 0xfd14) r3 = syz_io_uring_complete(0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x560addf87f3de5af) ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, &(0x7f0000000280)) [ 542.892319][T11863] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 07:31:01 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) 07:31:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0)='batadv\x00') sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000000a00000008000300", @ANYRES32=r1], 0x1c}}, 0x0) 07:31:01 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [0xc0000103]}) 07:31:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000100001040000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000400000300c280000500030010"], 0x48}}, 0x0) [ 543.385788][ T8706] usb 1-1: new high-speed USB device number 57 using dummy_hcd 07:31:01 executing program 5: perf_event_open(&(0x7f0000000540)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_ENDIAN(0x2a, 0x0) [ 543.455040][T11888] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 07:31:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x8041, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [0xc0000103]}) [ 543.625985][ T8706] usb 1-1: Using ep0 maxpacket: 8 07:31:01 executing program 1: r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000000)={0x44, &(0x7f00000001c0)={0x0, 0x0, 0x1, '!'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:31:01 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x50}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x1f}, 0x10) 07:31:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000100001040000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000400000300c280000500030010"], 0x48}}, 0x0) [ 543.746564][ T8706] usb 1-1: config 239 has an invalid interface number: 86 but max is 0 [ 543.755017][ T8706] usb 1-1: config 239 has no interface number 0 [ 543.761935][ T8706] usb 1-1: too many endpoints for config 239 interface 86 altsetting 68: 53, using maximum allowed: 30 [ 543.773286][ T8706] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 543.784740][ T8706] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has invalid wMaxPacketSize 0 [ 543.795082][ T8706] usb 1-1: config 239 interface 86 altsetting 68 has 1 endpoint descriptor, different from the interface descriptor's value: 53 [ 543.808515][ T8706] usb 1-1: config 239 interface 86 has no altsetting 0 [ 543.926041][ T12] Bluetooth: hci0: command 0x0406 tx timeout 07:31:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x8041, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [0xc0000103]}) 07:31:02 executing program 5: mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x104000, 0x0) [ 544.079087][ T8706] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=cf.33 [ 544.088567][ T8706] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 544.096945][ T8706] usb 1-1: SerialNumber: syz [ 544.159195][T11902] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 544.457094][T11869] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 544.613939][ T8706] usbtest 1-1:239.86: couldn't get endpoints, -71 [ 544.620946][ T8706] usbtest: probe of 1-1:239.86 failed with error -71 [ 544.681223][ T8706] usb 1-1: USB disconnect, device number 57 [ 545.315833][ T8706] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 545.557354][ T8706] usb 1-1: Using ep0 maxpacket: 8 [ 545.688980][ T8706] usb 1-1: config 239 has an invalid interface number: 86 but max is 0 [ 545.697555][ T8706] usb 1-1: config 239 has no interface number 0 [ 545.703988][ T8706] usb 1-1: too many endpoints for config 239 interface 86 altsetting 68: 53, using maximum allowed: 30 [ 545.715418][ T8706] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 545.726890][ T8706] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has invalid wMaxPacketSize 0 [ 545.737393][ T8706] usb 1-1: config 239 interface 86 altsetting 68 has 1 endpoint descriptor, different from the interface descriptor's value: 53 [ 545.750893][ T8706] usb 1-1: config 239 interface 86 has no altsetting 0 [ 545.946656][ T8706] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=cf.33 [ 545.956119][ T8706] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 545.964280][ T8706] usb 1-1: SerialNumber: syz 07:31:04 executing program 5: r0 = getpid() r1 = pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x0, &(0x7f0000000140)={0x1e, 0x0, 0x1}, 0x0) 07:31:04 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x50}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x1f}, 0x10) 07:31:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010400000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000400000300c280000500030010"], 0x48}}, 0x0) 07:31:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x8041, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [0xc0000103]}) 07:31:04 executing program 1: r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000000)={0x44, &(0x7f00000001c0)={0x0, 0x0, 0x1, '!'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 546.127092][ T8706] usb 1-1: can't set config #239, error -71 07:31:04 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) io_setup(0x5f, &(0x7f00000000c0)=0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0) io_submit(r1, 0x8, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r2, &(0x7f0000000040), 0x65}]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES64=r1, @ANYRES32=r3, @ANYRESOCT], 0x0) [ 546.200633][ T8706] usb 1-1: USB disconnect, device number 58 [ 546.333051][T11948] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 07:31:04 executing program 2: r0 = socket(0x1, 0x5, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, 0x0) 07:31:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [0xc0000103]}) 07:31:04 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSETMODE(r0, 0x5437, 0x0) 07:31:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010400000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000400000300c280000500030010"], 0x48}}, 0x0) [ 546.809805][T11962] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 07:31:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0)='batadv\x00') sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000000c"], 0x1c}}, 0x0) [ 546.897786][ T8706] usb 1-1: new high-speed USB device number 59 using dummy_hcd 07:31:05 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x11) 07:31:05 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [0xc0000103]}) 07:31:05 executing program 1: r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000000)={0x44, &(0x7f00000001c0)={0x0, 0x0, 0x1, '!'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:31:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010400000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000400000300c280000500030010"], 0x48}}, 0x0) [ 547.215559][ T8706] usb 1-1: device descriptor read/64, error 18 [ 547.331724][T11976] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 07:31:05 executing program 2: socketpair(0x1, 0x801, 0x0, &(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x8903, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) 07:31:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010400"/18, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000400000300c280000500030010"], 0x48}}, 0x0) [ 547.608972][ T8706] usb 1-1: device descriptor read/64, error 18 [ 547.657149][T11981] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 547.895500][ T8706] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 548.168668][ T8706] usb 1-1: device descriptor read/64, error 18 [ 548.555380][ T8706] usb 1-1: device descriptor read/64, error 18 [ 548.680295][ T8706] usb usb1-port1: attempt power cycle [ 549.395201][ T8706] usb 1-1: new high-speed USB device number 61 using dummy_hcd 07:31:07 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYRESDEC=r1], 0x0) 07:31:07 executing program 5: r0 = socket(0x18, 0x0, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller1\x00'}) 07:31:07 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [0xc0000103]}) 07:31:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@get={0xe0, 0x13, 0x1, 0x0, 0x0, {{'digest_null\x00'}}}, 0xe0}}, 0x0) clock_gettime(0x0, &(0x7f0000002740)) recvmmsg(r1, &(0x7f0000002600)=[{{&(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000200)=""/212, 0xd4}], 0x2}}, {{0x0, 0x0, 0x0}, 0x2}], 0x2, 0x0, 0x0) 07:31:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010400"/18, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000400000300c280000500030010"], 0x48}}, 0x0) 07:31:07 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x54, 0xf2, 0x22, 0x0, 0x10c4, 0x80f6, 0x38f2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2c, 0x26, 0xa1}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000000)={0x44, &(0x7f00000001c0)={0x0, 0x0, 0x1, '!'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 549.635290][ T8706] usb 1-1: device descriptor read/8, error -71 [ 549.682684][T11999] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 549.847054][ T8706] usb 1-1: device descriptor read/8, error -71 07:31:08 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x1) write$P9_RRENAMEAT(r0, &(0x7f00000000c0)={0x7}, 0x7) 07:31:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010400"/18, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000400000300c280000500030010"], 0x48}}, 0x0) 07:31:08 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [0xc0000103]}) [ 549.991042][ T8710] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 550.284972][ T8710] usb 2-1: device descriptor read/64, error 18 [ 550.387385][T12016] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 07:31:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [0xc0000103]}) 07:31:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010400"/19, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000400000300c280000500030010"], 0x48}}, 0x0) [ 550.449840][ T8706] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 550.625887][ T8706] usb 1-1: device descriptor read/8, error -61 [ 550.675492][ T8710] usb 2-1: device descriptor read/64, error 18 [ 550.695097][T12025] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 07:31:09 executing program 2: socketpair(0x1, 0x801, 0x0, &(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x8940, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) [ 550.906073][ T8706] usb 1-1: device descriptor read/8, error -61 [ 550.969478][ T8710] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 551.030532][ T8706] usb usb1-port1: unable to enumerate USB device [ 551.295421][ T8710] usb 2-1: device descriptor read/64, error 18 [ 551.695101][ T8710] usb 2-1: device descriptor read/64, error 18 [ 551.823928][ T8710] usb usb2-port1: attempt power cycle [ 552.554831][ T8710] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 552.665379][ T8710] usb 2-1: Invalid ep0 maxpacket: 0 07:31:11 executing program 0: setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000000)=0x1ff, 0x4) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000357373082505a0a433cf0000100109021b0001ef0000000904564435d0000f2009058521"], 0x0) 07:31:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010400"/19, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000400000300c280000500030010"], 0x48}}, 0x0) 07:31:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [0xc0000103]}) 07:31:11 executing program 2: prctl$PR_SET_ENDIAN(0x16, 0x0) 07:31:11 executing program 5: r0 = socket(0x1, 0x3, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={0x0}}, 0x0) 07:31:11 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x54, 0xf2, 0x22, 0x0, 0x10c4, 0x80f6, 0x38f2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2c, 0x26, 0xa1}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000000)={0x44, &(0x7f00000001c0)={0x0, 0x0, 0x1, '!'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 553.074743][T12051] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 07:31:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [0xc0000103]}) 07:31:11 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r0, 0x8004510b, &(0x7f0000000200)={"5d2a13212ff5a28ba803f0a30d2120ec7a6fbaeb19adc9f88ac218826aa3"}) 07:31:11 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x1f, 0x0, 0x0}) 07:31:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010400"/19, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000400000300c280000500030010"], 0x48}}, 0x0) [ 553.565554][ T8710] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 553.624818][ T8707] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 553.658684][ T8710] usb 2-1: Invalid ep0 maxpacket: 0 [ 553.665932][ T8710] usb usb2-port1: unable to enumerate USB device [ 553.705004][T12078] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 07:31:12 executing program 2: r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x400c010) 07:31:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [0xc0000103]}) [ 553.875281][ T8707] usb 1-1: Using ep0 maxpacket: 8 [ 553.995604][ T8707] usb 1-1: config 239 has an invalid interface number: 86 but max is 0 [ 554.004057][ T8707] usb 1-1: config 239 has no interface number 0 [ 554.011648][ T8707] usb 1-1: too many endpoints for config 239 interface 86 altsetting 68: 53, using maximum allowed: 30 [ 554.023018][ T8707] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 554.034597][ T8707] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has invalid wMaxPacketSize 0 [ 554.045007][ T8707] usb 1-1: config 239 interface 86 altsetting 68 has 1 endpoint descriptor, different from the interface descriptor's value: 53 [ 554.058526][ T8707] usb 1-1: config 239 interface 86 has no altsetting 0 [ 554.165248][ T8712] Bluetooth: hci1: command 0x0406 tx timeout [ 554.286916][ T8707] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=cf.33 [ 554.296325][ T8707] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 554.304698][ T8707] usb 1-1: SerialNumber: syz [ 554.653277][ T8707] usbtest 1-1:239.86: couldn't get endpoints, -71 [ 554.660247][ T8707] usbtest: probe of 1-1:239.86 failed with error -71 [ 554.703804][ T8707] usb 1-1: USB disconnect, device number 63 07:31:13 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12410000357373082505a00633cf0000100109021b0001ef00000009045244350905852100000000c581fda6259959ef7202211eb4b58600bd43fdef58cf6aaee38323839ada0141f01b9054351c11b93430c64c"], 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000180)={@fixed={[], 0x11}, 0x7}) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x1, 0xfb, 0x8ad, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x700, 0x1, 0x0, 0x1}}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='status\x00') 07:31:13 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x2, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x64, &(0x7f0000000080)={r1}, 0x8) 07:31:13 executing program 5: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttynull\x00', 0x0, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x802c542a, 0x0) 07:31:13 executing program 3: bind$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) 07:31:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [0xc0000103]}) [ 555.936238][ T8708] usb 1-1: new high-speed USB device number 64 using dummy_hcd 07:31:14 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x54, 0xf2, 0x22, 0x0, 0x10c4, 0x80f6, 0x38f2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2c, 0x26, 0xa1}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000000)={0x44, &(0x7f00000001c0)={0x0, 0x0, 0x1, '!'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:31:14 executing program 2: mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 07:31:14 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCGETA(r0, 0x5414, &(0x7f0000000000)) 07:31:14 executing program 5: socketpair(0x1, 0x801, 0x0, &(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x8943, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) 07:31:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [0xc0000103]}) [ 556.215055][ T8708] usb 1-1: device descriptor read/64, error 18 07:31:14 executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0xc020660b, 0x0) 07:31:14 executing program 3: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$KDSETMODE(r0, 0x5403, 0x404f00) [ 556.645523][ T8708] usb 1-1: device descriptor read/64, error 18 [ 556.719202][ T8707] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 556.914469][ T8708] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 556.994501][ T8707] usb 2-1: device descriptor read/64, error 18 [ 557.208836][ T8708] usb 1-1: device descriptor read/64, error 18 [ 557.385525][ T8707] usb 2-1: device descriptor read/64, error 18 [ 557.644542][ T8708] usb 1-1: device descriptor read/64, error 18 [ 557.658968][ T8707] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 557.780676][ T8708] usb usb1-port1: attempt power cycle [ 557.934965][ T8707] usb 2-1: device descriptor read/64, error 18 [ 558.324413][ T8707] usb 2-1: device descriptor read/64, error 18 [ 558.444463][ T8707] usb usb2-port1: attempt power cycle [ 558.514228][ T8708] usb 1-1: new high-speed USB device number 66 using dummy_hcd 07:31:16 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x2800800, &(0x7f0000000080)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[], [{@smackfshat={'smackfshat', 0x3d, '}*\','}}, {@subj_role={'subj_role', 0x3d, '$'}}, {@measure='measure'}, {@obj_user={'obj_user'}}, {@subj_user={'subj_user'}}, {@euid_lt={'euid<'}}, {@subj_type={'subj_type'}}, {@uid_gt={'uid>'}}]}}) 07:31:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [0xc0000103]}) 07:31:16 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x83, &(0x7f0000000080)={0x0, 0xffff}, 0x8) 07:31:16 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x7, &(0x7f0000000180)=0x0) io_submit(r1, 0x2, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x0, r0, 0x0}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) 07:31:16 executing program 3: r0 = socket(0x1, 0x1, 0x0) bind$qrtr(r0, &(0x7f0000000000), 0xc) [ 558.658301][ T8708] usb 1-1: device descriptor read/8, error -71 [ 558.874493][ T8708] usb 1-1: device descriptor read/8, error -71 [ 559.164284][ T8707] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 559.254997][ T8707] usb 2-1: Invalid ep0 maxpacket: 0 [ 559.364518][ T8708] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 559.408124][ T8707] usb 2-1: new high-speed USB device number 39 using dummy_hcd 07:31:17 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x54, 0xf2, 0x22, 0x40, 0x10c4, 0x80f6, 0x38f2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2c, 0x26, 0xa1}}]}}]}}, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x44, &(0x7f00000001c0)={0x0, 0x0, 0x1, '!'