ng_enter(r3, 0x450e, 0x0, 0x0, 0x0, 0x0) 15:15:35 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8941, 0x0) 15:15:35 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x0, 0x141101) r1 = dup(r0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x77f, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r3, 0x450e, 0x0, 0x0, 0x0, 0x0) 15:15:35 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f00000021c0)={{}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x810, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9bfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9804, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff053, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffbff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffc051, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40]}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 15:15:35 executing program 4: syz_clone3(&(0x7f00000001c0)={0x60000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) [ 347.253242][ T26] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 347.323244][ T6] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 347.643412][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.654548][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.665458][ T26] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 347.679098][ T26] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 347.688780][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.702215][ T26] usb 3-1: config 0 descriptor?? [ 347.707446][ T6] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 347.719326][ T6] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 347.737618][ T6] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 347.749229][ T6] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.883480][ T6] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 347.892589][ T6] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 347.901041][ T6] usb 1-1: Product: syz [ 347.905536][ T6] usb 1-1: Manufacturer: syz [ 347.964316][ T6] cdc_wdm 1-1:1.0: skipping garbage [ 347.972233][ T6] cdc_wdm 1-1:1.0: skipping garbage [ 347.981765][ T6] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 347.988110][ T6] cdc_wdm 1-1:1.0: Unknown control protocol [ 348.263286][ T26] usbhid 3-1:0.0: can't add hid device: -71 [ 348.274748][ T26] usbhid: probe of 3-1:0.0 failed with error -71 [ 348.292725][ T26] usb 3-1: USB disconnect, device number 60 15:15:37 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="7bf3"], 0x0) syz_usb_ep_write(r0, 0x0, 0x93, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600000000") syz_open_dev$char_usb(0xc, 0xb4, 0x9) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000480)=""/84) syz_usb_disconnect(r0) read$char_usb(0xffffffffffffffff, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) 15:15:37 executing program 1: syz_clone(0x4400b380, &(0x7f0000000000)="80f8b1b99b34c8012279d975dfedd51ba98623beb71ab5a65428ff0af3d08c79532274789869464b3a4716b543e85e", 0x2f, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0)="93e81a337ddaab22d48a1a43ba35c5fed5889db4911d96368046e8a5f6210a550000ff9ac72add93f2eed614323df6d20b8abd9d4b50a28fb9ac") r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000014c0)={0x0, @in6={{0xa, 0x4e20, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x9, 0x2, 0x9, 0x9, 0x2, 0x0, 0x7}, 0x9c) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000001580)=ANY=[@ANYBLOB="0400f80180000026364fb3d82e00000031000600"], &(0x7f0000001300)=0xc) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f00000000c0)=[{{0x0, 0x0, 0x1, 0x1}, {0x3, 0x1, 0x1, 0x1}}], 0x8) 15:15:37 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x0) r1 = dup(r0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x77f, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r3, 0x450e, 0x0, 0x0, 0x0, 0x0) 15:15:37 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000004740)=[{0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f0000001200)="33bbad5ddabdc1b5c38752c8ac4e65a300a16c435a7a72655c057f4df0e6f63c2b502fd44e26e488df16e69e28552973a147f990d262e52e3d4cc004daf4be20d8067612c8646df4887131edf0e9047e0ac5c0a4e129767b3887ba40556c8334d6145cb8571f0bd166a0ba053d53df634675a6771e8eb92e1791f6c6ffbb8051e95016f33c736df09b4d20eb5cfafab2f4ec074ed440ca72d2056b3e565c74ebe77ed51dbe2cadd753042c0aabfcf27ce56394de4a282684ee007a0be99b03d3be2ae72232c88e623e8b964f801a10ea83d4e414401f5dc66446342e8047f5b1e8e17f96cf92bd7b73d6a4cc295e66a2", 0xf0}], 0x1}], 0x1, 0x0) recvmmsg(r1, &(0x7f000001c880)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/192, 0xc0}], 0x2}}], 0x1, 0x10063, 0x0) 15:15:37 executing program 4: syz_clone(0x104000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)) 15:15:37 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000040), 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r1, 0x40184810, &(0x7f0000000000)={0x3}) [ 349.942900][ T22] usb 1-1: USB disconnect, device number 12 15:15:38 executing program 4: memfd_create(&(0x7f00000004c0)='wpan1\x00', 0x0) syz_clone3(&(0x7f00000001c0)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x1d}, &(0x7f00000000c0)=""/67, 0x43, &(0x7f0000000140)=""/11, 0x0}, 0x58) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x200000004]}, 0x8, 0x0) process_mrelease(0xffffffffffffffff, 0x0) 15:15:38 executing program 5: syz_clone3(&(0x7f00000001c0)={0x60000000, 0x0, &(0x7f0000000040), &(0x7f0000000080), {0x1d}, &(0x7f00000000c0)=""/67, 0x43, &(0x7f0000000140)=""/11, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f00000000c0)) process_mrelease(0xffffffffffffffff, 0x0) 15:15:38 executing program 1: syz_clone(0x4400b380, &(0x7f0000000000)="80f8b1b99b34c8012279d975dfedd51ba98623beb71ab5a65428ff0af3d08c79532274789869464b3a4716b543e85e", 0x2f, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0)="93e81a337ddaab22d48a1a43ba35c5fed5889db4911d96368046e8a5f6210a550000ff9ac72add93f2eed614323df6d20b8abd9d4b50a28fb9ac") r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000014c0)={0x0, @in6={{0xa, 0x4e20, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x9, 0x2, 0x9, 0x9, 0x2, 0x0, 0x7}, 0x9c) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000001580)=ANY=[@ANYBLOB="0400f80180000026364fb3d82e00000031000600"], &(0x7f0000001300)=0xc) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f00000000c0)=[{{0x0, 0x0, 0x1, 0x1}, {0x3, 0x1, 0x1, 0x1}}], 0x8) 15:15:38 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x0) r1 = dup(r0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x77f, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r3, 0x450e, 0x0, 0x0, 0x0, 0x0) [ 350.243125][ T26] usb 3-1: new high-speed USB device number 61 using dummy_hcd 15:15:38 executing program 4: syz_clone(0x4400b380, &(0x7f0000000000)="80f8b1b99b34c8012279d975dfedd51ba98623beb71ab5a65428ff0af3d08c79532274789869464b3a4716b543", 0x2d, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0)="93e81a337ddaab22d48a1a43ba35c5fed5889db4911d96368046e8a5f6210a550000ff9ac72add93f2eed614323df6d20b8abd9d4b50a2") tgkill(0x0, 0x0, 0x2b) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = fsmount(0xffffffffffffffff, 0x1, 0x7c) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000014c0)={0x0, @in6={{0xa, 0x0, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x9, 0x2, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x9c) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000001340)={0x0, 0xba3, 0xffff, 0x8}, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f00000013c0)={r3, @in6={{0xa, 0x4e20, 0x0, @private1, 0x8}}}, &(0x7f0000001480)=0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000001580)=ANY=[], &(0x7f0000001300)=0xc) [ 350.438188][ T22] usb 1-1: new high-speed USB device number 13 using dummy_hcd 15:15:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x541b, &(0x7f0000000040)={'sit0\x00', 0x0}) [ 350.613358][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.649275][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.690071][ T26] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 350.723522][ T26] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 350.760950][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.772060][ T26] usb 3-1: config 0 descriptor?? [ 350.803172][ T22] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 350.811847][ T22] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 350.824815][ T22] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 350.839462][ T22] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.963258][ T22] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 350.972472][ T22] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 350.980670][ T22] usb 1-1: Product: syz [ 350.984968][ T22] usb 1-1: Manufacturer: syz [ 351.024219][ T22] cdc_wdm 1-1:1.0: skipping garbage [ 351.029471][ T22] cdc_wdm 1-1:1.0: skipping garbage [ 351.047122][ T22] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 351.058148][ T22] cdc_wdm 1-1:1.0: Unknown control protocol [ 351.323252][ T26] usbhid 3-1:0.0: can't add hid device: -71 [ 351.329449][ T26] usbhid: probe of 3-1:0.0 failed with error -71 [ 351.363348][ T26] usb 3-1: USB disconnect, device number 61 15:15:40 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="7bf3"], 0x0) syz_usb_ep_write(r0, 0x0, 0x93, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600000000") syz_open_dev$char_usb(0xc, 0xb4, 0x9) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000480)=""/84) syz_usb_disconnect(r0) read$char_usb(0xffffffffffffffff, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) 15:15:40 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x0) r1 = dup(r0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x77f, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r3, 0x450e, 0x0, 0x0, 0x0, 0x0) 15:15:40 executing program 5: r0 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/module/lockd', 0x0, 0x0) openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) 15:15:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f7, &(0x7f0000000040)={'sit0\x00', 0x0}) 15:15:40 executing program 1: socketpair(0x22, 0x0, 0x7ffd, &(0x7f0000000280)) 15:15:40 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000040), 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r1, 0x40184810, &(0x7f0000000000)={0x3}) [ 352.997321][ T3711] usb 1-1: USB disconnect, device number 13 15:15:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @loopback, {[@end]}}}}}) 15:15:40 executing program 1: sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, 0x0, 0x0) socketpair(0x2b, 0x1, 0x0, &(0x7f0000000280)) 15:15:41 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CAPI_GET_MANUFACTURER(r0, 0x401c5820, &(0x7f0000000040)=0x3a31) 15:15:41 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @loopback, {[@end]}}}}}) 15:15:41 executing program 1: sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, 0x0, 0x0) socketpair(0x2b, 0x1, 0x0, &(0x7f0000000280)) 15:15:41 executing program 4: socket(0x2, 0x3, 0xff) [ 353.313409][ T3698] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 353.495086][ T3711] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 353.683429][ T3698] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.703116][ T3698] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.712881][ T3698] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 353.736136][ T3698] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 353.749392][ T3698] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.772511][ T3698] usb 3-1: config 0 descriptor?? [ 353.873560][ T3711] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 353.882591][ T3711] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 353.900999][ T3711] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 353.923093][ T3711] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.053252][ T3711] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 354.062329][ T3711] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 354.070827][ T3711] usb 1-1: Product: syz [ 354.075463][ T3711] usb 1-1: Manufacturer: syz [ 354.124395][ T3711] cdc_wdm 1-1:1.0: skipping garbage [ 354.129678][ T3711] cdc_wdm 1-1:1.0: skipping garbage [ 354.139619][ T3711] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 354.145704][ T3711] cdc_wdm 1-1:1.0: Unknown control protocol [ 354.313637][ T3698] usbhid 3-1:0.0: can't add hid device: -71 [ 354.319633][ T3698] usbhid: probe of 3-1:0.0 failed with error -71 [ 354.328560][ T3698] usb 3-1: USB disconnect, device number 62 15:15:44 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="7bf3"], 0x0) syz_usb_ep_write(r0, 0x0, 0x93, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600000000") syz_open_dev$char_usb(0xc, 0xb4, 0x9) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000480)=""/84) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) 15:15:44 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r0 = dup(0xffffffffffffffff) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x77f, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) 15:15:44 executing program 4: r0 = syz_io_uring_setup(0x1678, &(0x7f0000000000), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x8000000) 15:15:44 executing program 5: select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)) 15:15:44 executing program 1: bpf$MAP_CREATE(0x2, 0x0, 0x0) r0 = openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0x441}, 0x18) execveat(r0, 0x0, 0x0, &(0x7f0000000440)=[&(0x7f0000000300)='/^.\x00', 0x0], 0x0) r1 = openat$damon_kdamond_pid(0xffffffffffffff9c, 0x0, 0x0, 0x184) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, 0x0) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x123501, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) 15:15:44 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000040), 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r1, 0x40184810, &(0x7f0000000000)={0x3}) [ 356.101223][ T6] usb 1-1: USB disconnect, device number 14 15:15:44 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, 0x0) 15:15:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0x5450) [ 356.214886][ T5312] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 15:15:44 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000240)={0x1000, 0x384, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffc}) 15:15:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0x2) 15:15:44 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x11, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x48) 15:15:44 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r0 = dup(0xffffffffffffffff) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x77f, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) [ 356.433268][ T3698] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 356.593175][ T6] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 356.813306][ T3698] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.824394][ T3698] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.834341][ T3698] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 356.847443][ T3698] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 356.856630][ T3698] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.872343][ T3698] usb 3-1: config 0 descriptor?? [ 356.963501][ T6] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 356.972189][ T6] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 356.983209][ T6] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 356.992216][ T6] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.133388][ T6] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 357.142469][ T6] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 357.150565][ T6] usb 1-1: Product: syz [ 357.154861][ T6] usb 1-1: Manufacturer: syz [ 357.193930][ T6] cdc_wdm 1-1:1.0: skipping garbage [ 357.199225][ T6] cdc_wdm 1-1:1.0: skipping garbage [ 357.207445][ T6] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 357.213679][ T6] cdc_wdm 1-1:1.0: Unknown control protocol [ 357.413163][ T3698] usbhid 3-1:0.0: can't add hid device: -71 [ 357.419176][ T3698] usbhid: probe of 3-1:0.0 failed with error -71 [ 357.442306][ T3698] usb 3-1: USB disconnect, device number 63 [ 357.773118][ C0] cdc_wdm 1-1:1.0: unknown notification 61 received: index 46970 len 38478 [ 357.803080][ T3698] usb 1-1: USB disconnect, device number 15 15:15:46 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="7bf3"], 0x0) syz_usb_ep_write(r0, 0x0, 0x93, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600000000") syz_open_dev$char_usb(0xc, 0xb4, 0x9) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000480)=""/84) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) 15:15:46 executing program 4: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UDMABUF_CREATE_LIST(r0, 0x541b, 0x0) 15:15:46 executing program 5: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CAPI_NCCI_GETUNIT(r0, 0x400c4301, &(0x7f0000000040)) 15:15:46 executing program 1: syz_clone(0x54108400, 0x0, 0x0, 0x0, 0x0, 0x0) 15:15:46 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r0 = dup(0xffffffffffffffff) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x77f, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) 15:15:46 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000040), 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r1, 0x40184810, &(0x7f0000000000)={0x3}) 15:15:46 executing program 5: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000040)) pselect6(0x40, &(0x7f0000000280), &(0x7f00000002c0)={0x5}, &(0x7f0000000300)={0x8}, 0x0, 0x0) 15:15:46 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x38) 15:15:46 executing program 4: syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x4000) 15:15:46 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0xfffffffffffffff4) 15:15:46 executing program 4: syz_io_uring_setup(0x5ec1, &(0x7f0000000200), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x39df, &(0x7f0000000300), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), 0x0) 15:15:46 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_dev$usbfs(0x0, 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x77f, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r3, 0x450e, 0x0, 0x0, 0x0, 0x0) [ 358.813422][ T3697] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 358.833188][ T3698] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 359.203370][ T3698] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 359.214917][ T3698] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 359.225409][ T3698] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 359.233354][ T3697] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.235465][ T3698] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.256305][ T3697] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.280904][ T3697] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 359.294265][ T3697] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 359.303714][ T3697] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.330199][ T3697] usb 3-1: config 0 descriptor?? [ 359.383286][ T3698] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 359.392427][ T3698] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 359.401010][ T3698] usb 1-1: Product: syz [ 359.405379][ T3698] usb 1-1: Manufacturer: syz [ 359.455129][ T3698] cdc_wdm 1-1:1.0: skipping garbage [ 359.461395][ T3698] cdc_wdm 1-1:1.0: skipping garbage [ 359.491263][ T3698] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 359.497499][ T3698] cdc_wdm 1-1:1.0: Unknown control protocol [ 359.883338][ T3697] usbhid 3-1:0.0: can't add hid device: -71 [ 359.889426][ T3697] usbhid: probe of 3-1:0.0 failed with error -71 [ 359.899041][ T3697] usb 3-1: USB disconnect, device number 64 [ 360.023083][ C1] cdc_wdm 1-1:1.0: unknown notification 61 received: index 46970 len 38478 [ 360.067206][ T6] usb 1-1: USB disconnect, device number 16 15:15:48 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="7bf3"], 0x0) syz_usb_ep_write(r0, 0x0, 0x93, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600000000") syz_open_dev$char_usb(0xc, 0xb4, 0x9) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000480)=""/84) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) 15:15:48 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) 15:15:48 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CAPI_GET_MANUFACTURER(r0, 0x40086602, &(0x7f0000000040)=0x3a31) 15:15:48 executing program 1: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0044306, &(0x7f0000000040)=0x1) 15:15:48 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_dev$usbfs(0x0, 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x77f, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r3, 0x450e, 0x0, 0x0, 0x0, 0x0) 15:15:48 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000040), 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r1, 0x40184810, &(0x7f0000000000)={0x3}) 15:15:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xc0189436) 15:15:48 executing program 1: syz_io_uring_setup(0x1678, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x6000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 15:15:48 executing program 5: socketpair(0x1, 0x5, 0x0, &(0x7f0000000d00)={0xffffffffffffffff}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000180)={'batadv_slave_0\x00'}) 15:15:48 executing program 1: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000e40), 0x0, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x80813, r0, 0x0) 15:15:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0x5421) 15:15:48 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'gretap0\x00'}) [ 361.053153][ T3698] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 361.186717][ T3697] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 361.423979][ T3698] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.436531][ T3698] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.446880][ T3698] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 361.460416][ T3698] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 361.469940][ T3698] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.483849][ T3698] usb 3-1: config 0 descriptor?? [ 361.594657][ T3697] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 361.603634][ T3697] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 361.615569][ T3697] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 361.624691][ T3697] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.753470][ T3697] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 361.762605][ T3697] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 361.771326][ T3697] usb 1-1: Product: syz [ 361.775838][ T3697] usb 1-1: Manufacturer: syz [ 361.824194][ T3697] cdc_wdm 1-1:1.0: skipping garbage [ 361.829446][ T3697] cdc_wdm 1-1:1.0: skipping garbage [ 361.839448][ T3697] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 361.845462][ T3697] cdc_wdm 1-1:1.0: Unknown control protocol [ 362.033200][ T3698] usbhid 3-1:0.0: can't add hid device: -71 [ 362.039186][ T3698] usbhid: probe of 3-1:0.0 failed with error -71 [ 362.051903][ T3698] usb 3-1: USB disconnect, device number 65 [ 362.393270][ C0] cdc_wdm 1-1:1.0: unknown notification 61 received: index 46970 len 38478 [ 362.432692][ T3698] usb 1-1: USB disconnect, device number 17 [ 362.438713][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 362.438742][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 362.438763][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 15:15:51 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="7bf3"], 0x0) syz_usb_ep_write(r0, 0x0, 0x93, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600000000") syz_open_dev$char_usb(0xc, 0xb4, 0x9) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) 15:15:51 executing program 4: openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000000c0)='\xe5h\x97ng\x04J\'\x1a\x875\x98\x84', 0x0, 0x0) 15:15:51 executing program 1: io_uring_setup(0x4fc, &(0x7f0000000240)={0x0, 0x200b8cf, 0x2e}) 15:15:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f00000000c0)=""/87) 15:15:51 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_dev$usbfs(0x0, 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x77f, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r3, 0x450e, 0x0, 0x0, 0x0, 0x0) 15:15:51 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000040), 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r1, 0x40184810, &(0x7f0000000000)={0x3}) 15:15:51 executing program 5: socketpair(0x26, 0x5, 0x5, &(0x7f0000000100)) 15:15:51 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) setxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x1) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = dup(0xffffffffffffffff) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r1, 0x0, 0x61c2c9d9) 15:15:51 executing program 5: socketpair(0x2, 0x3, 0x7, &(0x7f0000000040)) 15:15:51 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) setxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x1) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = dup(0xffffffffffffffff) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r1, 0x0, 0x61c2c9d9) 15:15:51 executing program 5: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CAPI_NCCI_GETUNIT(r0, 0xc0044306, &(0x7f0000000040)) 15:15:51 executing program 1: syz_io_uring_setup(0x5ec1, &(0x7f0000000200), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x27c9, &(0x7f0000000100), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) [ 363.433323][ T3698] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 363.443292][ T26] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 363.473316][ T6] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 363.814179][ T3698] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.825463][ T3698] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 363.837510][ T3698] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 363.850954][ T6] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 363.860151][ T3698] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 363.869715][ T6] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 363.883138][ T3698] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.891361][ T6] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 363.907494][ T3698] usb 3-1: config 0 descriptor?? [ 363.912773][ T6] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.051434][ T6] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 364.060916][ T6] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 364.069416][ T6] usb 1-1: Product: syz [ 364.073498][ T26] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 364.074369][ T6] usb 1-1: Manufacturer: syz [ 364.082611][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.082645][ T26] usb 5-1: Product: syz [ 364.082665][ T26] usb 5-1: Manufacturer: syz [ 364.104846][ T26] usb 5-1: SerialNumber: syz [ 364.134692][ T6] cdc_wdm 1-1:1.0: skipping garbage [ 364.140041][ T6] cdc_wdm 1-1:1.0: skipping garbage [ 364.149337][ T6] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 364.155689][ T6] cdc_wdm 1-1:1.0: Unknown control protocol [ 364.164808][ T26] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 364.463206][ T3698] usbhid 3-1:0.0: can't add hid device: -71 [ 364.469274][ T3698] usbhid: probe of 3-1:0.0 failed with error -71 [ 364.487820][ T3698] usb 3-1: USB disconnect, device number 66 [ 364.843242][ T22] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 364.913091][ C0] cdc_wdm 1-1:1.0: unknown notification 61 received: index 46970 len 38478 [ 364.923388][ T6] usb 1-1: USB disconnect, device number 18 [ 365.050362][ T26] usb 5-1: USB disconnect, device number 2 15:15:53 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="7bf3"], 0x0) syz_usb_ep_write(r0, 0x0, 0x93, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600000000") syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) 15:15:53 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4605, &(0x7f0000000240)={0x0, 0xff00}) 15:15:53 executing program 5: r0 = socket(0xf, 0x3, 0x2) recvfrom$packet(r0, 0x0, 0x0, 0x14140, 0x0, 0x0) 15:15:53 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x77f, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r3, 0x450e, 0x0, 0x0, 0x0, 0x0) 15:15:53 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000040), 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r1, 0x40184810, &(0x7f0000000000)={0x3}) 15:15:53 executing program 4: r0 = socket(0x18, 0x0, 0x0) getpeername$packet(r0, 0x0, &(0x7f0000000040)) 15:15:53 executing program 4: r0 = socket(0x28, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, 0x0, 0x0) 15:15:53 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000040)={'gre0\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x7800, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @private}}}}) 15:15:53 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xc86ade39) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) lseek(r4, 0xbb6, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4c100, 0x0) sendfile(r4, r5, 0x0, 0x80000007) 15:15:53 executing program 5: r0 = socket(0x11, 0x3, 0x0) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, 0x0, 0x0) 15:15:53 executing program 4: r0 = socket(0xf, 0x3, 0x2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 15:15:53 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="ed", 0x1, 0x0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) [ 365.913255][ T22] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 365.929031][ T22] ath9k_htc: Failed to initialize the device [ 365.953167][ T3698] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 366.013706][ T26] usb 5-1: ath9k_htc: USB layer deinitialized [ 366.020089][ T3697] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 366.403970][ T3698] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.413465][ T3697] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 366.414932][ T3698] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.433717][ T3698] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 366.446671][ T3698] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 366.471448][ T3697] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 366.505411][ T3697] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 366.515068][ T3697] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.575245][ T3698] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.594408][ T3698] usb 3-1: config 0 descriptor?? [ 366.643192][ T3697] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 366.656553][ T3697] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 366.664717][ T3697] usb 1-1: Product: syz [ 366.669207][ T3697] usb 1-1: Manufacturer: syz [ 366.714122][ T3697] cdc_wdm 1-1:1.0: skipping garbage [ 366.719374][ T3697] cdc_wdm 1-1:1.0: skipping garbage [ 366.731436][ T3697] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 366.737553][ T3697] cdc_wdm 1-1:1.0: Unknown control protocol [ 367.153266][ T3698] usbhid 3-1:0.0: can't add hid device: -71 [ 367.159321][ T3698] usbhid: probe of 3-1:0.0 failed with error -71 [ 367.172724][ T3698] usb 3-1: USB disconnect, device number 67 [ 367.493109][ C1] cdc_wdm 1-1:1.0: unknown notification 61 received: index 46970 len 38478 [ 367.502854][ T26] usb 1-1: USB disconnect, device number 19 15:15:56 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="7bf3"], 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) 15:15:56 executing program 4: r0 = socket(0x2, 0x3, 0x6) bind$can_j1939(r0, 0x0, 0x0) 15:15:56 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0xa) 15:15:56 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x77f, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r3, 0x450e, 0x0, 0x0, 0x0, 0x0) 15:15:56 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000040), 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r1, 0x40184810, &(0x7f0000000000)={0x3}) 15:15:56 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xc86ade39) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) lseek(r4, 0xbb6, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4c100, 0x0) sendfile(r4, r5, 0x0, 0x80000007) 15:15:56 executing program 4: r0 = socket(0x10, 0x2, 0x0) getsockname$packet(r0, 0x0, 0x0) 15:15:56 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) connect$can_j1939(r0, &(0x7f0000000040)={0x1d, r2, 0x0, {0x1}}, 0x18) 15:15:56 executing program 5: r0 = socket(0x2, 0x3, 0x6) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x8927, &(0x7f0000000100)) 15:15:56 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r0, &(0x7f0000001080)=""/13, 0xd, 0x0, 0x0, 0x7000000) [ 368.523381][ T3698] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 368.623207][ T3697] usb 1-1: new high-speed USB device number 20 using dummy_hcd 15:15:56 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f9, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="73ffe228d4b700000000000000000000a144f34ed4"]}) 15:15:56 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) lgetxattr(0x0, 0x0, &(0x7f0000000240)=""/217, 0xd9) r1 = dup(0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file0\x00'}) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) lseek(r2, 0xbb6, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4c100, 0x0) sendfile(r2, r3, 0x0, 0x80000007) [ 368.893314][ T3698] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.955308][ T3698] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 369.041052][ T3698] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 369.083175][ T3697] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 369.091941][ T3697] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 369.102570][ T3697] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 369.113612][ T3697] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.152529][ T3698] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 369.180591][ T3698] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.228272][ T3698] usb 3-1: config 0 descriptor?? [ 369.283566][ T3697] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 369.293420][ T3697] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 369.301449][ T3697] usb 1-1: Product: syz [ 369.306621][ T3697] usb 1-1: Manufacturer: syz [ 369.364829][ T3697] cdc_wdm 1-1:1.0: skipping garbage [ 369.372481][ T3697] cdc_wdm 1-1:1.0: skipping garbage [ 369.380028][ T3697] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 369.386573][ T3697] cdc_wdm 1-1:1.0: Unknown control protocol [ 369.567717][ T3697] usb 1-1: USB disconnect, device number 20 [ 369.783166][ T3698] usbhid 3-1:0.0: can't add hid device: -71 [ 369.789148][ T3698] usbhid: probe of 3-1:0.0 failed with error -71 [ 369.803972][ T3698] usb 3-1: USB disconnect, device number 68 15:15:58 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="7bf3"], 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) 15:15:58 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) lgetxattr(0x0, 0x0, &(0x7f0000000240)=""/217, 0xd9) r1 = dup(0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file0\x00'}) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) lseek(r2, 0xbb6, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4c100, 0x0) sendfile(r2, r3, 0x0, 0x80000007) 15:15:58 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x3, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x48) 15:15:58 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x77f, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r3, 0x450e, 0x0, 0x0, 0x0, 0x0) 15:15:58 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xc86ade39) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) lseek(r4, 0xbb6, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4c100, 0x0) sendfile(r4, r5, 0x0, 0x80000007) 15:15:58 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000040), 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r1, 0x40184810, &(0x7f0000000000)={0x3}) 15:15:58 executing program 4: r0 = socket(0x11, 0x3, 0x0) bind$can_j1939(r0, &(0x7f0000000040), 0x18) 15:15:58 executing program 4: r0 = socket(0x1, 0x2, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x0, 0x4) [ 370.763129][ T14] usb 3-1: new high-speed USB device number 69 using dummy_hcd 15:15:58 executing program 5: r0 = socket(0x28, 0x1, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 15:15:58 executing program 4: r0 = socket(0x28, 0x1, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) [ 370.883104][ T3698] usb 1-1: new high-speed USB device number 21 using dummy_hcd 15:15:58 executing program 5: r0 = socket(0x2, 0x3, 0x6) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x8947, &(0x7f0000000100)) 15:15:58 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f9, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="73ffe228d4b700000000000000000000a144f34ed438ff"]}) [ 371.153669][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.216389][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.253821][ T3698] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 371.295818][ T3698] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 371.343357][ T14] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 371.357881][ T3698] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 371.369615][ T14] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 371.382855][ T3698] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.398848][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.429985][ T14] usb 3-1: config 0 descriptor?? [ 371.523417][ T3698] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 371.545841][ T3698] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 371.556736][ T3698] usb 1-1: Product: syz [ 371.582635][ T3698] usb 1-1: Manufacturer: syz [ 371.625297][ T3698] cdc_wdm 1-1:1.0: skipping garbage [ 371.630549][ T3698] cdc_wdm 1-1:1.0: skipping garbage [ 371.637618][ T3698] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 371.643949][ T3698] cdc_wdm 1-1:1.0: Unknown control protocol [ 371.830197][ T3697] usb 1-1: USB disconnect, device number 21 [ 372.013158][ T14] usbhid 3-1:0.0: can't add hid device: -71 [ 372.019236][ T14] usbhid: probe of 3-1:0.0 failed with error -71 [ 372.033826][ T14] usb 3-1: USB disconnect, device number 69 15:16:00 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="7bf3"], 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) 15:16:00 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100), 0x4) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) 15:16:00 executing program 4: r0 = socket(0x1e, 0x2, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x1e, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) 15:16:00 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x77f, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) 15:16:00 executing program 1: r0 = socket(0x1e, 0x2, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x7ffff000}}, 0x0) 15:16:00 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00220f0000"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000040), 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r1, 0x40184810, &(0x7f0000000000)={0x3}) 15:16:00 executing program 4: r0 = socket(0x1e, 0x2, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) 15:16:00 executing program 1: r0 = socket(0x2, 0x3, 0x2) recvmsg$can_j1939(r0, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x0) 15:16:00 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x4) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/igmp6\x00') pread64(r0, &(0x7f0000000040)=""/216, 0xd8, 0x4c00) 15:16:00 executing program 4: r0 = socket(0x2, 0x3, 0x6) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x89a0, &(0x7f0000000100)) 15:16:00 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x14, 0x0, 0x4, 0x0, 0x4, 0x1}, 0x48) 15:16:00 executing program 5: socket(0x26, 0x5, 0x6) [ 373.083937][ T3700] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 373.143523][ T3697] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 373.503294][ T3700] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.520887][ T3700] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.533115][ T3700] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 373.546467][ T3700] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 373.557123][ T3700] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.565789][ T3697] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 373.583964][ T3700] usb 3-1: config 0 descriptor?? [ 373.589319][ T3697] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 373.599937][ T3697] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 373.609736][ T3697] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.735358][ T3697] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 373.748095][ T3697] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 373.770880][ T3697] usb 1-1: Product: syz [ 373.775359][ T3697] usb 1-1: Manufacturer: syz [ 373.824218][ T3697] cdc_wdm 1-1:1.0: skipping garbage [ 373.833334][ T3697] cdc_wdm 1-1:1.0: skipping garbage [ 373.839550][ T3697] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 373.850193][ T3697] cdc_wdm 1-1:1.0: Unknown control protocol [ 374.035093][ T3711] usb 1-1: USB disconnect, device number 22 [ 374.065181][ T3700] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 374.072881][ T3700] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 374.082888][ T3700] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 374.093947][ T3700] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 374.101364][ T3700] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 374.108857][ T3700] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 374.116366][ T3700] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 374.123840][ T3700] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 374.131230][ T3700] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 374.138775][ T3700] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 374.146197][ T3700] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 374.153695][ T3700] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 374.161105][ T3700] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 374.168731][ T3700] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 374.176556][ T3700] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 374.185886][ T3700] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 374.198731][ T3700] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 374.296342][ T3700] usb 3-1: USB disconnect, device number 70 15:16:02 executing program 0: syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x93, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600000000") syz_usb_disconnect(0xffffffffffffffff) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(0xffffffffffffffff) 15:16:02 executing program 5: r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 15:16:02 executing program 4: r0 = socket(0x1e, 0x2, 0x0) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0xc840) 15:16:02 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x77f, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) 15:16:02 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x17, &(0x7f0000000000), 0x4) 15:16:02 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00220f0000"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000040), 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r1, 0x40184810, &(0x7f0000000000)={0x3}) 15:16:02 executing program 4: r0 = socket(0x2, 0x3, 0x6) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x89e0, 0x0) 15:16:02 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002280), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000040)={0xa0, 0xffffffff, r2}, 0xa0) 15:16:03 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000400)={'veth0_to_hsr\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x29, 0x0, 0x0, {0x0, @udp_ip6_spec={@empty, @ipv4={'\x00', '\xff\xff', @private}}, {0x0, @multicast}, @udp_ip4_spec={@initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, @dev}}}}) 15:16:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x140d, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x300}]}, 0x20}}, 0x0) 15:16:03 executing program 1: r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x2}, 0x18) sendmmsg(r0, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="c4", 0x1}], 0x1}}], 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) 15:16:03 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x80002) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x16}, {{}, 0x0, 0x4000}, {{0x0, 0xea60}, 0x11}], 0x48) [ 375.303150][ T3700] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 375.743193][ T3700] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.761804][ T3700] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.773483][ T3700] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 375.798356][ T3700] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 375.807873][ T3700] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.837147][ T3700] usb 3-1: config 0 descriptor?? 15:16:03 executing program 0: syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x93, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600000000") syz_usb_disconnect(0xffffffffffffffff) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(0xffffffffffffffff) 15:16:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xf) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x1412, 0x1}, 0x10}}, 0x0) 15:16:03 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x80002) write$evdev(r0, &(0x7f0000000040)=[{}], 0x18) 15:16:03 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x77f, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) 15:16:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 376.335000][ T3700] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 376.346541][ T3700] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 376.354422][ T3700] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 376.368623][ T3700] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 376.377288][ T3700] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 376.385192][ T3700] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 376.392953][ T3700] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 376.400822][ T3700] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 376.408787][ T3700] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 376.422712][ T3700] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 376.430420][ T3700] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 376.440587][ T3700] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 376.448598][ T3700] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 376.456305][ T3700] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 376.465139][ T3700] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 376.479049][ T3700] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 376.508584][ T3700] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 376.610522][ T3700] usb 3-1: USB disconnect, device number 71 15:16:05 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00220f0000"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000040), 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r1, 0x40184810, &(0x7f0000000000)={0x3}) 15:16:05 executing program 1: r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x2}, 0x18) sendmmsg(r0, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="c4", 0x1}], 0x1}}], 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) 15:16:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x10}}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x8}, 0x0) 15:16:05 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x2e22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x22, 0x18, {[@main]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x3, "fc43c7"}, 0x0}) 15:16:05 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x77f, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r3, 0x450e, 0x0, 0x0, 0x0, 0x0) 15:16:05 executing program 0: syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x93, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600000000") syz_usb_disconnect(0xffffffffffffffff) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(0xffffffffffffffff) 15:16:05 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f00000002c0)=""/34) 15:16:05 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x48) 15:16:05 executing program 4: ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000780)={0x1, 0x0, 0x0}) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="7bf3"], 0x0) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) read$char_usb(r1, 0x0, 0x0) [ 377.413268][ T3700] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 377.463182][ T3698] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 377.663105][ T3711] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 377.803228][ T3700] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.819623][ T3700] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 377.823185][ T3698] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.831273][ T3700] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.40 [ 377.858067][ T3700] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.863261][ T3698] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 377.889811][ T3700] usb 6-1: config 0 descriptor?? 15:16:05 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x77f, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r3, 0x450e, 0x0, 0x0, 0x0, 0x0) [ 377.902625][ T3698] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 377.915936][ T3698] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 377.925324][ T3698] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.944467][ T3698] usb 3-1: config 0 descriptor?? 15:16:05 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) 15:16:05 executing program 1: openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000140)={0x200c0, 0x0, 0x21}, 0x18) [ 378.033178][ T3711] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 378.049618][ T3711] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 378.127185][ T3711] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 378.162325][ T3711] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.235077][ T1239] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.241441][ T1239] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.293302][ T3711] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 378.302583][ T3711] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 378.310776][ T3711] usb 5-1: Product: syz [ 378.315181][ T3711] usb 5-1: Manufacturer: syz [ 378.363849][ T3711] cdc_wdm 5-1:1.0: skipping garbage [ 378.369101][ T3711] cdc_wdm 5-1:1.0: skipping garbage [ 378.376475][ T3711] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 378.383164][ T3711] cdc_wdm 5-1:1.0: Unknown control protocol [ 378.404481][ T3700] koneplus 0003:1E7D:2E22.0009: unknown main item tag 0x0 [ 378.421536][ T3700] koneplus 0003:1E7D:2E22.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.5-1/input0 [ 378.434646][ T3698] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 378.444429][ T3698] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 378.451863][ T3698] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 378.459524][ T3698] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 378.475735][ T3698] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 378.496961][ T3698] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 378.504580][ T3698] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 378.512009][ T3698] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 378.519510][ T3698] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 378.526971][ T3698] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 378.534421][ T3698] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 378.541889][ T3698] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 378.549324][ T3698] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 378.562013][ T3698] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 378.569489][ T3698] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 378.593612][ T3698] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 378.606503][ T3698] plantronics 0003:047F:FFFF.000A: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 378.641151][ T22] usb 3-1: USB disconnect, device number 72 [ 378.827518][ T3700] usb 6-1: USB disconnect, device number 3 15:16:07 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00220f00000009"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000040), 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r1, 0x40184810, &(0x7f0000000000)={0x3}) 15:16:07 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) syz_usb_ep_write(r0, 0x0, 0x93, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600000000") syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) 15:16:07 executing program 1: syz_open_dev$dri(&(0x7f00000016c0), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) [ 379.133088][ C1] cdc_wdm 5-1:1.0: unknown notification 61 received: index 46970 len 38478 15:16:07 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x2e22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x22, 0x18, {[@main]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x3, "fc43c7"}, 0x0}) 15:16:07 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x77f, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r3, 0x450e, 0x0, 0x0, 0x0, 0x0) 15:16:07 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0xc}, 0x48) 15:16:07 executing program 1: mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x30, 0xffffffffffffffff, 0x0) 15:16:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'tunl0\x00', &(0x7f0000000000)=@ethtool_sset_info={0x37, 0x0, 0x3}}) [ 379.483251][ T3700] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 379.519193][ T3697] usb 5-1: USB disconnect, device number 3 [ 379.525165][ C1] cdc_wdm 5-1:1.0: Unexpected error -71 [ 379.525806][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 379.525833][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 379.525855][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 379.703210][ T26] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 379.914597][ T3700] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.933268][ T3700] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.943416][ T3700] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 379.956486][ T3700] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 379.972521][ T3700] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.005291][ T3700] usb 3-1: config 0 descriptor?? [ 380.123357][ T26] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.155460][ T26] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 15:16:08 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 15:16:08 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581"], 0x0) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000480)=""/84) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) write$char_usb(r1, &(0x7f0000001900), 0x0) read$char_usb(r1, 0x0, 0xfffffea7) syz_usb_disconnect(r0) 15:16:08 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) syz_usb_ep_write(r0, 0x0, 0x93, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600000000") syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) 15:16:08 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x77f, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r3, 0x450e, 0x0, 0x0, 0x0, 0x0) [ 380.173520][ T26] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.40 [ 380.182614][ T26] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.192493][ T26] usb 6-1: config 0 descriptor?? [ 380.523211][ T3698] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 380.524821][ T3700] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 380.540036][ T3700] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 380.547977][ T3700] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 380.556147][ T3700] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 380.564334][ T3700] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 380.571877][ T3700] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 380.579654][ T3700] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 380.587884][ T3700] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 380.595571][ T3700] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 380.603072][ T3700] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 380.610578][ T3700] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 380.618098][ T3700] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 380.625609][ T3700] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 380.639370][ T3700] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 380.650284][ T3700] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 380.684703][ T26] koneplus 0003:1E7D:2E22.000C: unknown main item tag 0x0 [ 380.698340][ T26] koneplus 0003:1E7D:2E22.000C: hidraw1: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.5-1/input0 [ 380.815260][ T3700] usb 3-1: USB disconnect, device number 73 [ 380.893343][ T3698] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 380.902085][ T3698] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 380.917070][ T3698] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 380.931210][ T3698] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.063225][ T3698] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 381.072426][ T3698] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 381.080775][ T3698] usb 2-1: Product: syz [ 381.085211][ T3698] usb 2-1: Manufacturer: syz [ 381.123210][ T3700] usb 6-1: USB disconnect, device number 4 [ 381.124455][ T3698] cdc_wdm 2-1:1.0: skipping garbage [ 381.137318][ T3698] cdc_wdm 2-1:1.0: skipping garbage [ 381.146614][ T3698] cdc_wdm: probe of 2-1:1.0 failed with error -22 15:16:09 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00220f00000009"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000040), 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r1, 0x40184810, &(0x7f0000000000)={0x3}) 15:16:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x1412, 0x0, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_RES_LQPN, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID, @RDMA_NLDEV_ATTR_PORT_INDEX, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID, @RDMA_NLDEV_ATTR_PORT_INDEX]}, 0xfffffffffffffe90}}, 0x0) 15:16:09 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x77f, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r3, 0x450e, 0x0, 0x0, 0x0, 0x0) [ 381.340559][ T26] usb 2-1: USB disconnect, device number 2 15:16:09 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x2e22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x22, 0x18, {[@main]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x3, "fc43c7"}, 0x0}) 15:16:09 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) syz_usb_ep_write(r0, 0x0, 0x93, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600000000") syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) 15:16:09 executing program 4: r0 = syz_io_uring_setup(0x6df9, &(0x7f0000000280), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) mmap$IORING_OFF_SQES(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x3729, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000240)) 15:16:09 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x77f, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r3, 0x450e, 0x0, 0x0, 0x0, 0x0) [ 381.653116][ T3711] usb 3-1: new high-speed USB device number 74 using dummy_hcd 15:16:09 executing program 4: r0 = syz_io_uring_setup(0x38a1, &(0x7f0000000000), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x3729, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000240)) 15:16:09 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) r3 = syz_io_uring_setup(0x77f, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r3, 0x450e, 0x0, 0x0, 0x0, 0x0) [ 381.993044][ T3698] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 382.043309][ T3711] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.054402][ T3711] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.065392][ T3711] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 382.078705][ T3711] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 382.089317][ T3711] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.105986][ T3711] usb 3-1: config 0 descriptor?? 15:16:10 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581"], 0x0) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000480)=""/84) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) write$char_usb(r1, &(0x7f0000001900), 0x0) read$char_usb(r1, 0x0, 0xfffffea7) syz_usb_disconnect(r0) 15:16:10 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, 0x0, 0x0) 15:16:10 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) r3 = syz_io_uring_setup(0x77f, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r3, 0x450e, 0x0, 0x0, 0x0, 0x0) [ 382.353266][ T3698] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.368868][ T3698] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.379888][ T3698] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.40 [ 382.394311][ T3698] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.410011][ T3698] usb 6-1: config 0 descriptor?? [ 382.573102][ T6] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 382.585338][ T3711] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 382.599454][ T3711] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 382.613356][ T3711] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 382.620784][ T3711] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 382.632532][ T3711] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 382.640077][ T3711] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 382.652405][ T3711] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 382.662940][ T3711] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 382.675664][ T3711] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 382.686078][ T3711] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 382.696817][ T3711] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 382.706094][ T3711] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 382.716703][ T3711] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 382.724749][ T3711] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 382.738363][ T3711] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 382.858079][ T14] usb 3-1: USB disconnect, device number 74 [ 382.895132][ T3698] koneplus 0003:1E7D:2E22.000E: unknown main item tag 0x0 [ 382.904377][ T3698] koneplus 0003:1E7D:2E22.000E: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.5-1/input0 [ 382.943285][ T6] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 382.952017][ T6] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 382.972557][ T6] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 382.981630][ T6] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 383.103364][ T6] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 383.112548][ T6] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 383.129169][ T6] usb 2-1: Product: syz [ 383.135778][ T6] usb 2-1: Manufacturer: syz [ 383.194277][ T6] cdc_wdm 2-1:1.0: skipping garbage [ 383.199756][ T6] cdc_wdm 2-1:1.0: skipping garbage [ 383.205372][ T6] cdc_wdm: probe of 2-1:1.0 failed with error -22 15:16:11 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00220f00000009"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000040), 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r1, 0x40184810, &(0x7f0000000000)={0x3}) 15:16:11 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$sock(r0, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0xb4cec96076a17b21) 15:16:11 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) r3 = syz_io_uring_setup(0x77f, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r3, 0x450e, 0x0, 0x0, 0x0, 0x0) [ 383.336445][ T6] usb 6-1: USB disconnect, device number 5 [ 383.452532][ T26] usb 2-1: USB disconnect, device number 3 [ 383.723144][ T3700] usb 3-1: new high-speed USB device number 75 using dummy_hcd 15:16:11 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x2e22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x22, 0x18, {[@main]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x3, "fc43c7"}, 0x0}) 15:16:11 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581"], 0x0) syz_usb_ep_write(r0, 0x0, 0x93, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600000000") syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) 15:16:11 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000005104"], 0xb8}}, 0x0) 15:16:11 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r3, 0x450e, 0x0, 0x0, 0x0, 0x0) 15:16:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x7000000}, 0x0) 15:16:11 executing program 4: syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r0) openat$random(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) [ 384.123468][ T3700] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.143108][ T3700] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 384.163141][ T14] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 384.169885][ T3700] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 384.193867][ T3700] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 384.203806][ T3700] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.229909][ T3700] usb 3-1: config 0 descriptor?? [ 384.263223][ T6] usb 6-1: new high-speed USB device number 6 using dummy_hcd 15:16:12 executing program 1: ioperm(0x0, 0x97, 0xfff) 15:16:12 executing program 4: bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000012c0)=0xffffffffffffffff, 0x4) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000003200)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000031c0)={&(0x7f0000002d00)={0x50, 0x13, 0x4, 0x0, 0x0, {0x25, 0x0, 0x54, 0x0, {0x0, 0x0, [0x0, 0x0, 0x200], [0x0, 0x0, 0x40], 0x0, [0x4, 0x4]}, 0xf7e}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x50}}, 0x8000) 15:16:12 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000580)=ANY=[@ANYBLOB="ffffffffffffaaaaa2aaaaaa86dd604410d8000800000000000000000000ffffac1400aafe8000000000000000000000000000aa"], 0x0) [ 384.555746][ T14] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 384.581750][ T14] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 384.592759][ T14] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 384.602442][ T14] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 384.623796][ T6] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.638089][ T6] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 384.648324][ T6] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.40 [ 384.664666][ T6] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.681052][ T6] usb 6-1: config 0 descriptor?? [ 384.695302][ T3700] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 384.702714][ T3700] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 384.723355][ T3700] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 384.733526][ T14] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 384.738847][ T3700] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 384.750878][ T3700] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 384.753992][ T14] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 384.764610][ T3700] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 384.774335][ T14] usb 1-1: Product: syz [ 384.779861][ T14] usb 1-1: Manufacturer: syz [ 384.791505][ T3700] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 384.800676][ T3700] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 384.811821][ T3700] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 384.819930][ T3700] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 384.824143][ T14] cdc_wdm 1-1:1.0: skipping garbage [ 384.828515][ T3700] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 384.841252][ T14] cdc_wdm 1-1:1.0: skipping garbage [ 384.847068][ T3700] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 384.847130][ T14] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 384.854560][ T3700] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 384.874727][ T3700] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 384.888616][ T3700] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 384.967939][ T14] usb 3-1: USB disconnect, device number 75 [ 385.027997][ T3700] usb 1-1: USB disconnect, device number 23 [ 385.165030][ T6] koneplus 0003:1E7D:2E22.0010: unknown main item tag 0x0 [ 385.174305][ T6] koneplus 0003:1E7D:2E22.0010: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.5-1/input0 15:16:13 executing program 1: ioperm(0x0, 0x97, 0xfff) 15:16:13 executing program 4: r0 = shmget(0x3, 0x1000, 0x200, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$IPC_RMID(r0, 0x0) 15:16:13 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r3, 0x450e, 0x0, 0x0, 0x0, 0x0) [ 385.630943][ T3700] usb 6-1: USB disconnect, device number 6 15:16:14 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x2e22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x22, 0x18, {[@main]}}, 0x0}, 0x0) 15:16:14 executing program 1: ioperm(0x0, 0x97, 0xfff) 15:16:14 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00220f0000000962"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000040), 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r1, 0x40184810, &(0x7f0000000000)={0x3}) 15:16:14 executing program 4: r0 = shmget(0x3, 0x1000, 0x200, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$IPC_RMID(r0, 0x0) 15:16:14 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581"], 0x0) syz_usb_ep_write(r0, 0x0, 0x93, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600000000") syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) 15:16:14 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r3, 0x450e, 0x0, 0x0, 0x0, 0x0) 15:16:14 executing program 4: r0 = shmget(0x3, 0x1000, 0x200, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$IPC_RMID(r0, 0x0) 15:16:14 executing program 1: ioperm(0x0, 0x97, 0xfff) 15:16:14 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockname(r0, &(0x7f0000000200), &(0x7f0000000240)=0xe) 15:16:14 executing program 4: r0 = shmget(0x3, 0x1000, 0x200, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$IPC_RMID(r0, 0x0) 15:16:14 executing program 1: syz_mount_image$vfat(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x0, 0x0, &(0x7f0000000f00), 0x0, &(0x7f0000000f80)={[{@uni_xlateno}]}) 15:16:14 executing program 4: r0 = syz_clone(0x8200900, &(0x7f00000001c0)="641840bd034f2b23e76c98e700db19214f8aa39e60424386d2437e31abfa5a142420898aa5b1a08adc86785e1b7b2b7f63a8738ab09ab43062be8b7ddf666b8a37dae52561ca7aaa4b1c2a199b253c9c6f166fd42ce2593334982536e3e236ed9757cba54075842db4289656c3873837702d35c809403feb22c3cc409db2bc912b8bb7c4479084e789b28a9c120dae3a1a680d4afeb72c272b", 0x99, 0x0, 0x0, 0x0) ptrace$getsig(0x4202, r0, 0x0, 0x0) r1 = syz_clone(0x40000000, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000480), &(0x7f00000004c0)="510655a81da917d05e4e1955b79e2785f1708f9a2270f60a32415292b15a8245e33d8ac4e86690f9f05e0eba60eed8999efedae0f69664ab469c6a2c443b5f1d48928e0057dd65e7") syz_open_procfs$userns(r1, &(0x7f0000000540)) [ 386.513218][ T3698] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 386.513612][ T26] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 386.528795][ T3702] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 386.621411][ T5692] FAT-fs (loop1): bogus number of reserved sectors [ 386.638991][ T5692] FAT-fs (loop1): Can't find a valid FAT filesystem [ 386.903164][ T3698] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.921582][ T3698] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.933388][ T3702] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.944404][ T3698] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.40 [ 386.954047][ T3698] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.963282][ T26] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 386.983762][ T26] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 386.987602][ T3698] usb 6-1: config 0 descriptor?? [ 387.002609][ T3702] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.018924][ T26] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 387.030826][ T3702] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 387.059841][ T26] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.072301][ T3702] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 387.084186][ T3702] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.100295][ T3702] usb 3-1: config 0 descriptor?? [ 387.213295][ T26] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 387.222506][ T26] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 387.231046][ T26] usb 1-1: Product: syz [ 387.235704][ T26] usb 1-1: Manufacturer: syz [ 387.286632][ T26] cdc_wdm 1-1:1.0: skipping garbage [ 387.294291][ T26] cdc_wdm 1-1:1.0: skipping garbage [ 387.299831][ T26] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 387.486918][ T14] usb 1-1: USB disconnect, device number 24 [ 387.545226][ T3698] koneplus 0003:1E7D:2E22.0011: unknown main item tag 0x0 [ 387.555054][ T3698] koneplus 0003:1E7D:2E22.0011: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.5-1/input0 [ 387.575357][ T3702] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 387.582792][ T3702] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 387.590606][ T3702] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 387.599415][ T3702] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 387.607051][ T3702] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 387.615684][ T3702] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 387.623385][ T3702] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 387.630795][ T3702] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 387.638641][ T3702] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 387.646852][ T3702] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 387.654538][ T3702] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 387.661976][ T3702] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 387.669932][ T3702] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 387.689967][ T3702] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 387.705082][ T3702] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 387.763350][ T3698] koneplus 0003:1E7D:2E22.0011: couldn't init struct koneplus_device [ 387.779019][ T3698] koneplus 0003:1E7D:2E22.0011: couldn't install mouse [ 387.799894][ T3698] koneplus: probe of 0003:1E7D:2E22.0011 failed with error -71 [ 387.818223][ T3698] usb 6-1: USB disconnect, device number 7 [ 387.848900][ T14] usb 3-1: USB disconnect, device number 76 15:16:16 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x2e22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x22, 0x18, {[@main]}}, 0x0}, 0x0) 15:16:16 executing program 1: syz_emit_ethernet(0xd8, &(0x7f0000000100), 0x0) 15:16:16 executing program 4: r0 = syz_clone(0x8200900, &(0x7f00000001c0)="641840bd034f2b23e76c98e700db19214f8aa39e60424386d2437e31abfa5a142420898aa5b1a08adc86785e1b7b2b7f63a8738ab09ab43062be8b7ddf666b8a37dae52561ca7aaa4b1c2a199b253c9c6f166fd42ce2593334982536e3e236ed9757cba54075842db4289656c3873837702d35c809403feb22c3cc409db2bc912b8bb7c4479084e789b28a9c120dae3a1a680d4afeb72c272b", 0x99, 0x0, 0x0, 0x0) ptrace$getsig(0x4202, r0, 0x0, 0x0) r1 = syz_clone(0x40000000, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000480), &(0x7f00000004c0)="510655a81da917d05e4e1955b79e2785f1708f9a2270f60a32415292b15a8245e33d8ac4e86690f9f05e0eba60eed8999efedae0f69664ab469c6a2c443b5f1d48928e0057dd65e7") syz_open_procfs$userns(r1, &(0x7f0000000540)) 15:16:16 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x77f, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r3, 0x450e, 0x0, 0x0, 0x0, 0x0) 15:16:16 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581"], 0x0) syz_usb_ep_write(r0, 0x0, 0x93, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600000000") syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) 15:16:16 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00220f0000000962"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000040), 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r1, 0x40184810, &(0x7f0000000000)={0x3}) 15:16:16 executing program 1: syz_usb_connect$printer(0x0, 0x0, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) [ 388.583079][ T26] usb 6-1: new high-speed USB device number 8 using dummy_hcd 15:16:16 executing program 4: r0 = syz_clone(0x8200900, &(0x7f00000001c0)="641840bd034f2b23e76c98e700db19214f8aa39e60424386d2437e31abfa5a142420898aa5b1a08adc86785e1b7b2b7f63a8738ab09ab43062be8b7ddf666b8a37dae52561ca7aaa4b1c2a199b253c9c6f166fd42ce2593334982536e3e236ed9757cba54075842db4289656c3873837702d35c809403feb22c3cc409db2bc912b8bb7c4479084e789b28a9c120dae3a1a680d4afeb72c272b", 0x99, 0x0, 0x0, 0x0) ptrace$getsig(0x4202, r0, 0x0, 0x0) r1 = syz_clone(0x40000000, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000480), &(0x7f00000004c0)="510655a81da917d05e4e1955b79e2785f1708f9a2270f60a32415292b15a8245e33d8ac4e86690f9f05e0eba60eed8999efedae0f69664ab469c6a2c443b5f1d48928e0057dd65e7") syz_open_procfs$userns(r1, &(0x7f0000000540)) [ 388.723255][ T3698] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 388.773258][ T14] usb 1-1: new high-speed USB device number 25 using dummy_hcd 15:16:16 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) getsockopt(r0, 0x0, 0x0, &(0x7f0000000000)=""/4096, 0x0) [ 388.953212][ T26] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 15:16:16 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001740)={&(0x7f0000000080)=@abs, 0x8, &(0x7f0000001680)=[{&(0x7f0000000140)="bfc1e46cf3d174052864b31f53d3e2c596ad21522af6d9f594cf4f89fbe8d028cec24441f10ee9ee9a01c8cc1e221474f158de1949b5d4b9c03c6e135f50e816d5717937a38ccde33905ce17a8b6354c53a37f0ac31cd76d075232a665ccc851b1a4d407b946231271d6564a853c3d08c1b24b41e604f8eb3d65632f8f5c22b1a523406c80baea5be7b305498aaea9c38cd67d9f4958878b6d524575ffcd2d04f065b35dcef3de82", 0xa8}, {&(0x7f00000000c0)="b6da1ca81405fd6c70f8c07eaf52d7ea4a223a06a4c4b7715fd1f86871c8d02565ce3d2e44193ccb676ba48ea6ce0d7739429ec9e8ff901cc26fc13ad0a598", 0x3f}, {&(0x7f0000000200)="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", 0xf1a}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) [ 389.026784][ T26] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.113642][ T3698] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.133202][ T26] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.40 [ 389.143496][ T14] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 389.168707][ T14] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 389.181426][ T3698] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 15:16:17 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000004240)={0x6, 0x3, &(0x7f0000003080)=@framed, &(0x7f0000003100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 15:16:17 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x77f, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r3, 0x450e, 0x0, 0x0, 0x0, 0x0) [ 389.227626][ T26] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.252482][ T26] usb 6-1: config 0 descriptor?? [ 389.269996][ T14] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 389.281932][ T3698] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 389.335930][ T14] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.355174][ T3698] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 389.394215][ T3698] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.414234][ T3698] usb 3-1: config 0 descriptor?? [ 389.493318][ T14] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 389.502655][ T14] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 389.512312][ T14] usb 1-1: Product: syz [ 389.516970][ T14] usb 1-1: Manufacturer: syz [ 389.564618][ T14] cdc_wdm 1-1:1.0: skipping garbage [ 389.572851][ T14] cdc_wdm 1-1:1.0: skipping garbage [ 389.580297][ T14] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 389.728553][ T26] koneplus 0003:1E7D:2E22.0013: unknown main item tag 0x0 [ 389.768812][ T3711] usb 1-1: USB disconnect, device number 25 [ 389.802340][ T26] koneplus 0003:1E7D:2E22.0013: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.5-1/input0 [ 389.895277][ T3698] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 389.908547][ T3698] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 389.918890][ T3698] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 389.933157][ T26] koneplus 0003:1E7D:2E22.0013: couldn't init struct koneplus_device [ 389.950455][ T3698] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 389.959644][ T3698] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 389.971105][ T3698] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 389.980548][ T3698] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 389.991778][ T3698] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 390.001293][ T3698] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 390.012959][ T3698] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 390.021577][ T3698] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 390.032920][ T3698] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 390.041603][ T3698] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 390.057047][ T3698] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 390.072235][ T26] koneplus 0003:1E7D:2E22.0013: couldn't install mouse [ 390.072427][ T3698] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 390.168081][ T26] koneplus: probe of 0003:1E7D:2E22.0013 failed with error -71 [ 390.195376][ T3711] usb 3-1: USB disconnect, device number 77 [ 390.227830][ T26] usb 6-1: USB disconnect, device number 8 15:16:18 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x2e22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x22, 0x18, {[@main]}}, 0x0}, 0x0) 15:16:18 executing program 4: r0 = syz_clone(0x8200900, &(0x7f00000001c0)="641840bd034f2b23e76c98e700db19214f8aa39e60424386d2437e31abfa5a142420898aa5b1a08adc86785e1b7b2b7f63a8738ab09ab43062be8b7ddf666b8a37dae52561ca7aaa4b1c2a199b253c9c6f166fd42ce2593334982536e3e236ed9757cba54075842db4289656c3873837702d35c809403feb22c3cc409db2bc912b8bb7c4479084e789b28a9c120dae3a1a680d4afeb72c272b", 0x99, 0x0, 0x0, 0x0) ptrace$getsig(0x4202, r0, 0x0, 0x0) r1 = syz_clone(0x40000000, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000480), &(0x7f00000004c0)="510655a81da917d05e4e1955b79e2785f1708f9a2270f60a32415292b15a8245e33d8ac4e86690f9f05e0eba60eed8999efedae0f69664ab469c6a2c443b5f1d48928e0057dd65e7") syz_open_procfs$userns(r1, &(0x7f0000000540)) 15:16:18 executing program 1: syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xfffffffffffffffc}], 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB]) socketpair(0x1a, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{}]}) syz_read_part_table(0x0, 0x0, &(0x7f00000007c0)) pselect6(0x40, &(0x7f0000000040)={0x40}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000200)={0x6, 0x0, 0x3, 0x7ff, 0x3, 0x4, 0x4, 0xd0}, &(0x7f0000000240)={0x77359400}, &(0x7f00000002c0)={0x0}) socketpair(0x0, 0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000700)={0x28, 0x0, 0x2710, @host}, 0x10, 0x81000) 15:16:18 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x77f, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r3, 0x450e, 0x0, 0x0, 0x0, 0x0) [ 390.458553][ T5729] loop1: detected capacity change from 0 to 16383 [ 390.509633][ T5729] Can't find a SQUASHFS superblock on loop1 [ 390.605302][ T3660] I/O error, dev loop1, sector 16128 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 15:16:18 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB], 0x0) syz_usb_ep_write(r0, 0x0, 0x93, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600000000") syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) 15:16:18 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00220f0000000962"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000040), 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r1, 0x40184810, &(0x7f0000000000)={0x3}) 15:16:18 executing program 1: syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xfffffffffffffffc}], 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB]) socketpair(0x1a, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{}]}) syz_read_part_table(0x0, 0x0, &(0x7f00000007c0)) pselect6(0x40, &(0x7f0000000040)={0x40}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000200)={0x6, 0x0, 0x3, 0x7ff, 0x3, 0x4, 0x4, 0xd0}, &(0x7f0000000240)={0x77359400}, &(0x7f00000002c0)={0x0}) socketpair(0x0, 0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000700)={0x28, 0x0, 0x2710, @host}, 0x10, 0x81000) [ 390.819611][ T5743] loop1: detected capacity change from 0 to 16383 [ 390.826373][ T3702] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 390.887443][ T5743] Can't find a SQUASHFS superblock on loop1 15:16:19 executing program 1: syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xfffffffffffffffc}], 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB]) socketpair(0x1a, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{}]}) syz_read_part_table(0x0, 0x0, &(0x7f00000007c0)) pselect6(0x40, &(0x7f0000000040)={0x40}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000200)={0x6, 0x0, 0x3, 0x7ff, 0x3, 0x4, 0x4, 0xd0}, &(0x7f0000000240)={0x77359400}, &(0x7f00000002c0)={0x0}) socketpair(0x0, 0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000700)={0x28, 0x0, 0x2710, @host}, 0x10, 0x81000) [ 391.053125][ T3711] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 391.063484][ T3700] usb 3-1: new high-speed USB device number 78 using dummy_hcd 15:16:19 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 15:16:19 executing program 4: statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) semctl$GETNCNT(r0, 0x0, 0xe, 0x0) [ 391.202119][ T5750] loop1: detected capacity change from 0 to 16383 [ 391.245357][ T3702] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.277099][ T3702] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.279733][ T5750] Can't find a SQUASHFS superblock on loop1 15:16:19 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x77f, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, 0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(0x0, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r3, 0x450e, 0x0, 0x0, 0x0, 0x0) 15:16:19 executing program 4: shmget(0x3, 0x3000, 0x2d8ff13ba0854eff, &(0x7f0000ffb000/0x3000)=nil) [ 391.367188][ T3702] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.40 [ 391.419048][ T3702] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.437695][ T3660] I/O error, dev loop1, sector 16128 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 391.443429][ T3711] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 391.463296][ T3700] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.483749][ T3702] usb 6-1: config 0 descriptor?? [ 391.504795][ T3700] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.516431][ T3700] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 391.532792][ T3700] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 391.547516][ T3711] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 391.600553][ T3700] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.638818][ T3700] usb 3-1: config 0 descriptor?? [ 391.639016][ T3711] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 391.678997][ T3711] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.853303][ T3711] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 391.883204][ T3711] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 391.891240][ T3711] usb 1-1: Product: syz [ 391.896255][ T3711] usb 