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:31:17 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) write$ppp(r0, 0x0, 0x0) 07:31:17 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x76, &(0x7f0000000080)={0x0, 0xffff}, 0x8) 07:31:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [0xc0000103]}) 07:31:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x14}, 0x14}, 0x18}, 0x0) [ 559.524878][ T8707] usb 2-1: device descriptor read/8, error -71 [ 559.586073][ T8708] usb 1-1: device descriptor read/8, error -61 [ 559.734614][ T8707] usb 2-1: device descriptor read/8, error -71 07:31:18 executing program 3: r0 = socket$inet(0xa, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x2, 0x0, &(0x7f0000000040)) 07:31:18 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x2, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x18, &(0x7f0000000000)={r1}, &(0x7f0000000040)=0x8) [ 559.855711][ T8707] usb usb2-port1: unable to enumerate USB device [ 559.856579][ T8708] usb 1-1: device descriptor read/8, error -61 [ 559.985321][ T8708] usb usb1-port1: unable to enumerate USB device [ 560.224295][ T8707] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 560.586407][ T8707] usb 2-1: New USB device found, idVendor=10c4, idProduct=80f6, bcdDevice=38.f2 [ 560.596160][ T8707] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.614617][ T8707] usb 2-1: config 0 descriptor?? [ 560.664042][ T8707] cp210x 2-1:0.0: cp210x converter detected [ 560.867365][ T8707] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 560.875307][ T8707] cp210x 2-1:0.0: querying part number failed [ 560.899843][ T8707] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 560.907573][ T8707] cp210x: probe of ttyUSB0 failed with error -71 [ 560.951264][ T8707] usb 2-1: USB disconnect, device number 40 [ 560.971571][ T8707] cp210x 2-1:0.0: device disconnected 07:31:20 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000357373082505a0a433cf0000100109021b0001ef0000000904564435d0000f2009058521"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0}, &(0x7f0000000100)=0x14, 0x800) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000210000000000", @ANYRES32=r5, @ANYBLOB="ff7f000000000000280012000c00010076657468"], 0x48}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x1c, 0x6, @udp='udp:syz2\x00'}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4040090}, 0x4040004) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$sock_inet_tcp_SIOCOUTQNSD(r9, 0x894b, &(0x7f00000002c0)) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800810024001d0f00000000", @ANYRES32=r5, @ANYBLOB="00000000f1ffffff0000000008000100736662002c00020028000100"/64], 0x58}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xe0, 0x0, 0x28, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0xe0}}, 0x1) 07:31:20 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x15, 0x0, 0x0) 07:31:20 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7c, 0x0, 0x0) 07:31:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [0xc0000103]}) 07:31:20 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x23, 0x2, 0x0, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$proc_mixer(0xffffffffffffffff, 0x0, 0x0) 07:31:20 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x54, 0xf2, 0x22, 0x40, 0x10c4, 0x80f6, 0x38f2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2c, 0x26, 0xa1}}]}}]}}, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x44, &(0x7f00000001c0)={0x0, 0x0, 0x1, '!'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:31:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x5000aea5, 0x0) 07:31:20 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x2001) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x1}) [ 562.216129][ T8712] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 562.234779][ T8707] usb 1-1: new high-speed USB device number 68 using dummy_hcd 07:31:20 executing program 5: syz_open_dev$rtc(0x0, 0x0, 0x0) 07:31:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [0xc0000103]}) [ 562.487664][ T8707] usb 1-1: Using ep0 maxpacket: 8 [ 562.585544][ T8712] usb 2-1: New USB device found, idVendor=10c4, idProduct=80f6, bcdDevice=38.f2 [ 562.594926][ T8712] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.604893][ T8707] usb 1-1: config 239 has an invalid interface number: 86 but max is 0 [ 562.613303][ T8707] usb 1-1: config 239 has no interface number 0 [ 562.619944][ T8707] usb 1-1: too many endpoints for config 239 interface 86 altsetting 68: 53, using maximum allowed: 30 [ 562.631481][ T8707] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 562.642963][ T8707] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has invalid wMaxPacketSize 0 [ 562.653464][ T8707] usb 1-1: config 239 interface 86 altsetting 68 has 1 endpoint descriptor, different from the interface descriptor's value: 53 [ 562.667005][ T8707] usb 1-1: config 239 interface 86 has no altsetting 0 [ 562.706106][ T8712] usb 2-1: config 0 descriptor?? 07:31:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [0xc0000103]}) 07:31:21 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x83, 0x0, 0x0) [ 562.747804][ T8712] cp210x 2-1:0.0: cp210x converter detected [ 562.944696][ T8707] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=cf.33 [ 562.954194][ T8707] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 562.962359][ T8707] usb 1-1: SerialNumber: syz [ 562.994383][ T8712] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 563.002233][ T8712] cp210x 2-1:0.0: querying part number failed [ 563.032489][ T8712] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 563.040087][ T8712] cp210x: probe of ttyUSB0 failed with error -71 [ 563.116634][ T8712] usb 2-1: USB disconnect, device number 41 [ 563.125847][ T8712] cp210x 2-1:0.0: device disconnected [ 563.310037][T12231] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 563.334890][T12231] device veth3 entered promiscuous mode [ 563.409133][ T8707] usbtest 1-1:239.86: couldn't get endpoints, -71 [ 563.416066][ T8707] usbtest: probe of 1-1:239.86 failed with error -71 [ 563.433842][ T8707] usb 1-1: USB disconnect, device number 68 [ 564.143668][ T9014] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 564.384573][ T9014] usb 1-1: Using ep0 maxpacket: 8 [ 564.534466][ T9014] usb 1-1: config 239 has an invalid interface number: 86 but max is 0 [ 564.542915][ T9014] usb 1-1: config 239 has no interface number 0 [ 564.549544][ T9014] usb 1-1: too many endpoints for config 239 interface 86 altsetting 68: 53, using maximum allowed: 30 [ 564.560901][ T9014] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 564.572406][ T9014] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has invalid wMaxPacketSize 0 [ 564.582832][ T9014] usb 1-1: config 239 interface 86 altsetting 68 has 1 endpoint descriptor, different from the interface descriptor's value: 53 [ 564.596317][ T9014] usb 1-1: config 239 interface 86 has no altsetting 0 [ 564.831167][ T9014] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=cf.33 [ 564.840576][ T9014] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 564.848957][ T9014] usb 1-1: SerialNumber: syz [ 565.033884][ T9014] usb 1-1: can't set config #239, error -71 07:31:23 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000357373082505a0a433cf0000104435d0000f201e29b1ed0a0d4d72000000000000000000"], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000000)=0x5, 0x4) 07:31:23 executing program 5: r0 = socket(0x10, 0x80002, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000004440)=@deltaction={0x14, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x7400}}, 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000006480)=[{{&(0x7f0000001380)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x40305829, 0x0) 07:31:23 executing program 3: mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x24ed888314820bd4) 07:31:23 executing program 2: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$caif_stream(0x25, 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0x10000, 0x0) 07:31:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [0xc0000103]}) 07:31:23 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x54, 0xf2, 0x22, 0x40, 0x10c4, 0x80f6, 0x38f2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2c, 0x26, 0xa1}}]}}]}}, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x44, &(0x7f00000001c0)={0x0, 0x0, 0x1, '!'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 565.086674][ T9014] usb 1-1: USB disconnect, device number 69 07:31:23 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@empty, @in6=@empty}}, {{@in6=@private1}, 0x0, @in6=@private1}}, 0xe8) 07:31:23 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000040)) [ 565.530332][ T8712] usb 2-1: new high-speed USB device number 42 using dummy_hcd 07:31:23 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xff9f, 0x0}, 0x4044015) 07:31:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [0xc0000103]}) [ 565.704568][ T3220] usb 1-1: new high-speed USB device number 70 using dummy_hcd 07:31:24 executing program 3: bpf$OBJ_GET_PROG(0x1e, &(0x7f0000001080)={0x0, 0x0, 0xfd43aaef38af7893}, 0x10) 07:31:24 executing program 2: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) [ 565.897226][ T8712] usb 2-1: New USB device found, idVendor=10c4, idProduct=80f6, bcdDevice=38.f2 [ 565.906743][ T8712] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.964088][ T3220] usb 1-1: Using ep0 maxpacket: 8 [ 565.986686][ T8712] usb 2-1: config 0 descriptor?? [ 566.006117][ T3220] usb 1-1: too many configurations: 68, using maximum allowed: 8 [ 566.033184][ T8712] cp210x 2-1:0.0: cp210x converter detected [ 566.134656][ T3220] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 566.142413][ T3220] usb 1-1: can't read configurations, error -61 [ 566.233941][ T8712] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 566.241794][ T8712] cp210x 2-1:0.0: querying part number failed [ 566.319862][ T8712] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 566.327873][ T8712] cp210x: probe of ttyUSB0 failed with error -71 [ 566.373539][ T3220] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 566.422333][ T8712] usb 2-1: USB disconnect, device number 42 [ 566.444036][ T8712] cp210x 2-1:0.0: device disconnected [ 566.616121][ T3220] usb 1-1: Using ep0 maxpacket: 8 [ 566.655218][ T3220] usb 1-1: too many configurations: 68, using maximum allowed: 8 [ 566.797049][ T3220] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 566.805939][ T3220] usb 1-1: can't read configurations, error -61 [ 566.824262][ T3220] usb usb1-port1: attempt power cycle [ 567.558179][ T3220] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 567.677335][ T3220] usb 1-1: Using ep0 maxpacket: 8 [ 567.715394][ T3220] usb 1-1: too many configurations: 68, using maximum allowed: 8 [ 567.843622][ T3220] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 567.851391][ T3220] usb 1-1: can't read configurations, error -61 [ 568.013213][ T3220] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 568.103423][ T3220] usb 1-1: Using ep0 maxpacket: 8 [ 568.144150][ T3220] usb 1-1: too many configurations: 68, using maximum allowed: 8 [ 568.263954][ T3220] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 568.271630][ T3220] usb 1-1: can't read configurations, error -61 [ 568.278831][ T3220] usb usb1-port1: unable to enumerate USB device 07:31:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [0xc0000103]}) 07:31:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) connect$l2tp(r0, 0x0, 0x0) 07:31:26 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETCAPS(r0, 0x80044dff, 0x0) 07:31:26 executing program 2: setreuid(0xee01, 0x0) r0 = getuid() setfsuid(r0) r1 = getuid() setreuid(0x0, r1) 07:31:26 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x54, 0xf2, 0x22, 0x40, 0x10c4, 0x80f6, 0x38f2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2c, 0x26, 0xa1}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 07:31:26 executing program 0: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000180)={@ipv4={[], [], @multicast2}, 0x0}, &(0x7f00000001c0)=0x14) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000200)={r0, 0x1, 0x6, @broadcast}, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100520219d450da98921da8432b3cbb2260d5cae0f778401c4583b314954ddfd50000002505a0a433cf3b"], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f0000000340)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$TIPC_NL_BEARER_DISABLE(r4, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="e0f1fd1b", @ANYRES16=0x0, @ANYBLOB="100028bd7000fddbdf25020000002000058014000280080003000700000008000400a95300000800010075647000ac0005802c00028008000200000000f00800020020000000080001001500000008000400080000000800030000000000070001006962000014000280080001000000000008000300040000000800010075647000080001007564700044000280080004000800000008000400070000000800030007000000080004000101000008000300fffeffff08000100200000000800040004000000080003001f0000000c0002800800040003000000"], 0xe0}}, 0x40091) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x8, &(0x7f0000000040)=[{0x6, 0x1, 0x7f, 0x81}, {0x5ae2, 0x5, 0x9, 0x8}, {0x5, 0x81, 0x11, 0x8001}, {0x3, 0x5, 0x8, 0x1cb1}, {0xfff, 0x1f, 0x0, 0x1}, {0x1, 0x3, 0x81, 0x4}, {0x2, 0x1, 0xfc, 0xacb}, {0x9, 0xfc, 0x7f, 0xfffff4de}]}) lseek(r5, 0x400, 0x4) 07:31:27 executing program 2: socketpair(0x1, 0x801, 0x0, &(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x5411, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) 07:31:27 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETCAPS(r0, 0x80044dff, 0x0) [ 568.793479][ T3220] usb 2-1: new high-speed USB device number 43 using dummy_hcd 07:31:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe3000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x74) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0x50000}) 07:31:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, 0x0) [ 569.016263][ T9014] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 569.154029][ T3220] usb 2-1: New USB device found, idVendor=10c4, idProduct=80f6, bcdDevice=38.f2 [ 569.163393][ T3220] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 07:31:27 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmmsg$sock(r0, &(0x7f00000077c0)=[{{&(0x7f00000000c0)=@tipc=@name, 0x80, 0x0}}], 0x1, 0x0) [ 569.262765][ T3220] usb 2-1: config 0 descriptor?? 07:31:27 executing program 2: r0 = socket$inet(0xa, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x41, 0x0, &(0x7f00000004c0)=0x88) [ 569.324376][ T9014] usb 1-1: device descriptor read/64, error 18 [ 569.352774][ T3220] cp210x 2-1:0.0: cp210x converter detected [ 569.513336][ T3220] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 569.521142][ T3220] cp210x 2-1:0.0: querying part number failed [ 569.534012][ T8706] Bluetooth: hci2: command 0x0406 tx timeout [ 569.613380][ T3220] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 569.620786][ T3220] cp210x: probe of ttyUSB0 failed with error -71 [ 569.743677][ T9014] usb 1-1: device descriptor read/64, error 18 [ 569.750592][ T3220] usb 2-1: USB disconnect, device number 43 [ 569.758628][ T3220] cp210x 2-1:0.0: device disconnected [ 570.013207][ T9014] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 570.303020][ T9014] usb 1-1: device descriptor read/64, error 18 [ 570.702978][ T9014] usb 1-1: device descriptor read/64, error 18 [ 570.824487][ T9014] usb usb1-port1: attempt power cycle [ 571.533291][ T9014] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 571.623777][ T9014] usb 1-1: Invalid ep0 maxpacket: 80 07:31:29 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000357373082505a0a433cf0000100109021b0001ef0000000904564435d0000f2009058521"], 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x3, 0x1, 0xca8}) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/126, 0x7e}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f0000000140)=""/22, 0x16}, {&(0x7f0000000180)=""/28, 0x1c}], 0x4) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000200)={0x1, 0x40}, 0x2) 07:31:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, 0x0) 07:31:29 executing program 5: socketpair(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) inotify_rm_watch(r0, 0x0) 07:31:29 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttynull\x00', 0x0, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541b, 0x0) 07:31:29 executing program 2: r0 = socket(0x11, 0x3, 0x0) bind$can_j1939(r0, &(0x7f0000000040)={0x11}, 0x18) 07:31:29 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x54, 0xf2, 0x22, 0x40, 0x10c4, 0x80f6, 0x38f2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2c, 0x26, 0xa1}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) [ 571.772999][ T9014] usb 1-1: new high-speed USB device number 77 using dummy_hcd 07:31:30 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000240)=0x3) 07:31:30 executing program 2: mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2031, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 07:31:30 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, 0x0) 07:31:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, 0x0) [ 572.143416][ T3220] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 572.252779][ T9014] usb 1-1: device not accepting address 77, error -71 [ 572.268008][ T9014] usb usb1-port1: unable to enumerate USB device 07:31:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0xaf01, 0x0) [ 572.503772][ T3220] usb 2-1: New USB device found, idVendor=10c4, idProduct=80f6, bcdDevice=38.f2 [ 572.513251][ T3220] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.601053][ T3220] usb 2-1: config 0 descriptor?? 