1-1: Manufacturer: syz [ 391.933971][ T3711] cdc_wdm 1-1:1.0: skipping garbage [ 391.939351][ T3711] cdc_wdm 1-1:1.0: skipping garbage [ 392.001940][ T3702] koneplus 0003:1E7D:2E22.0015: unknown main item tag 0x0 [ 392.013431][ T3711] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 392.028504][ T3702] koneplus 0003:1E7D:2E22.0015: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.5-1/input0 [ 392.135487][ T3700] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 392.142942][ T3700] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 392.144068][ T3711] usb 1-1: USB disconnect, device number 26 [ 392.174882][ T3700] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 392.192705][ T3700] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 392.223270][ T3702] koneplus 0003:1E7D:2E22.0015: couldn't init struct koneplus_device [ 392.231610][ T3700] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 392.242750][ T3702] koneplus 0003:1E7D:2E22.0015: couldn't install mouse [ 392.345117][ T3700] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 392.359193][ T3702] koneplus: probe of 0003:1E7D:2E22.0015 failed with error -71 [ 392.372728][ T3700] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 392.388693][ T3702] usb 6-1: USB disconnect, device number 9 [ 392.397128][ T3700] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 392.421748][ T3700] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 392.434842][ T3700] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 392.442466][ T3700] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 392.455956][ T3700] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 392.468899][ T3700] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 392.483763][ T3700] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 392.506604][ T3700] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 392.523767][ T3700] usb 3-1: USB disconnect, device number 78 15:16:20 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x2e22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x3, "fc43c7"}, 0x0}) 15:16:20 executing program 4: ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) 15:16:20 executing program 1: syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xfffffffffffffffc}], 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB]) socketpair(0x1a, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{}]}) syz_read_part_table(0x0, 0x0, &(0x7f00000007c0)) pselect6(0x40, &(0x7f0000000040)={0x40}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000200)={0x6, 0x0, 0x3, 0x7ff, 0x3, 0x4, 0x4, 0xd0}, &(0x7f0000000240)={0x77359400}, &(0x7f00000002c0)={0x0}) socketpair(0x0, 0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000700)={0x28, 0x0, 0x2710, @host}, 0x10, 0x81000) 15:16:20 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x77f, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, 0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(0x0, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r3, 0x450e, 0x0, 0x0, 0x0, 0x0) [ 392.753119][ T5763] loop1: detected capacity change from 0 to 16383 [ 392.810124][ T5763] Can't find a SQUASHFS superblock on loop1 15:16:20 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) 15:16:20 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00220f0000000962b2"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r1, 0x40184810, &(0x7f0000000000)={0x3}) 15:16:20 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB], 0x0) syz_usb_ep_write(r0, 0x0, 0x93, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600000000") syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) 15:16:21 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000140)={0x3}, 0x0, &(0x7f0000000200)={r0}, 0x0) [ 393.093286][ T3698] usb 6-1: new high-speed USB device number 10 using dummy_hcd 15:16:21 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 15:16:21 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_macvtap\x00'}) 15:16:21 executing program 4: socket(0x0, 0xba55f393de2d3280, 0x0) 15:16:21 executing program 1: pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100), 0x0) [ 393.343078][ T3700] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 393.443189][ T3711] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 393.473515][ T3698] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 393.518679][ T3698] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 393.560153][ T3698] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.40 [ 393.618468][ T3698] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.671304][ T3698] usb 6-1: config 0 descriptor?? [ 393.753270][ T3700] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 393.764781][ T3700] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 393.775005][ T3700] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 393.788186][ T3700] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 393.798225][ T3700] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.810363][ T3700] usb 3-1: config 0 descriptor?? [ 393.813366][ T3711] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 393.824252][ T3711] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 393.834621][ T3711] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 393.845707][ T3711] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 393.973707][ T3711] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 393.982811][ T3711] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 393.991258][ T3711] usb 1-1: Product: syz [ 393.995852][ T3711] usb 1-1: Manufacturer: syz [ 394.034159][ T3711] cdc_wdm 1-1:1.0: skipping garbage [ 394.039424][ T3711] cdc_wdm 1-1:1.0: skipping garbage [ 394.050266][ T3711] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 394.223183][ T3698] usbhid 6-1:0.0: can't add hid device: -71 [ 394.229225][ T3698] usbhid: probe of 6-1:0.0 failed with error -71 [ 394.257111][ T3698] usb 6-1: USB disconnect, device number 10 [ 394.276143][ T3711] usb 1-1: USB disconnect, device number 27 [ 394.295210][ T3700] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 394.302668][ T3700] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 394.310649][ T3700] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 394.318422][ T3700] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 394.326203][ T3700] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 394.333960][ T3700] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 394.341559][ T3700] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 394.361114][ T3700] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 394.368850][ T3700] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 394.383131][ T3700] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 394.392074][ T3700] plantronics 0003:047F:FFFF.0017: No inputs registered, leaving [ 394.405608][ T3700] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 394.503338][ T3711] usb 3-1: USB disconnect, device number 79 15:16:22 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x2e22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x3, "fc43c7"}, 0x0}) 15:16:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x60, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_PBSS={0x4}]}, 0x60}}, 0x0) 15:16:22 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), 0x14) 15:16:22 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x77f, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, 0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(0x0, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r3, 0x450e, 0x0, 0x0, 0x0, 0x0) 15:16:22 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x14, &(0x7f00000000c0), 0x4) 15:16:22 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00220f0000000962b2"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r1, 0x40184810, &(0x7f0000000000)={0x3}) [ 395.023157][ T3702] usb 6-1: new high-speed USB device number 11 using dummy_hcd 15:16:23 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) read$FUSE(r0, &(0x7f0000000600)={0x2020}, 0x2020) 15:16:23 executing program 4: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x1014c2, 0x0) 15:16:23 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB], 0x0) syz_usb_ep_write(r0, 0x0, 0x93, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600000000") syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) 15:16:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x100000000000000}, 0x0) 15:16:23 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) read$FUSE(r0, &(0x7f0000000600)={0x2020}, 0x2020) 15:16:23 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000002200)=ANY=[@ANYBLOB='$'], 0x24}}, 0x0) [ 395.353204][ T3699] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 395.413321][ T3702] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.449797][ T3702] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.518671][ T3702] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.40 [ 395.530438][ T3702] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.541852][ T3702] usb 6-1: config 0 descriptor?? [ 395.693059][ T3697] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 395.733163][ T3699] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.744230][ T3699] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.754122][ T3699] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 395.767147][ T3699] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 395.776320][ T3699] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.794950][ T3699] usb 3-1: config 0 descriptor?? [ 396.073704][ T3702] usbhid 6-1:0.0: can't add hid device: -71 [ 396.079710][ T3702] usbhid: probe of 6-1:0.0 failed with error -71 [ 396.086243][ T3697] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 396.096274][ T3697] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 396.108378][ T3702] usb 6-1: USB disconnect, device number 11 [ 396.114423][ T3697] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 396.123563][ T3697] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.263243][ T3697] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 396.272368][ T3697] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 396.282676][ T3699] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 396.286872][ T3697] usb 1-1: Product: syz [ 396.296221][ T3699] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 396.303506][ T3697] usb 1-1: Manufacturer: syz [ 396.305539][ T3699] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 396.315743][ T3699] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 396.323474][ T3699] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 396.330893][ T3699] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 396.338705][ T3699] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 396.346339][ T3699] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 396.354060][ T3699] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 396.355594][ T3697] cdc_wdm 1-1:1.0: skipping garbage [ 396.361456][ T3699] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 396.361965][ T3699] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving [ 396.374968][ T3697] cdc_wdm 1-1:1.0: skipping garbage [ 396.396354][ T3697] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 396.402197][ T3699] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 15:16:24 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x2e22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x3, "fc43c7"}, 0x0}) 15:16:24 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) read$FUSE(r0, &(0x7f0000000600)={0x2020}, 0x2020) 15:16:24 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x1000c815) 15:16:24 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x77f, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r4, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r3, 0x450e, 0x0, 0x0, 0x0, 0x0) [ 396.483407][ T3699] usb 3-1: USB disconnect, device number 80 15:16:24 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text16={0x10, &(0x7f0000000040)="660f38823c66b8010000000f01d90f01ca0f01c826660feb62000f01c2ded9670fc7a8090000002e26660f3817c0b805018ed8", 0x33}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_CLOCK(r4, 0x4030ae7b, &(0x7f0000000140)={0x6, 0x400, 0x1, 0x800, 0x8}) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f00000001c0)={0x9, 0x7e14}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x5, 0x40, 0x0, 0x0, 0x6, 0x0, 0x2004c7], 0x0, 0x600}) socket$igmp(0x2, 0x3, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 396.559575][ T3697] usb 1-1: USB disconnect, device number 28 [ 396.743962][ T5821] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 396.853081][ T3698] usb 6-1: new high-speed USB device number 12 using dummy_hcd 15:16:24 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) read$FUSE(r0, &(0x7f0000000600)={0x2020}, 0x2020) 15:16:24 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00220f0000000962b2"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r1, 0x40184810, &(0x7f0000000000)={0x3}) 15:16:24 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000021c0)=@base={0x1a}, 0x48) [ 397.223355][ T3698] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.235290][ T3698] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.246959][ T3698] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.40 [ 397.257777][ T3698] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.270765][ T3698] usb 6-1: config 0 descriptor?? [ 397.373158][ T3702] usb 3-1: new high-speed USB device number 81 using dummy_hcd 15:16:25 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB='{'], 0x0) syz_usb_ep_write(r0, 0x0, 0x93, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600000000") syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) 15:16:25 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text16={0x10, &(0x7f0000000040)="660f38823c66b8010000000f01d90f01ca0f01c826660feb62000f01c2ded9670fc7a8090000002e26660f3817c0b805018ed8", 0x33}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_CLOCK(r4, 0x4030ae7b, &(0x7f0000000140)={0x6, 0x400, 0x1, 0x800, 0x8}) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f00000001c0)={0x9, 0x7e14}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x5, 0x40, 0x0, 0x0, 0x6, 0x0, 0x2004c7], 0x0, 0x600}) socket$igmp(0x2, 0x3, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:16:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000380)={&(0x7f0000000100), 0x7, &(0x7f0000000340)={&(0x7f0000000fc0)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_PEERS={0xc58, 0x8, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a03d266648672d176d5dddaec2840ddf73be62c7049573a15b8c34cd90331c5a"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "18903469bd4dcc82bd3d961e4fcf760bc70306b05ce546ec7ec919fac0a67029"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x23c, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @multicast1}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0x1f0, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}]}]}, {0x530, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @empty}}, @WGPEER_A_ALLOWEDIPS={0x26c, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x23c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @local}}]}, {0x40, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "33b92e0cb8f3afca7c7563e7993456ee7ad62c8e2ba6f924d7fc13ab481cdfef"}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x3fc, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @broadcast}}, @WGPEER_A_ALLOWEDIPS={0xec, 0x9, 0x0, 0x1, [{0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}]}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @private}}, @WGPEER_A_ALLOWEDIPS={0x280, 0x9, 0x0, 0x1, [{0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "cc6aa6ba54a88e10d3f7d4ecaff880f566613bff51495977de5fab3f0cc1ef79"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @mcast1}}]}]}, @WGDEVICE_A_PEERS={0x88, 0x8, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8cec68938c8488734c62c542bdf3fb559d4ab1d3d0f0304752375444edbb3b9d"}, @WGPEER_A_ENDPOINT4={0x14}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_PEERS={0x178, 0x8, 0x0, 0x1, [{0x174, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "3406a394dd2bd07231394776592b68f68ba0f7e4de0d07ecaeeb474e03bc7f47"}, @WGPEER_A_ALLOWEDIPS={0x144, 0x9, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}]}]}]}]}, 0xec4}}, 0x0) 15:16:25 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x77f, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r4, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r3, 0x450e, 0x0, 0x0, 0x0, 0x0) [ 397.593279][ T5837] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 397.773353][ T3711] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 397.813177][ T3698] usbhid 6-1:0.0: can't add hid device: -71 [ 397.813310][ T3702] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.819372][ T3698] usbhid: probe of 6-1:0.0 failed with error -71 [ 397.863651][ T3698] usb 6-1: USB disconnect, device number 12 [ 397.871375][ T3702] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.887918][ T3702] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 397.908474][ T3702] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 397.928409][ T3702] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.961191][ T3702] usb 3-1: config 0 descriptor?? [ 398.153175][ T3711] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 398.162124][ T3711] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 398.179185][ T3711] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 398.188638][ T3711] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 15:16:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000080)=ANY=[@ANYBLOB="00f8"], 0x14}}, 0x0) 15:16:26 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text16={0x10, &(0x7f0000000040)="660f38823c66b8010000000f01d90f01ca0f01c826660feb62000f01c2ded9670fc7a8090000002e26660f3817c0b805018ed8", 0x33}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_CLOCK(r4, 0x4030ae7b, &(0x7f0000000140)={0x6, 0x400, 0x1, 0x800, 0x8}) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f00000001c0)={0x9, 0x7e14}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x5, 0x40, 0x0, 0x0, 0x6, 0x0, 0x2004c7], 0x0, 0x600}) socket$igmp(0x2, 0x3, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:16:26 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x2e22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x22, 0x18, {[@main]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x3, "fc43c7"}, 0x0}) [ 398.204638][ T3711] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 15:16:26 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.sched_load_balance\x00', 0x2, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x109202, 0x0) sendfile(r2, r1, 0x0, 0x8) 15:16:26 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x77f, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r4, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r3, 0x450e, 0x0, 0x0, 0x0, 0x0) [ 398.343353][ T3711] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 15:16:26 executing program 1: fsopen(&(0x7f0000000000)='securityfs\x00', 0x0) [ 398.392045][ T3711] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 398.441238][ T3711] usb 1-1: Product: syz [ 398.446252][ T3711] usb 1-1: Manufacturer: syz [ 398.457152][ T3702] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 398.483375][ T5846] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 398.485971][ T3702] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 398.501024][ T3711] cdc_wdm 1-1:1.0: skipping garbage [ 398.512092][ T3711] cdc_wdm 1-1:1.0: skipping garbage [ 398.519235][ T3711] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 398.536925][ T3711] cdc_wdm 1-1:1.0: Unknown control protocol [ 398.612264][ T3702] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 398.613212][ T14] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 398.633255][ T3702] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 398.640982][ T3702] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 398.648877][ T3702] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 398.667121][ T3702] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 398.719544][ T3702] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 398.739888][ T3711] usb 1-1: USB disconnect, device number 29 [ 398.774863][ T3702] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 398.837901][ T3702] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 398.862505][ T3702] plantronics 0003:047F:FFFF.0019: No inputs registered, leaving [ 398.904852][ T3702] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 398.942662][ T3702] usb 3-1: USB disconnect, device number 81 [ 399.093407][ T14] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.109823][ T14] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.120111][ T14] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.40 [ 399.129893][ T14] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 15:16:27 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00220f0000000962b2"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000040), 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0x40184810, &(0x7f0000000000)={0x3}) 15:16:27 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) [ 399.140703][ T14] usb 6-1: config 0 descriptor?? [ 399.483156][ T3711] usb 3-1: new high-speed USB device number 82 using dummy_hcd 15:16:27 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB='{'], 0x0) syz_usb_ep_write(r0, 0x0, 0x93, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600000000") syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) 15:16:27 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text16={0x10, &(0x7f0000000040)="660f38823c66b8010000000f01d90f01ca0f01c826660feb62000f01c2ded9670fc7a8090000002e26660f3817c0b805018ed8", 0x33}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_CLOCK(r4, 0x4030ae7b, &(0x7f0000000140)={0x6, 0x400, 0x1, 0x800, 0x8}) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f00000001c0)={0x9, 0x7e14}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x5, 0x40, 0x0, 0x0, 0x6, 0x0, 0x2004c7], 0x0, 0x600}) socket$igmp(0x2, 0x3, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:16:27 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], 'W'}]}}, &(0x7f0000000380)=""/133, 0x2a, 0x85, 0x1}, 0x20) 15:16:27 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x77f, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r3, 0x450e, 0x0, 0x0, 0x0, 0x0) [ 399.673208][ T14] usbhid 6-1:0.0: can't add hid device: -71 [ 399.679961][ T14] usbhid: probe of 6-1:0.0 failed with error -71 [ 399.694151][ T14] usb 6-1: USB disconnect, device number 13 15:16:27 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) [ 399.731978][ T5869] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 399.843431][ T3711] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.863146][ T3711] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.874041][ T3711] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 15:16:27 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1099038, &(0x7f00000004c0)) [ 399.888556][ T3711] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 399.899437][ T3711] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.939107][ T3711] usb 3-1: config 0 descriptor?? [ 399.953116][ T3702] usb 1-1: new high-speed USB device number 30 using dummy_hcd 15:16:28 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x2e22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x22, 0x18, {[@main]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x3, "fc43c7"}, 0x0}) 15:16:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x11, &(0x7f0000000080)="7bd03a37", 0x4) 15:16:28 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) unlink(&(0x7f0000002700)='./file0\x00') 15:16:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, &(0x7f0000000100)) [ 400.353416][ T3702] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 400.368415][ T3702] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 400.379086][ T3702] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 400.395854][ T3702] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 400.411148][ T3702] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 400.444443][ T3711] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 400.452025][ T3711] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 400.460044][ T3711] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 400.467847][ T3711] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 400.473309][ T26] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 400.483663][ T3711] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 400.491079][ T3711] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 400.499792][ T3711] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 400.507590][ T3711] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 400.516352][ T3711] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 400.524297][ T3711] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 400.532072][ T3711] plantronics 0003:047F:FFFF.001A: No inputs registered, leaving [ 400.544509][ T3711] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 400.565911][ T3702] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 400.576745][ T3702] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 400.587923][ T3702] usb 1-1: Product: syz [ 400.592116][ T3702] usb 1-1: Manufacturer: syz [ 400.647496][ T3702] cdc_wdm 1-1:1.0: skipping garbage [ 400.652760][ T3702] cdc_wdm 1-1:1.0: skipping garbage [ 400.717571][ T14] usb 3-1: USB disconnect, device number 82 [ 400.719244][ T3702] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device [ 400.729723][ T3702] cdc_wdm 1-1:1.0: Unknown control protocol [ 400.860038][ T3702] usb 1-1: USB disconnect, device number 30 [ 400.883430][ T26] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 400.894965][ T26] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 400.905397][ T26] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.40 [ 400.914517][ T26] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.932474][ T26] usb 6-1: config 0 descriptor?? 15:16:29 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00220f0000000962b2"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000040), 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0x40184810, &(0x7f0000000000)={0x3}) 15:16:29 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 401.473145][ T26] usbhid 6-1:0.0: can't add hid device: -71 [ 401.479114][ T26] usbhid: probe of 6-1:0.0 failed with error -71 [ 401.491647][ T26] usb 6-1: USB disconnect, device number 14 [ 401.533275][ T3711] usb 3-1: new high-speed USB device number 83 using dummy_hcd 15:16:29 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB='{'], 0x0) syz_usb_ep_write(r0, 0x0, 0x93, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600000000") syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) 15:16:29 executing program 1: getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10}}}]}, 0x44}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text16={0x10, &(0x7f0000000040)="660f38823c66b8010000000f01d90f01ca0f01c826660feb62000f01c2ded9670fc7a8090000002e26660f3817c0b805018ed8", 0x33}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000140)={0x6, 0x400, 0x1, 0x800, 0x8}) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f00000001c0)={0x9, 0x7e14}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x5, 0x40, 0x0, 0x0, 0x6, 0x7d, 0x2004c7], 0x0, 0x600}) socket$igmp(0x2, 0x3, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15:16:29 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x77f, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r3, 0x450e, 0x0, 0x0, 0x0, 0x0) 15:16:29 executing program 4: timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000080)) 15:16:29 executing program 4: pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0xffffffffffffffff) 15:16:29 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000000)="b3", 0x1) 15:16:29 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x2e22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x22, 0x18, {[@main]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x3, "fc43c7"}, 0x0}) 15:16:29 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000100), &(0x7f0000000140)=0x8) [ 401.890614][ T5893] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 401.893264][ T3711] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 15:16:29 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000340)={0x8c, 0x4, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x35, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x0, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMPV6_TIMEOUT, @CTA_TIMEOUT_ICMPV6_TIMEOUT, @CTA_TIMEOUT_ICMPV6_TIMEOUT, @CTA_TIMEOUT_ICMPV6_TIMEOUT, @CTA_TIMEOUT_ICMPV6_TIMEOUT, @CTA_TIMEOUT_ICMPV6_TIMEOUT]}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8}, @CTA_TIMEOUT_TCP_SYN_SENT2, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8}]}]}, 0x8c}}, 0x0) [ 402.035258][ T3711] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.100355][ T3711] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 402.120555][ T5916] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. 15:16:30 executing program 4: r0 = socket(0x2a, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8942, &(0x7f0000000000)={'wg1\x00'}) [ 402.169725][ T3711] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 402.209154][ T3711] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.277818][ T3711] usb 3-1: config 0 descriptor?? [ 402.473245][ T3699] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 402.593160][ T14] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 402.794798][ T3711] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 402.802314][ T3711] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 402.813297][ T3711] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 402.820726][ T3711] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 402.828511][ T3711] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 402.836271][ T3699] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 402.845029][ T3711] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 402.853305][ T3699] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 402.864428][ T3711] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 402.871842][ T3711] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 402.880039][ T3699] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 402.889559][ T3699] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.900673][ T3711] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 402.908379][ T3711] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 402.915967][ T3699] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.926814][ T3711] plantronics 0003:047F:FFFF.001B: No inputs registered, leaving [ 402.938685][ T3711] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 402.963141][ T14] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.974528][ T14] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.984461][ T14] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.40 [ 402.996751][ T14] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.006575][ T14] usb 6-1: config 0 descriptor?? [ 403.053274][ T3699] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 403.064617][ T3699] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 403.072639][ T3699] usb 1-1: Product: syz [ 403.076896][ T3699] usb 1-1: Manufacturer: syz [ 403.083466][ T3711] usb 3-1: USB disconnect, device number 83 [ 403.114405][ T3699] cdc_wdm 1-1:1.0: skipping garbage [ 403.119755][ T3699] cdc_wdm 1-1:1.0: skipping garbage [ 403.127675][ T3699] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 403.134183][ T3699] cdc_wdm 1-1:1.0: Unknown control protocol [ 403.318912][ T3711] usb 1-1: USB disconnect, device number 31 15:16:31 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00220f0000000962b2"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000040), 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0x40184810, &(0x7f0000000000)={0x3}) 15:16:31 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @local}}}, 0x9c) [ 403.543163][ T14] usbhid 6-1:0.0: can't add hid device: -71 [ 403.549256][ T14] usbhid: probe of 6-1:0.0 failed with error -71 [ 403.561974][ T14] usb 6-1: USB disconnect, device number 15 [ 403.904032][ T3702] usb 3-1: new high-speed USB device number 84 using dummy_hcd 15:16:32 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x77f, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r3, 0x450e, 0x0, 0x0, 0x0, 0x0) 15:16:32 executing program 1: r0 = socket(0x2a, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x890b, 0x0) 15:16:32 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x1265, 0xffffffffffffffff, 0x4}, 0x48) 15:16:32 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="7bf3"], 0x0) syz_usb_ep_write(r0, 0x0, 0x93, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600000000") syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) 15:16:32 executing program 5: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x22, 0x18, {[@main]}}, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x3, "fc43c7"}, 0x0}) 15:16:32 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x50}}, 0x0) 15:16:32 executing program 1: syz_io_uring_setup(0x485b, &(0x7f0000000040), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) [ 404.273177][ T3702] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.309284][ T3702] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.337231][ T3702] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 15:16:32 executing program 1: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000340), 0x40001, 0x0) [ 404.395565][ T3702] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 404.429843][ T3702] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 15:16:32 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, 0x0) [ 404.504934][ T3702] usb 3-1: config 0 descriptor?? 15:16:32 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x14, 0x15, 0x1}, 0x14}}, 0x0) [ 404.753072][ T2988] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 404.943185][ T2988] usb 1-1: device descriptor read/64, error 18 [ 405.006568][ T3702] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 405.016453][ T3702] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 405.026487][ T3702] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 405.036451][ T3702] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 405.046516][ T3702] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 405.056732][ T3702] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 405.065759][ T3702] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 405.073536][ T3702] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 405.081178][ T3702] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 405.089019][ T3702] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 405.102642][ T3702] plantronics 0003:047F:FFFF.001C: No inputs registered, leaving [ 405.127700][ T3702] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 405.213204][ T2988] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 405.287695][ T3699] usb 3-1: USB disconnect, device number 84 [ 405.403069][ T2988] usb 1-1: device descriptor read/64, error 18 [ 405.523241][ T2988] usb usb1-port1: attempt power cycle 15:16:33 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00220f0000000962b2"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000040), 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r1, 0x40184810, 0x0) 15:16:33 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x541b, &(0x7f0000000040)={'wg1\x00'}) 15:16:33 executing program 5: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x22, 0x18, {[@main]}}, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x3, "fc43c7"}, 0x0}) 15:16:33 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg(r0, &(0x7f00000002c0)={0x1, {0x0, 0x0, 0x0}}, 0x48) 15:16:33 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x77f, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x0, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r3, 0x450e, 0x0, 0x0, 0x0, 0x0) [ 405.933130][ T2988] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 406.113231][ T2988] usb 1-1: device descriptor read/8, error -61 [ 406.123089][ T3702] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 406.383276][ T2988] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 406.483156][ T3702] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.494255][ T3702] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.504197][ T3702] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 406.517392][ T3702] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 406.526597][ T3702] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.538497][ T3702] usb 3-1: config 0 descriptor?? [ 406.555770][ T2988] usb 1-1: device descriptor read/8, error -61 [ 406.673240][ T2988] usb usb1-port1: unable to enumerate USB device [ 407.024882][ T3702] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 407.032296][ T3702] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 407.039781][ T3702] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 407.047232][ T3702] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 407.055898][ T3702] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 407.063390][ T3702] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 407.070782][ T3702] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 407.078228][ T3702] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 407.085716][ T3702] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 407.093180][ T3702] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 407.101448][ T3702] plantronics 0003:047F:FFFF.001D: No inputs registered, leaving [ 407.113501][ T3702] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 15:16:35 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="7bf3"], 0x0) syz_usb_ep_write(r0, 0x0, 0x93, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600000000") syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) 15:16:35 executing program 4: r0 = socket(0x2a, 0x2, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r0) 15:16:35 executing program 1: r0 = socket(0x2a, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x5452, 0x0) 15:16:35 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x77f, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x0, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r3, 0x450e, 0x0, 0x0, 0x0, 0x0) 15:16:35 executing program 5: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x22, 0x18, {[@main]}}, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x3, "fc43c7"}, 0x0}) 15:16:35 executing program 4: migrate_pages(0x0, 0x0, &(0x7f00000002c0), 0x0) 15:16:35 executing program 1: r0 = socket(0x2a, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8929, &(0x7f0000000000)={'wg1\x00'}) [ 407.693274][ T3711] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 407.883184][ T3711] usb 1-1: device descriptor read/64, error 18 [ 408.163296][ T3711] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 408.393271][ T3711] usb 1-1: device descriptor read/64, error 18 [ 408.513678][ T3711] usb usb1-port1: attempt power cycle 15:16:36 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00220f0000000962b2"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000040), 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r1, 0x40184810, 0x0) 15:16:36 executing program 4: r0 = socket(0x29, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x5411, 0x0) 15:16:36 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x574}}, 0x0) 15:16:36 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x22, 0x18, {[@main]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x3, "fc43c7"}, 0x0}) 15:16:36 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x77f, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x0, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r3, 0x450e, 0x0, 0x0, 0x0, 0x0) [ 408.806477][ T5975] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 408.933241][ T3711] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 409.183295][ T3711] usb 1-1: device descriptor read/8, error -61 [ 409.203102][ T3699] usb 3-1: reset high-speed USB device number 85 using dummy_hcd [ 409.473082][ T3711] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 409.663189][ T3711] usb 1-1: device descriptor read/8, error -61 [ 409.783388][ T3711] usb usb1-port1: unable to enumerate USB device [ 410.167992][ T3702] usb 3-1: USB disconnect, device number 85 15:16:38 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="7bf3"], 0x0) syz_usb_ep_write(r0, 0x0, 0x93, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600000000") syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) 15:16:38 executing program 1: syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x133040) 15:16:38 executing program 4: syz_open_dev$mouse(&(0x7f0000000000), 0x2, 0x0) 15:16:38 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x77f, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r3, 0x450e, 0x0, 0x0, 0x0, 0x0) 15:16:38 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x22, 0x18, {[@main]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x3, "fc43c7"}, 0x0}) 15:16:38 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_HANDLE={0xc}]}], {0x14}}, 0x50}}, 0x0) 15:16:38 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x24, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x24}}, 0x0) 15:16:38 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00220f0000000962b2"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000040), 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r1, 0x40184810, 0x0) 15:16:38 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x6000}, 0x0) 15:16:38 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) syz_clone3(0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000002c0)={0x0, 0x1000000, &(0x7f0000000280)={&(0x7f0000000180)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in6=@loopback, @in=@private}]}, 0x38}}, 0x0) 15:16:38 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, 0x13, 0xa, 0x101}, 0x14}}, 0x0) 15:16:38 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000), 0x8) [ 410.913230][ T14] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 411.057643][ T3699] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 411.143099][ T14] usb 1-1: device descriptor read/64, error 18 [ 411.433595][ T14] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 411.483997][ T3699] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.495733][ T3699] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 411.505608][ T3699] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 411.518693][ T3699] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 411.527849][ T3699] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.563452][ T3699] usb 3-1: config 0 descriptor?? [ 411.653105][ T14] usb 1-1: device descriptor read/64, error 18 [ 411.773868][ T14] usb usb1-port1: attempt power cycle [ 412.035047][ T3699] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 412.043208][ T3699] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 412.050625][ T3699] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 412.058146][ T3699] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 412.065738][ T3699] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 412.074085][ T3699] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 412.081497][ T3699] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 412.088957][ T3699] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 412.096529][ T3699] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 412.104008][ T3699] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 412.111783][ T3699] plantronics 0003:047F:FFFF.001E: No inputs registered, leaving [ 412.124591][ T3699] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 412.203145][ T14] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 412.373360][ T14] usb 1-1: device descriptor read/8, error -61 [ 412.643088][ T14] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 412.813179][ T14] usb 1-1: device descriptor read/8, error -61 [ 412.933681][ T14] usb usb1-port1: unable to enumerate USB device 15:16:41 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x22, 0x18, {[@main]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x3, "fc43c7"}, 0x0}) 15:16:41 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x24, 0xf, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}]}, 0x24}}, 0x0) 15:16:41 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x574}}, 0x0) 15:16:41 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x77f, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r3, 0x450e, 0x0, 0x0, 0x0, 0x0) 15:16:41 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB="7bf3"], 0x0) syz_usb_ep_write(r0, 0x0, 0x93, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600000000") syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) 15:16:41 executing program 4: set_mempolicy(0x0, &(0x7f0000000000), 0x9) [ 413.503660][ T6013] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.1'. 