07:31:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3081, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000380)) [ 572.650344][ T3220] cp210x 2-1:0.0: cp210x converter detected [ 572.682941][ T9014] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 572.853478][ T3220] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 572.861238][ T3220] cp210x 2-1:0.0: querying part number failed [ 572.913641][ T3220] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 572.921040][ T3220] cp210x: probe of ttyUSB0 failed with error -71 [ 572.939669][ T9014] usb 1-1: Using ep0 maxpacket: 8 [ 573.005043][ T3220] usb 2-1: USB disconnect, device number 44 [ 573.013162][ T3220] cp210x 2-1:0.0: device disconnected [ 573.104004][ T9014] usb 1-1: config 239 has an invalid interface number: 86 but max is 0 [ 573.112430][ T9014] usb 1-1: config 239 has no interface number 0 [ 573.119478][ T9014] usb 1-1: too many endpoints for config 239 interface 86 altsetting 68: 53, using maximum allowed: 30 [ 573.130769][ T9014] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 573.142205][ T9014] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has invalid wMaxPacketSize 0 [ 573.152535][ T9014] usb 1-1: config 239 interface 86 altsetting 68 has 1 endpoint descriptor, different from the interface descriptor's value: 53 [ 573.166002][ T9014] usb 1-1: config 239 interface 86 has no altsetting 0 [ 573.343892][ T9014] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=cf.33 [ 573.353252][ T9014] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 573.361427][ T9014] usb 1-1: SerialNumber: syz [ 573.713893][ T9014] usbtest 1-1:239.86: couldn't get endpoints, -71 [ 573.720519][ T9014] usbtest: probe of 1-1:239.86 failed with error -71 [ 573.749689][ T9014] usb 1-1: USB disconnect, device number 78 [ 574.462831][ T8712] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 574.724920][ T8712] usb 1-1: Using ep0 maxpacket: 8 [ 574.842833][ T8712] usb 1-1: config 239 has an invalid interface number: 86 but max is 0 [ 574.851204][ T8712] usb 1-1: config 239 has no interface number 0 [ 574.857775][ T8712] usb 1-1: too many endpoints for config 239 interface 86 altsetting 68: 53, using maximum allowed: 30 [ 574.869124][ T8712] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 574.880634][ T8712] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has invalid wMaxPacketSize 0 [ 574.891153][ T8712] usb 1-1: config 239 interface 86 altsetting 68 has 1 endpoint descriptor, different from the interface descriptor's value: 53 [ 574.904691][ T8712] usb 1-1: config 239 interface 86 has no altsetting 0 [ 574.983988][ T8712] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=cf.33 [ 574.993343][ T8712] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 575.001470][ T8712] usb 1-1: SerialNumber: syz 07:31:33 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000357373082505a0a433cf0000051c29e23f8ea435cc36061664ff565e100109021b0001ef"], 0x0) 07:31:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xf5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 07:31:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f0000000000)={0x0, 0x0, [0xc0000103]}) 07:31:33 executing program 2: r0 = socket(0x22, 0x2, 0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x700}}, 0x0) 07:31:33 executing program 5: r0 = socket$inet_sctp(0x2, 0x3, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x8, 0x0, 0x0) 07:31:33 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x54, 0xf2, 0x22, 0x40, 0x10c4, 0x80f6, 0x38f2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2c, 0x26, 0xa1}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) [ 575.172569][ T8712] usbtest 1-1:239.86: couldn't get endpoints, -71 [ 575.179320][ T8712] usbtest: probe of 1-1:239.86 failed with error -71 [ 575.257092][ T8712] usb 1-1: USB disconnect, device number 79 07:31:33 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x18, &(0x7f0000000080), 0x8) 07:31:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f0000000000)={0x0, 0x0, [0xc0000103]}) 07:31:33 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mtu(r0, 0x0, 0x14, 0x0, 0x0) 07:31:33 executing program 5: socketpair(0x1, 0x801, 0x0, &(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x8910, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) [ 575.614565][ T8711] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 575.892589][ T8712] usb 1-1: new high-speed USB device number 80 using dummy_hcd 07:31:34 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ashmem\x00', 0x0, 0x0) fcntl$addseals(r0, 0xf, 0x400000) 07:31:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f0000000000)={0x0, 0x0, [0xc0000103]}) [ 575.984492][ T8711] usb 2-1: New USB device found, idVendor=10c4, idProduct=80f6, bcdDevice=38.f2 [ 575.993848][ T8711] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.079258][ T8711] usb 2-1: config 0 descriptor?? [ 576.138540][ T8711] cp210x 2-1:0.0: cp210x converter detected [ 576.145196][ T8712] usb 1-1: Using ep0 maxpacket: 8 [ 576.183969][ T8712] usb 1-1: too many configurations: 28, using maximum allowed: 8 [ 576.314188][ T8712] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 576.321941][ T8712] usb 1-1: can't read configurations, error -61 [ 576.353108][ T8711] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 576.360949][ T8711] cp210x 2-1:0.0: querying part number failed [ 576.395028][ T8711] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 576.402713][ T8711] cp210x: probe of ttyUSB0 failed with error -71 [ 576.444507][ T8711] usb 2-1: USB disconnect, device number 45 [ 576.452419][ T8711] cp210x 2-1:0.0: device disconnected [ 576.499366][ T8712] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 576.762377][ T8712] usb 1-1: Using ep0 maxpacket: 8 [ 576.817250][ T8712] usb 1-1: too many configurations: 28, using maximum allowed: 8 [ 576.950181][ T8712] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 576.958007][ T8712] usb 1-1: can't read configurations, error -61 [ 576.976667][ T8712] usb usb1-port1: attempt power cycle [ 577.702778][ T8712] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 577.823172][ T8712] usb 1-1: Using ep0 maxpacket: 8 [ 577.863495][ T8712] usb 1-1: too many configurations: 28, using maximum allowed: 8 [ 577.982605][ T8712] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 577.990374][ T8712] usb 1-1: can't read configurations, error -61 [ 578.172256][ T8712] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 578.262654][ T8712] usb 1-1: Using ep0 maxpacket: 8 [ 578.307914][ T8712] usb 1-1: too many configurations: 28, using maximum allowed: 8 07:31:36 executing program 0: syz_usb_connect(0x5, 0x2d, &(0x7f00000000c0)=ANY=[], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x5, 0x0) r2 = dup(r1) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/55, 0x37, 0x12100, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000040)=0x7bb9, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @local}}, 0x1c) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000000)=0x80, &(0x7f0000000040)=0x1) 07:31:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffe) 07:31:36 executing program 2: r0 = socket(0x2, 0x3, 0x2) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000300)={&(0x7f0000000180), 0xc, &(0x7f00000002c0)={0x0, 0xf0ff7f}}, 0x0) 07:31:36 executing program 5: r0 = socket(0x10, 0x80002, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) bind$rxrpc(r0, &(0x7f00000000c0)=@in6={0x10, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x24) 07:31:36 executing program 4: r0 = socket(0x22, 0x2, 0x4) recvmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2201) 07:31:36 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x54, 0xf2, 0x22, 0x40, 0x10c4, 0x80f6, 0x38f2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2c, 0x26, 0xa1}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 578.483224][ T8712] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 578.490989][ T8712] usb 1-1: can't read configurations, error -71 [ 578.577601][ T8712] usb usb1-port1: unable to enumerate USB device 07:31:37 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x90f, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, 0x0) 07:31:37 executing program 5: bpf$MAP_CREATE(0x14, &(0x7f0000000100)={0x0, 0x0, 0x40002, 0x0, 0x0, 0x1}, 0x2c) 07:31:37 executing program 4: r0 = socket(0xa, 0x3, 0x87) sendto$unix(r0, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00', 0x6, 0x0, &(0x7f0000000080)=@abs, 0x6e) [ 578.903405][ T8706] usb 2-1: new high-speed USB device number 46 using dummy_hcd 07:31:37 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCGETA(r0, 0x540f, &(0x7f0000000000)) [ 579.192406][ T8712] usb 1-1: new high-speed USB device number 84 using dummy_hcd 07:31:37 executing program 4: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8953, 0x0) [ 579.274258][ T8706] usb 2-1: New USB device found, idVendor=10c4, idProduct=80f6, bcdDevice=38.f2 [ 579.283610][ T8706] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 07:31:37 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @rand_addr=0x64010100}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)=0x8) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={r3}, 0x8) [ 579.357099][ T8706] usb 2-1: config 0 descriptor?? [ 579.413888][ T8706] cp210x 2-1:0.0: cp210x converter detected [ 579.483400][ T8712] usb 1-1: device descriptor read/64, error 18 [ 579.636946][ T8706] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 579.644932][ T8706] cp210x 2-1:0.0: querying part number failed [ 579.680558][ T8706] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 579.689485][ T8706] cp210x: probe of ttyUSB0 failed with error -71 [ 579.703810][ T8706] usb 2-1: USB disconnect, device number 46 [ 579.712752][ T8706] cp210x 2-1:0.0: device disconnected [ 579.893131][ T8712] usb 1-1: device descriptor read/64, error 18 [ 580.165038][ T8712] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 580.453053][ T8712] usb 1-1: device descriptor read/64, error 18 [ 580.862455][ T8712] usb 1-1: device descriptor read/64, error 18 [ 580.982431][ T8712] usb usb1-port1: attempt power cycle 07:31:39 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x0) 07:31:39 executing program 2: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x8, &(0x7f0000000100)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}}) [ 581.701988][ T8712] usb 1-1: new high-speed USB device number 86 using dummy_hcd 07:31:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0)='batadv\x00') sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000000800000008000300", @ANYRES32=r1], 0x1c}}, 0x0) 07:31:39 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x71, 0x0, 0x0) 07:31:39 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x54, 0xf2, 0x22, 0x40, 0x10c4, 0x80f6, 0x38f2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2c, 0x26, 0xa1}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:31:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4008ae9c, &(0x7f0000000000)) [ 581.849966][ T8712] usb 1-1: device descriptor read/8, error -71 [ 582.063073][ T8712] usb 1-1: device descriptor read/8, error -71 [ 582.092222][ T8711] usb 3-1: new high-speed USB device number 18 using dummy_hcd 07:31:40 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xc0101282, 0x400000) 07:31:40 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ashmem\x00', 0x0, 0x0) fcntl$addseals(r0, 0x406, 0x8) [ 582.161944][ T8707] usb 2-1: new high-speed USB device number 47 using dummy_hcd 07:31:40 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ashmem\x00', 0x0, 0x0) fcntl$addseals(r0, 0x4, 0x620b24efb63ce640) [ 582.341829][ T8711] usb 3-1: Using ep0 maxpacket: 16 07:31:40 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x0, 0x0, &(0x7f0000000100)) 07:31:40 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='/dev/ashmem\x00') [ 582.533597][ T8707] usb 2-1: New USB device found, idVendor=10c4, idProduct=80f6, bcdDevice=38.f2 [ 582.543352][ T8707] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.562307][ T8711] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 582.576177][ T8712] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 582.604751][ T8707] usb 2-1: config 0 descriptor?? 07:31:40 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_SIOCDELRT(r0, 0x890c, 0x0) [ 582.653629][ T8707] cp210x 2-1:0.0: cp210x converter detected [ 582.762832][ T8711] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 582.772130][ T8711] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.780266][ T8711] usb 3-1: Product: syz [ 582.784894][ T8711] usb 3-1: Manufacturer: syz [ 582.789632][ T8711] usb 3-1: SerialNumber: syz [ 582.796397][ T8712] usb 1-1: device descriptor read/8, error -61 [ 582.876930][ T8707] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 582.884776][ T8707] cp210x 2-1:0.0: querying part number failed [ 582.969627][ T8707] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 582.977212][ T8707] cp210x: probe of ttyUSB0 failed with error -71 [ 583.050716][ T8707] usb 2-1: USB disconnect, device number 47 [ 583.059124][ T8707] cp210x 2-1:0.0: device disconnected [ 583.082235][ T8712] usb 1-1: device descriptor read/8, error -61 [ 583.091993][ T8711] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 583.202395][ T8712] usb usb1-port1: unable to enumerate USB device [ 583.287673][ T8711] usb 3-1: USB disconnect, device number 18 [ 584.075370][ T8710] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 584.322379][ T8710] usb 3-1: Using ep0 maxpacket: 16 [ 584.557096][ T8710] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 584.721885][ T8710] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 584.731158][ T8710] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.739521][ T8710] usb 3-1: Product: syz [ 584.743944][ T8710] usb 3-1: Manufacturer: syz [ 584.748706][ T8710] usb 3-1: SerialNumber: syz [ 584.794779][ T8710] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 584.879195][ T8710] usb 3-1: USB disconnect, device number 19 07:31:43 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000001900)=ANY=[@ANYBLOB="12010000350573082501a0a433cf0000100109021b0001ef0000000904564445d0000f2009058521ee36a90fa950ad180c3598c8fb192f99ed0e0f5a7c165cdb1b8bd3a7a2c66710788bbdaccc57d8a629ffc598521c0728443ebc07ad378c2df182a30fc5b46a1ec2d17ada9367abac19122a3736e91ca06028533196f68ad34ad249605ef4932a88f1f7b855"], 0x0) clock_gettime(0x0, &(0x7f00000033c0)={0x0, 0x0}) lsetxattr$trusted_overlay_origin(&(0x7f0000003780)='./file0\x00', &(0x7f00000037c0)='trusted.overlay.origin\x00', &(0x7f0000003800)='y\x00', 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) fcntl$lock(r2, 0x5, &(0x7f0000000000)={0x0, 0x1, 0xfffffffffffffffc}) recvmmsg(0xffffffffffffffff, &(0x7f0000003280)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/50, 0x32}], 0x1, &(0x7f0000000100)=""/224, 0xe0}, 0x3}, {{&(0x7f0000000200)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x80, &(0x7f0000001600)=[{&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/126, 0x7e}, {&(0x7f0000003900)=""/232, 0xe8}, {&(0x7f0000000080)=""/34, 0x22}, {&(0x7f0000001400)=""/174, 0xae}, {&(0x7f0000003840)=""/139, 0x8b}, {&(0x7f0000001580)=""/107, 0x6b}], 0x7, &(0x7f0000001680)=""/86, 0x56}, 0x7}, {{&(0x7f0000001700)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000001780)=""/156, 0x9c}, {&(0x7f0000001840)=""/126, 0x7e}], 0x2, &(0x7f0000001c40)=""/160, 0xa0}, 0x2}, {{&(0x7f00000019c0)=@l2, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001a40)=""/247, 0xf7}, {&(0x7f0000001b40)=""/206, 0xce}, {&(0x7f0000001300)=""/185, 0xb9}, {&(0x7f0000001d00)=""/132, 0x84}, {&(0x7f0000001dc0)=""/82, 0x52}], 0x5, &(0x7f0000001ec0)}, 0x6}, {{&(0x7f0000001f00)=@x25, 0x80, &(0x7f0000003180)=[{&(0x7f0000001f80)=""/84, 0x54}, {&(0x7f0000002000)=""/129, 0x81}, {&(0x7f00000020c0)=""/189, 0xbd}, {&(0x7f0000002180)=""/4096, 0x1000}], 0x4, &(0x7f00000031c0)=""/139, 0x8b}, 0x1000}], 0x5, 0x40010102, &(0x7f0000003400)={r0, r1+10000000}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f00000034c0)={'syztnl2\x00', &(0x7f0000003440)={'ip6gre0\x00', 0x0, 0x2f, 0x20, 0x8, 0xfffffffc, 0x67a35d72db79328c, @mcast1, @local, 0x1, 0x7800, 0x800, 0x8}}) getsockopt$inet_int(r3, 0x0, 0x11, &(0x7f0000001ec0), &(0x7f0000003500)=0x4) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000003540)={0x4b, "f7edbdc7fd603c4a69f1f8be9c953bf56a03fe4ceeccbce5eb3d543da6c56c4ff4d6f5191ca06fdcfd1cb66a03e203d30b6299cf41c129ab3c01ce7c6901742bf92bd7bc514c38d4efb46b77a830d55c2a197b8bac380ad93e892fde90f10787a855c76022959f453b04a56009ff801e569654409db623a8d733a17125b516b201afd789388eef069d320dd7005d1d2535022789c2758bdfe9f77bacee8afafc86e8de5bf61a34df489f8a7c250b3616ebcec959d46287dc256f356dac296900979690953354810e9dd7fee23f5991d034ae723d246c245d807aa21333c3b595e4c005c123b700aad5118f6edaffda2fb5895b983279c7502d40ec0399da0aa03f77353a71c78df219c2fd9487c2476186ef5975e78ca6bd466f217a20f6c9af4be13c72460533e04f80b5e4ab046bdb1cf51d775dec31610dd1d583bddc5592390377f1aca920b5506d509ac13b1579738d8a1d710601d70703ed8be9637970920547af1d9bf13862cf140928f79283a6fb466f997e0e875dc5d70feb3103978202ee81af0c317e8d5553926b1f0e18e4006832cd6295f21c92a407ad31dc8c6ca675aa88fab2b3e00bd97a710cff3ff745fae1a8fba4694947aefbffde0274bb7b79754537dcb80bf0a6c4698923d0198dd92172ed8a9ff4567a8803c9c370c95a919d6555c58c014901dc3cf9e6a4275dd3e9e389db5017429f00"}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000014c0)={0x0, 0x2, 0x2}) 07:31:43 executing program 4: r0 = socket$inet(0xa, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x6, 0x22, 0x0, &(0x7f0000000040)) 07:31:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, r1, 0x1, 0x0, 0x0, {0x15}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) 07:31:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) r1 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x11, r1, 0x8000000) 07:31:43 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x54, 0xf2, 0x22, 0x40, 0x10c4, 0x80f6, 0x38f2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2c, 0x26, 0xa1}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:31:43 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2205, 0x0) 07:31:43 executing program 2: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000600)={'syztnl1\x00', &(0x7f0000000580)={'ip6gre0\x00', 0x0, 0x0, 0x4d, 0x4, 0x2299, 0x0, @private1, @private1, 0x0, 0x80, 0x3ff, 0x3f}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000006c0), 0x8) 07:31:43 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0xc0842) write$tun(r0, &(0x7f0000001180)={@val, @void, @x25}, 0x7) 07:31:43 executing program 5: bpf$BPF_RAW_TRACEPOINT_OPEN(0x17, 0x0, 0x0) [ 585.534071][ T8710] usb 2-1: new high-speed USB device number 48 using dummy_hcd 07:31:43 executing program 3: r0 = socket(0xa, 0x5, 0x0) getsockopt$packet_int(r0, 0x84, 0x0, 0x0, 0x0) [ 585.671976][ T8708] usb 1-1: new high-speed USB device number 88 using dummy_hcd 07:31:44 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x3, 0x0, 0x0) [ 585.904436][ T8710] usb 2-1: New USB device found, idVendor=10c4, idProduct=80f6, bcdDevice=38.f2 [ 585.913877][ T8710] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.923563][ T8708] usb 1-1: Using ep0 maxpacket: 8 [ 585.982337][ T8710] usb 2-1: config 0 descriptor?? [ 586.028045][ T8710] cp210x 2-1:0.0: cp210x converter detected [ 586.042301][ T8708] usb 1-1: config 239 has an invalid interface number: 86 but max is 0 [ 586.050780][ T8708] usb 1-1: config 239 has no interface number 0 [ 586.057745][ T8708] usb 1-1: too many endpoints for config 239 interface 86 altsetting 68: 69, using maximum allowed: 30 [ 586.069063][ T8708] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has an invalid bInterval 169, changing to 7 [ 586.080735][ T8708] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has invalid maxpacket 1774, setting to 1024 [ 586.092434][ T8708] usb 1-1: config 239 interface 86 altsetting 68 has 1 endpoint descriptor, different from the interface descriptor's value: 69 [ 586.105878][ T8708] usb 1-1: config 239 interface 86 has no altsetting 0 07:31:44 executing program 3: syz_open_dev$vcsu(&(0x7f0000000080)='/dev/vcsu#\x00', 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r2, 0x1, 0x6, @broadcast}, 0x10) [ 586.252013][ T8710] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 586.259760][ T8710] cp210x 2-1:0.0: querying part number failed [ 586.294544][ T8710] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 586.302075][ T8710] cp210x: probe of ttyUSB0 failed with error -71 [ 586.325666][ T8710] usb 2-1: USB disconnect, device number 48 [ 586.340355][T12770] device erspan0 entered promiscuous mode [ 586.349743][ T8710] cp210x 2-1:0.0: device disconnected [ 586.367827][T12769] device erspan0 left promiscuous mode [ 586.382959][T12774] device erspan0 entered promiscuous mode [ 586.389766][T12769] device erspan0 left promiscuous mode [ 586.463281][ T8708] usb 1-1: New USB device found, idVendor=0125, idProduct=a4a0, bcdDevice=cf.33 [ 586.472720][ T8708] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 586.480891][ T8708] usb 1-1: SerialNumber: syz [ 586.858707][ T8708] usb 1-1: USB disconnect, device number 88 [ 587.591973][ T8707] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 587.842549][ T8707] usb 1-1: Using ep0 maxpacket: 8 [ 588.005125][ T8707] usb 1-1: config 239 has an invalid interface number: 86 but max is 0 [ 588.013679][ T8707] usb 1-1: config 239 has no interface number 0 [ 588.020121][ T8707] usb 1-1: too many endpoints for config 239 interface 86 altsetting 68: 69, using maximum allowed: 30 [ 588.031489][ T8707] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has an invalid bInterval 169, changing to 7 [ 588.043127][ T8707] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has invalid maxpacket 1774, setting to 1024 [ 588.054748][ T8707] usb 1-1: config 239 interface 86 altsetting 68 has 1 endpoint descriptor, different from the interface descriptor's value: 69 [ 588.068282][ T8707] usb 1-1: config 239 interface 86 has no altsetting 0 [ 588.182006][ T8707] usb 1-1: New USB device found, idVendor=0125, idProduct=a4a0, bcdDevice=cf.33 [ 588.191210][ T8707] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 588.199346][ T8707] usb 1-1: SerialNumber: syz 07:31:46 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) 07:31:46 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x2, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x19, &(0x7f0000000080)={r1}, 0x8) 07:31:46 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x2270) 07:31:46 executing program 2: r0 = socket(0xa, 0x3, 0x8) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) 07:31:46 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x54, 0xf2, 0x22, 0x40, 0x10c4, 0x80f6, 0x38f2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2c, 0x26, 0xa1}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000000)={0x44, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:31:46 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nvram\x00', 0x2, 0x0) write$dsp(r0, 0x0, 0x0) [ 588.461981][ T8707] usb 1-1: USB disconnect, device number 89 07:31:47 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_int(r0, 0x0, 0x31, &(0x7f00000014c0)=0xde5f, 0x4) 07:31:47 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x7, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x3e80000000}]) [ 588.812138][ T8712] usb 2-1: new high-speed USB device number 49 using dummy_hcd 07:31:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip6_vti0\x00', @ifru_mtu=0x531100}) r1 = epoll_create(0x3) epoll_wait(r1, &(0x7f00000000c0)=[{}], 0x1, 0x9) 07:31:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000040)={'ip_vti0\x00', @ifru_mtu=0x531101}) [ 589.032706][ T8707] usb 1-1: new high-speed USB device number 90 using dummy_hcd 07:31:47 executing program 4: 07:31:47 executing program 2: [ 589.201933][ T8712] usb 2-1: New USB device found, idVendor=10c4, idProduct=80f6, bcdDevice=38.f2 [ 589.211357][ T8712] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.296768][ T8712] usb 2-1: config 0 descriptor?? [ 589.311493][ T8707] usb 1-1: device descriptor read/64, error 18 [ 589.352388][ T8712] cp210x 2-1:0.0: cp210x converter detected [ 589.575122][ T8712] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: 0 [ 589.583030][ T8712] cp210x 2-1:0.0: querying part number failed [ 589.741315][ T8707] usb 1-1: device descriptor read/64, error 18 [ 589.784962][ T8712] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 589.797796][ T8712] cp210x: probe of ttyUSB0 failed with error -71 [ 589.843714][ T8712] usb 2-1: USB disconnect, device number 49 [ 589.863224][ T8712] cp210x 2-1:0.0: device disconnected [ 590.011507][ T12] Bluetooth: hci3: command 0x0406 tx timeout [ 590.034402][ T8707] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 590.326384][ T8707] usb 1-1: device descriptor read/64, error 18 [ 590.764708][ T8707] usb 1-1: device descriptor read/64, error 18 [ 590.904293][ T8707] usb usb1-port1: attempt power cycle [ 591.621136][ T8707] usb 1-1: new high-speed USB device number 92 using dummy_hcd 07:31:49 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000357373082505a0a433cf0000100109021b0001ef0000000904564435d0000f2009058521"], 0x0) sigaltstack(&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000000)) 07:31:49 executing program 3: 07:31:49 executing program 5: 07:31:49 executing program 2: 07:31:49 executing program 4: 07:31:49 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x54, 0xf2, 0x22, 0x40, 0x10c4, 0x80f6, 0x38f2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2c, 0x26, 0xa1}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000000)={0x44, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 591.771118][ T8707] usb 1-1: device descriptor read/8, error -71 07:31:50 executing program 2: [ 591.981389][ T8707] usb 1-1: device descriptor read/8, error -71 07:31:50 executing program 4: 07:31:50 executing program 3: 07:31:50 executing program 5: [ 592.142039][ T12] usb 2-1: new high-speed USB device number 50 using dummy_hcd 07:31:50 executing program 2: 07:31:50 executing program 3: [ 592.471395][ T8707] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 592.501380][ T12] usb 2-1: New USB device found, idVendor=10c4, idProduct=80f6, bcdDevice=38.f2 [ 592.510685][ T12] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.541521][ T12] usb 2-1: config 0 descriptor?? [ 592.584712][ T12] cp210x 2-1:0.0: cp210x converter detected [ 592.591537][ T8707] usb 1-1: Using ep0 maxpacket: 8 [ 592.711593][ T8707] usb 1-1: config 239 has an invalid interface number: 86 but max is 0 [ 592.720169][ T8707] usb 1-1: config 239 has no interface number 0 [ 592.726899][ T8707] usb 1-1: too many endpoints for config 239 interface 86 altsetting 68: 53, using maximum allowed: 30 [ 592.738277][ T8707] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 592.749820][ T8707] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has invalid wMaxPacketSize 0 [ 592.760221][ T8707] usb 1-1: config 239 interface 86 altsetting 68 has 1 endpoint descriptor, different from the interface descriptor's value: 53 [ 592.773710][ T8707] usb 1-1: config 239 interface 86 has no altsetting 0 [ 592.812489][ T12] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: 0 [ 592.820203][ T12] cp210x 2-1:0.0: querying part number failed [ 592.922621][ T8707] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=cf.33 [ 592.932054][ T8707] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 592.940217][ T8707] usb 1-1: SerialNumber: syz [ 593.021378][ T12] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 593.028583][ T12] cp210x: probe of ttyUSB0 failed with error -71 [ 593.062881][ T12] usb 2-1: USB disconnect, device number 50 [ 593.070864][ T12] cp210x 2-1:0.0: device disconnected [ 593.271723][ T8707] usbtest 1-1:239.86: couldn't get endpoints, -71 [ 593.278381][ T8707] usbtest: probe of 1-1:239.86 failed with error -71 [ 593.322574][ T8707] usb 1-1: USB disconnect, device number 93 [ 594.011406][T10073] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 594.251079][T10073] usb 1-1: Using ep0 maxpacket: 8 [ 594.381604][T10073] usb 1-1: config 239 has an invalid interface number: 86 but max is 0 [ 594.389987][T10073] usb 1-1: config 239 has no interface number 0 [ 594.396556][T10073] usb 1-1: too many endpoints for config 239 interface 86 altsetting 68: 53, using maximum allowed: 30 [ 594.408102][T10073] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 594.419651][T10073] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has invalid wMaxPacketSize 0 [ 594.430073][T10073] usb 1-1: config 239 interface 86 altsetting 68 has 1 endpoint descriptor, different from the interface descriptor's value: 53 [ 594.443637][T10073] usb 1-1: config 239 interface 86 has no altsetting 0 [ 594.531849][T10073] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=cf.33 [ 594.541168][T10073] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 594.549301][T10073] usb 1-1: SerialNumber: syz 07:31:53 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000035737308250109021b0001ef0000000904564435d0000f2009058521"], 0x0) 07:31:53 executing program 4: 07:31:53 executing program 5: 07:31:53 executing program 2: 07:31:53 executing program 3: 07:31:53 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x54, 0xf2, 0x22, 0x40, 0x10c4, 0x80f6, 0x38f2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2c, 0x26, 0xa1}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000000)={0x44, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 594.889226][T10073] usbtest 1-1:239.86: couldn't get endpoints, -71 [ 594.896246][T10073] usbtest: probe of 1-1:239.86 failed with error -71 [ 594.967330][T10073] usb 1-1: USB disconnect, device number 94 07:31:53 executing program 5: 07:31:53 executing program 3: 07:31:53 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000000c0)) 07:31:53 executing program 2: [ 595.372958][ T12] usb 2-1: new high-speed USB device number 51 using dummy_hcd 07:31:53 executing program 5: [ 595.590651][T10073] usb 1-1: new high-speed USB device number 95 using dummy_hcd 07:31:53 executing program 4: [ 595.800977][ T12] usb 2-1: New USB device found, idVendor=10c4, idProduct=80f6, bcdDevice=38.f2 [ 595.810204][ T12] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.831063][T10073] usb 1-1: Using ep0 maxpacket: 8 [ 595.850143][ T12] usb 2-1: config 0 descriptor?? [ 595.871957][T10073] usb 1-1: no configurations [ 595.876730][T10073] usb 1-1: can't read configurations, error -22 [ 595.897273][ T12] cp210x 2-1:0.0: cp210x converter detected [ 596.080787][T10073] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 596.111418][ T12] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: 0 [ 596.118984][ T12] cp210x 2-1:0.0: querying part number failed [ 596.320655][T10073] usb 1-1: Using ep0 maxpacket: 8 [ 596.324337][ T12] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 596.333097][ T12] cp210x: probe of ttyUSB0 failed with error -71 [ 596.361760][T10073] usb 1-1: no configurations [ 596.365762][ T12] usb 2-1: USB disconnect, device number 51 [ 596.366603][T10073] usb 1-1: can't read configurations, error -22 [ 596.374165][ T12] cp210x 2-1:0.0: device disconnected [ 596.404017][T10073] usb usb1-port1: attempt power cycle [ 597.143689][T10073] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 597.241244][T10073] usb 1-1: Using ep0 maxpacket: 8 [ 597.281444][T10073] usb 1-1: no configurations [ 597.286220][T10073] usb 1-1: can't read configurations, error -22 [ 597.440460][T10073] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 597.530954][T10073] usb 1-1: Using ep0 maxpacket: 8 [ 597.573694][T10073] usb 1-1: no configurations [ 597.578405][T10073] usb 1-1: can't read configurations, error -22 [ 597.588541][T10073] usb usb1-port1: unable to enumerate USB device 07:31:56 executing program 2: 07:31:56 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000100109021b0001efa843ef58ca1c109a0000000904564435d0000f200905852100000000000000000000008b254b1e2437567aeffa4fa77149a69a9a0bf7c8c4c2137c5a504dc7010e8f75936ee6b83cde1ca3b89ab77cc93cca6c9b64ae0f827bead461f5e6c9cbfc7e6aa74f50d3050982b56b6c0efda501dbf81fc8e127a9982d317ae90aa75d65c32c1ac2882b558aaf8ecea5b0ac2f547c183343d85b6014f71bebd739806681b527e64e33dee97436"], 0x0) 07:31:56 executing program 1: 07:31:56 executing program 5: 07:31:56 executing program 4: 07:31:56 executing program 3: 07:31:56 executing program 3: 07:31:56 executing program 4: 07:31:56 executing program 1: 07:31:56 executing program 2: 07:31:56 executing program 5: [ 598.780588][T10073] usb 1-1: new high-speed USB device number 99 using dummy_hcd 07:31:57 executing program 3: 07:31:57 executing program 2: [ 599.056331][T10073] usb 1-1: device descriptor read/64, error 18 [ 599.450821][T10073] usb 1-1: device descriptor read/64, error 18 [ 599.723519][T10073] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 600.000427][T10073] usb 1-1: device descriptor read/64, error 18 [ 600.390218][T10073] usb 1-1: device descriptor read/64, error 18 [ 600.510291][T10073] usb usb1-port1: attempt power cycle [ 600.730925][ T0] NOHZ: local_softirq_pending 08 [ 601.230277][T10073] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 601.340383][T10073] usb 1-1: Invalid ep0 maxpacket: 9 07:31:59 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000357373082505a0a433cf0000100109021b0001ef0000000904564435d0000f2009058521"], 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)=0x8001, 0x4) 07:31:59 executing program 4: 07:31:59 executing program 1: 07:31:59 executing program 5: 07:31:59 executing program 3: 07:31:59 executing program 2: [ 601.498180][T10073] usb 1-1: new high-speed USB device number 102 using dummy_hcd 07:32:00 executing program 3: 07:32:00 executing program 4: 07:32:00 executing program 1: 07:32:00 executing program 5: 07:32:00 executing program 2: [ 602.014204][T10073] usb 1-1: device not accepting address 102, error -71 [ 602.029077][T10073] usb usb1-port1: unable to enumerate USB device 07:32:00 executing program 4: [ 602.410409][T10073] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 602.670417][T10073] usb 1-1: Using ep0 maxpacket: 8 [ 602.801512][T10073] usb 1-1: config 239 has an invalid interface number: 86 but max is 0 [ 602.810077][T10073] usb 1-1: config 239 has no interface number 0 [ 602.816476][T10073] usb 1-1: too many endpoints for config 239 interface 86 altsetting 68: 53, using maximum allowed: 30 [ 602.828065][T10073] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 602.839640][T10073] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has invalid wMaxPacketSize 0 [ 602.850112][T10073] usb 1-1: config 239 interface 86 altsetting 68 has 1 endpoint descriptor, different from the interface descriptor's value: 53 [ 602.863647][T10073] usb 1-1: config 239 interface 86 has no altsetting 0 [ 602.980743][T10073] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=cf.33 [ 602.990079][T10073] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 602.998310][T10073] usb 1-1: SerialNumber: syz [ 603.370022][T10073] usbtest 1-1:239.86: couldn't get endpoints, -71 [ 603.376769][T10073] usbtest: probe of 1-1:239.86 failed with error -71 [ 603.418236][T10073] usb 1-1: USB disconnect, device number 103 [ 604.059902][T10073] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 604.309895][T10073] usb 1-1: Using ep0 maxpacket: 8 [ 604.430265][T10073] usb 1-1: config 239 has an invalid interface number: 86 but max is 0 [ 604.438619][T10073] usb 1-1: config 239 has no interface number 0 [ 604.445265][T10073] usb 1-1: too many endpoints for config 239 interface 86 altsetting 68: 53, using maximum allowed: 30 [ 604.456645][T10073] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 604.468176][T10073] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has invalid wMaxPacketSize 0 [ 604.478577][T10073] usb 1-1: config 239 interface 86 altsetting 68 has 1 endpoint descriptor, different from the interface descriptor's value: 53 [ 604.492786][T10073] usb 1-1: config 239 interface 86 has no altsetting 0 [ 604.580769][T10073] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=cf.33 [ 604.590160][T10073] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 604.598273][T10073] usb 1-1: SerialNumber: syz 07:32:02 executing program 1: 07:32:02 executing program 0: syz_usb_connect(0x6, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) 07:32:02 executing program 2: 07:32:02 executing program 3: 07:32:02 executing program 5: 07:32:02 executing program 4: [ 604.780022][T10073] usbtest 1-1:239.86: couldn't get endpoints, -71 [ 604.786787][T10073] usbtest: probe of 1-1:239.86 failed with error -71 [ 604.849530][T10073] usb 1-1: USB disconnect, device number 104 07:32:03 executing program 5: 07:32:03 executing program 1: 07:32:03 executing program 4: 07:32:03 executing program 2: 07:32:03 executing program 3: 07:32:03 executing program 5: 07:32:03 executing program 4: 07:32:03 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="8cbb049e830cb46f762eb29e3804b425399f9550fb063facb95c829014c9c7461b02303966a5d1117092c4c5c88df269f6a3055112354ed1ea2ecdeb2412984e0ceec7686bed23bd86dc84394d44e386d7a55e8e0eebe8c75d849cd3e40e4d6f032fd66c322c7c4f92a3fd7abf36bd410fd63b0bc9e5c813f0db9af588f8d77e9c9e83041dfdfafe2325fa627fbef31f287db158a88569bfa3b0218eb7da8d52dd08b74f14b6c8a8bb37334d92ea7c4dcdbff235209c5749a493332a20ec7fa64d0488580bc7145aae5c078a55730d0a300658a1d523d2a62970bc1fa6d2859a"], 0x0) 07:32:03 executing program 1: 07:32:04 executing program 3: 07:32:04 executing program 2: 07:32:04 executing program 5: 07:32:04 executing program 4: 07:32:04 executing program 3: 07:32:04 executing program 2: 07:32:04 executing program 1: 07:32:04 executing program 5: 07:32:04 executing program 4: [ 606.323277][ T12] usb 1-1: new high-speed USB device number 105 using dummy_hcd 07:32:04 executing program 3: [ 606.630880][ T12] usb 1-1: device descriptor read/64, error 18 [ 607.056999][ T12] usb 1-1: device descriptor read/64, error 18 [ 607.339663][ T12] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 607.624315][ T12] usb 1-1: device descriptor read/64, error 18 [ 608.049495][ T12] usb 1-1: device descriptor read/64, error 18 [ 608.169798][ T12] usb usb1-port1: attempt power cycle [ 608.899568][ T12] usb 1-1: new high-speed USB device number 107 using dummy_hcd 07:32:07 executing program 1: 07:32:07 executing program 2: 07:32:07 executing program 4: 07:32:07 executing program 5: 07:32:07 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000100)={0x40}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000080)={0x43, 0x0, 0x1}, 0x10) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f00000000c0)=0x4) r5 = dup(r4) r6 = syz_io_uring_complete(0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e22, @private=0xa010101}}}, 