15:16:41 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x40, @private0={0xfc, 0x0, '\x00', 0x1}}], 0x1c) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) 15:16:41 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00220f0000000962b2"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000040), 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r1, 0x40184810, &(0x7f0000000000)) 15:16:41 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000006c40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x401}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0xd0045fa8c8e0c413, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) 15:16:41 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000140), &(0x7f0000000180)=0x4) [ 413.933097][ T3702] usb 1-1: new high-speed USB device number 44 using dummy_hcd 15:16:41 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000140), &(0x7f0000000180)=0x4) 15:16:41 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e7d, 0x2e22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x22, 0x18, {[@main]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x3, "fc43c7"}, 0x0}) 15:16:42 executing program 4: memfd_create(0x0, 0x0) syz_clone3(&(0x7f00000001c0)={0x60000000, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 414.143207][ T3702] usb 1-1: device descriptor read/64, error 18 [ 414.244901][ T3699] usb 3-1: reset high-speed USB device number 86 using dummy_hcd [ 414.343148][ T3711] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 414.433235][ T3702] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 414.553192][ T3711] usb 6-1: device descriptor read/64, error 18 [ 414.653116][ T3702] usb 1-1: device descriptor read/64, error 18 [ 414.785497][ T3702] usb usb1-port1: attempt power cycle [ 414.823411][ T3711] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 415.020575][ T3711] usb 6-1: device descriptor read/64, error 18 [ 415.141819][ T14] usb 3-1: USB disconnect, device number 86 [ 415.148274][ T3711] usb usb6-port1: attempt power cycle [ 415.193188][ T3702] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 415.393132][ T3702] usb 1-1: device descriptor read/8, error -61 [ 415.563056][ T3711] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 415.653246][ T3711] usb 6-1: Invalid ep0 maxpacket: 0 [ 415.673162][ T3702] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 415.813113][ T3711] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 415.873296][ T3702] usb 1-1: device descriptor read/8, error -61 [ 415.903300][ T3711] usb 6-1: Invalid ep0 maxpacket: 0 [ 415.909775][ T3711] usb usb6-port1: unable to enumerate USB device [ 416.003341][ T3702] usb usb1-port1: unable to enumerate USB device 15:16:44 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB="7bf3"], 0x0) syz_usb_ep_write(r0, 0x0, 0x93, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600000000") syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) 15:16:44 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x5, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x4}]}, 0x1c}}, 0x0) 15:16:44 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x77f, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r3, 0x450e, 0x0, 0x0, 0x0, 0x0) 15:16:44 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x574}}, 0x0) 15:16:44 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00220f0000000962b2"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000040), 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r1, 0x40184810, &(0x7f0000000000)) 15:16:44 executing program 4: r0 = memfd_create(&(0x7f00000004c0)='wpan1\x00', 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) [ 416.658990][ T6042] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 416.672755][ T6043] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 15:16:44 executing program 1: syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) socket$pppoe(0x18, 0x1, 0x0) 15:16:44 executing program 4: r0 = memfd_create(&(0x7f00000004c0)='wpan1\x00', 0x0) syz_clone3(&(0x7f00000001c0)={0x60000000, &(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080), {0x1d}, &(0x7f00000000c0)=""/67, 0x43, &(0x7f0000000140)=""/11, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x3ae1c55d}}, './file0\x00'}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x6}) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f00000000c0)) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000240)={0xffffffffffffffff, r0, 0x9}) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r3, 0x4008941a, &(0x7f00000000c0)) process_mrelease(0xffffffffffffffff, 0x0) 15:16:44 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) 15:16:44 executing program 1: r0 = socket(0x2a, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x2, 0x0) [ 416.933239][ T3697] usb 3-1: new high-speed USB device number 87 using dummy_hcd 15:16:44 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e7d, 0x2e22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x22, 0x18, {[@main]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x3, "fc43c7"}, 0x0}) 15:16:44 executing program 1: prctl$PR_SET_IO_FLUSHER(0x39, 0xfffffffffffffffe) [ 417.063845][ T3702] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 417.253309][ T3702] usb 1-1: device descriptor read/64, error 18 [ 417.353423][ T3697] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 417.369440][ T3697] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 417.380253][ T3697] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 417.399523][ T3697] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 417.408865][ T3697] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.427944][ T3697] usb 3-1: config 0 descriptor?? [ 417.543267][ T3702] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 417.583145][ T2988] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 417.743083][ T3702] usb 1-1: device descriptor read/64, error 18 [ 417.803220][ T2988] usb 6-1: device descriptor read/64, error 18 [ 417.876305][ T3702] usb usb1-port1: attempt power cycle [ 417.925177][ T3697] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 417.932636][ T3697] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 417.963056][ T3697] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 417.970512][ T3697] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 417.978660][ T3697] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 417.986994][ T3697] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 417.995446][ T3697] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 418.003372][ T3697] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 418.011757][ T3697] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 418.019834][ T3697] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 418.028729][ T3697] plantronics 0003:047F:FFFF.001F: No inputs registered, leaving [ 418.052439][ T3697] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 418.103333][ T2988] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 418.313350][ T2988] usb 6-1: device descriptor read/64, error 18 [ 418.343097][ T3702] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 418.434583][ T2988] usb usb6-port1: attempt power cycle [ 418.543183][ T3702] usb 1-1: device descriptor read/8, error -61 [ 418.823101][ T3702] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 418.853139][ T2988] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 418.943574][ T2988] usb 6-1: Invalid ep0 maxpacket: 0 [ 419.033332][ T3702] usb 1-1: device descriptor read/8, error -61 [ 419.103112][ T2988] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 419.154063][ T3702] usb usb1-port1: unable to enumerate USB device [ 419.203304][ T2988] usb 6-1: Invalid ep0 maxpacket: 0 [ 419.208973][ T2988] usb usb6-port1: unable to enumerate USB device 15:16:47 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB="7bf3"], 0x0) syz_usb_ep_write(r0, 0x0, 0x93, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600000000") syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) 15:16:47 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) 15:16:47 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0xa, 0x0, @local}}}, 0x9c) 15:16:47 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x77f, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000180), 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r3, 0x450e, 0x0, 0x0, 0x0, 0x0) 15:16:47 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00220f0000000962b2"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000040), 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r1, 0x40184810, &(0x7f0000000000)) 15:16:47 executing program 4: r0 = memfd_create(&(0x7f00000004c0)='wpan1\x00', 0x0) syz_clone3(&(0x7f00000001c0)={0x60000000, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080), {0x1d}, &(0x7f00000000c0)=""/67, 0x43, &(0x7f0000000140)=""/11, &(0x7f0000000180)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x4}, 0x58) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x6}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x200000004]}, 0x8, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r2, 0x4008941a, &(0x7f00000000c0)) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r1, 0x7, r2, &(0x7f0000000240)={0xffffffffffffffff, r0, 0x9}) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x200000004]}, 0x8, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r3, 0x4008941a, &(0x7f00000000c0)) process_mrelease(0xffffffffffffffff, 0x0) 15:16:47 executing program 1: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x3, 0x0) 15:16:47 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone3(0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in6=@loopback, @in=@private}]}, 0x38}}, 0x0) [ 420.156583][ T14] usb 3-1: reset high-speed USB device number 87 using dummy_hcd 15:16:48 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x2, 0x7, 0x5c, 0x4}]}) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x200000004]}, 0x8, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x200000004]}, 0x8, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r1) 15:16:48 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x7, 0x0, 0x0) 15:16:48 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e7d, 0x2e22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x22, 0x18, {[@main]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x3, "fc43c7"}, 0x0}) 15:16:48 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x77f, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000180), 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r3, 0x450e, 0x0, 0x0, 0x0, 0x0) [ 420.994410][ T3702] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 421.183110][ T3702] usb 1-1: device descriptor read/64, error 18 [ 421.463091][ T22] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 421.470763][ T3702] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 421.586109][ T3711] usb 3-1: USB disconnect, device number 87 [ 421.673373][ T22] usb 6-1: device descriptor read/64, error 18 [ 421.679630][ T3702] usb 1-1: device descriptor read/64, error 18 [ 421.821217][ T3702] usb usb1-port1: attempt power cycle [ 421.993448][ T22] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 422.183261][ T22] usb 6-1: device descriptor read/64, error 18 [ 422.270674][ T3702] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 422.313342][ T22] usb usb6-port1: attempt power cycle [ 422.443976][ T3702] usb 1-1: device descriptor read/8, error -61 [ 422.733163][ T3702] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 422.743270][ T22] usb 6-1: new high-speed USB device number 26 using dummy_hcd 15:16:50 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000", @ANYBLOB="7bf3"], 0x0) syz_usb_ep_write(r0, 0x0, 0x93, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600000000") syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) 15:16:50 executing program 4: syz_mount_image$jfs(&(0x7f00000012c0), &(0x7f0000001300)='./file0\x00', 0x0, 0x1, &(0x7f0000001380)=[{0x0, 0x0, 0x100}], 0x0, &(0x7f00000013c0)={[{@grpquota}], [{@fsuuid={'fsuuid', 0x3d, {[0x36, 0x0, 0x32, 0x0, 0x0, 0x36, 0x0, 0x36], 0x2d, [0x0, 0x0, 0x33, 0x36], 0x2d, [0x53], 0x2d, [0x39, 0x0, 0x0, 0x35], 0x2d, [0x37, 0x0, 0x0, 0x0, 0x32, 0x0, 0x30]}}}, {@smackfshat={'smackfshat', 0x3d, 'erspan0\x00'}}]}) syz_mount_image$squashfs(0x0, 0x0, 0x0, 0x6, &(0x7f0000001840)=[{0x0, 0x0, 0x100000000}, {&(0x7f0000001580), 0x0, 0x1}, {&(0x7f00000015c0)="c93aee07462ae5de3c8854f3d0d22168cf2898e169b84f6ed2b7dc61", 0x1c}, {&(0x7f0000001700)}, {0x0}, {&(0x7f0000001780)}], 0x0, 0x0) 15:16:50 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x1c, 0xa, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 15:16:50 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x77f, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000180), 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r3, 0x450e, 0x0, 0x0, 0x0, 0x0) 15:16:50 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000001c0)={0x0, 0x0}) 15:16:50 executing program 1: r0 = socket(0x23, 0x5, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 15:16:50 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x28, 0x15, 0x1, 0x0, 0x0, {0x1d}, [@INET_DIAG_REQ_BYTECODE={0x12, 0x1, "d71488a318858ca35cf40bbb7868"}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x20000044) [ 422.844664][ T22] usb 6-1: Invalid ep0 maxpacket: 0 [ 422.863218][ T3702] usb 1-1: device descriptor read/8, error -71 [ 422.871601][ T6100] loop4: detected capacity change from 0 to 1 [ 422.918753][ T6100] Dev loop4: unable to read RDB block 1 [ 422.953548][ T6100] loop4: unable to read partition table [ 422.964312][ T6100] loop4: partition table beyond EOD, truncated 15:16:50 executing program 1: add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) [ 422.993569][ T3702] usb usb1-port1: unable to enumerate USB device [ 423.011416][ T6100] jfs: Unrecognized mount option "fsuuid=6" or missing value [ 423.019342][ T22] usb 6-1: new high-speed USB device number 27 using dummy_hcd 15:16:51 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x574}}, 0x0) 15:16:51 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x14, 0x0, 0x0) [ 423.143579][ T22] usb 6-1: Invalid ep0 maxpacket: 0 [ 423.151404][ T22] usb usb6-port1: unable to enumerate USB device [ 423.257210][ T6116] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.4'. [ 423.393244][ T3702] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 423.753253][ T3702] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 423.761987][ T3702] usb 1-1: config 1 has an invalid descriptor of length 123, skipping remainder of the config [ 423.773126][ T3702] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 423.782261][ T3702] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 423.914643][ T3702] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 423.923773][ T3702] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 423.931748][ T3702] usb 1-1: Product: syz [ 423.936246][ T3702] usb 1-1: Manufacturer: syz 15:16:51 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x2e22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x22, 0x18, {[@main]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x3, "fc43c7"}, 0x0}) 15:16:51 executing program 1: rt_sigaction(0x40, &(0x7f00000000c0)={&(0x7f0000000040)="430ff2d5656565f2410f7074910e00f2440f518700000100c4417962a7210000003680d70898c4a2e1dd5d00660f174384c4e2052b96ffefffffddc3", 0x0, 0x0}, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8, &(0x7f00000001c0)) [ 423.993886][ T3702] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 424.201963][ T3711] usb 1-1: USB disconnect, device number 56 [ 424.503823][ T14] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 424.903262][ T14] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 424.916164][ T14] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.40 [ 424.925282][ T14] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.934749][ T14] usb 6-1: config 0 descriptor?? [ 424.985735][ T14] usbhid 6-1:0.0: couldn't find an input interrupt endpoint 15:16:53 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000", @ANYBLOB="7bf3"], 0x0) syz_usb_ep_write(r0, 0x0, 0x93, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600000000") syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) 15:16:53 executing program 2: r0 = memfd_create(&(0x7f00000004c0)='wpan1\x00', 0x0) syz_clone3(&(0x7f00000001c0)={0x60000000, &(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080), {0x1d}, &(0x7f00000000c0)=""/67, 0x43, &(0x7f0000000140)=""/11, &(0x7f0000000180)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x4}, 0x58) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x3ae1c55d}}, './file0\x00'}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x6}) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x200000004]}, 0x8, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r3, 0x4008941a, &(0x7f00000000c0)) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r1, 0x7, r3, &(0x7f0000000240)={0xffffffffffffffff, r0, 0x9}) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x200000004]}, 0x8, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r4, 0x4008941a, &(0x7f00000000c0)) fsetxattr$security_evm(r0, &(0x7f0000000500), &(0x7f0000000580)=ANY=[@ANYBLOB="fe0fd7cecee1af9af563db4d508bf75f2874f3e10c6929c60e040b2885a404bab5fd38e8685341a6adfdc59079de24d02dba2bb56955b8ec4a362ab7a5f861fe21f5fc1ed33238951ae95314a3b24d626b8a9adb2540991ac6ca7a36935ac8fccf5e8b01975c435818d36bddb7146cb2d9ec83bbb6ea6f1ad44af131f96bd64d79c7b91191cf1e26473abf39046893df6a063fee9ddffa54ae4dc04197b1f8fab278def57878ffdd430ed25bdf56d06f3a5b7089fb96556ea4a338307d3ac73f24532093c97c7598d03dedcf1382ef37dcd5e6c9569f43336f04c15461d33be15d6dda87da7623701e9b8466a52343f59b511e80a71191d6b435f4a1512075c28a43c010fb7cc82f8502a56a19efc090a163ab4fe4767bd4bf945b3d1734639735a36529b24e9f6ec21921c6052ca2a0af8b7cd6dd6c2fb9d91ed1653735ac3cd34cf013bfc5589c37f60a1bcbf035acaf1f46fb319afa293a70910ddc08266f239bed6ae0acb3f4073fc29ffb5139de8967b503ae23cc57d3d65f44df66e8cafcff1709c02418c4aa461c9e714ef1d3560bd9b5205814c6914b4c006c66ebc09a771023d2902a3b3046719d3fd0a2dfefdd70840d0be81c54aff7075aff5ea3f674d608b46980a65ee5fe7f55db287617652b204d017463f9d727a82fca3c0768784a521e098f3eac697f9c7b0a03b8770880f780ada94801165606baad876e8835784773c83d07bc0dab5e51d7aade743b43fbecd2c646ff73bd5cc11ebadbd31134b8ca736b35b451b9e94f4fb84fe11eb07af31ada1dc1c37a4ddb12b1420d875dcf9c276a19a6a5102ecc83fd3a16a523a58edb35a49a571be1134ff5c79fa720dee5252ac3"], 0x1, 0x0) 15:16:53 executing program 4: r0 = socket(0x2a, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x4020940d, 0x0) 15:16:53 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x77f, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(0x0, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r3, 0x450e, 0x0, 0x0, 0x0, 0x0) 15:16:53 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x20) 15:16:53 executing program 1: r0 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000080)='big_key\x00', 0x0, &(0x7f0000000400)="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", 0x4d1, r0) 15:16:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x72dfdcd9}, 0x0) 15:16:53 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}) 15:16:53 executing program 4: request_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0xfffffffffffffffd) 15:16:53 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x0, 0x0, 0x0, 0x280}, 0x48) [ 425.440966][ T14] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 425.863596][ T14] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 425.877107][ T14] usb 1-1: config 1 has an invalid descriptor of length 123, skipping remainder of the config [ 425.903142][ T14] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 425.912148][ T14] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 426.053932][ T14] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 426.063688][ T14] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 426.071709][ T14] usb 1-1: Product: syz [ 426.076135][ T14] usb 1-1: Manufacturer: syz [ 426.154206][ T14] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 426.368356][ T22] usb 1-1: USB disconnect, device number 57 15:16:54 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x2e22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x22, 0x18, {[@main]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x3, "fc43c7"}, 0x0}) 15:16:54 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @private1, 0x721}}) [ 427.044353][ T22] usb 6-1: USB disconnect, device number 28 15:16:55 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000", @ANYBLOB="7bf3"], 0x0) syz_usb_ep_write(r0, 0x0, 0x93, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600000000") syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) 15:16:55 executing program 2: socketpair(0x9, 0x0, 0x0, &(0x7f00000001c0)) 15:16:55 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x5411, &(0x7f0000000300)={'vxcan1\x00'}) 15:16:55 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x77f, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(0x0, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r3, 0x450e, 0x0, 0x0, 0x0, 0x0) 15:16:55 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, 0x20) 15:16:55 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000a00000008000300", @ANYRES32=r3], 0x1c}}, 0x0) 15:16:55 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000280)='id_resolver\x00', 0x0, &(0x7f0000000300)="87", 0x1, r0) 15:16:55 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000140)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x80) 15:16:55 executing program 2: request_key(0xfffffffffffffffc, 0x0, 0x0, 0x0) 15:16:55 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x5411, 0x0) [ 427.463070][ T22] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 427.663105][ T3698] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 427.843264][ T22] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 427.860255][ T22] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.40 [ 427.869907][ T22] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.889447][ T22] usb 6-1: config 0 descriptor?? [ 427.937158][ T22] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 428.053287][ T3698] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 428.062073][ T3698] usb 1-1: config 1 has an invalid descriptor of length 123, skipping remainder of the config [ 428.082028][ T3698] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 428.094751][ T3698] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 428.243216][ T3698] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 428.252943][ T3698] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 428.261007][ T3698] usb 1-1: Product: syz [ 428.265261][ T3698] usb 1-1: Manufacturer: syz [ 428.324364][ T3698] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 428.530741][ T22] usb 1-1: USB disconnect, device number 58 15:16:57 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x2e22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x22, 0x18, {[@main]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x3, "fc43c7"}, 0x0}) 15:16:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0xfffffdef}}, 0x0) 15:16:57 executing program 4: socketpair(0x1e, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, 0x0) 15:16:57 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) 15:16:57 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x77f, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(0x0, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r3, 0x450e, 0x0, 0x0, 0x0, 0x0) 15:16:57 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f0100000400", @ANYBLOB="7bf3"], 0x0) syz_usb_ep_write(r0, 0x0, 0x93, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600000000") syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) [ 430.086165][ T3702] usb 6-1: USB disconnect, device number 29 15:16:58 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000300), r0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)={0x14, r2, 0x1}, 0x14}}, 0x0) 15:16:58 executing program 4: socketpair(0x15, 0x5, 0x7fff, &(0x7f0000000140)) 15:16:58 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) 15:16:58 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8916, &(0x7f0000000300)={'vxcan1\x00'}) 15:16:58 executing program 1: socketpair(0x25, 0x5, 0x9, &(0x7f0000000280)) 15:16:58 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) [ 430.403147][ T3697] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 430.533234][ T3702] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 430.773161][ T3697] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 430.781841][ T3697] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 430.799089][ T3697] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 430.810141][ T3697] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 430.903378][ T3702] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 430.916734][ T3702] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.40 [ 430.926197][ T3702] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.937127][ T3702] usb 6-1: config 0 descriptor?? [ 430.953267][ T3697] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 430.962321][ T3697] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 430.970885][ T3697] usb 1-1: Product: syz [ 430.976910][ T3702] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 430.984364][ T3697] usb 1-1: Manufacturer: syz [ 431.023954][ T3697] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 431.227604][ T3698] usb 1-1: USB disconnect, device number 59 15:17:01 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x2e22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x22, 0x18, {[@main]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x3, "fc43c7"}, 0x0}) 15:17:01 executing program 1: socketpair(0x10, 0x0, 0x0, &(0x7f0000000280)) 15:17:01 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) 15:17:01 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x4}, 0x48) 15:17:01 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x77f, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r4, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r3, 0x450e, 0x0, 0x0, 0x0, 0x0) 15:17:01 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f0100000400", @ANYBLOB="7bf3"], 0x0) syz_usb_ep_write(r0, 0x0, 0x93, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600000000") syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) [ 433.175800][ T3697] usb 6-1: USB disconnect, device number 30 15:17:01 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, 0x0, 0x0) 15:17:01 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) 15:17:01 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {0x0}}, 0x18) 15:17:01 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @remote}}) 15:17:01 executing program 2: request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='syz', 0x0) 15:17:01 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000000)={'bridge_slave_1\x00'}) [ 433.493131][ T14] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 433.705388][ T3697] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 433.863203][ T14] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 433.876330][ T14] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 433.890649][ T14] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 433.902409][ T14] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 434.033410][ T14] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 434.042504][ T14] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 434.050614][ T14] usb 1-1: Product: syz [ 434.054825][ T14] usb 1-1: Manufacturer: syz [ 434.094130][ T14] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 434.133291][ T3697] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.145403][ T3697] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 434.159161][ T3697] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.40 [ 434.168588][ T3697] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.183912][ T3697] usb 6-1: config 0 descriptor?? [ 434.297044][ T14] usb 1-1: USB disconnect, device number 60 [ 434.665164][ T3697] koneplus 0003:1E7D:2E22.0020: unknown main item tag 0x0 [ 434.673883][ T3697] koneplus 0003:1E7D:2E22.0020: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.5-1/input0 15:17:04 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x2e22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x22, 0x18, {[@main]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x3, "fc43c7"}, 0x0}) 15:17:04 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x5411, 0x0) 15:17:04 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000ec0), 0x0, 0x0) read$watch_queue(r0, 0x0, 0x0) 15:17:04 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000ec0), 0xd32f, 0x0) read$watch_queue(r0, 0x0, 0x0) 15:17:04 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x77f, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r4, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r3, 0x450e, 0x0, 0x0, 0x0, 0x0) 15:17:04 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f0100000400", @ANYBLOB="7bf3"], 0x0) syz_usb_ep_write(r0, 0x0, 0x93, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600000000") syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) 15:17:04 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) [ 436.247634][ T3689] usb 6-1: USB disconnect, device number 31 15:17:04 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x18, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}}, 0x0) 15:17:04 executing program 2: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x44, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000001}, @NL802154_ATTR_SEC_DEVKEY={0x24, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}]}, 0x44}}, 0x0) 15:17:04 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) 15:17:04 executing program 2: r0 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000400)='\"', 0x1, r0) 15:17:04 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r1) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r2, 0x877cd8bc029e467d, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 436.545658][ T6250] block nbd1: not configured, cannot reconfigure [ 436.583053][ T14] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 436.763095][ T3689] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 436.953286][ T14] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 436.965394][ T14] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 436.983137][ T14] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 436.992335][ T14] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 437.143237][ T3689] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.154448][ T14] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 437.164230][ T14] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 437.172243][ T14] usb 1-1: Product: syz [ 437.177310][ T3689] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 437.187387][ T3689] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.40 [ 437.196621][ T14] usb 1-1: Manufacturer: syz [ 437.201640][ T3689] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.214926][ T3689] usb 6-1: config 0 descriptor?? [ 437.244573][ T14] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 437.448737][ T22] usb 1-1: USB disconnect, device number 61 [ 437.704231][ T3689] koneplus 0003:1E7D:2E22.0021: unknown main item tag 0x0 [ 437.712336][ T3689] koneplus 0003:1E7D:2E22.0021: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.5-1/input0 15:17:07 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x2e22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x22, 0x18, {[@main]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x3, "fc43c7"}, 0x0}) 15:17:07 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) 15:17:07 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000380)={0x9, 0x108, 0xfa00, {r1, 0x0, "000100", "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"}}, 0x110) 15:17:07 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x77f, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r4, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r3, 0x450e, 0x0, 0x0, 0x0, 0x0) 15:17:07 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000200)={0x1, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x48) 15:17:07 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00", @ANYBLOB="7bf3"], 0x0) syz_usb_ep_write(r0, 0x0, 0x93, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600000000") syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) [ 439.385392][ T22] usb 6-1: USB disconnect, device number 32 15:17:07 executing program 1: syz_open_dev$midi(&(0x7f00000001c0), 0x20, 0x3) 15:17:07 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) 15:17:07 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x15}, 0x1}, 0x20) 15:17:07 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xa, 0x0, 0x0, 0x0, 0x18eb}, 0x48) 15:17:07 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)) 15:17:07 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) bind$bt_sco(r1, 0x0, 0x0) [ 439.674908][ T1239] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.681222][ T1239] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.703113][ T3689] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 439.883245][ T22] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 440.083313][ T3689] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 440.091931][ T3689] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 440.107818][ T3689] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 440.117574][ T3689] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 440.253376][ T3689] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 440.262513][ T3689] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 440.271159][ T3689] usb 1-1: Product: syz [ 440.275522][ T3689] usb 1-1: Manufacturer: syz [ 440.284301][ T22] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.295231][ T22] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.305377][ T22] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.40 [ 440.314018][ T3689] cdc_wdm 1-1:1.0: skipping garbage [ 440.315153][ T22] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.319615][ T3689] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 440.347714][ T22] usb 6-1: config 0 descriptor?? [ 440.532707][ T143] usb 1-1: USB disconnect, device number 62 [ 440.834622][ T22] koneplus 0003:1E7D:2E22.0022: unknown main item tag 0x0 [ 440.848629][ T22] koneplus 0003:1E7D:2E22.0022: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.5-1/input0 15:17:10 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x2e22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x22, 0x18, {[@main]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x3, "fc43c7"}, 0x0}) 15:17:10 executing program 2: prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000200)="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", 0x171) 15:17:10 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$tipc(r0, 0x0, 0x3) 15:17:10 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={0x0, 0xdc}}, 0x0) 15:17:10 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x77f, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r4, r5, 0x0, 0x0) io_uring_enter(r3, 0x450e, 0x0, 0x0, 0x0, 0x0) 15:17:10 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00", @ANYBLOB="7bf3"], 0x0) syz_usb_ep_write(r0, 0x0, 0x93, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600000000") syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) [ 442.463395][ T3689] usb 6-1: USB disconnect, device number 33 15:17:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[], 0x24}, 0x300}, 0x0) 15:17:10 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}, 0x0) 15:17:10 executing program 2: prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000000)='=', 0x1) 15:17:10 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc2}, &(0x7f0000000180)={0x0, "247972f06dbb09c496735f2bcb4d8a9d4515312708d692507fa84c3fba54f98bc3f0b8ba455557addddb512b4c23381d347ce85e2b9d6859b76b8fa6ffde2e10"}, 0x48, 0xfffffffffffffffd) request_key(&(0x7f00000000c0)='cifs.spnego\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, r0) 15:17:10 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4102, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x83, 0x0, 0x0) 15:17:10 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x89a1, &(0x7f0000000300)={'vxcan1\x00'}) [ 442.793265][ T22] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 442.924571][ T3689] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 443.173112][ T22] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 443.187503][ T22] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 443.213300][ T22] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 443.222527][ T22] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 443.303201][ T3689] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.321323][ T3689] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.331691][ T3689] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.40 [ 443.341223][ T3689] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.357802][ T3689] usb 6-1: config 0 descriptor?? [ 443.373372][ T22] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 443.382427][ T22] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 443.391004][ T22] usb 1-1: Product: syz [ 443.395438][ T22] usb 1-1: Manufacturer: syz [ 443.402391][ T3689] usbhid 6-1:0.0: can't add hid device: -22 [ 443.411084][ T3689] usbhid: probe of 6-1:0.0 failed with error -22 [ 443.434183][ T22] cdc_wdm 1-1:1.0: skipping garbage [ 443.439415][ T22] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 443.640539][ T3689] usb 1-1: USB disconnect, device number 63 15:17:13 executing program 1: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0}}, 0x18) 15:17:13 executing program 4: openat$sw_sync_info(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) 15:17:13 executing program 2: openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/devices/virtual', 0x470202, 0x0) 15:17:13 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x77f, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r4, r5, 0x0, 0x0) io_uring_enter(r3, 0x450e, 0x0, 0x0, 0x0, 0x0) 15:17:13 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00", @ANYBLOB="7bf3"], 0x0) syz_usb_ep_write(r0, 0x0, 0x93, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600000000") syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) 15:17:13 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x2e22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x22, 0x18, {[@main]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x3, "fc43c7"}, 0x0}) [ 445.516919][ T3698] usb 6-1: USB disconnect, device number 34 15:17:13 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x402c5828, &(0x7f0000000380)={0x0, 0x0, 0x0}) 15:17:13 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80284504, 0x0) 15:17:13 executing program 2: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)={&(0x7f0000000280)={[0x8]}, 0x8}) 15:17:13 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x5452, 0x0) 15:17:13 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)) 15:17:13 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x40044581, 0x0) 15:17:13 executing program 2: keyctl$join(0x1, &(0x7f0000000140)={'syz', 0x1}) 15:17:13 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0xc0189436, 0x0) 15:17:13 executing program 1: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) [ 445.853121][ T26] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 446.063529][ T3698] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 446.213108][ T26] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 446.221862][ T26] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 446.232071][ T26] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 446.258910][ T26] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 15:17:14 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x77f, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r4, r5, 0x0, 0x0) io_uring_enter(r3, 0x450e, 0x0, 0x0, 0x0, 0x0) [ 446.393218][ T26] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 446.402302][ T26] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 446.410473][ T26] usb 1-1: Product: syz [ 446.415306][ T26] usb 1-1: Manufacturer: syz [ 446.464162][ T26] cdc_wdm 1-1:1.0: skipping garbage [ 446.469412][ T26] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 446.470308][ T3698] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.511897][ T3698] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 446.537732][ T3698] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.40 [ 446.560947][ T3698] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.588166][ T3698] usb 6-1: config 0 descriptor?? [ 446.643489][ T3698] usbhid 6-1:0.0: can't add hid device: -22 [ 446.650094][ T3698] usbhid: probe of 6-1:0.0 failed with error -22 [ 446.688081][ T26] usb 1-1: USB disconnect, device number 64 15:17:15 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a000000048002", @ANYBLOB="7bf3"], 0x0) syz_usb_ep_write(r0, 0x0, 0x93, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600000000") syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) [ 447.893099][ T3689] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 448.283386][ T3689] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 448.292052][ T3689] usb 1-1: config 1 has an invalid descriptor of length 243, skipping remainder of the config [ 448.303684][ T3689] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 448.312670][ T3689] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 448.443240][ T3689] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 448.452326][ T3689] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 448.460687][ T3689] usb 1-1: Product: syz [ 448.465160][ T3689] usb 1-1: Manufacturer: syz [ 448.506318][ T3689] cdc_wdm 1-1:1.0: skipping garbage [ 448.511605][ T3689] cdc_wdm 1-1:1.0: skipping garbage [ 448.517145][ T3689] cdc_wdm: probe of 1-1:1.0 failed with error -22 15:17:16 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x2e22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x22, 0x18, {[@main]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x3, "fc43c7"}, 0x0}) 15:17:16 executing program 4: openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/module/vmwgfx', 0x8502, 0x0) 15:17:16 executing program 2: openat$nvme_fabrics(0xffffff9c, &(0x7f00000000c0), 0x204883, 0x0) 15:17:16 executing program 1: r0 = openat$drirender128(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f00000000c0)) 15:17:16 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x77f, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r3, 0x450e, 0x0, 0x0, 0x0, 0x0) [ 448.632532][ T26] usb 6-1: USB disconnect, device number 35 15:17:16 executing program 4: openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) 15:17:16 executing program 1: syz_open_dev$evdev(&(0x7f0000000000), 0x8005, 0x0) 15:17:16 executing program 2: openat$sw_sync_info(0xffffff9c, &(0x7f0000000000), 0x824081, 0x0) [ 448.714265][ T22] usb 1-1: USB disconnect, device number 65 15:17:16 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r0, 0x0, 0x10000a021) 15:17:16 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmmsg(0xffffffffffffffff, &(0x7f0000000d40), 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x44, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x845}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r0, 0x0, 0x10000a021) 15:17:16 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmmsg(0xffffffffffffffff, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000280)="f996699fb7dc2bc038bea1e37162a0a996f845c915a2b805b6954360f474da8a41485cebfda16914f716084d6354a23ed76c980e3988a85f1066", 0x3a}, {&(0x7f0000000340)="7eee", 0x2}], 0x2}}], 0x1, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r0, 0x0, 0x10000a021) [ 449.123075][ T26] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 449.503251][ T26] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 449.539304][ T26] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 449.605884][ T26] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.40 15:17:17 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a000000048002", @ANYBLOB="7bf3"], 0x0) syz_usb_ep_write(r0, 0x0, 0x93, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600000000") syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) [ 449.648548][ T26] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.717213][ T26] usb 6-1: config 0 descriptor?? [ 449.763588][ T26] usbhid 6-1:0.0: can't add hid device: -22 [ 449.769605][ T26] usbhid: probe of 6-1:0.0 failed with error -22 [ 449.983173][ T3689] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 450.393300][ T3689] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 450.401957][ T3689] usb 1-1: config 1 has an invalid descriptor of length 243, skipping remainder of the config [ 450.412424][ T3689] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 450.421490][ T3689] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 450.573177][ T3689] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 450.582346][ T3689] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 450.590486][ T3689] usb 1-1: Product: syz [ 450.594801][ T3689] usb 1-1: Manufacturer: syz [ 450.633996][ T3689] cdc_wdm 1-1:1.0: skipping garbage [ 450.639216][ T3689] cdc_wdm 1-1:1.0: skipping garbage [ 450.648858][ T3689] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 450.849133][ T3689] usb 1-1: USB disconnect, device number 66 15:17:19 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x2e22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x22, 0x18, {[@main]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x3, "fc43c7"}, 0x0}) 15:17:19 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmmsg(0xffffffffffffffff, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000280)="f99669", 0x3}], 0x1}}], 0x1, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000300)={'#! ', './file0', [{0x20, 'cgroup.controllers\x00'}, {0x20, 'wlan1\x00'}, {0x20, '-\''}, {0x20, '&^'}, {0x20, '-'}, {0x20, 'cgroup.controllers\x00'}, {0x20, 'wlan1\x00'}], 0xa, "fd172c255a4ddc179a0bbf2f74a4511cf35dfaa9c3da7fe685a867532cf38c04907ebe288248e87358d6e9a8be221eacf304ad3414972227a05dd49797e0fcd0f0a90c79046e16e93a121b8204b39f5ac66a85a78ef3c8989dabd39000824a9efd8c4c79cba59c2ec110290e440f4aa846b06d20473638e8ba32537f098fe7feea5aa0"}, 0xcc) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r0, 0x0, 0x10000a021) 15:17:19 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x77f, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r3, 0x450e, 0x0, 0x0, 0x0, 0x0) 15:17:19 executing program 2: syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000340)={[{@force}]}) 15:17:19 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmmsg(0xffffffffffffffff, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000280)="f996699fb7dc2bc038bea1e37162a0a996f845c915a2b805b6954360f474da8a41485cebfda16914f716084d6354a23ed76c980e3988a85f1066", 0x3a}, {&(0x7f0000000340)="7eee", 0x2}], 0x2}}], 0x1, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r0, 0x0, 0x10000a021) 15:17:19 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a000000048002", @ANYBLOB="7bf3"], 0x0) syz_usb_ep_write(r0, 0x0, 0x93, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600000000") syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) [ 451.710191][ T22] usb 6-1: USB disconnect, device number 36 [ 451.795178][ T6379] hfsplus: unable to find HFS+ superblock 15:17:19 executing program 2: syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000340)={[{@force}]}) [ 452.037110][ T6388] hfsplus: unable to find HFS+ superblock [ 452.053070][ T26] usb 1-1: new high-speed USB device number 67 using dummy_hcd 15:17:19 executing program 2: syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000340)={[{@force}]}) [ 452.131196][ T6390] hfsplus: unable to find HFS+ superblock 15:17:20 executing program 2: syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000340)={[{@force}]}) [ 452.213213][ T22] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 452.329427][ T6392] hfsplus: unable to find HFS+ superblock 15:17:20 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x3c, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r0, 0x0, 0x10000a021) [ 452.433552][ T26] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 452.462429][ T26] usb 1-1: config 1 has an invalid descriptor of length 243, skipping remainder of the config [ 452.523921][ T26] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 452.592099][ T26] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 452.633847][ T22] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.658518][ T22] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 15:17:20 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) connect$vsock_stream(r0, 0x0, 0x0) [ 452.679948][ T22] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.40 [ 452.698450][ T22] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.727509][ T22] usb 6-1: config 0 descriptor?? 15:17:20 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmmsg(0xffffffffffffffff, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000280)="f996699fb7dc2bc038bea1e37162a0a996f845c915a2b805b6954360f474da8a41485cebfda16914f716084d6354a23ed76c980e3988a85f1066", 0x3a}, {&(0x7f0000000340)="7eee", 0x2}], 0x2}}], 0x1, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r0, 0x0, 0x10000a021) [ 452.822066][ T26] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 452.842797][ T26] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 452.879505][ T26] usb 1-1: Product: syz [ 452.895377][ T26] usb 1-1: Manufacturer: syz [ 452.965790][ T26] cdc_wdm 1-1:1.0: skipping garbage [ 452.973334][ T26] cdc_wdm 1-1:1.0: skipping garbage [ 452.993169][ T26] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 453.169823][ T26] usb 1-1: USB disconnect, device number 67 [ 453.275423][ T22] usbhid 6-1:0.0: can't add hid device: -71 [ 453.281575][ T22] usbhid: probe of 6-1:0.0 failed with error -71 [ 453.294729][ T22] usb 6-1: USB disconnect, device number 37 15:17:21 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x2e22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x22, 0x18, {[@main]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x3, "fc43c7"}, 0x0}) 15:17:21 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x77f, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r3, 0x450e, 0x0, 0x0, 0x0, 0x0) 15:17:21 executing program 4: r0 = fsopen(&(0x7f0000000580)='qnx6\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000840)='\x00', &(0x7f0000000880)='trusted.overlay.nlink\x00', 0x0) 15:17:21 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x3c, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r0, 0x0, 0x10000a021) 15:17:21 executing program 4: socketpair(0x22, 0x0, 0x9, &(0x7f00000003c0)) 15:17:22 executing program 4: syz_clone(0x2005000, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 15:17:22 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a0000000480020009", @ANYBLOB="7bf3"], 0x0) syz_usb_ep_write(r0, 0x0, 0x93, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600000000") syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) [ 454.093300][ T3698] usb 6-1: new high-speed USB device number 38 using dummy_hcd 15:17:22 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmmsg(0xffffffffffffffff, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000280)="f996699fb7dc2bc038bea1e37162a0a996f845c915a2b805b6954360f474da8a41485cebfda16914f716084d6354a23ed76c980e3988a85f1066", 0x3a}, {&(0x7f0000000340)="7eee", 0x2}], 0x2}}], 0x1, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r0, 0x0, 0x10000a021) 15:17:22 executing program 4: r0 = getpgid(0x0) sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) [ 454.463260][ T3698] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 454.474440][ T3689] usb 1-1: new high-speed USB device number 68 using dummy_hcd 15:17:22 executing program 4: msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000000)=""/72) [ 454.508786][ T3698] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 454.620849][ T3698] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.40 15:17:22 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) syz_io_uring_setup(0x4237, &(0x7f0000000440)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000800000/0x800000)=nil, 0x0, 0x0) [ 454.754744][ T3698] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 15:17:22 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x77f, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450e, 0x0, 0x0, 0x0, 0x0) [ 454.826943][ T3698] usb 6-1: config 0 descriptor?? [ 454.843296][ T3689] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 454.853423][ T3689] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 454.889779][ T3689] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 454.967286][ T3689] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 455.123342][ T3689] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 455.152162][ T3689] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 455.191051][ T3689] usb 1-1: Product: syz [ 455.217120][ T3689] usb 1-1: Manufacturer: syz [ 455.294051][ T3689] cdc_wdm 1-1:1.0: skipping garbage [ 455.301361][ T3689] cdc_wdm 1-1:1.0: skipping garbage [ 455.337062][ T3689] cdc_wdm 1-1:1.0: skipping garbage [ 455.376846][ T3689] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 455.393132][ T3698] usbhid 6-1:0.0: can't add hid device: -71 [ 455.399320][ T3698] usbhid: probe of 6-1:0.0 failed with error -71 [ 455.472432][ T3698] usb 6-1: USB disconnect, device number 38 [ 455.498776][ T26] usb 1-1: USB disconnect, device number 68 15:17:23 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x2e22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x22, 0x18, {[@main]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x3, "fc43c7"}, 0x0}) 15:17:23 executing program 4: socketpair(0x22, 0x0, 0x6, &(0x7f0000000100)) 15:17:23 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x3c, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r0, 0x0, 0x10000a021) 15:17:23 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x77f, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450e, 0x0, 0x0, 0x0, 0x0) 15:17:23 executing program 4: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) 15:17:23 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=@hci, 0x80) [ 456.273110][ T3698] usb 6-1: new high-speed USB device number 39 using dummy_hcd 15:17:24 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a0000000480020009", @ANYBLOB="7bf3"], 0x0) syz_usb_ep_write(r0, 0x0, 0x93, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600000000") syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) 15:17:24 executing program 1: openat$damon_kdamond_pid(0xffffffffffffff9c, 0x0, 0x452780, 0x0) 15:17:24 executing program 4: io_uring_setup(0x4dc4, &(0x7f0000000240)={0x0, 0x27c1, 0x8}) 15:17:24 executing program 4: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x84800) read$eventfd(r0, &(0x7f0000000040), 0x8) 15:17:24 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$proc_mixer(r0, &(0x7f0000000040)=[{'OGAIN', @void}], 0x6) 15:17:24 executing program 4: socketpair(0x2, 0x0, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x11400101}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8005}, 0x20000040) msgctl$IPC_RMID(0x0, 0x0) [ 456.653249][ T3698] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.722619][ T3698] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.787444][ T3698] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.40 [ 456.828975][ T3698] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.867334][ T3698] usb 6-1: config 0 descriptor?? [ 457.043228][ T3711] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 457.413183][ T3711] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 457.421831][ T3711] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 457.432501][ T3698] usbhid 6-1:0.0: can't add hid device: -71 [ 457.439044][ T3698] usbhid: probe of 6-1:0.0 failed with error -71 [ 457.445882][ T3711] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 457.457222][ T3698] usb 6-1: USB disconnect, device number 39 [ 457.463537][ T3711] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 457.603202][ T3711] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 457.612296][ T3711] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 457.620607][ T3711] usb 1-1: Product: syz [ 457.624988][ T3711] usb 1-1: Manufacturer: syz [ 457.664119][ T3711] cdc_wdm 1-1:1.0: skipping garbage [ 457.669473][ T3711] cdc_wdm 1-1:1.0: skipping garbage [ 457.675064][ T3711] cdc_wdm 1-1:1.0: skipping garbage [ 457.680348][ T3711] cdc_wdm: probe of 1-1:1.0 failed with error -22 15:17:25 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x2e22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x22, 0x18, {[@main]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x3, "fc43c7"}, 0x0}) 15:17:25 executing program 1: getitimer(0x1, &(0x7f0000000100)) 15:17:25 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x77f, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450e, 0x0, 0x0, 0x0, 0x0) 15:17:25 executing program 4: syz_open_dev$dri(&(0x7f00000001c0), 0x8, 0x0) fsopen(&(0x7f0000000580)='qnx6\x00', 0x0) 15:17:25 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x3c, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r0, 0x0, 0x10000a021) 15:17:25 executing program 1: setrlimit(0x7, &(0x7f0000000000)) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) [ 457.900845][ T26] usb 1-1: USB disconnect, device number 69 [ 458.233637][ T3711] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 458.603457][ T3711] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.628549][ T3711] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 458.662685][ T3711] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.40 [ 458.689031][ T3711] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.726271][ T3711] usb 6-1: config 0 descriptor?? 15:17:26 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a0000000480020009", @ANYBLOB="7bf3"], 0x0) syz_usb_ep_write(r0, 0x0, 0x93, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600000000") syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) 15:17:26 executing program 4: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$proc_mixer(r0, &(0x7f0000000040)=[{'OGAIN', @void}], 0x6) 15:17:26 executing program 1: syz_open_dev$sg(&(0x7f0000000680), 0x4bc4, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x14}, 0x14}}, 0x0) syz_io_uring_complete(0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000c40), r0) 15:17:26 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x77f, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r3, 0x0, 0x0, 0x0, 0x0, 0x0) 15:17:26 executing program 2: symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00') 15:17:26 executing program 1: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000e40), 0x0, 0x0) mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9, 0x10, r0, 0x0) [ 459.163171][ T3698] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 459.293240][ T3711] usbhid 6-1:0.0: can't add hid device: -71 [ 459.299705][ T3711] usbhid: probe of 6-1:0.0 failed with error -71 [ 459.321693][ T3711] usb 6-1: USB disconnect, device number 40 [ 459.533393][ T3698] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 459.547952][ T3698] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 459.559795][ T3698] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 459.569352][ T3698] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 15:17:27 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x2e22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x22, 0x18, {[@main]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x3, "fc43c7"}, 0x0}) 15:17:27 executing program 4: syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x4a00) 15:17:27 executing program 2: clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f0000000100)={0x0, r0+60000000}, 0x0) 15:17:27 executing program 1: msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000040)={{0x3, 0xee01, 0xee01, 0xffffffffffffffff, 0xee01}}) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000540)=""/120) 15:17:27 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x77f, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r3, 0x0, 0x0, 0x0, 0x0, 0x0) [ 459.703285][ T3698] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 459.712372][ T3698] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 459.720741][ T3698] usb 1-1: Product: syz [ 459.732020][ T3698] usb 1-1: Manufacturer: syz 15:17:27 executing program 1: openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) [ 459.813950][ T3698] cdc_wdm 1-1:1.0: skipping garbage [ 459.833441][ T3698] cdc_wdm 1-1:1.0: skipping garbage [ 459.877653][ T3698] cdc_wdm 1-1:1.0: skipping garbage [ 459.941592][ T3698] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 460.019149][ T3698] usb 1-1: USB disconnect, device number 70 [ 460.134409][ T26] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 460.543323][ T26] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 460.554408][ T26] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 460.564697][ T26] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.40 [ 460.574088][ T26] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.591819][ T26] usb 6-1: config 0 descriptor?? 15:17:28 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a000000048002000905", @ANYBLOB="7bf3"], 0x0) syz_usb_ep_write(r0, 0x0, 0x93, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600000000") syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) 15:17:28 executing program 4: io_uring_setup(0xc, &(0x7f0000000000)) 15:17:28 executing program 1: bind$unix(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0), 0x109200, 0x0) 15:17:28 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x77f, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r3, 0x0, 0x0, 0x0, 0x0, 0x0) 15:17:28 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000100)={0x0, 0x0}) 15:17:28 executing program 1: mount$fuse(0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000380)) [ 461.113135][ T26] usbhid 6-1:0.0: can't add hid device: -71 [ 461.127501][ T26] usbhid: probe of 6-1:0.0 failed with error -71 [ 461.200266][ T26] usb 6-1: USB disconnect, device number 41 [ 461.283303][ T3698] usb 1-1: new high-speed USB device number 71 using dummy_hcd 15:17:29 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x2e22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x22, 0x18, {[@main]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x3, "fc43c7"}, 0x0}) 15:17:29 executing program 4: utimensat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={{}, {0x77359400}}, 0x0) 15:17:29 executing program 2: pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f00000002c0)={0x9}, 0x0, 0x0) 15:17:29 executing program 1: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x1100) 15:17:29 executing program 2: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000e40), 0x0, 0x0) mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x300000f, 0x12, r0, 0x0) 15:17:29 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)) [ 461.644068][ T3698] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 461.682095][ T3698] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 461.756570][ T3698] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 461.821415][ T3698] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x7B, skipping [ 461.983092][ T26] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 461.993413][ T3698] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 462.002658][ T3698] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 462.011201][ T3698] usb 1-1: Product: syz [ 462.015746][ T3698] usb 1-1: Manufacturer: syz [ 462.063903][ T3698] cdc_wdm 1-1:1.0: skipping garbage [ 462.069154][ T3698] cdc_wdm 1-1:1.0: skipping garbage [ 462.075146][ T3698] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 462.267004][ T22] usb 1-1: USB disconnect, device number 71 [ 462.343172][ T26] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.355934][ T26] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 462.366156][ T26] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.40 [ 462.375728][ T26] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.388805][ T26] usb 6-1: config 0 descriptor?? [ 462.933095][ T26] usbhid 6-1:0.0: can't add hid device: -71 [ 462.939186][ T26] usbhid: probe of 6-1:0.0 failed with error -71 [ 462.957435][ T26] usb 6-1: USB disconnect, device number 42 15:17:31 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a000000048002000905", @ANYBLOB="7bf3"], 0x0) syz_usb_ep_write(r0, 0x0, 0x93, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600000000") syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) 15:17:31 executing program 4: r0 = eventfd2(0x80000001, 0x0) read$eventfd(r0, &(0x7f0000000040), 0x8) 15:17:31 executing program 1: syz_open_dev$sg(&(0x7f0000000680), 0x0, 0x0) 15:17:31 executing program 2: openat$capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) 15:17:31 executing program 3: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) read$proc_mixer(r0, &(0x7f0000000040)=""/198, 0xc6) 15:17:31 executing program 4: openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000005c0), 0x7ffffffff000) 15:17:31 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x2e22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x3, "fc43c7"}, 0x0}) 15:17:31 executing program 1: unlinkat(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) 15:17:31 executing program 2: openat$capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) 15:17:31 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000580), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000640)={0x0, 0x0}) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000000900)={0x0, 0x0}) 15:17:31 executing program 1: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x989680}) 15:17:31 executing program 2: openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) [ 463.503256][ T26] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 463.693663][ T143] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 463.863662][ T26] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 463.872306][ T26] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 463.888835][ T26] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 463.898107][ T26] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x7B, skipping [ 464.023156][ T26] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 464.032433][ T26] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 464.050227][ T26] usb 1-1: Product: syz [ 464.054710][ T143] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 464.065796][ T26] usb 1-1: Manufacturer: syz [ 464.070924][ T143] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 464.083608][ T143] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.40 [ 464.093764][ T143] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.103680][ T143] usb 6-1: config 0 descriptor?? [ 464.124173][ T26] cdc_wdm 1-1:1.0: skipping garbage [ 464.130058][ T26] cdc_wdm 1-1:1.0: skipping garbage [ 464.135414][ T26] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 464.329492][ T3702] usb 1-1: USB disconnect, device number 72 [ 464.663197][ T143] usbhid 6-1:0.0: can't add hid device: -71 [ 464.669271][ T143] usbhid: probe of 6-1:0.0 failed with error -71 [ 464.682440][ T143] usb 6-1: USB disconnect, device number 43 15:17:33 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a000000048002000905", @ANYBLOB="7bf3"], 0x0) syz_usb_ep_write(r0, 0x0, 0x93, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600000000") syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) 15:17:33 executing program 1: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) 15:17:33 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000180)={0x1, {0x0, 0x0, 0x0}}, 0x48) 15:17:33 executing program 2: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000e40), 0x0, 0x0) read$usbmon(r0, &(0x7f0000000000)=""/2, 0x2) 15:17:33 executing program 3: socketpair(0x10, 0x3, 0x7, &(0x7f00000003c0)) 15:17:33 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x2e22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x3, "fc43c7"}, 0x0}) 15:17:33 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/igmp6\x00') pread64(r2, &(0x7f0000000040)=""/216, 0xd8, 0x4c00) 15:17:33 executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={0x0}}, 0x0) 15:17:33 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000340), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000300)={0x80000000, 0x0, 0x0}) 15:17:33 executing program 3: pipe2(&(0x7f0000000f80), 0x0) 15:17:33 executing program 2: syz_open_dev$dri(&(0x7f0000001180), 0x0, 0x24202) 15:17:33 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000c40)={@hci, {0x0}, 0x0}, 0xa0) [ 465.553234][ T143] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 465.613208][ T3702] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 465.923346][ T143] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.935031][ T143] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.945195][ T143] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.40 [ 465.954573][ T143] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.966391][ T143] usb 6-1: config 0 descriptor?? [ 465.983512][ T3702] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 465.992387][ T3702] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 466.002687][ T3702] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 466.013772][ T3702] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x7B, skipping [ 466.143198][ T3702] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 466.152369][ T3702] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 466.160668][ T3702] usb 1-1: Product: syz [ 466.165100][ T3702] usb 1-1: Manufacturer: syz [ 466.203982][ T3702] cdc_wdm 1-1:1.0: skipping garbage [ 466.209232][ T3702] cdc_wdm 1-1:1.0: skipping garbage [ 466.219951][ T3702] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 466.410474][ T3711] usb 1-1: USB disconnect, device number 73 [ 466.533327][ T143] usbhid 6-1:0.0: can't add hid device: -71 [ 466.539522][ T143] usbhid: probe of 6-1:0.0 failed with error -71 [ 466.549106][ T143] usb 6-1: USB disconnect, device number 44 15:17:35 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="7bf3"], 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x93, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600000000") syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) 15:17:35 executing program 3: socketpair(0x2c, 0x3, 0x21, &(0x7f0000000000)) 15:17:35 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000540), 0x4) 15:17:35 executing program 2: syz_open_dev$sg(&(0x7f0000000680), 0x4bc4, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_complete(0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000c40), r0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) socket(0x28, 0x0, 0x2) 15:17:35 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x228342, 0x0) 15:17:35 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x2e22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x3, "fc43c7"}, 0x0}) 15:17:35 executing program 1: syz_clone(0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) 15:17:35 executing program 3: openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x440000, 0x0) 15:17:35 executing program 2: syz_open_dev$I2C(&(0x7f0000000000), 0xfff, 0x0) 15:17:35 executing program 4: socketpair(0xa, 0x5, 0x5, &(0x7f0000000180)) 15:17:35 executing program 2: openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000005c0)={0x0, 0x0, 0x95c812a9b11dc559}, 0x18) 15:17:35 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) [ 467.625246][ T3697] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 467.703093][ T143] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 467.983281][ T3697] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.994464][ T3697] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 468.004287][ T3697] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.40 [ 468.013438][ T3697] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.023485][ T3697] usb 6-1: config 0 descriptor?? [ 468.073218][ T143] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 468.082568][ T143] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 468.092864][ T143] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 468.102016][ T143] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.233295][ T143] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 468.242395][ T143] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 468.250489][ T143] usb 1-1: Product: syz [ 468.254698][ T143] usb 1-1: Manufacturer: syz [ 468.304377][ T143] cdc_wdm 1-1:1.0: skipping garbage [ 468.309903][ T143] cdc_wdm 1-1:1.0: skipping garbage [ 468.318752][ T143] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 468.324780][ T143] cdc_wdm 1-1:1.0: Unknown control protocol [ 468.512405][ T22] usb 1-1: USB disconnect, device number 74 [ 468.583129][ T3697] usbhid 6-1:0.0: can't add hid device: -71 [ 468.589175][ T3697] usbhid: probe of 6-1:0.0 failed with error -71 [ 468.599678][ T3697] usb 6-1: USB disconnect, device number 45 15:17:37 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="7bf3"], 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x93, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600000000") syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) 15:17:37 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0xc0684608, 0x0) 15:17:37 executing program 2: syz_clone(0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) syz_clone(0x28040000, 0x0, 0x0, 0x0, 0x0, 0x0) 15:17:37 executing program 4: r0 = msgget(0x1, 0x6b0) msgctl$IPC_RMID(r0, 0x0) 15:17:37 executing program 3: utimes(0x0, &(0x7f0000000180)={{0x77359400}, {0x0, 0xea60}}) 15:17:37 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x2e22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x3, "fc43c7"}, 0x0}) 15:17:37 executing program 1: openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x210140}, 0x18) 15:17:37 executing program 4: syz_open_dev$usbmon(&(0x7f0000000240), 0x6, 0x201) 15:17:37 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000000c0)) 15:17:37 executing program 2: syz_io_uring_setup(0x4946, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 15:17:37 executing program 3: clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) pselect6(0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0)={0x0, 0x0, 0x1000}, &(0x7f0000000240)={0x0, r0+60000000}, 0x0) 15:17:37 executing program 1: socket(0x2c, 0x3, 0xff) [ 469.715620][ T3697] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 469.773122][ T3689] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 470.083138][ T3697] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.094346][ T3697] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 470.104605][ T3697] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.40 [ 470.114256][ T3697] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.124252][ T3697] usb 6-1: config 0 descriptor?? [ 470.143462][ T3689] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 470.152264][ T3689] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 470.173356][ T3689] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 470.182321][ T3689] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.323167][ T3689] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 470.334590][ T3689] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 470.342764][ T3689] usb 1-1: Product: syz [ 470.347578][ T3689] usb 1-1: Manufacturer: syz [ 470.402159][ T3689] cdc_wdm 1-1:1.0: skipping garbage [ 470.407578][ T3689] cdc_wdm 1-1:1.0: skipping garbage [ 470.415151][ T3689] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 470.421066][ T3689] cdc_wdm 1-1:1.0: Unknown control protocol [ 470.602628][ T22] usb 1-1: USB disconnect, device number 75 [ 470.683123][ T3697] usbhid 6-1:0.0: can't add hid device: -71 [ 470.689423][ T3697] usbhid: probe of 6-1:0.0 failed with error -71 [ 470.698401][ T3697] usb 6-1: USB disconnect, device number 46 15:17:39 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="7bf3"], 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x93, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600000000") syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) 15:17:39 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000001880), 0x0, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f00000018c0)) 15:17:39 executing program 4: fsopen(&(0x7f0000000280)='binder\x00', 0x0) 15:17:39 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000d40)={'vcan0\x00'}) 15:17:39 executing program 3: ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_setup(0x5d87, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x3a2, 0x0, r0}) 15:17:39 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x2e22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x3, "fc43c7"}, 0x0}) 15:17:39 executing program 1: openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x15}, 0x18) 15:17:39 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000000)={'lo\x00'}) 15:17:39 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000380)=@hci, 0x80) 15:17:39 executing program 2: sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) 15:17:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x14, r1, 0x1}, 0x14}}, 0x0) 15:17:39 executing program 1: fsopen(&(0x7f0000000000)='incremental-fs\x00', 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x4) [ 471.803123][ T3697] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 471.873127][ T22] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 472.163120][ T3697] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.174199][ T3697] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 472.185737][ T3697] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.40 [ 472.195317][ T3697] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.209572][ T3697] usb 6-1: config 0 descriptor?? [ 472.233321][ T22] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 472.241963][ T22] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 472.252864][ T22] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 472.267123][ T22] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.393248][ T22] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 472.402595][ T22] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 472.411073][ T22] usb 1-1: Product: syz [ 472.415665][ T22] usb 1-1: Manufacturer: syz [ 472.465953][ T22] cdc_wdm 1-1:1.0: skipping garbage [ 472.471405][ T22] cdc_wdm 1-1:1.0: skipping garbage [ 472.484918][ T22] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 472.490892][ T22] cdc_wdm 1-1:1.0: Unknown control protocol [ 472.671725][ T22] usb 1-1: USB disconnect, device number 76 [ 472.783122][ T3697] usbhid 6-1:0.0: can't add hid device: -71 [ 472.790170][ T3697] usbhid: probe of 6-1:0.0 failed with error -71 [ 472.806518][ T3697] usb 6-1: USB disconnect, device number 47 15:17:41 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="7bf3"], 0x0) syz_usb_ep_write(r0, 0x0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) 15:17:41 executing program 4: r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@get={0xe0, 0x13, 0x0, 0x0, 0x0, {{'drbg_pr_hmac_sha512\x00'}}}, 0xe0}}, 0x0) 15:17:41 executing program 2: mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x16, 0x0}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/igmp6\x00') pread64(r1, &(0x7f0000000040)=""/216, 0xd8, 0x4c00) 15:17:41 executing program 3: fsopen(&(0x7f0000000040)='ntfs3\x00', 0x0) 15:17:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, 0xfffffffffffffffd, 0x0) 15:17:41 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x2e22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x3, "fc43c7"}, 0x0}) 15:17:41 executing program 1: pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read$alg(r0, 0x0, 0x0) 15:17:41 executing program 3: pselect6(0x40, &(0x7f0000000240), 0x0, 0x0, &(0x7f0000000300), 0x0) 15:17:41 executing program 4: syz_genetlink_get_family_id$ipvs(&(0x7f0000000c40), 0xffffffffffffffff) 15:17:41 executing program 2: mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x16, 0x0}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/igmp6\x00') pread64(r1, &(0x7f0000000040)=""/216, 0xd8, 0x4c00) 15:17:41 executing program 1: syz_open_dev$sg(&(0x7f0000000680), 0x0, 0x0) syz_io_uring_complete(0x0) 15:17:41 executing program 3: open$dir(0x0, 0x20000, 0x0) syz_open_dev$dri(&(0x7f00000001c0), 0x8, 0x303e01) [ 473.923281][ T145] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 473.953073][ T3697] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 474.313373][ T3697] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 474.313903][ T145] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.325989][ T3697] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 474.335412][ T145] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 474.349927][ T3697] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 474.354439][ T145] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.40 [ 474.362212][ T3697] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.379213][ T145] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.393279][ T145] usb 6-1: config 0 descriptor?? [ 474.493485][ T3697] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 474.502595][ T3697] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 474.510696][ T3697] usb 1-1: Product: syz [ 474.515033][ T3697] usb 1-1: Manufacturer: syz [ 474.563749][ T3697] cdc_wdm 1-1:1.0: skipping garbage [ 474.568980][ T3697] cdc_wdm 1-1:1.0: skipping garbage [ 474.579840][ T3697] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 474.586110][ T3697] cdc_wdm 1-1:1.0: Unknown control protocol [ 474.972384][ T3697] usb 1-1: USB disconnect, device number 77 [ 474.983325][ T145] usbhid 6-1:0.0: can't add hid device: -71 [ 474.991087][ T145] usbhid: probe of 6-1:0.0 failed with error -71 [ 475.004477][ T145] usb 6-1: USB disconnect, device number 48 15:17:43 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="7bf3"], 0x0) syz_usb_ep_write(r0, 0x0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) 15:17:43 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x40049409, 0x0) 15:17:43 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, 0x0, 0x0, 0xffffffffffffffff) 15:17:43 executing program 3: ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x0, "d176f5cc10359cb3fb3088616050f735f02da31bb2ba5c7e4a837f7bd7a15a2a"}) pipe2$9p(&(0x7f0000000880), 0x80800) 15:17:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20004011) 15:17:43 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x2e22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000640), 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x3, "fc43c7"}, 0x0}) 15:17:43 executing program 4: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$proc_mixer(r0, 0x0, 0x0) 15:17:43 executing program 1: memfd_create(&(0x7f0000000000)='$\x00', 0x6) 15:17:43 executing program 2: msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000040)={{0x3, 0xee01, 0xee01, 0xffffffffffffffff, 0xee01}}) getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) 15:17:43 executing program 3: socketpair(0x3, 0x0, 0xfffffffc, &(0x7f0000000000)) 15:17:43 executing program 4: ioctl$SNDCTL_MIDI_INFO(0xffffffffffffffff, 0xc074510c, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x8, 0x1}) openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0), 0x109200, 0x0) 15:17:43 executing program 1: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) [ 476.182382][ T145] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 476.253159][ T3711] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 476.553336][ T145] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.564430][ T145] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.574680][ T145] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.40 [ 476.585066][ T145] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.598908][ T145] usb 6-1: config 0 descriptor?? [ 476.623591][ T3711] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 476.632198][ T3711] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 476.642828][ T3711] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 476.658306][ T3711] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.783883][ T3711] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 476.793217][ T3711] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 476.801238][ T3711] usb 1-1: Product: syz [ 476.805486][ T3711] usb 1-1: Manufacturer: syz [ 476.856061][ T3711] cdc_wdm 1-1:1.0: skipping garbage [ 476.862806][ T3711] cdc_wdm 1-1:1.0: skipping garbage [ 476.871526][ T3711] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 476.877940][ T3711] cdc_wdm 1-1:1.0: Unknown control protocol [ 477.263878][ T3689] usb 1-1: USB disconnect, device number 78 [ 477.353152][ T145] usbhid 6-1:0.0: can't add hid device: -71 [ 477.359138][ T145] usbhid: probe of 6-1:0.0 failed with error -71 [ 477.371576][ T145] usb 6-1: USB disconnect, device number 49 15:17:46 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="7bf3"], 0x0) syz_usb_ep_write(r0, 0x0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) 15:17:46 executing program 2: io_uring_setup(0x5d87, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}) 15:17:46 executing program 3: syz_open_dev$hidraw(&(0x7f0000000000), 0x6, 0x0) 15:17:46 executing program 4: accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_clone(0x5000400, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)="1a") 15:17:46 executing program 1: openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40, 0x0) 15:17:46 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x2e22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000640), 