0x84) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRES16=r0, @ANYRESOCT=r3, @ANYRES16, @ANYRESHEX, @ANYRES16=r1], 0x0) 07:32:07 executing program 3: [ 609.033514][ T12] usb 1-1: device descriptor read/8, error -71 07:32:07 executing program 1: [ 609.249556][ T12] usb 1-1: device descriptor read/8, error -71 07:32:07 executing program 3: 07:32:07 executing program 4: 07:32:07 executing program 2: 07:32:07 executing program 5: 07:32:07 executing program 1: 07:32:07 executing program 3: 07:32:08 executing program 4: [ 609.739821][ T12] usb 1-1: new full-speed USB device number 108 using dummy_hcd 07:32:08 executing program 5: 07:32:08 executing program 2: [ 609.910371][ T12] usb 1-1: device descriptor read/8, error -61 [ 610.180543][ T12] usb 1-1: device descriptor read/8, error -61 [ 610.300508][ T12] usb usb1-port1: unable to enumerate USB device 07:32:10 executing program 0: syz_usb_connect(0x3, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0) 07:32:10 executing program 1: 07:32:10 executing program 3: 07:32:10 executing program 4: 07:32:10 executing program 5: 07:32:10 executing program 2: 07:32:10 executing program 4: 07:32:10 executing program 3: 07:32:10 executing program 5: 07:32:10 executing program 2: 07:32:11 executing program 1: [ 612.859330][T10073] usb 1-1: new high-speed USB device number 109 using dummy_hcd 07:32:11 executing program 2: [ 613.159111][T10073] usb 1-1: device descriptor read/64, error 18 [ 613.559221][T10073] usb 1-1: device descriptor read/64, error 18 [ 613.849622][T10073] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 614.148632][T10073] usb 1-1: device descriptor read/64, error 18 [ 614.548861][T10073] usb 1-1: device descriptor read/64, error 18 [ 614.669099][T10073] usb usb1-port1: attempt power cycle [ 615.388938][T10073] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 615.489600][T10073] usb 1-1: Invalid ep0 maxpacket: 9 07:32:13 executing program 0: io_setup(0x5f, &(0x7f0000000080)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x2000, 0x0) ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f0000000040)) io_submit(r0, 0x8, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0x65}]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x7}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x24000004) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[], 0x0) 07:32:13 executing program 4: 07:32:13 executing program 5: 07:32:13 executing program 1: 07:32:13 executing program 3: 07:32:13 executing program 2: 07:32:14 executing program 4: 07:32:14 executing program 2: 07:32:14 executing program 1: 07:32:14 executing program 3: 07:32:14 executing program 5: 07:32:14 executing program 4: [ 616.399662][T10073] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 616.570274][T10073] usb 1-1: device descriptor read/8, error -61 [ 616.850138][T10073] usb 1-1: device descriptor read/8, error -61 [ 616.970768][T10073] usb usb1-port1: unable to enumerate USB device [ 617.360094][ T0] NOHZ: local_softirq_pending 08 07:32:17 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000357373082505a0a433cf0000100109021b0001ef0000000904564435d0000f2009058521"], 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x329000, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000040)=0x8, 0x4) 07:32:17 executing program 1: 07:32:17 executing program 2: 07:32:17 executing program 5: 07:32:17 executing program 3: 07:32:17 executing program 4: 07:32:17 executing program 4: 07:32:17 executing program 1: 07:32:17 executing program 5: 07:32:17 executing program 2: 07:32:17 executing program 3: [ 619.539290][ T8707] usb 1-1: new high-speed USB device number 113 using dummy_hcd 07:32:17 executing program 1: [ 619.788690][ T8707] usb 1-1: Using ep0 maxpacket: 8 [ 619.919526][ T8707] usb 1-1: config 239 has an invalid interface number: 86 but max is 0 [ 619.927977][ T8707] usb 1-1: config 239 has no interface number 0 [ 619.934665][ T8707] usb 1-1: too many endpoints for config 239 interface 86 altsetting 68: 53, using maximum allowed: 30 [ 619.946183][ T8707] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 619.957683][ T8707] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has invalid wMaxPacketSize 0 [ 619.968155][ T8707] usb 1-1: config 239 interface 86 altsetting 68 has 1 endpoint descriptor, different from the interface descriptor's value: 53 [ 619.981716][ T8707] usb 1-1: config 239 interface 86 has no altsetting 0 [ 620.120961][ T8707] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=cf.33 [ 620.130307][ T8707] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 620.138825][ T8707] usb 1-1: SerialNumber: syz [ 620.437965][ T8707] usbtest 1-1:239.86: couldn't get endpoints, -71 [ 620.444992][ T8707] usbtest: probe of 1-1:239.86 failed with error -71 [ 620.489072][ T8707] usb 1-1: USB disconnect, device number 113 [ 620.719382][ T8712] Bluetooth: hci4: command 0x0406 tx timeout [ 621.158589][ T8708] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 621.408411][ T8708] usb 1-1: Using ep0 maxpacket: 8 [ 621.528912][ T8708] usb 1-1: config 239 has an invalid interface number: 86 but max is 0 [ 621.537406][ T8708] usb 1-1: config 239 has no interface number 0 [ 621.544007][ T8708] usb 1-1: too many endpoints for config 239 interface 86 altsetting 68: 53, using maximum allowed: 30 [ 621.555417][ T8708] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 621.567042][ T8708] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has invalid wMaxPacketSize 0 [ 621.577483][ T8708] usb 1-1: config 239 interface 86 altsetting 68 has 1 endpoint descriptor, different from the interface descriptor's value: 53 [ 621.591191][ T8708] usb 1-1: config 239 interface 86 has no altsetting 0 [ 621.679105][ T8708] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=cf.33 [ 621.688474][ T8708] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 621.696677][ T8708] usb 1-1: SerialNumber: syz 07:32:20 executing program 5: 07:32:20 executing program 4: 07:32:20 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/431], 0x0) 07:32:20 executing program 2: 07:32:20 executing program 3: 07:32:20 executing program 1: [ 622.001081][ T8708] usbtest 1-1:239.86: couldn't get endpoints, -71 [ 622.007833][ T8708] usbtest: probe of 1-1:239.86 failed with error -71 [ 622.096507][ T8708] usb 1-1: USB disconnect, device number 114 07:32:20 executing program 2: 07:32:20 executing program 4: 07:32:20 executing program 5: 07:32:20 executing program 1: 07:32:20 executing program 3: 07:32:21 executing program 4: [ 622.748630][ T8708] usb 1-1: new high-speed USB device number 115 using dummy_hcd 07:32:21 executing program 5: 07:32:21 executing program 3: [ 622.988291][ T8708] usb 1-1: Using ep0 maxpacket: 8 [ 623.108448][ T8708] usb 1-1: config 239 has an invalid descriptor of length 39, skipping remainder of the config [ 623.119445][ T8708] usb 1-1: config 239 has 0 interfaces, different from the descriptor's value: 1 [ 623.219696][ T8708] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=cf.33 [ 623.229083][ T8708] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 623.237372][ T8708] usb 1-1: SerialNumber: syz [ 623.524021][ T9014] usb 1-1: USB disconnect, device number 115 [ 624.348225][ T8710] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 624.588111][ T8710] usb 1-1: Using ep0 maxpacket: 8 [ 624.708311][ T8710] usb 1-1: config 239 has an invalid descriptor of length 39, skipping remainder of the config [ 624.718968][ T8710] usb 1-1: config 239 has 0 interfaces, different from the descriptor's value: 1 [ 624.808338][ T8710] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=cf.33 [ 624.817482][ T8710] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 624.825887][ T8710] usb 1-1: SerialNumber: syz 07:32:23 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000357373082505a0a433cf0000100109021b0001ef0000000904564435d0000f2009058521"], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000000)) 07:32:23 executing program 1: [ 625.078318][ T9014] usb 1-1: USB disconnect, device number 116 07:32:23 executing program 4: 07:32:23 executing program 2: 07:32:23 executing program 5: 07:32:23 executing program 3: 07:32:23 executing program 1: 07:32:23 executing program 3: 07:32:23 executing program 2: 07:32:23 executing program 4: 07:32:23 executing program 5: [ 625.748101][ T9014] usb 1-1: new high-speed USB device number 117 using dummy_hcd 07:32:24 executing program 3: [ 625.989047][ T9014] usb 1-1: Using ep0 maxpacket: 8 [ 626.119346][ T9014] usb 1-1: config 239 has an invalid interface number: 86 but max is 0 [ 626.128269][ T9014] usb 1-1: config 239 has no interface number 0 [ 626.134711][ T9014] usb 1-1: too many endpoints for config 239 interface 86 altsetting 68: 53, using maximum allowed: 30 [ 626.146058][ T9014] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 626.157615][ T9014] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has invalid wMaxPacketSize 0 [ 626.168032][ T9014] usb 1-1: config 239 interface 86 altsetting 68 has 1 endpoint descriptor, different from the interface descriptor's value: 53 [ 626.181541][ T9014] usb 1-1: config 239 interface 86 has no altsetting 0 [ 626.272840][ T9014] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=cf.33 [ 626.282187][ T9014] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 626.290703][ T9014] usb 1-1: SerialNumber: syz [ 626.620908][ T9014] usbtest 1-1:239.86: couldn't get endpoints, -71 [ 626.627995][ T9014] usbtest: probe of 1-1:239.86 failed with error -71 [ 626.651530][ T9014] usb 1-1: USB disconnect, device number 117 [ 627.358685][ T9014] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 627.597943][ T9014] usb 1-1: Using ep0 maxpacket: 8 [ 627.718857][ T9014] usb 1-1: config 239 has an invalid interface number: 86 but max is 0 [ 627.727292][ T9014] usb 1-1: config 239 has no interface number 0 [ 627.734010][ T9014] usb 1-1: too many endpoints for config 239 interface 86 altsetting 68: 53, using maximum allowed: 30 [ 627.745358][ T9014] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 627.756864][ T9014] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has invalid wMaxPacketSize 0 [ 627.767320][ T9014] usb 1-1: config 239 interface 86 altsetting 68 has 1 endpoint descriptor, different from the interface descriptor's value: 53 [ 627.780890][ T9014] usb 1-1: config 239 interface 86 has no altsetting 0 [ 627.868683][ T9014] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=cf.33 [ 627.878060][ T9014] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 627.886245][ T9014] usb 1-1: SerialNumber: syz [ 628.191330][ T9014] usbtest 1-1:239.86: couldn't get endpoints, -71 [ 628.198325][ T9014] usbtest: probe of 1-1:239.86 failed with error -71 07:32:26 executing program 5: 07:32:26 executing program 2: 07:32:26 executing program 4: 07:32:26 executing program 1: 07:32:26 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x4}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000080)={r2, 0x8, 0x30, 0x8000, 0x8}, &(0x7f00000000c0)=0x18) 07:32:26 executing program 3: [ 628.299176][ T9014] usb 1-1: USB disconnect, device number 118 07:32:26 executing program 3: 07:32:26 executing program 5: 07:32:26 executing program 4: 07:32:26 executing program 1: 07:32:26 executing program 2: 07:32:27 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000357373082505a0a433cf0000100109021b0001ef0000000904564435d0000f2009058521"], 0x0) r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000080)) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="ff7f000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg2\x00', r4}) 07:32:27 executing program 5: 07:32:27 executing program 3: 07:32:27 executing program 2: 07:32:27 executing program 4: 07:32:27 executing program 1: [ 629.348044][ T8712] usb 1-1: new high-speed USB device number 119 using dummy_hcd 07:32:27 executing program 2: 07:32:27 executing program 3: 07:32:27 executing program 5: [ 629.599311][ T8712] usb 1-1: Using ep0 maxpacket: 8 07:32:27 executing program 1: [ 629.731077][ T8712] usb 1-1: config 239 has an invalid interface number: 86 but max is 0 [ 629.739919][ T8712] usb 1-1: config 239 has no interface number 0 [ 629.746367][ T8712] usb 1-1: too many endpoints for config 239 interface 86 altsetting 68: 53, using maximum allowed: 30 [ 629.757974][ T8712] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 629.769431][ T8712] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has invalid wMaxPacketSize 0 07:32:28 executing program 4: [ 629.779792][ T8712] usb 1-1: config 239 interface 86 altsetting 68 has 1 endpoint descriptor, different from the interface descriptor's value: 53 [ 629.793225][ T8712] usb 1-1: config 239 interface 86 has no altsetting 0 07:32:28 executing program 2: [ 630.213681][ T8712] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=cf.33 [ 630.223011][ T8712] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 630.231428][ T8712] usb 1-1: SerialNumber: syz [ 630.555997][T13321] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 630.602087][T13321] device veth5 entered promiscuous mode [ 630.678344][ T8712] usbtest 1-1:239.86: couldn't get endpoints, -71 [ 630.685205][ T8712] usbtest: probe of 1-1:239.86 failed with error -71 [ 630.722556][ T8712] usb 1-1: USB disconnect, device number 119 [ 631.416338][ T8712] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 631.682849][ T8712] usb 1-1: Using ep0 maxpacket: 8 [ 631.838445][ T8712] usb 1-1: config 239 has an invalid interface number: 86 but max is 0 [ 631.846827][ T8712] usb 1-1: config 239 has no interface number 0 [ 631.853422][ T8712] usb 1-1: too many endpoints for config 239 interface 86 altsetting 68: 53, using maximum allowed: 30 [ 631.864868][ T8712] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 631.876475][ T8712] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has invalid wMaxPacketSize 0 [ 631.886915][ T8712] usb 1-1: config 239 interface 86 altsetting 68 has 1 endpoint descriptor, different from the interface descriptor's value: 53 [ 631.900445][ T8712] usb 1-1: config 239 interface 86 has no altsetting 0 [ 631.988269][ T8712] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=cf.33 [ 631.997677][ T8712] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 632.005883][ T8712] usb 1-1: SerialNumber: syz 07:32:30 executing program 5: 07:32:30 executing program 3: 07:32:30 executing program 4: 07:32:30 executing program 1: 07:32:30 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000cf000011010100008001ef00d2c5dcca61eaa4c42cf4cb94f800000904564435d0000e2009058521000000000000000000"], 0x0) io_setup(0x5f, &(0x7f00000000c0)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0) io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000040)}]) write(r1, &(0x7f0000000140)="e7e62432adae0425455689a57db782a241e28dae42df4399ed7e7499c10cbac7180e39a1752e7ac38d5e5f23c809e1642f0dc59e23c3978133f6a88cddb41c4731f37b60053fd2e604c3a9c078cc58ba0479c59e13901e76c44de5f4110e7554fbdb7236fa09d0242963399edc5f", 0x6e) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x402000, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000200)=0x1, 0x4) ioctl$VT_ACTIVATE(r2, 0x5606, 0x3f) r3 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x8000, 0x82400) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000080)) ioctl$sock_ifreq(r3, 0x8946, &(0x7f0000000040)={'macsec0\x00', @ifru_names='ip_vti0\x00'}) 07:32:30 executing program 2: [ 632.108015][ T8712] usb 1-1: can't set config #239, error -71 [ 632.158108][ T8712] usb 1-1: USB disconnect, device number 120 07:32:30 executing program 3: 07:32:30 executing program 5: 07:32:30 executing program 2: 07:32:30 executing program 1: 07:32:30 executing program 4: 07:32:31 executing program 5: [ 632.837501][ T8712] usb 1-1: new high-speed USB device number 121 using dummy_hcd 07:32:31 executing program 3: 07:32:31 executing program 1: 07:32:31 executing program 2: 07:32:31 executing program 4: [ 633.127715][ T8712] usb 1-1: device descriptor read/64, error 18 [ 633.558142][ T8712] usb 1-1: device descriptor read/64, error 18 [ 633.830625][ T8712] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 634.137569][ T8712] usb 1-1: device descriptor read/64, error 18 [ 634.557388][ T8712] usb 1-1: device descriptor read/64, error 18 [ 634.678169][ T8712] usb usb1-port1: attempt power cycle 07:32:33 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000357373082505a0a433cf0000100109021b0001ef0000000904564435d0000f2009058521"], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDCTL_SEQ_TESTMIDI(r1, 0x40045108, &(0x7f0000000000)=0x665) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKREPORTZONE(r3, 0xc0101282, &(0x7f0000000100)={0xff, 0x2, 0x0, [{0x0, 0xffffffffffffff31, 0x3, 0xb4, 0x40, 0x7c, 0x7}, {0x2364, 0x3, 0x101, 0x8, 0x4, 0x20, 0x2}]}) 07:32:33 executing program 3: 07:32:33 executing program 4: 07:32:33 executing program 1: 07:32:33 executing program 5: 07:32:33 executing program 2: [ 635.387425][ T8712] usb 1-1: new high-speed USB device number 123 using dummy_hcd 07:32:33 executing program 1: 07:32:33 executing program 2: 07:32:33 executing program 5: 07:32:33 executing program 3: 07:32:34 executing program 4: [ 635.897172][ T8712] usb 1-1: device not accepting address 123, error -71 07:32:34 executing program 3: [ 636.278653][ T8712] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 636.378164][ T8712] usb 1-1: Using ep0 maxpacket: 8 [ 636.497377][ T8712] usb 1-1: config 239 has an invalid interface number: 86 but max is 0 [ 636.505886][ T8712] usb 1-1: config 239 has no interface number 0 [ 636.512567][ T8712] usb 1-1: too many endpoints for config 239 interface 86 altsetting 68: 53, using maximum allowed: 30 [ 636.523891][ T8712] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 636.535340][ T8712] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has invalid wMaxPacketSize 0 [ 636.545696][ T8712] usb 1-1: config 239 interface 86 altsetting 68 has 1 endpoint descriptor, different from the interface descriptor's value: 53 [ 636.559160][ T8712] usb 1-1: config 239 interface 86 has no altsetting 0 [ 636.697870][ T8712] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=cf.33 [ 636.707263][ T8712] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 636.715491][ T8712] usb 1-1: SerialNumber: syz [ 637.097485][ T8712] usbtest 1-1:239.86: couldn't get endpoints, -71 [ 637.104241][ T8712] usbtest: probe of 1-1:239.86 failed with error -71 [ 637.150569][ T8712] usb 1-1: USB disconnect, device number 124 [ 637.807081][ T8706] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 638.057006][ T8706] usb 1-1: Using ep0 maxpacket: 8 [ 638.177760][ T8706] usb 1-1: config 239 has an invalid interface number: 86 but max is 0 [ 638.188123][ T8706] usb 1-1: config 239 has no interface number 0 [ 638.194504][ T8706] usb 1-1: too many endpoints for config 239 interface 86 altsetting 68: 53, using maximum allowed: 30 [ 638.205855][ T8706] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 638.217391][ T8706] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has invalid wMaxPacketSize 0 [ 638.227837][ T8706] usb 1-1: config 239 interface 86 altsetting 68 has 1 endpoint descriptor, different from the interface descriptor's value: 53 [ 638.241331][ T8706] usb 1-1: config 239 interface 86 has no altsetting 0 [ 638.338871][ T8706] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=cf.33 [ 638.348303][ T8706] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 638.356471][ T8706] usb 1-1: SerialNumber: syz 07:32:36 executing program 0: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)={0x5, 0x5, 0x5, 0x0, 0x1, [{0x3f, 0x7fffffff, 0xc8}]}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x100, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000100)={0x79d, 0x800, 0x0, 'queue1\x00', 0xffffffff}) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000357373082505a0a433cf0000100109021b0001ef0000000904564435d0000f2009058521"], 0x0) fallocate(0xffffffffffffffff, 0x28, 0x0, 0x8001) [ 638.667456][ T8706] usbtest 1-1:239.86: couldn't get endpoints, -71 [ 638.674215][ T8706] usbtest: probe of 1-1:239.86 failed with error -71 [ 638.707343][ T8706] usb 1-1: USB disconnect, device number 125 07:32:36 executing program 1: 07:32:36 executing program 2: 07:32:36 executing program 4: 07:32:36 executing program 5: 07:32:36 executing program 3: 07:32:37 executing program 1: 07:32:37 executing program 3: 07:32:37 executing program 4: 07:32:37 executing program 5: 07:32:37 executing program 2: 07:32:37 executing program 1: [ 639.407017][ T8706] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 639.657185][ T8706] usb 1-1: Using ep0 maxpacket: 8 [ 639.800911][ T8706] usb 1-1: config 239 has an invalid interface number: 86 but max is 0 [ 639.809619][ T8706] usb 1-1: config 239 has no interface number 0 [ 639.816083][ T8706] usb 1-1: too many endpoints for config 239 interface 86 altsetting 68: 53, using maximum allowed: 30 [ 639.827560][ T8706] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 639.839075][ T8706] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has invalid wMaxPacketSize 0 [ 639.849473][ T8706] usb 1-1: config 239 interface 86 altsetting 68 has 1 endpoint descriptor, different from the interface descriptor's value: 53 [ 639.862960][ T8706] usb 1-1: config 239 interface 86 has no altsetting 0 [ 640.017073][ T8706] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=cf.33 [ 640.026231][ T8706] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 640.034622][ T8706] usb 1-1: SerialNumber: syz [ 640.377066][ T8706] usbtest 1-1:239.86: couldn't get endpoints, -71 [ 640.383982][ T8706] usbtest: probe of 1-1:239.86 failed with error -71 [ 640.418727][ T8706] usb 1-1: USB disconnect, device number 126 07:32:39 executing program 5: 07:32:39 executing program 2: 07:32:39 executing program 4: 07:32:39 executing program 3: 07:32:39 executing program 0: syz_usb_connect(0x4, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000357373082505a0a433cf0000100109021b0001ef0000000904564435d0000f2009058521cce94c1d4065274e1150d4e3edd9da95bae392ce4f735a94a7a359c758f65cfd5149faa54359692f5b9d99dd0b71c20326f5f75b311cb470f2250af3b6e41ecbb25605367ce9fb77ce48d9af09ff569f141c"], 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) 07:32:39 executing program 1: 07:32:39 executing program 3: 07:32:39 executing program 1: 07:32:39 executing program 5: 07:32:39 executing program 2: 07:32:39 executing program 4: 07:32:39 executing program 1: 07:32:39 executing program 3: 07:32:39 executing program 5: 07:32:39 executing program 2: 07:32:39 executing program 4: 07:32:40 executing program 0: write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000000)={0x61, 0x7d, 0x2, {{0x0, 0x42, 0x401, 0x7, {}, 0x2000000, 0x7, 0x7fffffff, 0x3, 0x2, '){', 0x1, '/', 0xb, ',[!\'/#]!!!\x00', 0x1, '^'}, 0xa, '[},!{++$]$', 0xee00, 0xffffffffffffffff, 0xee00}}, 0x61) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000357373082505a0a433cf0000100109021b0001ef0000000904564435d0000f2009058521"], 0x0) 07:32:40 executing program 1: 07:32:40 executing program 3: 07:32:40 executing program 5: 07:32:40 executing program 2: 07:32:40 executing program 4: 07:32:40 executing program 1: [ 642.436735][T10073] usb 1-1: new high-speed USB device number 127 using dummy_hcd 07:32:40 executing program 3: 07:32:40 executing program 2: 07:32:40 executing program 5: 07:32:40 executing program 4: [ 642.677399][T10073] usb 1-1: Using ep0 maxpacket: 8 [ 642.807652][T10073] usb 1-1: config 239 has an invalid interface number: 86 but max is 0 [ 642.816092][T10073] usb 1-1: config 239 has no interface number 0 [ 642.822791][T10073] usb 1-1: too many endpoints for config 239 interface 86 altsetting 68: 53, using maximum allowed: 30 [ 642.834170][T10073] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 642.845717][T10073] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has invalid wMaxPacketSize 0 07:32:41 executing program 1: [ 642.856091][T10073] usb 1-1: config 239 interface 86 altsetting 68 has 1 endpoint descriptor, different from the interface descriptor's value: 53 [ 642.869606][T10073] usb 1-1: config 239 interface 86 has no altsetting 0 [ 643.159375][T10073] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=cf.33 [ 643.178034][T10073] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 643.186251][T10073] usb 1-1: SerialNumber: syz [ 643.498893][T10073] usbtest 1-1:239.86: couldn't get endpoints, -71 [ 643.505512][T10073] usbtest: probe of 1-1:239.86 failed with error -71 [ 643.542770][T10073] usb 1-1: USB disconnect, device number 127 07:32:42 executing program 4: 07:32:42 executing program 3: 07:32:42 executing program 2: 07:32:42 executing program 5: 07:32:42 executing program 1: 07:32:42 executing program 0: io_setup(0x5f, &(0x7f00000000c0)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0) socket$bt_rfcomm(0x1f, 0x3, 0x3) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x400, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000780)={0x0, 0x6ec, &(0x7f0000000740)={&(0x7f0000000480)={0x18, r4, 0x703, 0x0, 0x0, {0x2}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x44, r4, 0x800, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x40000) io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f00000002c0)="f01e19f27f06bf7413529be6d11107e80895e848870710574cc54cf4892558dd438e08730feeaf5d814ec1d45eeaf2c161e7edd428b6c50f58d9fa62a4790d7f09d5f258a251f4e1e6dd2a84bb08747de478a828b20f0e566d068b5959778bed2b6a308d9a36f60c307a31ecb9714706b08b50b21fea089fcbbd14ef38079cec428346c5d021429598a316381d4fd43976ea7ecf193e4537da5f6c57a2d2d4545ff262f367fc008f48cd193bf25c05fafeb7e3eae511a85f7dea46d767e2f4d8a212e643261ea9ed8f8eedcedf202a08ed0d35456b14a98392bad0ecf54c598e900da610dbb5cffee722ce13d207cf531edc6ff38d18dbcb", 0xf8, 0x0, 0x0, 0x0, r2}]) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="2962f136e06c55a4", @ANYRES64=r1, @ANYRESHEX, @ANYRESHEX], 0x0) 07:32:42 executing program 1: 07:32:42 executing program 2: 07:32:42 executing program 4: 07:32:42 executing program 3: 07:32:42 executing program 5: 07:32:42 executing program 2: [ 644.686689][ T8706] usb 1-1: new high-speed USB device number 2 using dummy_hcd 07:32:42 executing program 1: 07:32:43 executing program 3: 07:32:43 executing program 5: 07:32:43 executing program 4: [ 644.986702][ T8706] usb 1-1: device descriptor read/64, error 18 07:32:43 executing program 2: [ 645.406640][ T8706] usb 1-1: device descriptor read/64, error 18 [ 645.686849][ T8706] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 645.986658][ T8706] usb 1-1: device descriptor read/64, error 18 [ 646.396434][ T8706] usb 1-1: device descriptor read/64, error 18 [ 646.519721][ T8706] usb usb1-port1: attempt power cycle [ 647.256494][ T8706] usb 1-1: new high-speed USB device number 4 using dummy_hcd 07:32:45 executing program 0: r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) fstat(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r1, r2) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x0, 0xb6, 0x7, 0x8, 0x2, @ipv4={[], [], @empty}, @dev={0xfe, 0x80, [], 0x1b}, 0x10, 0x40, 0x7, 0x7fffffff}}) connect(r0, &(0x7f0000000300)=@can={0x1d, r3}, 0x80) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000357373082505a0a433cf0000100109021b0401e7000f2009058521"], 0x0) 07:32:45 executing program 1: 07:32:45 executing program 3: 07:32:45 executing program 5: 07:32:45 executing program 4: 07:32:45 executing program 2: [ 647.380981][ T8706] usb 1-1: device descriptor read/8, error -71 07:32:45 executing program 5: 07:32:45 executing program 4: [ 647.597553][ T8706] usb 1-1: device descriptor read/8, error -71 07:32:45 executing program 3: 07:32:45 executing program 2: 07:32:45 executing program 1: 07:32:46 executing program 4: [ 648.606415][ T8706] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 648.707135][ T8706] usb 1-1: Using ep0 maxpacket: 8 [ 648.829973][ T8706] usb 1-1: config index 0 descriptor too short (expected 1051, got 27) [ 648.838972][ T8706] usb 1-1: config 231 has an invalid descriptor of length 0, skipping remainder of the config [ 648.849584][ T8706] usb 1-1: config 231 has 0 interfaces, different from the descriptor's value: 1 [ 648.947449][ T8706] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=cf.33 [ 648.956750][ T8706] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 648.964912][ T8706] usb 1-1: SerialNumber: syz [ 649.260870][ T8710] usb 1-1: USB disconnect, device number 5 [ 650.025933][ T8710] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 650.265978][ T8710] usb 1-1: Using ep0 maxpacket: 8 [ 650.386174][ T8710] usb 1-1: config index 0 descriptor too short (expected 1051, got 27) [ 650.394616][ T8710] usb 1-1: config 231 has an invalid descriptor of length 0, skipping remainder of the config [ 650.405283][ T8710] usb 1-1: config 231 has 0 interfaces, different from the descriptor's value: 1 [ 650.486117][ T8710] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=cf.33 [ 650.495328][ T8710] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 650.503616][ T8710] usb 1-1: SerialNumber: syz [ 650.748821][ T8706] usb 1-1: USB disconnect, device number 6 07:32:49 executing program 1: 07:32:49 executing program 5: 07:32:49 executing program 2: 07:32:49 executing program 3: 07:32:49 executing program 4: 07:32:49 executing program 3: 07:32:49 executing program 5: 07:32:49 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETXW(r0, 0x5408, 0x0) 07:32:49 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) ioctl$SNDCTL_FM_LOAD_INSTR(r0, 0x80045104) 07:32:49 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x3, 0x0, 0x0) 07:32:49 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000357373082505a0a433cf0000100109021b0001ef0000000904564435d0000f2009058521"], 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r4) [ 651.436090][T10073] Bluetooth: hci5: command 0x0406 tx timeout 07:32:49 executing program 3: r0 = socket(0xa, 0x80002, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000240)={'ip6tnl0\x00', 0x0}) 07:32:49 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x10801, 0x0) 07:32:49 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000080)={0x6}) [ 651.656050][ T8710] usb 1-1: new high-speed USB device number 7 using dummy_hcd 07:32:49 executing program 1: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) 07:32:50 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @local, 0x0, 0x700}}) [ 651.898170][ T8710] usb 1-1: Using ep0 maxpacket: 8 [ 652.016749][ T8710] usb 1-1: config 239 has an invalid interface number: 86 but max is 0 [ 652.025193][ T8710] usb 1-1: config 239 has no interface number 0 [ 652.031879][ T8710] usb 1-1: too many endpoints for config 239 interface 86 altsetting 68: 53, using maximum allowed: 30 [ 652.043210][ T8710] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 652.054705][ T8710] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has invalid wMaxPacketSize 0 [ 652.065087][ T8710] usb 1-1: config 239 interface 86 altsetting 68 has 1 endpoint descriptor, different from the interface descriptor's value: 53 [ 652.078863][ T8710] usb 1-1: config 239 interface 86 has no altsetting 0 07:32:50 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000001140)='/dev/vcsu#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x11, r0, 0x0) 07:32:50 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)=':', 0x1}], 0x1}, 0x0) 07:32:50 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000680)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0xc0189436, 0x0) 07:32:50 executing program 2: r0 = socket(0x18, 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0xc04a00, 0x0, 0x2031, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 07:32:50 executing program 4: [ 652.486773][ T8710] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=cf.33 [ 652.496334][ T8710] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 652.504513][ T8710] usb 1-1: SerialNumber: syz 07:32:50 executing program 3: bpf$MAP_UPDATE_ELEM(0x9, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0}, 0x20) [ 652.946730][ T8710] usbtest 1-1:239.86: couldn't get endpoints, -71 [ 652.953618][ T8710] usbtest: probe of 1-1:239.86 failed with error -71 [ 653.004873][ T8710] usb 1-1: USB disconnect, device number 7 [ 653.676500][T10073] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 653.929089][T10073] usb 1-1: Using ep0 maxpacket: 8 [ 654.045951][T10073] usb 1-1: config 239 has an invalid interface number: 86 but max is 0 [ 654.054467][T10073] usb 1-1: config 239 has no interface number 0 [ 654.061131][T10073] usb 1-1: too many endpoints for config 239 interface 86 altsetting 68: 53, using maximum allowed: 30 [ 654.072578][T10073] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 654.084308][T10073] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has invalid wMaxPacketSize 0 [ 654.094753][T10073] usb 1-1: config 239 interface 86 altsetting 68 has 1 endpoint descriptor, different from the interface descriptor's value: 53 [ 654.108443][T10073] usb 1-1: config 239 interface 86 has no altsetting 0 [ 654.246800][T10073] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=cf.33 [ 654.256221][T10073] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 654.264384][T10073] usb 1-1: SerialNumber: syz 07:32:52 executing program 0: io_setup(0x5f, &(0x7f00000000c0)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0) io_submit(r0, 0x8, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0x65}]) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000357373082505a0a433cf0000100109021b0001ef0000000904564435d0000f2009058521", @ANYRESHEX=r1], 0x0) renameat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 07:32:52 executing program 4: bpf$BPF_GET_PROG_INFO(0x10, &(0x7f0000000200)={0xffffffffffffffff, 0xc0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) 07:32:52 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)) 07:32:52 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 07:32:52 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) 07:32:52 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_UNREGISTER(r0, 0xc018aa06, &(0x7f0000000100)={&(0x7f0000dfe000/0x2000)=nil, 0x2002}) [ 654.485828][T10073] usbtest 1-1:239.86: couldn't get endpoints, -71 [ 654.492574][T10073] usbtest: probe of 1-1:239.86 failed with error -71 [ 654.581337][T10073] usb 1-1: USB disconnect, device number 8 07:32:53 executing program 4: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x541b, &(0x7f0000000300)) 07:32:53 executing program 2: r0 = socket(0x2, 0x2, 0x0) getsockopt$MISDN_TIME_STAMP(r0, 0x11, 0x1, 0x0, &(0x7f0000000040)) 07:32:53 executing program 3: r0 = socket$inet6(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8930, &(0x7f0000000000)={'batadv0\x00'}) 07:32:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x2, &(0x7f0000000000)=@raw=[@jmp={0x5, 0x1, 0x6, 0x5, 0x0, 0x80, 0xffffffffffffffff}, @exit], &(0x7f00000000c0)='GPL\x00', 0x9c2, 0x9, &(0x7f0000000100)=""/9, 0x41100, 0x2, [], 0x0, 0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000180)={0x0, 0x2, 0x10001, 0xae11}, 0x10, 0xffffffffffffffff}, 0x78) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000002c0)) r2 = syz_open_dev$binderN(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000a40)={0x60, 0x0, &(0x7f0000000900)=[@dead_binder_done, @acquire={0x40046305, 0x2}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000880)={@ptr={0x70742a85, 0x1, &(0x7f00000005c0)=""/217, 0xd9, 0x0, 0x3f}, @ptr={0x70742a85, 0x0, &(0x7f00000006c0)=""/162, 0xa2, 0x0, 0x39}, @ptr={0x70742a85, 0x1, &(0x7f0000000780)=""/230, 0xe6, 0x2, 0x40}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x40}], 0x85, 0x0, &(0x7f0000000980)="354ca31d143d031f459465fe444cb1f52ca66418513f4af3be59db2e4291396b5d6fece32415792075bbc4143a128dec52b58feda410998d8621dc7950131c5a0f08306545436521dff28abd392e77ff4be88a0d8d323fd63fb7c86922fd98e00a796bbdfe615e071d03a05555ba52ca0e16b37565e497142802f9e2824bfc1c65e3474281"}) 07:32:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f00000000c0), 0xc) [ 655.066506][T10073] usb 1-1: new high-speed USB device number 9 using dummy_hcd 07:32:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) msgget$private(0x0, 0x4) msgctl$MSG_INFO(0x0, 0xc, 0x0) poll(0x0, 0x0, 0x204) msgsnd(0x0, &(0x7f0000000000)={0x2}, 0x2000, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x20000000000000d8) [ 655.245880][T13722] binder: 13718:13722 ioctl c0306201 0 returned -14 [ 655.303296][T13722] binder: 13718:13722 ioctl c0306201 0 returned -14 [ 655.305689][T10073] usb 1-1: Using ep0 maxpacket: 8 [ 655.427254][T10073] usb 1-1: config 239 has an invalid interface number: 86 but max is 0 [ 655.427362][T10073] usb 1-1: config 239 has no interface number 0 [ 655.427509][T10073] usb 1-1: too many endpoints for config 239 interface 86 altsetting 68: 53, using maximum allowed: 30 [ 655.453393][T10073] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has an invalid bInterval 48, changing to 7 [ 655.464954][T10073] usb 1-1: config 239 interface 86 altsetting 68 has 1 endpoint descriptor, different from the interface descriptor's value: 53 [ 655.478400][T10073] usb 1-1: config 239 interface 86 has no altsetting 0 [ 655.688884][T10073] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=cf.33 [ 655.698482][T10073] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 655.706868][T10073] usb 1-1: SerialNumber: syz [ 656.025833][T10073] usbtest 1-1:239.86: couldn't get endpoints, -71 [ 656.032756][T10073] usbtest: probe of 1-1:239.86 failed with error -71 [ 656.060756][T10073] usb 1-1: USB disconnect, device number 9 07:32:54 