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x3, "fc43c7"}, 0x0}) 15:17:46 executing program 3: syz_clone(0x28040000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)='\v') 15:17:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8905, &(0x7f00000002c0)={'vxcan0\x00'}) 15:17:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) 15:17:46 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lgetxattr(0x0, &(0x7f0000000200)=@known='security.apparmor\x00', 0x0, 0x0) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xc86ade39) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0x8}}, './file0\x00'}) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) lseek(r6, 0xbb6, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4c100, 0x0) sendfile(r6, r7, 0x0, 0x80000007) 15:17:46 executing program 3: bpf$MAP_CREATE(0x16, &(0x7f0000000140), 0x48) 15:17:46 executing program 2: getgid() syz_clone(0x42302100, &(0x7f0000000040), 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) [ 478.473485][ T3689] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 478.554251][ T3702] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 478.883223][ T3689] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.894788][ T3689] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.905548][ T3689] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.40 [ 478.915374][ T3689] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.923257][ T3702] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 478.932823][ T3702] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 478.943740][ T3702] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 478.954532][ T3689] usb 6-1: config 0 descriptor?? [ 478.973084][ T3702] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 479.103253][ T3702] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 479.112456][ T3702] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 479.125187][ T3702] usb 1-1: Product: syz [ 479.129479][ T3702] usb 1-1: Manufacturer: syz [ 479.174865][ T3702] cdc_wdm 1-1:1.0: skipping garbage [ 479.180128][ T3702] cdc_wdm 1-1:1.0: skipping garbage [ 479.197601][ T3702] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 479.210641][ T3702] cdc_wdm 1-1:1.0: Unknown control protocol [ 479.580358][ T3697] usb 1-1: USB disconnect, device number 79 [ 479.703215][ T3689] usbhid 6-1:0.0: can't add hid device: -71 [ 479.709372][ T3689] usbhid: probe of 6-1:0.0 failed with error -71 [ 479.725660][ T3689] usb 6-1: USB disconnect, device number 50 15:17:48 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8924, &(0x7f0000000100)={'sit0\x00', 0x0}) 15:17:48 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8934, &(0x7f0000000100)={'sit0\x00', 0x0}) 15:17:48 executing program 2: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x3e) r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 15:17:48 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lgetxattr(0x0, &(0x7f0000000200)=@known='security.apparmor\x00', 0x0, 0x0) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xc86ade39) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0x8}}, './file0\x00'}) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) lseek(r6, 0xbb6, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4c100, 0x0) sendfile(r6, r7, 0x0, 0x80000007) 15:17:48 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="7bf3"], 0x0) syz_usb_ep_write(r0, 0x0, 0x0, &(0x7f00000002c0)) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) 15:17:48 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x2e22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000640), 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x3, "fc43c7"}, 0x0}) 15:17:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8922, &(0x7f00000002c0)={'vxcan0\x00'}) 15:17:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) 15:17:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8940, 0x0) 15:17:48 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) dup(r2) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lgetxattr(0x0, 0x0, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xc86ade39) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) lseek(r5, 0xbb6, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4c100, 0x0) sendfile(r5, r6, 0x0, 0x80000007) 15:17:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8946, &(0x7f00000002c0)={'vxcan0\x00'}) [ 480.773051][ T3702] usb 6-1: new high-speed USB device number 51 using dummy_hcd 15:17:48 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x89a0, &(0x7f0000000000)={'vxcan1\x00'}) [ 480.833122][ T145] usb 1-1: new high-speed USB device number 80 using dummy_hcd 15:17:48 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x401c5820, &(0x7f0000000100)={'sit0\x00', 0x0}) 15:17:48 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x40046602, &(0x7f0000000100)={'sit0\x00', 0x0}) 15:17:48 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x891e, &(0x7f0000000100)={'sit0\x00', 0x0}) [ 481.143318][ T3702] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.154420][ T3702] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.164382][ T3702] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.40 [ 481.251467][ T3702] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.263511][ T145] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 481.275318][ T3702] usb 6-1: config 0 descriptor?? [ 481.300077][ T145] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config 15:17:49 executing program 3: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20480000, 0x0, 0x0, 0x0, 0x0, 0x0) [ 481.406650][ T145] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 481.453182][ T145] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.603784][ T145] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 481.624939][ T145] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 481.633105][ T145] usb 1-1: Product: syz [ 481.637285][ T145] usb 1-1: Manufacturer: syz [ 481.685468][ T145] cdc_wdm 1-1:1.0: skipping garbage [ 481.690717][ T145] cdc_wdm 1-1:1.0: skipping garbage [ 481.700437][ T145] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 481.706764][ T145] cdc_wdm 1-1:1.0: Unknown control protocol [ 482.013215][ T3702] usbhid 6-1:0.0: can't add hid device: -71 [ 482.019704][ T3702] usbhid: probe of 6-1:0.0 failed with error -71 [ 482.028748][ T3702] usb 6-1: USB disconnect, device number 51 [ 482.088940][ T3698] usb 1-1: USB disconnect, device number 80 15:17:50 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="7bf3"], 0x0) syz_usb_ep_write(r0, 0x0, 0x0, &(0x7f00000002c0)) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) 15:17:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) 15:17:50 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lgetxattr(0x0, &(0x7f0000000200)=@known='security.apparmor\x00', 0x0, 0x0) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xc86ade39) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0x8}}, './file0\x00'}) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) lseek(r6, 0xbb6, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4c100, 0x0) sendfile(r6, r7, 0x0, 0x80000007) 15:17:50 executing program 3: syz_clone(0x36804a00, 0x0, 0x5, 0x0, 0x0, 0x0) 15:17:50 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) dup(r2) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lgetxattr(0x0, 0x0, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xc86ade39) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) lseek(r5, 0xbb6, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4c100, 0x0) sendfile(r5, r6, 0x0, 0x80000007) 15:17:50 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x2e22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x22, 0x18, {[@main]}}, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x3, "fc43c7"}, 0x0}) 15:17:50 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x80047437, 0x0) 15:17:51 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20480000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000380)) r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x80000) mmap$qrtrtun(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 15:17:51 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @dev}, 0x10) [ 483.313133][ T3698] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 483.343241][ T3689] usb 1-1: new high-speed USB device number 81 using dummy_hcd 15:17:51 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8953, &(0x7f0000000100)={'sit0\x00', 0x0}) 15:17:51 executing program 3: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='./file0/file0\x00', 0xc5000421) 15:17:51 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) [ 483.743289][ T3698] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.773566][ T3689] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 483.798381][ T3689] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 483.818735][ T3698] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.874557][ T3689] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 483.883771][ T3698] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.40 [ 483.893055][ T3689] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.904171][ T3698] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.925739][ T3698] usb 6-1: config 0 descriptor?? [ 484.063611][ T3689] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 484.079810][ T3689] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 484.088786][ T3689] usb 1-1: Product: syz [ 484.093138][ T3689] usb 1-1: Manufacturer: syz [ 484.135379][ T3689] cdc_wdm 1-1:1.0: skipping garbage [ 484.140777][ T3689] cdc_wdm 1-1:1.0: skipping garbage [ 484.148735][ T3689] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 484.154958][ T3689] cdc_wdm 1-1:1.0: Unknown control protocol [ 484.434639][ T3698] koneplus 0003:1E7D:2E22.0023: unknown main item tag 0x0 [ 484.444575][ T3698] koneplus 0003:1E7D:2E22.0023: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.5-1/input0 [ 484.541504][ T3689] usb 1-1: USB disconnect, device number 81 [ 484.663154][ T3698] koneplus 0003:1E7D:2E22.0023: couldn't init struct koneplus_device [ 484.673863][ T3698] koneplus 0003:1E7D:2E22.0023: couldn't install mouse [ 484.682125][ T3698] koneplus: probe of 0003:1E7D:2E22.0023 failed with error -71 [ 484.692552][ T3698] usb 6-1: USB disconnect, device number 52 15:17:53 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f4, &(0x7f0000000100)={'sit0\x00', 0x0}) 15:17:53 executing program 3: bpf$MAP_CREATE(0x9, &(0x7f0000000140), 0x48) 15:17:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_tx_ring(r0, 0x10e, 0xb, 0x0, 0x0) 15:17:53 executing program 1: r0 = openat$qrtrtun(0xffffff9c, &(0x7f0000000080), 0x2a800) read$qrtrtun(r0, 0x0, 0x0) 15:17:53 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x2e22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x22, 0x18, {[@main]}}, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x3, "fc43c7"}, 0x0}) 15:17:53 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="7bf3"], 0x0) syz_usb_ep_write(r0, 0x0, 0x0, &(0x7f00000002c0)) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) 15:17:53 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) preadv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000001480)=""/4096, 0x1000}, {0x0}, {0x0}, {&(0x7f0000000340)=""/107, 0x6b}], 0x5, 0x0, 0x0) 15:17:53 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f9, &(0x7f0000000100)={'sit0\x00', 0x0}) 15:17:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000140)={&(0x7f0000000200), 0xfffffffffffffe08, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, 0x0, 0x0, 0x0, 0x0, {}, [@GTPA_O_TEI, @GTPA_LINK, @GTPA_I_TEI, @GTPA_I_TEI, @GTPA_PEER_ADDRESS={0x0, 0x4, @empty}, @GTPA_I_TEI={0xfffffffffffffd33}]}, 0x14}}, 0x0) 15:17:53 executing program 2: syz_clone(0x13040180, 0x0, 0xa, 0x0, 0x0, 0x0) 15:17:53 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20480000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000380)) r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x3f) 15:17:53 executing program 4: r0 = socket(0x11, 0xa, 0x0) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, 0x0) 15:17:53 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x891f, &(0x7f0000000100)={'sit0\x00', 0x0}) 15:17:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8912, 0x0) 15:17:53 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8904, &(0x7f0000000000)={'vxcan1\x00'}) [ 485.759899][ T3697] usb 6-1: new high-speed USB device number 53 using dummy_hcd 15:17:53 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lgetxattr(0x0, 0x0, &(0x7f0000000240)=""/217, 0xd9) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xc86ade39) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {0x0, 0x8}}, './file0\x00'}) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) lseek(r6, 0xbb6, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4c100, 0x0) sendfile(r6, r7, 0x0, 0x80000007) [ 485.803307][ T22] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 486.123267][ T3697] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 486.163357][ T22] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 486.190284][ T3697] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 486.207656][ T22] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 486.295690][ T3697] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.40 [ 486.312339][ T22] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 486.377245][ T3697] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.390800][ T22] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 486.442248][ T3697] usb 6-1: config 0 descriptor?? [ 486.563297][ T22] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 486.579328][ T22] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 486.587892][ T22] usb 1-1: Product: syz [ 486.606856][ T22] usb 1-1: Manufacturer: syz [ 486.673931][ T22] cdc_wdm 1-1:1.0: skipping garbage [ 486.680782][ T22] cdc_wdm 1-1:1.0: skipping garbage [ 486.711029][ T22] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 486.722807][ T22] cdc_wdm 1-1:1.0: Unknown control protocol [ 486.924502][ T3697] koneplus 0003:1E7D:2E22.0024: unknown main item tag 0x0 [ 486.935928][ T3697] koneplus 0003:1E7D:2E22.0024: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.5-1/input0 [ 487.078461][ T22] usb 1-1: USB disconnect, device number 82 [ 487.143191][ T3697] koneplus 0003:1E7D:2E22.0024: couldn't init struct koneplus_device [ 487.151306][ T3697] koneplus 0003:1E7D:2E22.0024: couldn't install mouse [ 487.160293][ T3697] koneplus: probe of 0003:1E7D:2E22.0024 failed with error -71 [ 487.171415][ T3697] usb 6-1: USB disconnect, device number 53 15:17:55 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x2e22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x22, 0x18, {[@main]}}, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x3, "fc43c7"}, 0x0}) [ 487.933225][ T3698] usb 6-1: new high-speed USB device number 54 using dummy_hcd 15:17:55 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="7bf3"], 0x0) syz_usb_ep_write(r0, 0x0, 0x4a, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad") syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) 15:17:55 executing program 4: syz_clone(0x8040000, 0x0, 0xfffffffffffffd77, 0x0, 0x0, 0x0) 15:17:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x89a1, &(0x7f00000002c0)={'vxcan0\x00'}) 15:17:55 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) preadv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000001480)=""/4096, 0x1000}, {0x0}, {0x0}, {&(0x7f0000000340)=""/107, 0x6b}], 0x5, 0x0, 0x0) 15:17:55 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lgetxattr(0x0, 0x0, &(0x7f0000000240)=""/217, 0xd9) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xc86ade39) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {0x0, 0x8}}, './file0\x00'}) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) lseek(r6, 0xbb6, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4c100, 0x0) sendfile(r6, r7, 0x0, 0x80000007) 15:17:55 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lgetxattr(0x0, 0x0, &(0x7f0000000240)=""/217, 0xd9) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xc86ade39) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {0x0, 0x8}}, './file0\x00'}) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) lseek(r6, 0xbb6, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4c100, 0x0) sendfile(r6, r7, 0x0, 0x80000007) 15:17:56 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lgetxattr(0x0, 0x0, &(0x7f0000000240)=""/217, 0xd9) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xc86ade39) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {0x0, 0x8}}, './file0\x00'}) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) lseek(r6, 0xbb6, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4c100, 0x0) sendfile(r6, r7, 0x0, 0x80000007) [ 488.313396][ T22] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 488.323423][ T3698] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 488.414205][ T3698] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 488.529994][ T3698] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.40 [ 488.629136][ T3698] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.693170][ T22] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 488.755866][ T3698] usb 6-1: config 0 descriptor?? [ 488.782439][ T22] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 488.913120][ T22] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 488.922351][ T22] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 15:17:56 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lgetxattr(0x0, 0x0, &(0x7f0000000240)=""/217, 0xd9) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xc86ade39) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {0x0, 0x8}}, './file0\x00'}) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) lseek(r6, 0xbb6, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4c100, 0x0) sendfile(r6, r7, 0x0, 0x80000007) [ 489.053176][ T22] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 489.153196][ T22] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 489.256584][ T22] usb 1-1: Product: syz [ 489.273218][ T22] usb 1-1: Manufacturer: syz [ 489.324204][ T22] cdc_wdm 1-1:1.0: skipping garbage [ 489.329651][ T22] cdc_wdm 1-1:1.0: skipping garbage [ 489.404798][ T3698] koneplus 0003:1E7D:2E22.0025: unknown main item tag 0x0 [ 489.449800][ T22] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 489.477554][ T3698] koneplus 0003:1E7D:2E22.0025: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.5-1/input0 [ 489.543005][ T22] cdc_wdm 1-1:1.0: Unknown control protocol [ 489.783139][ T3698] koneplus 0003:1E7D:2E22.0025: couldn't init struct koneplus_device [ 489.975668][ T3698] koneplus 0003:1E7D:2E22.0025: couldn't install mouse 15:17:58 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x2e22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x22, 0x18, {[@main]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 490.093050][ C0] cdc_wdm 1-1:1.0: unknown notification 61 received: index 46970 len 38478 [ 490.113082][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 490.119718][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 490.143046][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 490.149714][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 490.157460][ T3698] koneplus: probe of 0003:1E7D:2E22.0025 failed with error -71 [ 490.168880][ T3698] usb 6-1: USB disconnect, device number 54 [ 490.174891][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 490.174920][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes 15:17:58 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000002940)=@base={0xd}, 0x48) [ 490.191236][ T3711] usb 1-1: USB disconnect, device number 83 [ 490.197250][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 490.197272][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 490.197291][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 15:17:58 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x0, 0x7, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @dev}}}}) 15:17:58 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lgetxattr(0x0, 0x0, &(0x7f0000000240)=""/217, 0xd9) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xc86ade39) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {0x0, 0x8}}, './file0\x00'}) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) lseek(r6, 0xbb6, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4c100, 0x0) sendfile(r6, r7, 0x0, 0x80000007) [ 490.713798][ T3698] usb 6-1: new high-speed USB device number 55 using dummy_hcd 15:17:58 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000002940)=@base={0xd}, 0x48) 15:17:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x89b0, &(0x7f00000002c0)={'vxcan0\x00'}) 15:17:58 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) lgetxattr(0x0, 0x0, &(0x7f0000000240)=""/217, 0xd9) dup(0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0x8}}, './file0\x00'}) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) lseek(r4, 0xbb6, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4c100, 0x0) sendfile(r4, r5, 0x0, 0x80000007) 15:17:58 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="7bf3"], 0x0) syz_usb_ep_write(r0, 0x0, 0x4a, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad") syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) 15:17:58 executing program 4: openat$tcp_congestion(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x3e) syz_open_dev$tty20(0xc, 0x4, 0x0) syz_clone(0x40800080, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0x101, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) accept4$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0, 0x80800) bpf$ITER_CREATE(0x21, &(0x7f0000000440), 0x8) 15:17:58 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x5411, &(0x7f0000000100)={'sit0\x00', 0x0}) 15:17:59 executing program 2: getgid() ioctl$SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, 0x0) syz_clone(0x42302100, &(0x7f0000000040)="911c3d76555e0593c90c4059ab8ffa637ae8dc1b923852f34013964d269802880aafc202a227fd72e6428e4b28d50f85418e1630b811e4a84ce575eb2c0342400b23087dba9daca54fed59d58778cf9d0dc28cdc7ff5674ea8ea362e3f613ee17a", 0x61, &(0x7f00000000c0), &(0x7f0000000100), 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 491.103422][ T3698] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.103492][ T3698] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 491.103535][ T3698] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.40 [ 491.103568][ T3698] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.105231][ T3698] usb 6-1: config 0 descriptor?? [ 491.283169][ T3711] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 491.605635][ T3698] koneplus 0003:1E7D:2E22.0026: unknown main item tag 0x0 15:17:59 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lgetxattr(0x0, 0x0, &(0x7f0000000240)=""/217, 0xd9) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xc86ade39) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {0x0, 0x8}}, './file0\x00'}) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) lseek(r6, 0xbb6, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4c100, 0x0) sendfile(r6, r7, 0x0, 0x80000007) [ 491.607120][ T3698] koneplus 0003:1E7D:2E22.0026: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.5-1/input0 [ 491.673445][ T3711] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 491.673724][ T3711] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 491.673751][ T3711] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 491.673778][ T3711] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 15:18:00 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) lgetxattr(0x0, 0x0, &(0x7f0000000240)=""/217, 0xd9) dup(0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0x8}}, './file0\x00'}) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) lseek(r4, 0xbb6, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4c100, 0x0) sendfile(r4, r5, 0x0, 0x80000007) 15:18:00 executing program 2: getgid() ioctl$SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, 0x0) syz_clone(0x42302100, &(0x7f0000000040)="911c3d76555e0593c90c4059ab8ffa637ae8dc1b923852f34013964d269802880aafc202a227fd72e6428e4b28d50f85418e1630b811e4a84ce575eb2c0342400b23087dba9daca54fed59d58778cf9d0dc28cdc7ff5674ea8ea362e3f613ee17a", 0x61, &(0x7f00000000c0), &(0x7f0000000100), 0x0) socket$nl_generic(0x10, 0x3, 0x10) 15:18:00 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x2e22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x22, 0x18, {[@main]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 491.803296][ T3711] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 491.803324][ T3711] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 491.803339][ T3711] usb 1-1: Product: syz [ 491.803350][ T3711] usb 1-1: Manufacturer: syz [ 491.823771][ T3698] koneplus 0003:1E7D:2E22.0026: couldn't init struct koneplus_device [ 491.823850][ T3698] koneplus 0003:1E7D:2E22.0026: couldn't install mouse [ 491.825610][ T3698] koneplus: probe of 0003:1E7D:2E22.0026 failed with error -71 [ 491.829835][ T3698] usb 6-1: USB disconnect, device number 55 [ 491.845325][ T3711] cdc_wdm 1-1:1.0: skipping garbage [ 491.845339][ T3711] cdc_wdm 1-1:1.0: skipping garbage [ 491.846125][ T3711] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 491.846139][ T3711] cdc_wdm 1-1:1.0: Unknown control protocol [ 492.613046][ C0] cdc_wdm 1-1:1.0: unknown notification 61 received: index 46970 len 38478 [ 492.614620][ T3698] usb 1-1: USB disconnect, device number 84 [ 492.753107][ T3702] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 492.867831][ T6888] tty tty28: ldisc open failed (-12), clearing slot 27 15:18:00 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) lgetxattr(0x0, 0x0, &(0x7f0000000240)=""/217, 0xd9) dup(0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0x8}}, './file0\x00'}) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) lseek(r4, 0xbb6, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4c100, 0x0) sendfile(r4, r5, 0x0, 0x80000007) 15:18:00 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20480000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000008c0)=0x0) ptrace$getregset(0x4204, r0, 0x6, &(0x7f0000001900)={&(0x7f0000000900)=""/4096, 0x1000}) ptrace$getregset(0x4204, 0x0, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000380)) [ 493.113676][ T3702] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 493.160829][ T3702] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 15:18:01 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="7bf3"], 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f00000002c0)='3') syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) 15:18:01 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20480000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000008c0)=0x0) ptrace$getregset(0x4204, r0, 0x6, &(0x7f0000001900)={&(0x7f0000000900)=""/4096, 0x1000}) ptrace$getregset(0x4204, 0x0, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000380)) [ 493.370843][ T3702] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.40 [ 493.447729][ T3702] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 15:18:01 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) lgetxattr(0x0, 0x0, &(0x7f0000000240)=""/217, 0xd9) dup(0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0x8}}, './file0\x00'}) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) lseek(r4, 0xbb6, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4c100, 0x0) sendfile(r4, r5, 0x0, 0x80000007) [ 493.561280][ T3702] usb 6-1: config 0 descriptor?? 15:18:01 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000ba8bd7c3eb48e3"]}) [ 493.763439][ T3698] usb 1-1: new high-speed USB device number 85 using dummy_hcd 15:18:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x10d}, 0x14}}, 0x0) 15:18:01 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x5452, &(0x7f0000000100)={'sit0\x00', 0x0}) 15:18:01 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x80108906, 0x0) 15:18:01 executing program 3: socketpair(0x1, 0x0, 0x6, &(0x7f0000001a40)) [ 494.075183][ T3702] koneplus 0003:1E7D:2E22.0027: unknown main item tag 0x0 [ 494.138036][ T3702] koneplus 0003:1E7D:2E22.0027: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.5-1/input0 15:18:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x10d}, 0x14}}, 0x0) [ 494.183319][ T3698] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 494.200681][ T3698] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 494.243074][ T3698] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 494.252605][ T3698] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.394172][ T3702] koneplus 0003:1E7D:2E22.0027: couldn't init struct koneplus_device [ 494.403344][ T3698] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 494.434717][ T3698] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 494.437142][ T3702] koneplus 0003:1E7D:2E22.0027: couldn't install mouse [ 494.455447][ T3702] koneplus: probe of 0003:1E7D:2E22.0027 failed with error -71 [ 494.493408][ T3698] usb 1-1: Product: syz [ 494.518341][ T3698] usb 1-1: Manufacturer: syz [ 494.536583][ T3702] usb 6-1: USB disconnect, device number 56 [ 494.605432][ T3698] cdc_wdm 1-1:1.0: skipping garbage [ 494.624931][ T3698] cdc_wdm 1-1:1.0: skipping garbage [ 494.659512][ T3698] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 494.675141][ T3698] cdc_wdm 1-1:1.0: Unknown control protocol 15:18:02 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x2e22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x22, 0x18, {[@main]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 15:18:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_tx_ring(r0, 0x10e, 0xd, 0x0, 0x0) 15:18:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_tx_ring(r0, 0x10e, 0x3, 0x0, 0x0) [ 495.021698][ T3698] usb 1-1: USB disconnect, device number 85 [ 495.213021][ T3702] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 495.584186][ T3702] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.595239][ T3702] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 495.605210][ T3702] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.40 [ 495.614421][ T3702] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.624041][ T3702] usb 6-1: config 0 descriptor?? 15:18:03 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="7bf3"], 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f00000002c0)='3') syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) 15:18:03 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) 15:18:03 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x85) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x4000, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000041c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x24}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x20, 0x9eb41) dup(r2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000340)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a505000000007751e8ba63cca555fedbe9d8f1b423cd8752d61e865ff2f25d509e536eacfa7e32fe023136f9f65515b0e1a38d8665522be18bd10a48b043ccc42646d25dfd73a015e0ca7fc2506a0f68a7d06d7535f76907dc6751dfb265a0e3ccae669e173a649c1cf96587d452d64e7cc957d77578f4c35235138d5521f9453559c35da860e8efbc6f2b2a3e3173d5661cfe5079c66c54c33283ba58d31a20a2251258f8a97db00fab"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0xac) bind(0xffffffffffffffff, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x3, @random, 'ip6tnl0\x00'}}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x40, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4, 0x5}]}]}, 0x40}}, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x8983, &(0x7f0000000000)={0x1, 'vlan0\x00', {}, 0xffff}) 15:18:03 executing program 3: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x801c581f, 0x0) 15:18:03 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f00000001c0)=""/213) 15:18:03 executing program 3: r0 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000004a40), 0x0, 0x0) read$FUSE(r0, 0x0, 0x7ffffffff000) 15:18:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x4}]}, 0x1c}}, 0x0) 15:18:03 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x5000000}}, 0x1c) 15:18:03 executing program 3: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x40049409, 0x0) [ 496.105151][ T3702] koneplus 0003:1E7D:2E22.0028: unknown main item tag 0x0 [ 496.132540][ T3702] koneplus 0003:1E7D:2E22.0028: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.5-1/input0 [ 496.243238][ T143] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 496.313310][ T3702] koneplus 0003:1E7D:2E22.0028: couldn't init struct koneplus_device [ 496.321550][ T3702] koneplus 0003:1E7D:2E22.0028: couldn't install mouse [ 496.335506][ T3702] koneplus: probe of 0003:1E7D:2E22.0028 failed with error -71 [ 496.368747][ T3702] usb 6-1: USB disconnect, device number 57 [ 496.623092][ T143] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 496.631736][ T143] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 496.642088][ T143] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 496.652011][ T143] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 15:18:04 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x2e22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x22, 0x18, {[@main]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:18:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2}, 0x10}}, 0x0) 15:18:04 executing program 1: socket$bt_rfcomm(0x1f, 0xd155104408c86ff6, 0x3) [ 496.783285][ T143] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 496.792372][ T143] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 496.808064][ T143] usb 1-1: Product: syz [ 496.832040][ T143] usb 1-1: Manufacturer: syz [ 496.894157][ T143] cdc_wdm 1-1:1.0: skipping garbage [ 496.899427][ T143] cdc_wdm 1-1:1.0: skipping garbage [ 496.921456][ T143] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 496.946632][ T143] cdc_wdm 1-1:1.0: Unknown control protocol [ 497.173046][ T3698] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 497.303371][ T3702] usb 1-1: USB disconnect, device number 86 [ 497.563245][ T3698] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.574852][ T3698] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 497.585075][ T3698] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.40 [ 497.594374][ T3698] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.604754][ T3698] usb 6-1: config 0 descriptor?? [ 498.085802][ T3698] koneplus 0003:1E7D:2E22.0029: unknown main item tag 0x0 [ 498.094041][ T3698] koneplus 0003:1E7D:2E22.0029: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.5-1/input0 15:18:06 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x85) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x4000, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000041c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x24}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x20, 0x9eb41) dup(r2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000340)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a505000000007751e8ba63cca555fedbe9d8f1b423cd8752d61e865ff2f25d509e536eacfa7e32fe023136f9f65515b0e1a38d8665522be18bd10a48b043ccc42646d25dfd73a015e0ca7fc2506a0f68a7d06d7535f76907dc6751dfb265a0e3ccae669e173a649c1cf96587d452d64e7cc957d77578f4c35235138d5521f9453559c35da860e8efbc6f2b2a3e3173d5661cfe5079c66c54c33283ba58d31a20a2251258f8a97db00fab"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0xac) bind(0xffffffffffffffff, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x3, @random, 'ip6tnl0\x00'}}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x40, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4, 0x5}]}]}, 0x40}}, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x8983, &(0x7f0000000000)={0x1, 'vlan0\x00', {}, 0xffff}) 15:18:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x10, 0x1}, 0x10}}, 0x0) 15:18:06 executing program 4: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$proc_mixer(r0, &(0x7f0000000040)=""/180, 0xb4) 15:18:06 executing program 1: mq_open(&(0x7f0000000280)='{+\x00', 0x0, 0x0, 0x0) 15:18:06 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="7bf3"], 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f00000002c0)='3') syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) 15:18:06 executing program 4: syz_io_uring_setup(0x38a5, &(0x7f0000000000), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x26cf, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1ed2, &(0x7f0000000700), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff6000/0x7000)=nil, &(0x7f00000003c0), &(0x7f0000000780)) 15:18:06 executing program 3: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x1150aa3f594179f3, 0xffffffffffffffff, 0x0) 15:18:06 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='3']}) 15:18:06 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x85) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x4000, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000041c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x24}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x20, 0x9eb41) dup(r2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000340)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a505000000007751e8ba63cca555fedbe9d8f1b423cd8752d61e865ff2f25d509e536eacfa7e32fe023136f9f65515b0e1a38d8665522be18bd10a48b043ccc42646d25dfd73a015e0ca7fc2506a0f68a7d06d7535f76907dc6751dfb265a0e3ccae669e173a649c1cf96587d452d64e7cc957d77578f4c35235138d5521f9453559c35da860e8efbc6f2b2a3e3173d5661cfe5079c66c54c33283ba58d31a20a2251258f8a97db00fab"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0xac) bind(0xffffffffffffffff, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x3, @random, 'ip6tnl0\x00'}}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x40, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4, 0x5}]}]}, 0x40}}, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x8983, &(0x7f0000000000)={0x1, 'vlan0\x00', {}, 0xffff}) [ 498.313227][ T3698] koneplus 0003:1E7D:2E22.0029: couldn't init struct koneplus_device [ 498.331537][ T3698] koneplus 0003:1E7D:2E22.0029: couldn't install mouse [ 498.365367][ T3698] koneplus: probe of 0003:1E7D:2E22.0029 failed with error -71 [ 498.405542][ T3698] usb 6-1: USB disconnect, device number 58 [ 498.583041][ T26] usb 1-1: new high-speed USB device number 87 using dummy_hcd 15:18:06 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x2e22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x22, 0x18, {[@main]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:18:06 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x80086601, 0x0) 15:18:06 executing program 1: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x541b, 0x0) 15:18:06 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0xc0045878, 0x0) 15:18:06 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x85) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x4000, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000041c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x24}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x20, 0x9eb41) dup(r2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000340)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a505000000007751e8ba63cca555fedbe9d8f1b423cd8752d61e865ff2f25d509e536eacfa7e32fe023136f9f65515b0e1a38d8665522be18bd10a48b043ccc42646d25dfd73a015e0ca7fc2506a0f68a7d06d7535f76907dc6751dfb265a0e3ccae669e173a649c1cf96587d452d64e7cc957d77578f4c35235138d5521f9453559c35da860e8efbc6f2b2a3e3173d5661cfe5079c66c54c33283ba58d31a20a2251258f8a97db00fab"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0xac) bind(0xffffffffffffffff, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x3, @random, 'ip6tnl0\x00'}}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x40, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4, 0x5}]}]}, 0x40}}, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x8983, &(0x7f0000000000)={0x1, 'vlan0\x00', {}, 0xffff}) 15:18:06 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000000)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) 15:18:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg(r0, &(0x7f00000006c0)=[{{&(0x7f0000000000)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x80, 0x0}}], 0x1, 0x0) [ 498.943509][ T26] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 498.954229][ T26] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 498.995210][ T26] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 499.006360][ T26] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 499.133245][ T26] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 499.142342][ T26] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 499.150891][ T26] usb 1-1: Product: syz [ 499.155384][ T26] usb 1-1: Manufacturer: syz [ 499.163282][ T3702] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 499.203214][ T26] cdc_wdm 1-1:1.0: skipping garbage [ 499.208465][ T26] cdc_wdm 1-1:1.0: skipping garbage [ 499.216331][ T26] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 499.222254][ T26] cdc_wdm 1-1:1.0: Unknown control protocol [ 499.533136][ T3702] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 499.544207][ T3702] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 499.554098][ T3702] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.40 [ 499.563504][ T3702] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.573104][ T3702] usb 6-1: config 0 descriptor?? [ 499.597835][ T26] usb 1-1: USB disconnect, device number 87 [ 500.054793][ T3702] koneplus 0003:1E7D:2E22.002A: unknown main item tag 0x0 [ 500.062920][ T3702] koneplus 0003:1E7D:2E22.002A: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.5-1/input0 [ 500.273080][ T3702] koneplus 0003:1E7D:2E22.002A: couldn't init struct koneplus_device [ 500.281195][ T3702] koneplus 0003:1E7D:2E22.002A: couldn't install mouse [ 500.290087][ T3702] koneplus: probe of 0003:1E7D:2E22.002A failed with error -71 [ 500.300358][ T3702] usb 6-1: USB disconnect, device number 59 15:18:08 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="7bf3"], 0x0) syz_usb_ep_write(r0, 0x0, 0x26, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc") syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) 15:18:08 executing program 1: socket$inet6(0xa, 0xfe000c260839a526, 0x0) 15:18:08 executing program 4: open$dir(&(0x7f0000000080)='./file0\x00', 0x1a5b40, 0x0) 15:18:08 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x401c5820, &(0x7f00000022c0)) 15:18:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x10, 0x1}, 0x10}}, 0x0) [ 500.524103][ T27] audit: type=1800 audit(1659971888.407:2): pid=7008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=1164 res=0 errno=0 15:18:08 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x2e22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x22, 0x18, {[@main]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:18:08 executing program 3: socket$inet6(0xa, 0x3, 0x40) 15:18:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001f40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000002e80)={0x0, 0x0, &(0x7f0000002e40)={&(0x7f0000001f80)=ANY=[@ANYRES32=r1, @ANYRES16=r1, @ANYBLOB="010000000000000000000e"], 0x20}}, 0x0) 15:18:08 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f00000008c0), 0x10d000, 0x0) 15:18:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x10}, 0xc0}}, 0x0) 15:18:08 executing program 4: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$proc_mixer(r0, 0x0, 0x0) 15:18:08 executing program 1: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x5460, 0x0) [ 500.807981][ T7017] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.2'. [ 500.854276][ T3698] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 501.116519][ T1239] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.122849][ T1239] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.129202][ T145] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 501.233175][ T3698] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 501.241841][ T3698] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 501.252172][ T3698] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 501.262545][ T3698] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.393400][ T3698] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 501.402552][ T3698] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 501.410653][ T3698] usb 1-1: Product: syz [ 501.415478][ T3698] usb 1-1: Manufacturer: syz [ 501.464167][ T3698] cdc_wdm 1-1:1.0: skipping garbage [ 501.469515][ T3698] cdc_wdm 1-1:1.0: skipping garbage [ 501.477932][ T3698] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 501.484154][ T3698] cdc_wdm 1-1:1.0: Unknown control protocol [ 501.503115][ T145] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.514187][ T145] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 501.526694][ T145] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.40 [ 501.536000][ T145] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.546758][ T145] usb 6-1: config 0 descriptor?? [ 501.872467][ T3702] usb 1-1: USB disconnect, device number 88 [ 502.035101][ T145] koneplus 0003:1E7D:2E22.002B: unknown main item tag 0x0 [ 502.043549][ T145] koneplus 0003:1E7D:2E22.002B: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.5-1/input0 [ 502.243175][ T145] koneplus 0003:1E7D:2E22.002B: couldn't init struct koneplus_device [ 502.251480][ T145] koneplus 0003:1E7D:2E22.002B: couldn't install mouse [ 502.260312][ T145] koneplus: probe of 0003:1E7D:2E22.002B failed with error -71 [ 502.271187][ T145] usb 6-1: USB disconnect, device number 60 15:18:10 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="7bf3"], 0x0) syz_usb_ep_write(r0, 0x0, 0x26, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc") syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) 15:18:10 executing program 2: r0 = io_uring_setup(0x7fee, &(0x7f0000000340)) r1 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f00000003c0)=r1, 0x1) 15:18:10 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4002810, r0, 0x0) 15:18:10 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0xfffffffffffffffc) 15:18:10 executing program 1: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x220000}, 0x20) 15:18:10 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x2e22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x22, 0x18, {[@main]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0}) 15:18:10 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000004c0), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000500)='hybla\x00', 0x3fffff) 15:18:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8}]}, 0x3c}}, 0x0) 15:18:10 executing program 1: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0xc020660b, 0x0) 15:18:10 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8933, 0x0) 15:18:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000003c80)={0x0, 0x0, &(0x7f0000003c40)={0x0}}, 0x1) 15:18:10 executing program 2: mq_notify(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, 0x4}) [ 503.106118][ T3702] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 503.153601][ T143] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 503.493192][ T3702] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 503.504180][ T3702] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 503.515255][ T3702] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.40 [ 503.524629][ T3702] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.539024][ T3702] usb 6-1: config 0 descriptor?? [ 503.563265][ T143] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 503.571965][ T143] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 503.582709][ T143] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 503.595566][ T143] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 503.733687][ T143] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 503.742903][ T143] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 503.751003][ T143] usb 1-1: Product: syz [ 503.755430][ T143] usb 1-1: Manufacturer: syz [ 503.814396][ T143] cdc_wdm 1-1:1.0: skipping garbage [ 503.820157][ T143] cdc_wdm 1-1:1.0: skipping garbage [ 503.828605][ T143] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 503.834649][ T143] cdc_wdm 1-1:1.0: Unknown control protocol [ 504.024962][ T3702] koneplus 0003:1E7D:2E22.002C: unknown main item tag 0x0 [ 504.033727][ T3702] koneplus 0003:1E7D:2E22.002C: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.5-1/input0 [ 504.221669][ T145] usb 1-1: USB disconnect, device number 89 [ 504.263370][ T3702] koneplus 0003:1E7D:2E22.002C: couldn't init struct koneplus_device [ 504.271821][ T3702] koneplus 0003:1E7D:2E22.002C: couldn't install mouse [ 504.280384][ T3702] koneplus: probe of 0003:1E7D:2E22.002C failed with error -5 [ 504.475060][ T143] usb 6-1: USB disconnect, device number 61 15:18:13 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="7bf3"], 0x0) syz_usb_ep_write(r0, 0x0, 0x26, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc") syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) 15:18:13 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) 15:18:13 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 15:18:13 executing program 1: r0 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000004a40), 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x541b, 0x0) 15:18:13 executing program 2: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) read$proc_mixer(r0, &(0x7f0000000100)=""/185, 0xb9) 15:18:13 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x2e22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x22, 0x18, {[@main]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0}) 15:18:13 executing program 1: r0 = syz_io_uring_setup(0x72a, &(0x7f0000002280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) 15:18:13 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @private1}}}, 0x90) 15:18:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'vlan0\x00', &(0x7f0000000100)=@ethtool_regs}) 15:18:13 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKPBSZGET(r0, 0x127b, 0x0) 15:18:13 executing program 2: r0 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000004a40), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x0) 15:18:13 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8906, 0x0) [ 505.413071][ T3711] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 505.473145][ T143] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 505.813279][ T3711] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 505.824407][ T3711] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 505.834976][ T3711] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.40 [ 505.844448][ T3711] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.858327][ T3711] usb 6-1: config 0 descriptor?? [ 505.863277][ T143] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 505.872516][ T143] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 505.882703][ T143] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 505.891726][ T143] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.023226][ T143] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 506.032345][ T143] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 506.040489][ T143] usb 1-1: Product: syz [ 506.044797][ T143] usb 1-1: Manufacturer: syz [ 506.104189][ T143] cdc_wdm 1-1:1.0: skipping garbage [ 506.109454][ T143] cdc_wdm 1-1:1.0: skipping garbage [ 506.117656][ T143] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 506.123670][ T143] cdc_wdm 1-1:1.0: Unknown control protocol [ 506.354261][ T3711] koneplus 0003:1E7D:2E22.002D: unknown main item tag 0x0 [ 506.390368][ T3711] koneplus 0003:1E7D:2E22.002D: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.5-1/input0 [ 506.514744][ T3702] usb 1-1: USB disconnect, device number 90 [ 506.573229][ T3711] koneplus 0003:1E7D:2E22.002D: couldn't init struct koneplus_device [ 506.581393][ T3711] koneplus 0003:1E7D:2E22.002D: couldn't install mouse [ 506.605802][ T3711] koneplus: probe of 0003:1E7D:2E22.002D failed with error -5 [ 506.777587][ T3702] usb 6-1: USB disconnect, device number 62 15:18:15 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="7bf3"], 0x0) syz_usb_ep_write(r0, 0x0, 0x38, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f947") syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) 15:18:15 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x2e22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x22, 0x18, {[@main]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0}) 15:18:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001f40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000002e80)={0x0, 0x0, &(0x7f0000002e40)={&(0x7f0000001f80)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x3, 'veth1_to_bridge\x00'}]}]}, 0x2c}}, 0x0) 15:18:15 executing program 3: r0 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000004a40), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000a, 0x11, r0, 0x8000000) 15:18:15 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000005c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"84ed77b3ce374363ca7beddd06a6197c"}}}}, 0xa0) 15:18:15 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x5421, 0x0) 15:18:15 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x5411, 0x0) 15:18:15 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x300}}, 0x1c) 15:18:15 executing program 1: syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r0) [ 507.476720][ T7086] netlink: 'syz-executor.4': attribute type 3 has an invalid length. 15:18:15 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BLKIOOPT(r0, 0x1279, 0x0) 15:18:15 executing program 3: socket$inet6_udp(0x64, 0xa, 0x0) 15:18:15 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x80044d00, &(0x7f0000000100)) [ 507.713245][ T143] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 507.753126][ T3702] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 508.073274][ T143] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 508.084534][ T143] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 508.094756][ T143] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.40 [ 508.104327][ T143] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.114119][ T143] usb 6-1: config 0 descriptor?? [ 508.123236][ T3702] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 508.131884][ T3702] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 508.142440][ T3702] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 508.151486][ T3702] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 508.293208][ T3702] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 508.302365][ T3702] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 508.310693][ T3702] usb 1-1: Product: syz [ 508.315532][ T3702] usb 1-1: Manufacturer: syz [ 508.374325][ T3702] cdc_wdm 1-1:1.0: skipping garbage [ 508.379663][ T3702] cdc_wdm 1-1:1.0: skipping garbage [ 508.388033][ T3702] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 508.394461][ T3702] cdc_wdm 1-1:1.0: Unknown control protocol [ 508.594528][ T143] koneplus 0003:1E7D:2E22.002E: unknown main item tag 0x0 [ 508.602684][ T143] koneplus 0003:1E7D:2E22.002E: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.5-1/input0 [ 508.781952][ T145] usb 1-1: USB disconnect, device number 91 [ 508.813339][ T143] koneplus 0003:1E7D:2E22.002E: couldn't init struct koneplus_device [ 508.822020][ T143] koneplus 0003:1E7D:2E22.002E: couldn't install mouse [ 508.830780][ T143] koneplus: probe of 0003:1E7D:2E22.002E failed with error -5 [ 509.020022][ T145] usb 6-1: USB disconnect, device number 63 15:18:17 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="7bf3"], 0x0) syz_usb_ep_write(r0, 0x0, 0x38, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f947") syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) 15:18:17 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x40086602, &(0x7f00000022c0)) 15:18:17 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x80044d00, &(0x7f0000000100)) 15:18:17 executing program 3: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getpeername$inet6(r0, 0x0, 0x0) 15:18:17 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000240)="fa", 0xfdef}], 0x1) recvfrom$inet6(r0, &(0x7f0000000640)=""/183, 0xb7, 0x10120, 0x0, 0x0) 15:18:17 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x2e22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x22, 0x18, {[@main]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x2, "fc43"}, 0x0}) 15:18:17 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000240)="fa", 0xfdef}], 0x1) recvfrom$inet6(r0, &(0x7f0000000640)=""/183, 0xb7, 0x10120, 0x0, 0x0) 15:18:17 executing program 1: openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x20b00, 0x0) 15:18:17 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x10000000}}, 0x1c) 15:18:17 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x541b, 0x0) 15:18:17 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000240)="fa", 0xfdef}], 0x1) recvfrom$inet6(r0, &(0x7f0000000640)=""/183, 0xb7, 0x10120, 0x0, 0x0) 15:18:17 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000240)="fa", 0xfdef}], 0x1) recvfrom$inet6(r0, &(0x7f0000000640)=""/183, 0xb7, 0x10120, 0x0, 0x0) [ 510.005288][ T3702] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 510.053147][ T143] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 510.423975][ T3702] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.434944][ T3702] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 510.445216][ T143] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 510.453892][ T3702] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.40 [ 510.463172][ T143] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 510.473912][ T3702] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.482844][ T143] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 510.500374][ T3702] usb 6-1: config 0 descriptor?? [ 510.505567][ T143] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.663202][ T143] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 510.672280][ T143] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 510.681717][ T143] usb 1-1: Product: syz [ 510.686005][ T143] usb 1-1: Manufacturer: syz [ 510.744868][ T143] cdc_wdm 1-1:1.0: skipping garbage [ 510.750126][ T143] cdc_wdm 1-1:1.0: skipping garbage [ 510.757752][ T143] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 510.764213][ T143] cdc_wdm 1-1:1.0: Unknown control protocol [ 510.974962][ T3702] koneplus 0003:1E7D:2E22.002F: unknown main item tag 0x0 [ 510.984385][ T3702] koneplus 0003:1E7D:2E22.002F: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.5-1/input0 [ 511.155278][ T3698] usb 1-1: USB disconnect, device number 92 [ 511.193551][ T3702] koneplus 0003:1E7D:2E22.002F: couldn't init struct koneplus_device [ 511.201702][ T3702] koneplus 0003:1E7D:2E22.002F: couldn't install mouse [ 511.212733][ T3702] koneplus: probe of 0003:1E7D:2E22.002F failed with error -5 [ 511.398263][ T3698] usb 6-1: USB disconnect, device number 64 15:18:19 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="7bf3"], 0x0) syz_usb_ep_write(r0, 0x0, 0x38, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f947") syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) 15:18:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0x2c}}, 0x0) 15:18:19 executing program 2: syz_open_dev$dri(&(0x7f0000000100), 0x5b, 0x0) 15:18:19 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x4}, 0x48) 15:18:19 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) recvfrom$inet6(r0, &(0x7f0000000640)=""/183, 0xb7, 0x10120, 0x0, 0x0) 15:18:19 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x2e22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x22, 0x18, {[@main]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x2, "fc43"}, 0x0}) 15:18:20 executing program 2: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x21e3561beaec0db3, 0xffffffffffffffff, 0x8000000) 15:18:20 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002280), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x4020940d, &(0x7f00000022c0)=r1) 15:18:20 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 15:18:20 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x84, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x48) 15:18:20 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000600)={0x16, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 15:18:20 executing program 1: r0 = syz_io_uring_setup(0x38a5, &(0x7f0000000000), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x17, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[0xffffffffffffffff]}, 0x1) [ 512.383123][ T3702] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 512.423053][ T3698] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 512.753158][ T3702] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.764194][ T3702] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 512.774437][ T3702] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.40 [ 512.783211][ T3698] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 512.783906][ T3702] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.792240][ T3698] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 512.802214][ T3702] usb 6-1: config 0 descriptor?? [ 512.819318][ T3698] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 512.829228][ T3698] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.953196][ T3698] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 512.962427][ T3698] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 512.970722][ T3698] usb 1-1: Product: syz [ 512.979106][ T3698] usb 1-1: Manufacturer: syz [ 513.024113][ T3698] cdc_wdm 1-1:1.0: skipping garbage [ 513.029342][ T3698] cdc_wdm 1-1:1.0: skipping garbage [ 513.038383][ T3698] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 513.044390][ T3698] cdc_wdm 1-1:1.0: Unknown control protocol [ 513.304962][ T3702] koneplus 0003:1E7D:2E22.0030: unknown main item tag 0x0 [ 513.313030][ T3702] koneplus 0003:1E7D:2E22.0030: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.5-1/input0 [ 513.428271][ T3711] usb 1-1: USB disconnect, device number 93 [ 513.513214][ T3702] koneplus 0003:1E7D:2E22.0030: couldn't init struct koneplus_device [ 513.521424][ T3702] koneplus 0003:1E7D:2E22.0030: couldn't install mouse [ 513.530086][ T3702] koneplus: probe of 0003:1E7D:2E22.0030 failed with error -5 [ 513.718498][ T3711] usb 6-1: USB disconnect, device number 65 15:18:22 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="7bf3"], 0x0) syz_usb_ep_write(r0, 0x0, 0x41, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e49") syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) 15:18:22 executing program 3: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x81, 0x0) write$proc_mixer(r0, 0x0, 0x0) 15:18:22 executing program 2: r0 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000004a40), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x100010, r0, 0x10000000) 15:18:22 executing program 1: r0 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000004a40), 0x0, 0x0) read$FUSE(r0, 0x0, 0x7) 15:18:22 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) recvfrom$inet6(r0, &(0x7f0000000640)=""/183, 0xb7, 0x10120, 0x0, 0x0) 15:18:22 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x2e22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x22, 0x18, {[@main]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x2, "fc43"}, 0x0}) 15:18:22 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x5452, &(0x7f00000022c0)) 15:18:22 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1, 0x100}}, 0x10) 15:18:22 executing program 3: r0 = syz_io_uring_setup(0x38a5, &(0x7f0000000000), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x15, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[0xffffffffffffffff]}, 0x1) 15:18:22 executing program 2: syz_io_uring_setup(0x4df, &(0x7f0000000000)={0x0, 0xf19e, 0x8}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x635c, &(0x7f0000000180), &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:18:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x10}, 0x2}}, 0x0) 15:18:22 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0)}}, 0x8) [ 514.624375][ T3711] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 514.723185][ T3702] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 514.983373][ T3711] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 514.994345][ T3711] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 515.004172][ T3711] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.40 [ 515.018587][ T3711] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.028239][ T3711] usb 6-1: config 0 descriptor?? [ 515.134258][ T3702] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 515.142895][ T3702] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 515.153829][ T3702] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 515.162809][ T3702] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 515.323242][ T3702] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 515.332418][ T3702] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 515.340658][ T3702] usb 1-1: Product: syz [ 515.345155][ T3702] usb 1-1: Manufacturer: syz [ 515.414279][ T3702] cdc_wdm 1-1:1.0: skipping garbage [ 515.419540][ T3702] cdc_wdm 1-1:1.0: skipping garbage [ 515.427515][ T3702] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 515.433851][ T3702] cdc_wdm 1-1:1.0: Unknown control protocol [ 515.515140][ T3711] koneplus 0003:1E7D:2E22.0031: unknown main item tag 0x0 [ 515.523547][ T3711] koneplus 0003:1E7D:2E22.0031: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.5-1/input0 [ 515.733231][ T3711] koneplus 0003:1E7D:2E22.0031: couldn't init struct koneplus_device [ 515.741468][ T3711] koneplus 0003:1E7D:2E22.0031: couldn't install mouse [ 515.749623][ T3711] koneplus: probe of 0003:1E7D:2E22.0031 failed with error -5 [ 515.937830][ T145] usb 6-1: USB disconnect, device number 66 [ 516.193030][ C1] cdc_wdm 1-1:1.0: unknown notification 61 received: index 46970 len 38478 [ 516.203470][ T3697] usb 1-1: USB disconnect, device number 94 15:18:24 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="7bf3"], 0x0) syz_usb_ep_write(r0, 0x0, 0x38, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f947") syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) 15:18:24 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_tos={0x0}}, 0x20) 15:18:24 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe, 0x10, r0, 0x0) 15:18:24 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) 15:18:24 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) recvfrom$inet6(r0, &(0x7f0000000640)=""/183, 0xb7, 0x10120, 0x0, 0x0) 15:18:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$nl_route_sched(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f00000001c0)=@newtclass={0x2c, 0x28, 0x0, 0x0, 0x0, {}, [@TCA_RATE={0x6}]}, 0x2c}}, 0x0) 15:18:24 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0x3, 0x0, 0x0, @remote}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 15:18:24 executing program 1: syz_io_uring_setup(0x72a, &(0x7f0000002280)={0x0, 0x0, 0x300}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000100)) 15:18:24 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000480)={0x16, 0x98, 0xfa00, {0x0}}, 0xa0) 15:18:24 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 15:18:24 executing program 3: syz_io_uring_setup(0x38a5, &(0x7f0000000000), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x3fc1, &(0x7f00000003c0), &(0x7f00006bf000/0x3000)=nil, &(0x7f00005d6000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 15:18:24 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={'\x00', 0x0, 0x9, 0x7}) [ 517.253051][ T3698] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 517.643169][ T3698] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 517.651816][ T3698] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 517.662201][ T3698] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 517.671482][ T3698] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 517.810340][ T3698] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 517.820025][ T3698] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 517.828209][ T3698] usb 1-1: Product: syz [ 517.832480][ T3698] usb 1-1: Manufacturer: syz [ 517.874610][ T3698] cdc_wdm 1-1:1.0: skipping garbage [ 517.879836][ T3698] cdc_wdm 1-1:1.0: skipping garbage [ 517.887463][ T3698] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 517.893455][ T3698] cdc_wdm 1-1:1.0: Unknown control protocol [ 518.279096][ T3698] usb 1-1: USB disconnect, device number 95 15:18:27 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="7bf3"], 0x0) syz_usb_ep_write(r0, 0x0, 0x38, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f947") syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) 15:18:27 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept4(r0, 0x0, 0x0, 0x0) 15:18:27 executing program 3: syz_io_uring_setup(0x38a5, &(0x7f0000000000), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x1ed2, &(0x7f0000000700), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff6000/0x7000)=nil, &(0x7f00000003c0), &(0x7f0000000780)) 15:18:27 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={'\x00', 0x0, 0x9, 0x7}) 15:18:27 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000040)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) 15:18:27 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000240)="fa", 0xfdef}], 0x1) recvfrom$inet6(r0, &(0x7f0000000640)=""/183, 0xb7, 0x10120, 0x0, 0x0) 15:18:27 executing program 3: r0 = io_uring_setup(0x5fd1, &(0x7f00000000c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x8000000) syz_io_uring_setup(0x635c, &(0x7f0000000180), &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:18:27 executing program 1: r0 = inotify_init1(0x0) fstat(r0, &(0x7f0000000080)) 15:18:27 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={'\x00', 0x0, 0x9, 0x7}) [ 519.208895][ T7206] blktrace: Concurrent blktraces are not allowed on nullb0 15:18:27 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x10) 15:18:27 executing program 3: syz_open_dev$evdev(&(0x7f0000000140), 0x3, 0x0) 15:18:27 executing program 5: r0 = syz_io_uring_setup(0x38a5, &(0x7f0000000000), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x16, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[0xffffffffffffffff]}, 0x1) [ 519.327937][ T7214] blktrace: Concurrent blktraces are not allowed on nullb0 [ 519.503469][ T3698] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 519.863231][ T3698] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 519.871957][ T3698] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 519.886953][ T3698] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 519.897297][ T3698] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.023307][ T3698] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 520.032397][ T3698] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 520.040740][ T3698] usb 1-1: Product: syz [ 520.045623][ T3698] usb 1-1: Manufacturer: syz [ 520.094295][ T3698] cdc_wdm 1-1:1.0: skipping garbage [ 520.100376][ T3698] cdc_wdm 1-1:1.0: skipping garbage [ 520.109420][ T3698] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 520.116056][ T3698] cdc_wdm 1-1:1.0: Unknown control protocol [ 520.501006][ T145] usb 1-1: USB disconnect, device number 96 15:18:29 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="7bf3"], 0x0) syz_usb_ep_write(r0, 0x0, 0x38, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f947") syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) 15:18:29 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={'\x00', 0x0, 0x9, 0x7}) 15:18:29 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x10) 15:18:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8}]}, 0x34}}, 0x0) 15:18:29 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, 0x0, 0x0) 15:18:29 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000240)="fa", 0xfdef}], 0x1) recvfrom$inet6(r0, &(0x7f0000000640)=""/183, 0xb7, 0x10120, 0x0, 0x0) 15:18:29 executing program 1: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 15:18:29 executing program 5: r0 = syz_io_uring_setup(0x38a5, &(0x7f0000000000), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000180)=r1, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) [ 521.424150][ T7225] blktrace: Concurrent blktraces are not allowed on nullb0 15:18:29 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) 15:18:29 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000003c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}}}, 0x30) 15:18:29 executing program 1: openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000100), 0x2ee03, 0x0) 15:18:29 executing program 5: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000140)) [ 521.773179][ T3689] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 522.183193][ T3689] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 522.191851][ T3689] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 522.202898][ T3689] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 522.212210][ T3689] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 522.353381][ T3689] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 522.362478][ T3689] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 522.370863][ T3689] usb 1-1: Product: syz [ 522.375377][ T3689] usb 1-1: Manufacturer: syz [ 522.436190][ T3689] cdc_wdm 1-1:1.0: skipping garbage [ 522.441494][ T3689] cdc_wdm 1-1:1.0: skipping garbage [ 522.448558][ T3689] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 522.459082][ T3689] cdc_wdm 1-1:1.0: Unknown control protocol [ 522.838607][ T145] usb 1-1: USB disconnect, device number 97 15:18:31 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="7bf3"], 0x0) syz_usb_ep_write(r0, 0x0, 0x3d, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71b") syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) 15:18:31 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) 15:18:31 executing program 3: r0 = eventfd(0x0) write$FUSE_WRITE(r0, 0x0, 0x0) 15:18:31 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0)}}, 0x7ffffffff000) 15:18:31 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @private1}}) 15:18:31 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000240)="fa", 0xfdef}], 0x1) recvfrom$inet6(r0, &(0x7f0000000640)=""/183, 0xb7, 0x10120, 0x0, 0x0) 15:18:31 executing program 1: r0 = syz_io_uring_setup(0x38a5, &(0x7f0000000000), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x6, 0x0, 0x1) 15:18:31 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000040)) 15:18:31 executing program 5: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x5450, 0x0) 15:18:31 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xf5ffffff00000000}}, 0x1c) 15:18:31 executing program 1: r0 = io_uring_setup(0x5fd1, &(0x7f00000000c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000e, 0x12, r0, 0x8000000) syz_io_uring_setup(0x635c, &(0x7f0000000180), &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:18:31 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x5460, 0x0) [ 524.073130][ T3702] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 524.433107][ T3702] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 524.441835][ T3702] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 524.452104][ T3702] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 524.461262][ T3702] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.583735][ T3702] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 524.592810][ T3702] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 524.600935][ T3702] usb 1-1: Product: syz [ 524.609935][ T3702] usb 1-1: Manufacturer: syz [ 524.654963][ T3702] cdc_wdm 1-1:1.0: skipping garbage [ 524.660211][ T3702] cdc_wdm 1-1:1.0: skipping garbage [ 524.667638][ T3702] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 524.673713][ T3702] cdc_wdm 1-1:1.0: Unknown control protocol [ 525.060338][ T3689] usb 1-1: USB disconnect, device number 98 15:18:33 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="7bf3"], 0x0) syz_usb_ep_write(r0, 0x0, 0x3d, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71b") syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) 15:18:33 executing program 2: r0 = epoll_create1(0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "2af01e1d113c81fcf7603ca5a8d500"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000140)) r6 = dup3(r5, r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r6, 0x0) 15:18:33 executing program 5: fsopen(&(0x7f00000000c0)='cgroup\x00', 0x0) 15:18:33 executing program 3: syz_open_dev$loop(&(0x7f0000000140), 0x80000001, 0x200) 15:18:33 executing program 1: syz_clone(0x20084000, 0x0, 0x0, 0x0, 0x0, 0x0) 15:18:33 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000240)="fa", 0xfdef}], 0x1) recvfrom$inet6(r0, &(0x7f0000000640)=""/183, 0xb7, 0x10120, 0x0, 0x0) 15:18:33 executing program 3: bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 15:18:33 executing program 5: r0 = fsopen(&(0x7f0000000140)='pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000180)='#,\x00', &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c) 15:18:33 executing program 1: syz_clone(0xc80a0100, 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000180)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 15:18:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0xeb0, 0x8, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_FLAGS={0x8}]}, {0xf0, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @private0}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x74, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @multicast2}}]}, {0x18, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @broadcast}}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0x7cc, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x1f4, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}, {0x4}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @loopback}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0x568, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x148, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}]}]}]}, {0x68, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @multicast2}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x524, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1f}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x7df, @private0, 0x5}}, @WGPEER_A_ALLOWEDIPS={0x4d8, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}]}]}]}]}, 0xec4}}, 0x0) 15:18:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)='=', 0x1}], 0x1, &(0x7f0000000100)=[{0x10}], 0x10}, 0x0) 15:18:34 executing program 5: syz_clone(0x44000280, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) [ 526.323114][ T143] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 526.714364][ T143] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 526.728868][ T143] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 526.739325][ T143] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 526.751150][ T143] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 526.913182][ T143] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 526.922273][ T143] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 526.931598][ T143] usb 1-1: Product: syz [ 526.936136][ T143] usb 1-1: Manufacturer: syz [ 527.004140][ T143] cdc_wdm 1-1:1.0: skipping garbage [ 527.009405][ T143] cdc_wdm 1-1:1.0: skipping garbage [ 527.017863][ T143] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 527.024085][ T143] cdc_wdm 1-1:1.0: Unknown control protocol [ 527.413569][ T145] usb 1-1: USB disconnect, device number 99 15:18:36 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="7bf3"], 0x0) syz_usb_ep_write(r0, 0x0, 0x3d, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71b") syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) 15:18:36 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={0x0}}, 0x0) 15:18:36 executing program 3: socketpair(0x10, 0x2, 0x2ee6, &(0x7f0000005240)) 15:18:36 executing program 5: syz_clone(0x44000280, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 15:18:36 executing program 2: r0 = epoll_create1(0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "2af01e1d113c81fcf7603ca5a8d500"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000140)) r6 = dup3(r5, r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r6, 0x0) 15:18:36 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000240)="fa", 0xfdef}], 0x1) recvfrom$inet6(r0, &(0x7f0000000640)=""/183, 0xb7, 0x10120, 0x0, 0x0) 15:18:36 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) 15:18:36 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000400)=""/158, 0x1a, 0x9e, 0x1}, 0x20) 15:18:36 executing program 3: capset(&(0x7f0000000200)={0x20071026}, &(0x7f0000000240)) syz_mount_image$vfat(&(0x7f0000002540), &(0x7f0000002580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000003840)) 15:18:36 executing program 1: syz_clone(0xe24c300, 0x0, 0xfffffc9f, 0x0, 0x0, 0x0) [ 528.545395][ T7319] capability: warning: `syz-executor.3' uses deprecated v2 capabilities in a way that may be insecure 15:18:36 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000180)='%&*\\\xc7$(\x00', &(0x7f00000001c0)='./file0\x00', r0) [ 528.643101][ T3689] usb 1-1: new high-speed USB device number 100 using dummy_hcd 15:18:36 executing program 5: syz_clone(0x44000280, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) [ 529.003364][ T3689] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 529.012771][ T3689] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 529.038742][ T3689] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 529.094682][ T3689] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 529.223230][ T3689] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 529.253059][ T3689] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 529.261111][ T3689] usb 1-1: Product: syz [ 529.303132][ T3689] usb 1-1: Manufacturer: syz [ 529.359517][ T3689] cdc_wdm 1-1:1.0: skipping garbage [ 529.373325][ T3689] cdc_wdm 1-1:1.0: skipping garbage [ 529.384254][ T3689] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 529.390217][ T3689] cdc_wdm 1-1:1.0: Unknown control protocol [ 529.767556][ T3698] usb 1-1: USB disconnect, device number 100 15:18:38 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="7bf3"], 0x0) syz_usb_ep_write(r0, 0x0, 0x3f, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad88") syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) 15:18:38 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0xb}]}}, &(0x7f0000000400)=""/158, 0x26, 0x9e, 0x1}, 0x20) 15:18:38 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000180)='%&*\\\xc7$(\x00', &(0x7f00000001c0)='./file0\x00', r0) 15:18:38 executing program 5: syz_clone(0x44000280, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 15:18:38 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000240)="fa", 0xfdef}], 0x1) recvfrom$inet6(r0, &(0x7f0000000640)=""/183, 0xb7, 0x10120, 0x0, 0x0) 15:18:38 executing program 2: r0 = epoll_create1(0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "2af01e1d113c81fcf7603ca5a8d500"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000140)) r6 = dup3(r5, r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r6, 0x0) 15:18:38 executing program 1: syz_clone(0x87041200, 0x0, 0xfffffffffffffeed, 0x0, 0x0, 0x0) 15:18:38 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000180)='%&*\\\xc7$(\x00', &(0x7f00000001c0)='./file0\x00', r0) 15:18:38 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000180)='%&*\\\xc7$(\x00', &(0x7f00000001c0)='./file0\x00', r0) 15:18:38 executing program 1: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x210000, 0x0) 15:18:38 executing program 3: select(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x7fffffffffffffff}, 0x0) 15:18:38 executing program 1: socket$unix(0x1, 0xa7df57763b215d96, 0x0) [ 531.043018][ T3698] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 531.413346][ T3698] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 531.422014][ T3698] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 531.463019][ T3698] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 531.490588][ T3698] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 531.643302][ T3698] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 531.652429][ T3698] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 531.661386][ T3698] usb 1-1: Product: syz [ 531.667655][ T3698] usb 1-1: Manufacturer: syz [ 531.734193][ T3698] cdc_wdm 1-1:1.0: skipping garbage [ 531.739449][ T3698] cdc_wdm 1-1:1.0: skipping garbage [ 531.753676][ T3698] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 531.759666][ T3698] cdc_wdm 1-1:1.0: Unknown control protocol [ 532.146787][ T3702] usb 1-1: USB disconnect, device number 101 15:18:40 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="7bf3"], 0x0) syz_usb_ep_write(r0, 0x0, 0x3f, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad88") syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) 15:18:40 executing program 1: mount$9p_tcp(&(0x7f0000000200), &(0x7f0000000240)='.