executing program 0: ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000080)={@fixed={[], 0x10}, 0x1}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r2, 0xc0105303, &(0x7f0000000000)={0x7, 0xe7, 0x9}) mq_unlink(&(0x7f0000000100)='\'(\x00') syz_usb_connect(0x1, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000035737308100109021b0001ef0000000b04564435d0000f200905c5210000000000000000"], 0x0) 07:32:54 executing program 2: socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000001200)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='net/igmp6\x00', 0x0) readv(0xffffffffffffffff, &(0x7f00000021c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/route\x00') preadv(r0, &(0x7f00000017c0), 0x15e, 0x4700, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB='\"\x00\x00\x00', @ANYRES32=0x0], &(0x7f0000000080)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x7a, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x1, {{0xa, 0xfffc, 0x0, @private2}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x16}}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) 07:32:54 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) 07:32:54 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001cc0)=[{{&(0x7f0000000180)=@nl=@proc, 0x80, 0x0}, 0x7fff}], 0x1, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154}, {&(0x7f00000003c0)=""/68}, {&(0x7f00000005c0)=""/214}, {&(0x7f00000006c0)=""/194}, {&(0x7f00000007c0)=""/146}, {&(0x7f0000000880)=""/144}, {&(0x7f0000000480)=""/13}, {&(0x7f0000000940)=""/71}], 0x2a9, 0x0, 0x0) 07:32:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x40200, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:32:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b5b3266006c00"], 0x5f) 07:32:55 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x8cf}, 0x1c) dup(0xffffffffffffffff) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @random, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x18, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x18, 0x0, @wg=@data}}}}}}, 0x0) 07:32:55 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x102440, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x0) fcntl$getflags(r2, 0x401) 07:32:55 executing program 1: 07:32:55 executing program 5: 07:32:55 executing program 2: [ 657.345671][ T12] usb 1-1: new low-speed USB device number 10 using dummy_hcd 07:32:55 executing program 5: [ 657.637009][ T12] usb 1-1: no configurations [ 657.641935][ T12] usb 1-1: can't read configurations, error -22 [ 657.856667][ T12] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 658.146547][ T12] usb 1-1: no configurations [ 658.151429][ T12] usb 1-1: can't read configurations, error -22 [ 658.170762][ T12] usb usb1-port1: attempt power cycle [ 658.895490][ T12] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 659.095553][ T12] usb 1-1: no configurations [ 659.100327][ T12] usb 1-1: can't read configurations, error -22 [ 659.295620][ T12] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 659.431615][ T12] usb 1-1: no configurations [ 659.436528][ T12] usb 1-1: can't read configurations, error -22 [ 659.505826][ T12] usb usb1-port1: unable to enumerate USB device 07:32:58 executing program 0: sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000000107010300000000028300000000070000060c00064000000000000000ff188c0cf0c7aec6bb67469c85806dbc0a92d067a2b7c58b46bc3a1368541ccb5cc584860bf5997ee1617ee1c3cbadf638"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4000) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000080)={@ipv4={[], [], @private}, 0x0}, &(0x7f0000000280)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl0\x00', r0, 0x1, 0x40, 0x8001, 0x2, {{0x49, 0x4, 0x3, 0xe, 0x124, 0x67, 0x0, 0x50, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x13}, @rand_addr=0x64010101, {[@generic={0x88, 0x9, "ef000c521ab0b8"}, @cipso={0x86, 0x45, 0x0, [{0x0, 0x8, "50b4c7d0ef2c"}, {0x7, 0x11, "0bab295e8a61d280b85b08151be3bd"}, {0x7, 0x10, "c18ea7b399e89d034b6e2312e0ba"}, {0x1, 0x8, "b73afe4bf8f2"}, {0x6, 0x2}, {0x5, 0xc, "2db9b4a8b7699c880fca"}]}, @rr={0x7, 0xf, 0x2a, [@local, @private=0xa010102, @local]}, @end, @cipso={0x86, 0x4d, 0x3, [{0x0, 0x5, ',Kr'}, {0x7, 0x9, "997d1e7790cf0b"}, {0x1, 0xe, "ef6058569a8fcd39bf22e9ef"}, {0x1, 0x9, "63c6eaaa0dddf6"}, {0x5, 0x7, "0295630517"}, {0x1, 0xf, "7c053b9371f82d250049b0e22e"}, {0x0, 0x2}, {0x1, 0x4, "a3dc"}, {0x0, 0x6, "07f6c999"}]}, @generic={0x7, 0x12, "aa831e5ff00ab1afe268966d7f13a737"}, @timestamp_addr={0x44, 0x4c, 0x7a, 0x1, 0x0, [{@rand_addr=0x64010100, 0xb5b2}, {@dev={0xac, 0x14, 0x14, 0x2e}}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xf6b9}, {@private=0xa010102, 0x96}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x2}, {@broadcast, 0x5}, {@remote, 0x38}, {@empty, 0x5}, {@dev={0xac, 0x14, 0x14, 0x21}, 0x9852}]}, @ra={0x94, 0x4, 0x1}]}}}}}) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000357373082505a0a433cf0000cb89140f2009058521"], 0x0) 07:32:58 executing program 1: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000000c0)={0xc54, 0x3, 0x4, 0x8, 0x7fff, {0x0, 0x2710}, {0x4, 0xa, 0x5, 0x7, 0x3, 0x4, "7ec946d8"}, 0x7fffffff, 0x4, @planes=&(0x7f0000000080)={0x1, 0x1, @mem_offset=0xfffff001, 0x5}, 0xee3}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_create(0x9) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000002ec0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/205, 0xcd}}], 0x1, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000640)={0x13, 0x10, 0x7, {0x0, r1, 0x1}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x5, @mcast1}, {0xa, 0x4e22, 0x40, @local, 0x8}, r1, 0x63a8}}, 0x48) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') connect$qrtr(0xffffffffffffffff, 0x0, 0x0) preadv(r2, &(0x7f00000017c0), 0x1a2, 0x0, 0x0) 07:32:58 executing program 4: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x5f) 07:32:58 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x83, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) pidfd_send_signal(0xffffffffffffffff, 0x20, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r4, 0x9, 0x0, 0xa22f, 0x0, 0x0, {0x0, r3}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:32:58 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x1f}]}, 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="74010000", @ANYRES16=0x0, @ANYBLOB="08002dbd7000fcdbdf25040000003c00018008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f746f5f6272696467650008000100", @ANYRES64=0x0, @ANYBLOB="140002006261746164765f736c6176655f300000180001801400020076657468305f766972745f776966690054000180080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="14000200766c616e30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="140002006e723000000000000000000000000000380001800800030003000000140002006e657464657673696d3000000000000008", @ANYRES32=0x0, @ANYBLOB="080003000000000008000335010000000c00018008000100", @ANYBLOB="0c00018008000300010000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="4800018008000100", @ANYRES32=0x0, @ANYBLOB="140002006e65747063693000000000000000000008000100", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32, @ANYBLOB="1400018008000100", @ANYRES32=0x0, @ANYBLOB="080003000100"], 0x174}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x687f, 0x8}, 0x42180}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_TIMERSLACK(0x1e) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) pipe(0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) r3 = syz_io_uring_complete(0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000002c0)=[@in6={0xa, 0x4e20, 0x7, @remote}, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e1e, 0x0, @remote, 0xe1e}, @in6={0xa, 0x4e23, 0x5, @private2, 0x9}], 0x74) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={0x0, 0x800}, 0x8) ftruncate(r2, 0x200002) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000140)=[@in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e24, @private=0xa010101}, @in6={0xa, 0x4e21, 0xfffffc00, @private2, 0x41}, @in6={0xa, 0x4e21, 0x1f, @ipv4={[], [], @empty}, 0x2}, @in6={0xa, 0x4e21, 0x3f, @private1, 0x4}], 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x8) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 07:32:58 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x138, &(0x7f0000000400)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = getpid() tkill(r1, 0x2f) 07:32:58 executing program 5: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x8081, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x80882, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002ec0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/205, 0xcd}}], 0x1, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000640)={0x13, 0x10, 0x7, {0x0}}, 0x18) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') preadv(r1, &(0x7f00000017c0), 0x1a2, 0x0, 0x0) 07:32:58 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x83, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) pidfd_send_signal(0xffffffffffffffff, 0x20, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r4, 0x9, 0x0, 0xa22f, 0x0, 0x0, {0x0, r3}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:32:58 executing program 3: 07:32:58 executing program 4: 07:32:58 executing program 1: [ 660.645317][ T12] usb 1-1: new high-speed USB device number 14 using dummy_hcd 07:32:59 executing program 5: [ 660.895371][ T12] usb 1-1: Using ep0 maxpacket: 8 [ 660.947253][ T12] usb 1-1: too many configurations: 137, using maximum allowed: 8 [ 661.096863][ T12] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 661.104720][ T12] usb 1-1: can't read configurations, error -61 [ 661.315430][ T12] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 661.558650][ T12] usb 1-1: Using ep0 maxpacket: 8 [ 661.606203][ T12] usb 1-1: too many configurations: 137, using maximum allowed: 8 [ 661.747282][ T12] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 661.755203][ T12] usb 1-1: can't read configurations, error -61 [ 661.782812][ T12] usb usb1-port1: attempt power cycle [ 662.505084][ T12] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 662.595419][ T12] usb 1-1: Using ep0 maxpacket: 8 [ 662.635979][ T12] usb 1-1: too many configurations: 137, using maximum allowed: 8 [ 662.755703][ T12] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 662.763385][ T12] usb 1-1: can't read configurations, error -61 [ 662.915050][ T12] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 663.006279][ T12] usb 1-1: Using ep0 maxpacket: 8 [ 663.045757][ T12] usb 1-1: too many configurations: 137, using maximum allowed: 8 [ 663.167297][ T12] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 663.175136][ T12] usb 1-1: can't read configurations, error -61 [ 663.183077][ T12] usb usb1-port1: unable to enumerate USB device 07:33:01 executing program 0: dup(0xffffffffffffffff) io_setup(0x5f, &(0x7f00000000c0)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0) io_submit(r0, 0x8, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0x65}]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BLKGETSIZE64(r5, 0x80081272, &(0x7f0000000080)) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$KDSKBSENT(r6, 0x4b49, &(0x7f00000002c0)={0x3f, "9e8a41e15341eaee6b76bcc62669ca207ebabb5520549448789e04f36b24fa1b9ec6eca95feb89b609fb7e1369e617a51aa52934a189f789948ae6f61b2d6fc30bc29675016c5893724fc3b66306147b5094960eeb8807702c4c4e087984f7fd7fc9ab18ba84da2a8fb6ff01f71165a88717adf258879eca5bf8e5ea972e708b070febe10a25ebfb27ff7b829855a2a2e8227ffbb51cc2ff883f0e4f194f8062f37b4ae557c5ba95bf229d94e72e64369e895134fa419752131669004809a833c8592e9f64a02d0a7ee3c01368c748cfe34bd35ec6cfda02df7a69e6f0d7b85c505285c319c664d6d539c92f62943a34a43301696315390d0303cd934980bcc62a40629895318325296bba83f0ddf739ab4bff8393da7af7e9bd40fd6036ba09398a07dc2914aa298c9f683ef5d9b1a506c961a3a1200a629f3909b97cd993bfdce78ecb9374f987eb13c64894126a0e087218bf41e76ffe5ea2880a77749446aa525dd5d92dc92f1510070de18a6dfe8c938e4b0df02e7f1d4bd8e6d0aaa9f0b52907c165f098af93ed948ff9e859bb49188aa5c144cdd3fd12c3ad837d1ad0aa1cd5ef5953fc1a5de3eb97c38eb92e2f2a357ce190f299f823c82ebf68b84f95f24171891156c812480cb8fd4b83a81d5b202b23b926a422697e178f77c3ead72106c26677c9dd5ffb3a1c51c9d08c42876ac0234e8d1ead090a271b7fc953"}) dup(r3) r7 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x6, 0x80) fcntl$setlease(r1, 0x400, 0x669b107c25e58c27) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000006000000000000000500000000000000", @ANYRES32=r1, @ANYBLOB="000000008100"/28, @ANYRES32, @ANYBLOB="000100047fd532fe6cd8b6e1710000ffffffffffffff00e0007cfd00", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00xm\x00'/28, @ANYRES32=r7, @ANYRES64=r2, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\b\x00'/28]) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000357373082505a0a433cf0000100109021b0001ef0000000904564435d0000f2009058521"], 0x0) 07:33:01 executing program 3: 07:33:01 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x83, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) pidfd_send_signal(0xffffffffffffffff, 0x20, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r4, 0x9, 0x0, 0xa22f, 0x0, 0x0, {0x0, r3}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:33:01 executing program 1: 07:33:01 executing program 4: 07:33:01 executing program 5: 07:33:01 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x83, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) pidfd_send_signal(0xffffffffffffffff, 0x20, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r4, 0x9, 0x0, 0xa22f, 0x0, 0x0, {0x0, r3}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:33:01 executing program 5: 07:33:01 executing program 1: 07:33:01 executing program 3: 07:33:01 executing program 4: [ 663.775635][ T8710] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 664.024956][ T8710] usb 1-1: Using ep0 maxpacket: 8 07:33:02 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x2, 0x0) [ 664.169675][ T8710] usb 1-1: config 239 has an invalid interface number: 86 but max is 0 [ 664.178379][ T8710] usb 1-1: config 239 has no interface number 0 [ 664.184996][ T8710] usb 1-1: too many endpoints for config 239 interface 86 altsetting 68: 53, using maximum allowed: 30 [ 664.196335][ T8710] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 664.207813][ T8710] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has invalid wMaxPacketSize 0 [ 664.218130][ T8710] usb 1-1: config 239 interface 86 altsetting 68 has 1 endpoint descriptor, different from the interface descriptor's value: 53 [ 664.231713][ T8710] usb 1-1: config 239 interface 86 has no altsetting 0 [ 664.416897][ T8710] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=cf.33 [ 664.426213][ T8710] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 664.434374][ T8710] usb 1-1: SerialNumber: syz [ 664.775079][ T8710] usbtest 1-1:239.86: couldn't get endpoints, -71 [ 664.781954][ T8710] usbtest: probe of 1-1:239.86 failed with error -71 [ 664.836102][ T8710] usb 1-1: USB disconnect, device number 18 07:33:03 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100003573730825850200ef00000009c449b0a60c3e04564435d000"], 0x0) 07:33:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x83) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4040aea0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r3, r2) 07:33:03 executing program 3: tkill(0x0, 0x0) 07:33:03 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x189) unlink(&(0x7f0000000040)='./file0\x00') 07:33:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x83, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) pidfd_send_signal(0xffffffffffffffff, 0x20, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:33:03 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/locks\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x0) 07:33:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = dup(r0) shutdown(r1, 0x0) 07:33:04 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x83, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) pidfd_send_signal(0xffffffffffffffff, 0x20, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:33:04 executing program 3: 07:33:04 executing program 4: 07:33:04 executing program 5: [ 666.167054][ T8711] usb 1-1: new high-speed USB device number 19 using dummy_hcd 07:33:04 executing program 4: [ 666.415306][ T8711] usb 1-1: Using ep0 maxpacket: 8 [ 666.456366][ T8711] usb 1-1: too many configurations: 196, using maximum allowed: 8 [ 666.575484][ T8711] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 666.583411][ T8711] usb 1-1: can't read configurations, error -61 [ 666.784878][ T8711] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 667.025436][ T8711] usb 1-1: Using ep0 maxpacket: 8 [ 667.065723][ T8711] usb 1-1: too many configurations: 196, using maximum allowed: 8 [ 667.185347][ T8711] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 667.193169][ T8711] usb 1-1: can't read configurations, error -61 [ 667.222529][ T8711] usb usb1-port1: attempt power cycle [ 667.934626][ T8711] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 668.025448][ T8711] usb 1-1: Using ep0 maxpacket: 8 [ 668.065614][ T8711] usb 1-1: too many configurations: 196, using maximum allowed: 8 [ 668.184859][ T8711] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 668.192587][ T8711] usb 1-1: can't read configurations, error -61 [ 668.344633][ T8711] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 668.435340][ T8711] usb 1-1: Using ep0 maxpacket: 8 [ 668.477758][ T8711] usb 1-1: too many configurations: 196, using maximum allowed: 8 [ 668.604764][ T8711] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 668.612537][ T8711] usb 1-1: can't read configurations, error -61 [ 668.624821][ T8711] usb usb1-port1: unable to enumerate USB device 07:33:07 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x0) 07:33:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x83, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) pidfd_send_signal(0xffffffffffffffff, 0x20, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:33:07 executing program 3: 07:33:07 executing program 1: 07:33:07 executing program 5: 07:33:07 executing program 4: 07:33:07 executing program 5: 07:33:07 executing program 1: 07:33:07 executing program 3: 07:33:07 executing program 4: 07:33:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x83, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) pidfd_send_signal(0xffffffffffffffff, 0x20, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd, 0x9, 0x0, 0xa22f, 0x0, 0x0, {0x0, r3}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 669.307660][ T8711] usb 1-1: new high-speed USB device number 23 using dummy_hcd 07:33:07 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x1, 0x1, 0x301, 0x300}, 0x14}}, 0x0) [ 669.594866][ T8711] usb 1-1: device descriptor read/64, error 18 [ 670.005506][ T8711] usb 1-1: device descriptor read/64, error 18 [ 670.294502][ T8711] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 670.574558][ T8711] usb 1-1: device descriptor read/64, error 18 [ 671.004462][ T8711] usb 1-1: device descriptor read/64, error 18 [ 671.136956][ T8711] usb usb1-port1: attempt power cycle [ 671.844398][ T8711] usb 1-1: new high-speed USB device number 25 using dummy_hcd 07:33:10 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000357373082505a0a433cf0000100109021b0001ef0000000904564435d0000f2009058521"], 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x140) setsockopt$packet_buf(r0, 0x107, 0x1, &(0x7f0000000040)="5160baba41c406", 0x7) 07:33:10 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x1000000f0) 07:33:10 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x2661, 0x4) sendmmsg(r0, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001e00)="8f", 0x1}], 0x1}}], 0x1, 0x0) poll(&(0x7f0000000300)=[{r0}], 0x1, 0x0) 07:33:10 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ttyS3\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) 07:33:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x83, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) pidfd_send_signal(0xffffffffffffffff, 0x20, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd, 0x9, 0x0, 0xa22f, 0x0, 0x0, {0x0, r3}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:33:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2}, 0x14) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x48}}, 0x0) [ 671.995388][ T8711] usb 1-1: device descriptor read/8, error -71 [ 672.055439][T14006] netlink: 'syz-executor.5': attribute type 5 has an invalid length. [ 672.073655][T14006] bridge0: port 3(ipvlan2) entered blocking state [ 672.080605][T14006] bridge0: port 3(ipvlan2) entered disabled state [ 672.204522][ T8711] usb 1-1: device descriptor read/8, error -71 07:33:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x83, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) pidfd_send_signal(0xffffffffffffffff, 0x20, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd, 0x9, 0x0, 0xa22f, 0x0, 0x0, {0x0, r3}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:33:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_create(0x0, 0x0, &(0x7f00009b1ffc)) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='timers\x00') preadv(r2, &(0x7f0000000840)=[{&(0x7f0000000280)=""/118, 0x95}], 0x1, 0x0, 0x0) 07:33:10 executing program 3: 07:33:10 executing program 5: 07:33:10 executing program 4: [ 672.698146][ T8711] usb 1-1: new high-speed USB device number 26 using dummy_hcd 07:33:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_create(0x0, 0x0, &(0x7f00009b1ffc)) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='timers\x00') preadv(r2, &(0x7f0000000840)=[{&(0x7f0000000280)=""/118, 0x95}], 0x1, 0x0, 0x0) [ 672.805591][ T8711] usb 1-1: Using ep0 maxpacket: 8 [ 672.925198][ T8711] usb 1-1: config 239 has an invalid interface number: 86 but max is 0 [ 672.933640][ T8711] usb 1-1: config 239 has no interface number 0 [ 672.940226][ T8711] usb 1-1: too many endpoints for config 239 interface 86 altsetting 68: 53, using maximum allowed: 30 [ 672.951631][ T8711] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 672.963126][ T8711] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has invalid wMaxPacketSize 0 [ 672.973513][ T8711] usb 1-1: config 239 interface 86 altsetting 68 has 1 endpoint descriptor, different from the interface descriptor's value: 53 [ 672.987004][ T8711] usb 1-1: config 239 interface 86 has no altsetting 0 [ 673.135435][ T8711] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=cf.33 [ 673.144754][ T8711] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 673.155346][ T8711] usb 1-1: SerialNumber: syz [ 673.515829][ T8711] usbtest 1-1:239.86: couldn't get endpoints, -71 [ 673.522743][ T8711] usbtest: probe of 1-1:239.86 failed with error -71 [ 673.572060][ T8711] usb 1-1: USB disconnect, device number 26 [ 674.254288][ T8710] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 674.494048][ T8710] usb 1-1: Using ep0 maxpacket: 8 [ 674.614287][ T8710] usb 1-1: config 239 has an invalid interface number: 86 but max is 0 [ 674.622661][ T8710] usb 1-1: config 239 has no interface number 0 [ 674.629289][ T8710] usb 1-1: too many endpoints for config 239 interface 86 altsetting 68: 53, using maximum allowed: 30 [ 674.640787][ T8710] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 674.652279][ T8710] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has invalid wMaxPacketSize 0 [ 674.662658][ T8710] usb 1-1: config 239 interface 86 altsetting 68 has 1 endpoint descriptor, different from the interface descriptor's value: 53 [ 674.676201][ T8710] usb 1-1: config 239 interface 86 has no altsetting 0 [ 674.754377][ T8710] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=cf.33 [ 674.763531][ T8710] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 674.771848][ T8710] usb 1-1: SerialNumber: syz [ 675.074312][ T8710] usbtest 1-1:239.86: couldn't get endpoints, -71 [ 675.081156][ T8710] usbtest: probe of 1-1:239.86 failed with error -71 07:33:13 executing program 0: ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000000)={{0x7c, 0x40}, 0x1, 0x80000000, 0x80000000, {0xc0, 0x5}, 0x88, 0x19c0}) syz_usb_connect(0x5, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000357373082505a0a433cf0000100109021b0001ef0000000904564435d0000f2009058521"], 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000080)={0x5, 0x46706be8, 0x200, 0x100, 0x80000001, 0x800}) 07:33:13 executing program 3: 07:33:13 executing program 5: 07:33:13 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x83, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) pidfd_send_signal(0xffffffffffffffff, 0x20, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r3, 0x9, 0x0, 0xa22f}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:33:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_create(0x0, 0x0, &(0x7f00009b1ffc)) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='timers\x00') preadv(r2, &(0x7f0000000840)=[{&(0x7f0000000280)=""/118, 0x95}], 0x1, 0x0, 0x0) 07:33:13 executing program 4: [ 675.119121][ T8710] usb 1-1: USB disconnect, device number 27 07:33:13 executing program 4: 07:33:13 executing program 5: 07:33:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_create(0x0, 0x0, &(0x7f00009b1ffc)) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='timers\x00') preadv(r2, &(0x7f0000000840)=[{&(0x7f0000000280)=""/118, 0x95}], 0x1, 0x0, 0x0) 07:33:13 executing program 3: 07:33:13 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x83, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) pidfd_send_signal(0xffffffffffffffff, 0x20, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r3, 0x9, 0x0, 0xa22f}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 675.784115][ T8710] usb 1-1: new high-speed USB device number 28 using dummy_hcd 07:33:14 executing program 4: [ 676.025065][ T8710] usb 1-1: Using ep0 maxpacket: 8 [ 676.144961][ T8710] usb 1-1: config 239 has an invalid interface number: 86 but max is 0 [ 676.153412][ T8710] usb 1-1: config 239 has no interface number 0 [ 676.160420][ T8710] usb 1-1: too many endpoints for config 239 interface 86 altsetting 68: 53, using maximum allowed: 30 [ 676.172050][ T8710] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 676.183590][ T8710] usb 1-1: config 239 interface 86 altsetting 68 endpoint 0x85 has invalid wMaxPacketSize 0 [ 676.194015][ T8710] usb 1-1: config 239 interface 86 altsetting 68 has 1 endpoint descriptor, different from the interface descriptor's value: 53 [ 676.207507][ T8710] usb 1-1: config 239 interface 86 has no altsetting 0 [ 676.305051][ T8710] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=cf.33 [ 676.314804][ T8710] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 676.322977][ T8710] usb 1-1: SerialNumber: syz [ 676.664651][ T8710] usbtest 1-1:239.86: couldn't get endpoints, -71 [ 676.671284][ T8710] usbtest: probe of 1-1:239.86 failed with error -71 [ 676.713121][ T8710] usb 1-1: USB disconnect, device number 28 07:33:15 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)={0x0}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(0xffffffffffffffff, 0x0, 0x8a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) 07:33:15 executing program 5: 07:33:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_create(0x0, 0x0, &(0x7f00009b1ffc)) preadv(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000280)=""/118, 0x95}], 0x1, 0x0, 0x0) 07:33:15 executing program 3: 07:33:15 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x83, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) pidfd_send_signal(0xffffffffffffffff, 0x20, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r3, 0x9, 0x0, 0xa22f}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:33:15 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000035737315b2d1eab3e44a8acc244facaac73a070805a0a433cf0000100109021b0001ef093dd922ce0226f1e2e020ab002858675f"], 0x0) 07:33:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_create(0x0, 0x0, &(0x7f00009b1ffc)) preadv(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000280)=""/118, 0x95}], 0x1, 0x0, 0x0) 07:33:15 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)='\f', 0xfffffdef, 0x1f4, 0x0, 0x0) 07:33:15 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendmmsg(r0, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001e00)="8f", 0x1}], 0x1}}], 0x1, 0x0) poll(&(0x7f0000000300)=[{r0}], 0x1, 0x0) 07:33:15 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x83, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) pidfd_send_signal(0xffffffffffffffff, 0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r3, 0x9, 0x0, 0xa22f}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 677.724028][ T8710] usb 1-1: new high-speed USB device number 29 using dummy_hcd 07:33:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_create(0x0, 0x0, &(0x7f00009b1ffc)) preadv(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000280)=""/118, 0x95}], 0x1, 0x0, 0x0) [ 677.994679][ T8710] usb 1-1: device descriptor read/64, error 18 07:33:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x83, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r3, 0x9, 0x0, 0xa22f}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:33:16 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000041c0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, 0x0, 0x41) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0xedc000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000080), 0x4) open(0x0, 0x303400, 0x8) 07:33:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x3}, {0x1c, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'syzkaller1\x00'}}}}}, 0x38}}, 0x0) 07:33:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='timers\x00') preadv(r2, &(0x7f0000000840)=[{&(0x7f0000000280)=""/118, 0x95}], 0x1, 0x0, 0x0) 07:33:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r0, 0x9, 0x0, 0xa22f}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 678.384227][ T8710] usb 1-1: device descriptor read/64, error 18 07:33:16 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xffffff4c, &(0x7f0000000980), 0x0, 0x0, 0xfffffffffffffea8, 0x20000001}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x1}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = dup2(r0, r0) r2 = socket(0x15, 0x3, 0x6) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002030104704b0000180000000000000000000340000000000800010001000000090002fe6508000000000900"], 0x30}}, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000100)=@buf={0x54, &(0x7f0000000000)="b24c3367f41f8278678b8af2bba6edc4e5dd6fa9115372438878509645b8619c25fa4382e300ebc152cccb05aa4c197986f9a360aa2e0233498fc2f1b94aa268090ca3c6c8cc4c1b71878e447a03309b3a96e510"}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') setfsuid(0xee01) [ 678.529610][T14165] ===================================================== [ 678.536737][T14165] BUG: KMSAN: uninit-value in __tipc_nl_compat_dumpit+0x5cd/0x1450 [ 678.544633][T14165] CPU: 0 PID: 14165 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 678.553301][T14165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 678.563348][T14165] Call Trace: [ 678.566694][T14165] dump_stack+0x21c/0x280 [ 678.571057][T14165] kmsan_report+0xf7/0x1e0 [ 678.575478][T14165] __msan_warning+0x58/0xa0 [ 678.579984][T14165] __tipc_nl_compat_dumpit+0x5cd/0x1450 [ 678.585529][T14165] ? kmsan_get_metadata+0x116/0x180 [ 678.590728][T14165] ? kmsan_get_metadata+0x116/0x180 [ 678.595976][T14165] ? __alloc_skb+0x894/0xb30 [ 678.600577][T14165] tipc_nl_compat_dumpit+0x7f9/0x9d0 [ 678.605871][T14165] tipc_nl_compat_recv+0x119c/0x2bf0 [ 678.611160][T14165] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 678.617366][T14165] ? tipc_detach_loopback+0x160/0x160 [ 678.622736][T14165] ? tipc_nl_compat_recv+0x2bf0/0x2bf0 [ 678.628194][T14165] ? tipc_netlink_compat_stop+0x40/0x40 [ 678.633798][T14165] genl_rcv_msg+0x1703/0x18a0 [ 678.638491][T14165] ? kmsan_set_origin_checked+0x95/0xf0 [ 678.644045][T14165] netlink_rcv_skb+0x6d7/0x7e0 [ 678.648811][T14165] ? genl_rcv+0x80/0x80 [ 678.652973][T14165] genl_rcv+0x63/0x80 [ 678.656956][T14165] netlink_unicast+0x11c8/0x1490 [ 678.661898][T14165] ? genl_pernet_exit+0x90/0x90 [ 678.666757][T14165] netlink_sendmsg+0x173a/0x1840 [ 678.671709][T14165] ____sys_sendmsg+0xc82/0x1240 [ 678.676568][T14165] ? netlink_getsockopt+0x1b20/0x1b20 [ 678.681949][T14165] __sys_sendmsg+0x6d1/0x840 [ 678.686553][T14165] ? kmsan_copy_to_user+0x81/0x90 [ 678.691581][T14165] ? kmsan_get_metadata+0x116/0x180 [ 678.696780][T14165] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 678.702584][T14165] ? kmsan_get_metadata+0x116/0x180 [ 678.707803][T14165] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 678.713623][T14165] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 678.719813][T14165] __se_sys_sendmsg+0x97/0xb0 [ 678.724498][T14165] __x64_sys_sendmsg+0x4a/0x70 [ 678.729338][T14165] do_syscall_64+0xad/0x160 [ 678.733866][T14165] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 678.739788][T14165] RIP: 0033:0x45d5b9 [ 678.743672][T14165] Code: Bad RIP value. [ 678.747732][T14165] RSP: 002b:00007fc6a3c66c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 678.756178][T14165] RAX: ffffffffffffffda RBX: 000000000002c080 RCX: 000000000045d5b9 [ 678.764146][T14165] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 678.772126][T14165] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 678.780094][T14165] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 678.788062][T14165] R13: 000000000169fb6f R14: 00007fc6a3c679c0 R15: 000000000118cf4c [ 678.796035][T14165] [ 678.798355][T14165] Uninit was created at: [ 678.802602][T14165] kmsan_internal_poison_shadow+0x66/0xd0 [ 678.808321][T14165] kmsan_slab_alloc+0x8a/0xe0 [ 678.813054][T14165] __kmalloc_node_track_caller+0xeab/0x12e0 [ 678.818947][T14165] __alloc_skb+0x35f/0xb30 [ 678.823365][T14165] tipc_nl_compat_dumpit+0x77c/0x9d0 [ 678.828648][T14165] tipc_nl_compat_recv+0x119c/0x2bf0 [ 678.833963][T14165] genl_rcv_msg+0x1703/0x18a0 [ 678.838637][T14165] netlink_rcv_skb+0x6d7/0x7e0 [ 678.843399][T14165] genl_rcv+0x63/0x80 [ 678.847414][T14165] netlink_unicast+0x11c8/0x1490 [ 678.852348][T14165] netlink_sendmsg+0x173a/0x1840 [ 678.857282][T14165] ____sys_sendmsg+0xc82/0x1240 [ 678.862131][T14165] __sys_sendmsg+0x6d1/0x840 [ 678.866727][T14165] __se_sys_sendmsg+0x97/0xb0 [ 678.871402][T14165] __x64_sys_sendmsg+0x4a/0x70 [ 678.876163][T14165] do_syscall_64+0xad/0x160 [ 678.880751][T14165] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 678.886632][T14165] ===================================================== [ 678.893554][T14165] Disabling lock debugging due to kernel taint [ 678.899702][T14165] Kernel panic - not syncing: panic_on_warn set ... [ 678.906291][T14165] CPU: 0 PID: 14165 Comm: syz-executor.5 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 678.916428][T14165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 678.926477][T14165] Call Trace: [ 678.929867][T14165] dump_stack+0x21c/0x280 [ 678.934274][T14165] panic+0x4d7/0xef7 [ 678.938185][T14165] ? add_taint+0x17c/0x210 [ 678.942606][T14165] kmsan_report+0x1df/0x1e0 [ 678.947123][T14165] __msan_warning+0x58/0xa0 [ 678.951642][T14165] __tipc_nl_compat_dumpit+0x5cd/0x1450 [ 678.957186][T14165] ? kmsan_get_metadata+0x116/0x180 [ 678.962385][T14165] ? kmsan_get_metadata+0x116/0x180 [ 678.967597][T14165] ? __alloc_skb+0x894/0xb30 [ 678.972197][T14165] tipc_nl_compat_dumpit+0x7f9/0x9d0 [ 678.977492][T14165] tipc_nl_compat_recv+0x119c/0x2bf0 [ 678.982782][T14165] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 678.988857][T14165] ? tipc_detach_loopback+0x160/0x160 [ 678.994231][T14165] ? tipc_nl_compat_recv+0x2bf0/0x2bf0 [ 678.999747][T14165] ? tipc_netlink_compat_stop+0x40/0x40 [ 679.005298][T14165] genl_rcv_msg+0x1703/0x18a0 [ 679.009990][T14165] ? kmsan_set_origin_checked+0x95/0xf0 [ 679.015579][T14165] netlink_rcv_skb+0x6d7/0x7e0 [ 679.020345][T14165] ? genl_rcv+0x80/0x80 [ 679.024543][T14165] genl_rcv+0x63/0x80 [ 679.028526][T14165] netlink_unicast+0x11c8/0x1490 [ 679.033464][T14165] ? genl_pernet_exit+0x90/0x90 [ 679.038324][T14165] netlink_sendmsg+0x173a/0x1840 [ 679.043279][T14165] ____sys_sendmsg+0xc82/0x1240 [ 679.048140][T14165] ? netlink_getsockopt+0x1b20/0x1b20 [ 679.053514][T14165] __sys_sendmsg+0x6d1/0x840 [ 679.058120][T14165] ? kmsan_copy_to_user+0x81/0x90 [ 679.063146][T14165] ? kmsan_get_metadata+0x116/0x180 [ 679.068348][T14165] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 679.074150][T14165] ? kmsan_get_metadata+0x116/0x180 [ 679.079346][T14165] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 679.085156][T14165] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 679.091311][T14165] __se_sys_sendmsg+0x97/0xb0 [ 679.095992][T14165] __x64_sys_sendmsg+0x4a/0x70 [ 679.100760][T14165] do_syscall_64+0xad/0x160 [ 679.105268][T14165] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 679.111158][T14165] RIP: 0033:0x45d5b9 [ 679.115039][T14165] Code: Bad RIP value. [ 679.119100][T14165] RSP: 002b:00007fc6a3c66c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 679.127509][T14165] RAX: ffffffffffffffda RBX: 000000000002c080 RCX: 000000000045d5b9 [ 679.135477][T14165] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 679.143446][T14165] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 679.151415][T14165] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 679.159400][T14165] R13: 000000000169fb6f R14: 00007fc6a3c679c0 R15: 000000000118cf4c [ 679.168634][T14165] Kernel Offset: disabled [ 679.172962][T14165] Rebooting in 86400 seconds..