\x00', &(0x7f0000000280), 0x0, &(0x7f0000002380)) 15:18:40 executing program 3: syz_mount_image$vfat(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$security_evm(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, 0xb, 0x0) 15:18:40 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x48) 15:18:40 executing program 4: bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000240)="fa", 0xfdef}], 0x1) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000640)=""/183, 0xb7, 0x10120, 0x0, 0x0) 15:18:40 executing program 2: r0 = epoll_create1(0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "2af01e1d113c81fcf7603ca5a8d500"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000140)) r6 = dup3(r5, r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r6, 0x0) 15:18:41 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, 0x0) 15:18:41 executing program 4: bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000240)="fa", 0xfdef}], 0x1) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000640)=""/183, 0xb7, 0x10120, 0x0, 0x0) 15:18:41 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000440), &(0x7f0000000480)='./file0\x00', 0xfe54, 0x0) [ 533.081534][ T7366] 9pnet_fd: p9_fd_create_tcp (7366): problem connecting socket to 127.0.0.1 15:18:41 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f00000000c0)) 15:18:41 executing program 5: syz_mount_image$vfat(&(0x7f0000002540), &(0x7f0000002580)='./file0\x00', 0x0, 0x0, &(0x7f00000037c0), 0x0, &(0x7f0000003840)={[{@numtail}]}) 15:18:41 executing program 4: bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000240)="fa", 0xfdef}], 0x1) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000640)=""/183, 0xb7, 0x10120, 0x0, 0x0) [ 533.389078][ T7382] FAT-fs (loop5): bogus number of reserved sectors [ 533.412183][ T7382] FAT-fs (loop5): Can't find a valid FAT filesystem [ 533.473142][ T3697] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 533.860813][ T3697] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 533.890602][ T3697] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 533.901114][ T3697] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 533.920261][ T3697] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 534.055699][ T3697] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 534.064896][ T3697] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 534.073331][ T3697] usb 1-1: Product: syz [ 534.077520][ T3697] usb 1-1: Manufacturer: syz [ 534.124275][ T3697] cdc_wdm 1-1:1.0: skipping garbage [ 534.129548][ T3697] cdc_wdm 1-1:1.0: skipping garbage [ 534.148271][ T3697] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 534.154513][ T3697] cdc_wdm 1-1:1.0: Unknown control protocol [ 534.541937][ T3697] usb 1-1: USB disconnect, device number 102 15:18:43 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="7bf3"], 0x0) syz_usb_ep_write(r0, 0x0, 0x3f, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad88") syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) 15:18:43 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x4, 0x0, 0x0) 15:18:43 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000240)="fa", 0xfdef}], 0x1) recvfrom$inet6(r0, &(0x7f0000000640)=""/183, 0xb7, 0x10120, 0x0, 0x0) 15:18:43 executing program 5: syz_emit_ethernet(0x32, &(0x7f0000000140)={@broadcast, @broadcast, @val, {@ipv4}}, 0x0) 15:18:43 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000005c0)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) 15:18:43 executing program 2: capset(&(0x7f0000000200)={0x20071026}, &(0x7f0000000240)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 15:18:43 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) clock_gettime(0x0, &(0x7f0000000440)) 15:18:43 executing program 2: syz_clone(0x2000c00, 0x0, 0x0, 0x0, 0x0, 0x0) 15:18:43 executing program 3: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x10000}, 0x0, 0x0) 15:18:43 executing program 5: syz_clone(0xc80a0100, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)) 15:18:43 executing program 2: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x1) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00'}, 0x10) 15:18:43 executing program 3: syz_open_dev$loop(&(0x7f0000000040), 0x0, 0xc800) [ 535.783121][ T3689] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 536.143265][ T3689] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 536.152024][ T3689] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 536.162892][ T3689] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 536.172269][ T3689] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 536.303204][ T3689] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 536.312329][ T3689] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 536.320915][ T3689] usb 1-1: Product: syz [ 536.325891][ T3689] usb 1-1: Manufacturer: syz [ 536.364845][ T3689] cdc_wdm 1-1:1.0: skipping garbage [ 536.370293][ T3689] cdc_wdm 1-1:1.0: skipping garbage [ 536.376975][ T3689] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 536.384635][ T3689] cdc_wdm 1-1:1.0: Unknown control protocol [ 536.777250][ T3697] usb 1-1: USB disconnect, device number 103 15:18:45 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="7bf3"], 0x0) syz_usb_ep_write(r0, 0x0, 0x40, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e") syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) 15:18:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x6) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x20, r1, 0x603, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 15:18:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="68000000b8b45b"], 0x68}}, 0x0) 15:18:45 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001000)={'wpan1\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001340)={0x14}, 0x14}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 15:18:45 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @local}}}}) 15:18:45 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000240)="fa", 0xfdef}], 0x1) recvfrom$inet6(r0, &(0x7f0000000640)=""/183, 0xb7, 0x10120, 0x0, 0x0) 15:18:45 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmsg(r0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x41}, 0x0) 15:18:45 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$FUSE_ENTRY(r0, 0x0, 0x0) 15:18:45 executing program 5: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_rr_get_interval(0x0, &(0x7f0000002080)) [ 537.729794][ T7416] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 15:18:45 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001340)={0x14}, 0x14}}, 0x20000040) 15:18:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0xeb0, 0x8, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_FLAGS={0x8}]}, {0xf0, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @private0}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x74, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @multicast2}}]}, {0x18, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @broadcast}}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0x7cc, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x1f4, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}, {0x4}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @loopback}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0x568, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x148, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}]}]}]}, {0x68, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @multicast2}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x524, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x7}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1f}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x7df, @private0, 0x5}}, @WGPEER_A_ALLOWEDIPS={0x4d8, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}]}]}]}]}, 0xec4}}, 0x0) 15:18:45 executing program 1: syz_mount_image$erofs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)=@random={'security.', 'subj_type'}, 0x0, 0x2, 0x0) [ 538.023154][ T3689] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 538.383113][ T3689] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 538.391866][ T3689] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 538.402490][ T3689] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 538.411749][ T3689] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 538.534127][ T3689] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 538.550282][ T3689] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 538.564936][ T3689] usb 1-1: Product: syz [ 538.569220][ T3689] usb 1-1: Manufacturer: syz [ 538.613982][ T3689] cdc_wdm 1-1:1.0: skipping garbage [ 538.619261][ T3689] cdc_wdm 1-1:1.0: skipping garbage [ 538.630619][ T3689] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 538.637665][ T3689] cdc_wdm 1-1:1.0: Unknown control protocol [ 539.020484][ T3689] usb 1-1: USB disconnect, device number 104 15:18:47 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="7bf3"], 0x0) syz_usb_ep_write(r0, 0x0, 0x40, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e") syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) 15:18:47 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000240)="fa", 0xfdef}], 0x1) recvfrom$inet6(r0, &(0x7f0000000640)=""/183, 0xb7, 0x10120, 0x0, 0x0) 15:18:47 executing program 3: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={[], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}]}) 15:18:47 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x8923, &(0x7f0000000500)={'tunl0\x00', 0x0}) 15:18:47 executing program 2: utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x0) 15:18:47 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000000)={'erspan0\x00', 0x0, 0x7800, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast}}}}) 15:18:47 executing program 5: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') ioctl$NS_GET_PARENT(r0, 0xb704, 0x0) 15:18:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)='=', 0x1}], 0x1, &(0x7f0000000100)=[{0x28, 0x0, 0x0, "5934e2413740ca7adc09c61842e45b81f9"}], 0x28}, 0x0) 15:18:47 executing program 1: select(0xfffffffffffffe66, &(0x7f0000000040), &(0x7f0000000140), 0x0, 0x0) 15:18:47 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5441, 0x0) 15:18:47 executing program 5: syz_mount_image$f2fs(&(0x7f0000001900), &(0x7f0000001940)='./file0\x00', 0x0, 0x0, 0x0, 0x1202800, &(0x7f0000003a80)) 15:18:47 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000240), 0x0, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000080), 0x0, 0x0, 0x3) [ 540.313123][ T143] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 540.717734][ T143] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 540.726425][ T143] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 540.741106][ T143] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 540.750280][ T143] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 540.893097][ T143] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 540.902239][ T143] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 540.910671][ T143] usb 1-1: Product: syz [ 540.915042][ T143] usb 1-1: Manufacturer: syz [ 540.964379][ T143] cdc_wdm 1-1:1.0: skipping garbage [ 540.969639][ T143] cdc_wdm 1-1:1.0: skipping garbage [ 540.976785][ T143] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 540.982715][ T143] cdc_wdm 1-1:1.0: Unknown control protocol [ 541.372429][ T3689] usb 1-1: USB disconnect, device number 105 15:18:50 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="7bf3"], 0x0) syz_usb_ep_write(r0, 0x0, 0x40, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e") syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) 15:18:50 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7e, 0x28, 0x3, 0x20, 0x1199, 0x9060, 0xec56, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0xc9, 0xdf}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x843}}]}) 15:18:50 executing program 1: timer_create(0x7, 0x0, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, r0+10000000}, {0x0, r1+60000000}}, 0x0) timer_gettime(0x0, &(0x7f0000000000)) 15:18:50 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5425, 0x0) 15:18:50 executing program 2: fchmodat(0xffffffffffffffff, &(0x7f0000004b00)='./file1\x00', 0x0) 15:18:50 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, 0x0, 0x0) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000240)="fa", 0xfdef}], 0x1) recvfrom$inet6(r0, &(0x7f0000000640)=""/183, 0xb7, 0x10120, 0x0, 0x0) 15:18:50 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x11, 0x2, 0x0, 0x0) 15:18:50 executing program 3: fsmount(0xffffffffffffffff, 0x0, 0x7e) 15:18:50 executing program 2: unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) 15:18:50 executing program 1: memfd_create(&(0x7f0000000580)='bpf_lsm_cred_free\x00', 0x4) 15:18:50 executing program 2: syz_open_dev$vcsu(&(0x7f0000000340), 0x0, 0x44441) 15:18:50 executing program 3: syz_usb_connect$uac1(0x0, 0x84, &(0x7f0000000000)={{0x12, 0x1, 0x870a29e3ced9e386, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x9}, [@mixer_unit={0x5}, @selector_unit={0x5, 0x24, 0x5, 0x0, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x0, 0x0, 0x2d}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x80, 0x0, 0x6, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x20, &(0x7f0000000100)={0x5, 0xf, 0x20, 0x2, [@ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x2, 0xf000, 0x100, [0xc000]}, @wireless={0xb}]}, 0x5, [{0x0, 0x0}, {0x4, &(0x7f0000000300)=@lang_id={0x4}}, {0x4, &(0x7f0000000340)=@lang_id={0x4}}, {0x0, 0x0}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}]}) [ 542.573312][ T3689] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 542.603040][ T3711] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 542.763051][ T143] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 542.813135][ T3689] usb 6-1: Using ep0 maxpacket: 32 [ 542.963141][ T3711] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 542.971862][ T3711] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 542.982454][ T3711] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 542.992100][ T3711] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 543.043171][ T143] usb 4-1: Using ep0 maxpacket: 8 [ 543.103191][ T3689] usb 6-1: New USB device found, idVendor=1199, idProduct=9060, bcdDevice=ec.56 [ 543.112351][ T3689] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.120962][ T3689] usb 6-1: Product: syz [ 543.125891][ T3711] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 543.135049][ T3689] usb 6-1: Manufacturer: ࡃ [ 543.140308][ T3711] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 543.148651][ T3689] usb 6-1: SerialNumber: syz [ 543.155546][ T3689] usb 6-1: config 0 descriptor?? [ 543.160649][ T3711] usb 1-1: Product: syz [ 543.165190][ T3711] usb 1-1: Manufacturer: syz [ 543.218408][ T3711] cdc_wdm 1-1:1.0: skipping garbage [ 543.224469][ T3711] cdc_wdm 1-1:1.0: skipping garbage [ 543.231489][ T3711] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 543.242872][ T3711] cdc_wdm 1-1:1.0: Unknown control protocol [ 543.253199][ T143] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 543.262280][ T143] usb 4-1: config 1 has no interface number 1 [ 543.269386][ T143] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 543.286977][ T143] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 543.401345][ T3689] usb 6-1: USB disconnect, device number 67 [ 543.573228][ T143] usb 4-1: string descriptor 0 read error: -22 [ 543.579674][ T143] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 543.589121][ T143] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.621294][ T3689] usb 1-1: USB disconnect, device number 106 [ 543.643371][ T143] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 543.861405][ T143] usb 4-1: USB disconnect, device number 2 15:18:52 executing program 2: syz_mount_image$vfat(&(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, &(0x7f00000018c0), 0x0, &(0x7f0000001980)) 15:18:52 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), r0) 15:18:52 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, 0x0, 0x0) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000240)="fa", 0xfdef}], 0x1) recvfrom$inet6(r0, &(0x7f0000000640)=""/183, 0xb7, 0x10120, 0x0, 0x0) 15:18:52 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f6, &(0x7f00000000c0)={'sit0\x00', 0x0}) 15:18:52 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="7bf3"], 0x0) syz_usb_ep_write(r0, 0x0, 0x41, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e49") syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) 15:18:52 executing program 3: syz_usb_connect$uac1(0x0, 0x84, &(0x7f0000000000)={{0x12, 0x1, 0x870a29e3ced9e386, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x9}, [@mixer_unit={0x5}, @selector_unit={0x5, 0x24, 0x5, 0x0, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x0, 0x0, 0x2d}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x80, 0x0, 0x6, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x20, &(0x7f0000000100)={0x5, 0xf, 0x20, 0x2, [@ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x2, 0xf000, 0x100, [0xc000]}, @wireless={0xb}]}, 0x5, [{0x0, 0x0}, {0x4, &(0x7f0000000300)=@lang_id={0x4}}, {0x4, &(0x7f0000000340)=@lang_id={0x4}}, {0x0, 0x0}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}]}) 15:18:52 executing program 5: fsopen(&(0x7f0000001e00)='ufs\x00', 0x0) 15:18:52 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x10}, 0x48) 15:18:52 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x8917, &(0x7f0000000500)={'tunl0\x00', 0x0}) [ 544.594427][ T7487] FAT-fs (loop2): bogus number of reserved sectors [ 544.602451][ T7487] FAT-fs (loop2): Can't find a valid FAT filesystem 15:18:52 executing program 5: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x3d1201, 0x0) 15:18:52 executing program 2: syz_mount_image$erofs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)) 15:18:52 executing program 1: r0 = open(&(0x7f0000000000)='./file0\x00', 0xca040, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, 0x0) 15:18:52 executing program 2: syz_usb_connect(0x0, 0x59, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7e, 0x28, 0x3, 0x20, 0x1199, 0x9060, 0xec56, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x47, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x75, 0xc9, 0xdf, 0x0, [@uac_control={{}, [@input_terminal={0xc}, @output_terminal={0x9}, @extension_unit={0x7}]}], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}]}}]}}]}}, 0x0) 15:18:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_delrule={0x1c, 0x21, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x30007}}, 0x1c}, 0x1, 0x0, 0x0, 0xc4}, 0x4008040) [ 544.823111][ T3698] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 544.843375][ T3689] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 545.063070][ T3698] usb 4-1: Using ep0 maxpacket: 8 [ 545.143111][ T3697] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 545.213084][ T3689] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 545.221897][ T3689] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 545.232415][ T3689] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 545.241548][ T3689] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 545.263149][ T3698] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 545.272248][ T3698] usb 4-1: config 1 has no interface number 1 [ 545.278861][ T3698] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 545.288324][ T3698] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 15:18:53 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, 0x0, 0x0) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000240)="fa", 0xfdef}], 0x1) recvfrom$inet6(r0, &(0x7f0000000640)=""/183, 0xb7, 0x10120, 0x0, 0x0) 15:18:53 executing program 1: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/hwmon', 0x9e86238983d51c8e, 0x0) [ 545.363965][ T3689] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 545.380552][ T3689] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 545.389686][ T3689] usb 1-1: Product: syz [ 545.403005][ T3689] usb 1-1: Manufacturer: syz [ 545.403261][ T3697] usb 3-1: Using ep0 maxpacket: 32 [ 545.464177][ T3689] cdc_wdm 1-1:1.0: skipping garbage [ 545.469424][ T3689] cdc_wdm 1-1:1.0: skipping garbage [ 545.480233][ T3689] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 545.486537][ T3689] cdc_wdm 1-1:1.0: Unknown control protocol [ 545.533126][ T3698] usb 4-1: string descriptor 0 read error: -22 [ 545.539558][ T3698] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 545.548988][ T3698] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.563211][ T3697] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 545.572160][ T3697] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 545.606227][ T3698] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 545.753412][ T3697] usb 3-1: New USB device found, idVendor=1199, idProduct=9060, bcdDevice=ec.56 [ 545.769278][ T3697] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.778295][ T3697] usb 3-1: Product: syz [ 545.782476][ T3697] usb 3-1: Manufacturer: syz [ 545.791164][ T3697] usb 3-1: SerialNumber: syz [ 545.798533][ T3697] usb 3-1: config 0 descriptor?? [ 545.832271][ T3698] usb 4-1: USB disconnect, device number 3 [ 546.047655][ T3689] usb 3-1: USB disconnect, device number 88 [ 546.233055][ C0] cdc_wdm 1-1:1.0: unknown notification 61 received: index 46970 len 38478 [ 546.272975][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 546.275971][ T143] usb 1-1: USB disconnect, device number 107 [ 546.279614][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 546.279639][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 15:18:54 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="7bf3"], 0x0) syz_usb_ep_write(r0, 0x0, 0x41, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e49") syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) 15:18:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f0000001180)) 15:18:54 executing program 5: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x121a00, 0x0) 15:18:54 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000240)="fa", 0xfdef}], 0x1) recvfrom$inet6(r0, &(0x7f0000000640)=""/183, 0xb7, 0x10120, 0x0, 0x0) 15:18:54 executing program 3: syz_usb_connect$uac1(0x0, 0x84, &(0x7f0000000000)={{0x12, 0x1, 0x870a29e3ced9e386, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x9}, [@mixer_unit={0x5}, @selector_unit={0x5, 0x24, 0x5, 0x0, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x0, 0x0, 0x2d}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x80, 0x0, 0x6, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x20, &(0x7f0000000100)={0x5, 0xf, 0x20, 0x2, [@ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x2, 0xf000, 0x100, [0xc000]}, @wireless={0xb}]}, 0x5, [{0x0, 0x0}, {0x4, &(0x7f0000000300)=@lang_id={0x4}}, {0x4, &(0x7f0000000340)=@lang_id={0x4}}, {0x0, 0x0}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}]}) 15:18:54 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 15:18:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001880)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x10, 0x5, 0x0, 0x1, [@IFLA_BRPORT_FLUSH={0x4}, @IFLA_BRPORT_STATE={0x5}]}}}]}, 0x48}}, 0x0) 15:18:54 executing program 1: syz_mount_image$vfat(&(0x7f0000000480), 0x0, 0x0, 0x1, &(0x7f00000018c0)=[{&(0x7f00000005c0)="8e", 0x1}], 0x0, &(0x7f0000001980)) 15:18:54 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000240), 0x0, 0x0) getdents(r0, 0x0, 0x0) 15:18:55 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x10, 0x0, 0x0, 0x7}, 0x48) [ 547.072594][ T7526] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.096682][ T7526] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.104392][ T7526] bridge0: port 1(bridge_slave_0) entered forwarding state 15:18:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f0000000080)) 15:18:55 executing program 1: syz_mount_image$vfat(&(0x7f0000000480), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)) [ 547.313168][ T3697] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 547.363119][ T3689] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 547.573162][ T3697] usb 4-1: Using ep0 maxpacket: 8 [ 547.723134][ T3689] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 547.731842][ T3689] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 547.742014][ T3689] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 547.752041][ T3689] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 547.793245][ T3697] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 547.802231][ T3697] usb 4-1: config 1 has no interface number 1 [ 547.808421][ T3697] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 547.817535][ T3697] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 547.893200][ T3689] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 547.902489][ T3689] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 547.910804][ T3689] usb 1-1: Product: syz [ 547.915482][ T3689] usb 1-1: Manufacturer: syz [ 547.964311][ T3689] cdc_wdm 1-1:1.0: skipping garbage [ 547.969708][ T3689] cdc_wdm 1-1:1.0: skipping garbage [ 547.977625][ T3689] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 547.984340][ T3689] cdc_wdm 1-1:1.0: Unknown control protocol [ 548.063195][ T3697] usb 4-1: string descriptor 0 read error: -22 [ 548.069442][ T3697] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 548.083679][ T3697] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.148332][ T3697] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 548.367867][ T3697] usb 4-1: USB disconnect, device number 4 [ 548.743022][ C1] cdc_wdm 1-1:1.0: unknown notification 61 received: index 46970 len 38478 [ 548.782978][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 548.789637][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 548.797937][ T143] usb 1-1: USB disconnect, device number 108 [ 548.804115][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 548.804145][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 548.804169][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 15:18:57 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="7bf3"], 0x0) syz_usb_ep_write(r0, 0x0, 0x41, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e49") syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) 15:18:57 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000240), 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000040)={{}, {}, [], {}, [{0x8, 0x0, 0xffffffffffffffff}]}, 0x2c, 0x0) 15:18:57 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)={[], [{@appraise}]}) 15:18:57 executing program 5: syz_mount_image$f2fs(0x0, &(0x7f0000007680)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000002200)='./file0\x00', &(0x7f0000002240)='system.posix_acl_default\x00', &(0x7f0000003c00)={{}, {}, [{}, {}], {}, [{}], {0x10, 0x1}, {0x20, 0x2}}, 0x3c, 0x0) 15:18:57 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000240)="fa", 0xfdef}], 0x1) recvfrom$inet6(r0, &(0x7f0000000640)=""/183, 0xb7, 0x10120, 0x0, 0x0) 15:18:57 executing program 3: syz_usb_connect$uac1(0x0, 0x84, &(0x7f0000000000)={{0x12, 0x1, 0x870a29e3ced9e386, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x9}, [@mixer_unit={0x5}, @selector_unit={0x5, 0x24, 0x5, 0x0, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x0, 0x0, 0x2d}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x80, 0x0, 0x6, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x20, &(0x7f0000000100)={0x5, 0xf, 0x20, 0x2, [@ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x2, 0xf000, 0x100, [0xc000]}, @wireless={0xb}]}, 0x5, [{0x0, 0x0}, {0x4, &(0x7f0000000300)=@lang_id={0x4}}, {0x4, &(0x7f0000000340)=@lang_id={0x4}}, {0x0, 0x0}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}]}) 15:18:57 executing program 5: syz_mount_image$vfat(&(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0}], 0x0, &(0x7f0000001980)) 15:18:57 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) bind$tipc(r0, 0x0, 0x0) 15:18:57 executing program 2: r0 = open(&(0x7f0000000000)='./file0\x00', 0xca040, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000040)={@id={0x2, 0x0, @b}, 0x40, 0x0, '\x00', @b}) 15:18:57 executing program 1: get_mempolicy(&(0x7f0000000000), &(0x7f0000000240), 0x1, &(0x7f0000ff5000/0xb000)=nil, 0x2) [ 549.630328][ T7556] FAT-fs (loop5): bogus number of reserved sectors [ 549.642618][ T7556] FAT-fs (loop5): Can't find a valid FAT filesystem 15:18:57 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) 15:18:57 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_udp_int(r0, 0x11, 0x0, 0x0, 0x0) [ 549.773137][ T3711] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 549.843015][ T3689] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 550.033037][ T3711] usb 4-1: Using ep0 maxpacket: 8 [ 550.213128][ T3689] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 550.221788][ T3689] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 550.233211][ T3711] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 550.242202][ T3711] usb 4-1: config 1 has no interface number 1 [ 550.248702][ T3689] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 550.257965][ T3689] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 550.269187][ T3711] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 550.278612][ T3711] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 550.403167][ T3689] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 550.412830][ T3689] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 550.421526][ T3689] usb 1-1: Product: syz [ 550.426117][ T3689] usb 1-1: Manufacturer: syz [ 550.463855][ T3689] cdc_wdm 1-1:1.0: skipping garbage [ 550.469111][ T3689] cdc_wdm 1-1:1.0: skipping garbage [ 550.477733][ T3689] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 550.483987][ T3689] cdc_wdm 1-1:1.0: Unknown control protocol [ 550.533119][ T3711] usb 4-1: string descriptor 0 read error: -22 [ 550.539418][ T3711] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 550.548789][ T3711] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.595820][ T3711] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 550.825214][ T3711] usb 4-1: USB disconnect, device number 5 [ 550.850987][ T3660] udevd[3660]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 551.232997][ C1] cdc_wdm 1-1:1.0: unknown notification 61 received: index 46970 len 38478 [ 551.273053][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 551.276074][ T3711] usb 1-1: USB disconnect, device number 109 [ 551.279701][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 551.279728][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 15:18:59 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="7bf3"], 0x0) syz_usb_ep_write(r0, 0x0, 0x41, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e49") syz_usb_disconnect(r0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) 15:18:59 executing program 5: timer_create(0x7, 0x0, &(0x7f0000000240)) 15:18:59 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) connect$unix(r0, 0x0, 0x0) 15:18:59 executing program 2: timer_create(0x0, &(0x7f0000000280)={0x0, 0x0, 0x4, @thr={0x0, 0x0}}, 0x0) 15:18:59 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000240)="fa", 0xfdef}], 0x1) recvfrom$inet6(r0, &(0x7f0000000640)=""/183, 0xb7, 0x10120, 0x0, 0x0) 15:18:59 executing program 3: socket$unix(0x1, 0x873740e3de2107ac, 0x0) 15:18:59 executing program 3: clock_gettime(0x0, &(0x7f0000000100)) pselect6(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x1}, &(0x7f00000000c0)={0x7}, 0x0, 0x0) 15:18:59 executing program 5: syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net\x00') 15:18:59 executing program 2: io_setup(0x0, &(0x7f00000020c0)=0x0) io_destroy(r0) 15:18:59 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) fadvise64(r0, 0x0, 0x0, 0x4) 15:19:00 executing program 5: timer_create(0x0, 0x0, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{}, {0x77359400}}, 0x0) 15:19:00 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) [ 552.333010][ T3711] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 552.693126][ T3711] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 552.702578][ T3711] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 552.712833][ T3711] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 552.721960][ T3711] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 552.856786][ T3711] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 552.866004][ T3711] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 552.879848][ T3711] usb 1-1: Product: syz [ 552.884370][ T3711] usb 1-1: Manufacturer: syz [ 552.924370][ T3711] cdc_wdm 1-1:1.0: skipping garbage [ 552.929608][ T3711] cdc_wdm 1-1:1.0: skipping garbage [ 552.936132][ T3711] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 552.942062][ T3711] cdc_wdm 1-1:1.0: Unknown control protocol 15:19:02 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="7bf3"], 0x0) syz_usb_ep_write(r0, 0x0, 0x41, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e49") syz_usb_disconnect(r0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) 15:19:02 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000", @ANYBLOB], 0x0) syz_usb_disconnect(r0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_open_dev$char_usb(0xc, 0xb4, 0x4) 15:19:02 executing program 1: r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x2}}]}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000500)={0x14, 0x0, &(0x7f00000004c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140a}}}, 0x0) 15:19:02 executing program 3: add_key$user(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000780), &(0x7f00000007c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key$user(&(0x7f00000006c0), &(0x7f0000000700)={'syz', 0x3}, &(0x7f0000000740)="a2", 0x1, r0) 15:19:02 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000023c0), 0x0, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r0, 0xc0186419, &(0x7f0000001c40)={0x0, 0x0, 0x0}) 15:19:02 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, 0x0, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000240)="fa", 0xfdef}], 0x1) recvfrom$inet6(r0, &(0x7f0000000640)=""/183, 0xb7, 0x10120, 0x0, 0x0) [ 555.071056][ T3711] usb 1-1: USB disconnect, device number 110 15:19:03 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002a00)={0x6, 0x1, &(0x7f0000002840)=@raw=[@alu={0x7}], &(0x7f0000002880)='syzkaller\x00', 0x1, 0x8f, &(0x7f00000028c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 15:19:03 executing program 3: epoll_create(0x41) 15:19:03 executing program 3: openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0xd0000, 0x0) 15:19:03 executing program 3: r0 = epoll_create1(0x0) r1 = inotify_init1(0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, 0x0) 15:19:03 executing program 5: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x0, 0x0) 15:19:03 executing program 5: r0 = epoll_create(0x5) epoll_wait(r0, &(0x7f00000000c0)=[{}], 0x1, 0x0) [ 555.413090][ T3689] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 555.420757][ T3698] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 555.583205][ T3711] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 555.663115][ T3698] usb 2-1: Using ep0 maxpacket: 32 [ 555.773187][ T3689] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 555.781926][ T3689] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 555.792267][ T3698] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 555.805302][ T3689] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 66 [ 555.933294][ T3689] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 555.951738][ T3689] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 555.960308][ T3711] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 555.973121][ T3698] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 555.982185][ T3698] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.990357][ T3689] usb 3-1: Product: syz [ 555.994773][ T3711] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 556.004980][ T3689] usb 3-1: Manufacturer: syz [ 556.011517][ T3698] usb 2-1: Product: syz [ 556.015768][ T3698] usb 2-1: Manufacturer: syz [ 556.020389][ T3698] usb 2-1: SerialNumber: syz [ 556.025113][ T3711] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 556.035618][ T3711] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 556.163869][ T3711] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 556.173140][ T3711] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 556.181241][ T3711] usb 1-1: Product: syz [ 556.185755][ T3711] usb 1-1: Manufacturer: syz [ 556.224027][ T3711] cdc_wdm 1-1:1.0: skipping garbage [ 556.229329][ T3711] cdc_wdm 1-1:1.0: skipping garbage [ 556.237086][ T3711] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 556.243287][ T3711] cdc_wdm 1-1:1.0: Unknown control protocol [ 556.255202][ T143] usb 3-1: USB disconnect, device number 89 [ 556.520566][ T3698] usb 2-1: USB disconnect, device number 4 15:19:06 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="7bf3"], 0x0) syz_usb_ep_write(r0, 0x0, 0x41, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e49") syz_usb_disconnect(r0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000001040)=""/56, 0x38) syz_usb_disconnect(r0) 15:19:06 executing program 3: ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0) 15:19:06 executing program 5: r0 = socket(0x15, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000), 0x10) 15:19:06 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, 0x0, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000240)="fa", 0xfdef}], 0x1) recvfrom$inet6(r0, &(0x7f0000000640)=""/183, 0xb7, 0x10120, 0x0, 0x0) 15:19:06 executing program 1: r0 = socket(0xa, 0x3, 0x6) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={0x0}}, 0x0) 15:19:06 executing program 2: r0 = socket(0x18, 0x0, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x10f, 0x85, 0x0, 0x0) 15:19:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r0, &(0x7f0000005340)=[{{&(0x7f0000000000)=@tipc, 0x80, &(0x7f0000001600)=[{&(0x7f0000000080)="c1", 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f00000016c0)=[{0x18, 0x0, 0x0, 'B'}, {0x10}], 0x28}}], 0x1, 0x0) [ 558.204302][ T3698] usb 1-1: USB disconnect, device number 111 15:19:06 executing program 2: r0 = socket(0x25, 0x5, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) 15:19:06 executing program 3: clock_gettime(0x0, &(0x7f0000003400)) 15:19:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000440)={'gre0\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB='syztnl2\x00\x00\x00\x00\x00\x00', @ANYRES32]}) 15:19:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x0, @private}}, 0x0, 0x0, 0x0, 0x0, "fd8e24412de47af7115155305519107ae5b4df943b36a657c9b267c37e654bdd512bbee7033c56d86e23f327c572604928df32ee954b8b099cd9b0b190b005524abfb266e47c6a7945c11dc6f70267c9"}, 0xd8) 15:19:06 executing program 2: socketpair(0x15, 0x5, 0x7, &(0x7f0000000100)) [ 558.703424][ T3698] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 559.063234][ T3698] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 559.071888][ T3698] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 559.089769][ T3698] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 559.098986][ T3698] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 559.223833][ T3698] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 559.233001][ T3698] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 559.241069][ T3698] usb 1-1: Product: syz [ 559.245587][ T3698] usb 1-1: Manufacturer: syz [ 559.294283][ T3698] cdc_wdm 1-1:1.0: skipping garbage [ 559.299543][ T3698] cdc_wdm 1-1:1.0: skipping garbage [ 559.309928][ T3698] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 559.315938][ T3698] cdc_wdm 1-1:1.0: Unknown control protocol 15:19:09 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="7bf3"], 0x0) syz_usb_ep_write(r0, 0x0, 0x41, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e49") syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 15:19:09 executing program 1: r0 = socket(0x23, 0x5, 0x0) getsockname(r0, 0x0, &(0x7f0000000140)) 15:19:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8953, 0x0) 15:19:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8916, &(0x7f00000000c0)={'pimreg0\x00', 0x0}) 15:19:09 executing program 5: r0 = socket(0x18, 0x0, 0x1) accept4(r0, 0x0, 0x0, 0x0) 15:19:09 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, 0x0, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000240)="fa", 0xfdef}], 0x1) recvfrom$inet6(r0, &(0x7f0000000640)=""/183, 0xb7, 0x10120, 0x0, 0x0) [ 561.290197][ T3711] usb 1-1: USB disconnect, device number 112 15:19:09 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x42, 0x0, 0x0) 15:19:09 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f0000000140)) 15:19:09 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300), r0) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r1, 0xeb590623bdcc7103, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_SECCTX={0x2e, 0x7, 'system_u:object_r:auditd_initrc_exec_t:s0\x00'}]}, 0x44}}, 0x0) 15:19:09 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0) 15:19:09 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) 15:19:09 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in], 0x10) [ 561.783022][ T3711] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 562.146390][ T3711] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 562.167722][ T3711] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 562.181162][ T3711] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 562.195540][ T3711] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.323143][ T3711] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 562.332223][ T3711] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 562.340553][ T3711] usb 1-1: Product: syz [ 562.345305][ T3711] usb 1-1: Manufacturer: syz [ 562.384191][ T3711] cdc_wdm 1-1:1.0: skipping garbage [ 562.390331][ T3711] cdc_wdm 1-1:1.0: skipping garbage [ 562.397767][ T3711] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 562.404183][ T3711] cdc_wdm 1-1:1.0: Unknown control protocol [ 562.553861][ T1239] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.560182][ T1239] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.153014][ C0] cdc_wdm 1-1:1.0: unknown notification 61 received: index 46970 len 38478 [ 563.164190][ T3711] usb 1-1: USB disconnect, device number 113 15:19:11 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="7bf3"], 0x0) syz_usb_ep_write(r0, 0x0, 0x41, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e49") syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 15:19:11 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) recvmmsg(r0, &(0x7f0000004000)=[{{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f00000017c0)=""/4096, 0x1000}], 0xf}}], 0x1, 0x0, 0x0) 15:19:11 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x541b, 0x0) 15:19:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000100)=0x10, 0x4) 15:19:11 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x6, [@datasec={0x2, 0x1, 0x0, 0xf, 0x3, [{0x5, 0xe8}], "7c317f"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], "6cb6a8"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], "060b"}]}, {0x0, [0x0, 0x2e, 0x2e, 0x61]}}, &(0x7f0000000140)=""/197, 0x56, 0xc5, 0x1}, 0x20) 15:19:11 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000240)="fa", 0xfdef}], 0x1) recvfrom$inet6(r0, &(0x7f0000000640)=""/183, 0xb7, 0x10120, 0x0, 0x0) 15:19:11 executing program 2: socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f00000000c0)) 15:19:11 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x4040854, &(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10) 15:19:11 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000580)) 15:19:11 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000040)={'virt_wifi0\x00'}) 15:19:11 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x13, 0xa, 0x101}, 0x14}}, 0x0) 15:19:11 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xe396e3e6def6e8ca, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) [ 564.098950][ T7695] virt_wifi0: mtu less than device minimum [ 564.233466][ T3697] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 564.593117][ T3697] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 564.601852][ T3697] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 564.612087][ T3697] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 564.621242][ T3697] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 564.743145][ T3697] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 564.762071][ T3697] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 564.770456][ T3697] usb 1-1: Product: syz [ 564.779010][ T3697] usb 1-1: Manufacturer: syz [ 564.824286][ T3697] cdc_wdm 1-1:1.0: skipping garbage [ 564.829510][ T3697] cdc_wdm 1-1:1.0: skipping garbage [ 564.840807][ T3697] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 564.846897][ T3697] cdc_wdm 1-1:1.0: Unknown control protocol [ 565.603011][ C0] cdc_wdm 1-1:1.0: unknown notification 61 received: index 46970 len 38478 [ 565.604169][ T3702] usb 1-1: USB disconnect, device number 114 [ 565.611682][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 15:19:14 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="7bf3"], 0x0) syz_usb_ep_write(r0, 0x0, 0x41, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e49") syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 15:19:14 executing program 5: r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x41}}, 0x10) 15:19:14 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000000)={r1}) 15:19:14 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000140)="c97db31e68f664990fb520fc13e55409f0e83b1bc5ea5bd3756768f581b91e07da3ee9f23bea8bd10f3473d6e6bd0ec123d27348e04f2c4a3638412160dae30c1af1e0cdadde365a4bba3bdbfe0b007f2180c7cb0761779620d3b530e77c7c34e9fe73138ca4ca06128e976618d66bbe65bc1936b24b6c571f6bc35dbf76641a93504339fbb598cd860215d70e0f6939eb42bd85f506fb6175a800f919e7cff71532a5ff8d", 0xa5}, {&(0x7f0000000200)="5aef6f9881b33f21faf727983a7bc686189bee62a58dcdec7717cc50ac3b5efd67437adb3c8195dfb9f1a3c341a31fbd8284accf080797514ba29960d0acc2223301a0ef9691eca082147dce91b84ce682468a9a14e6af8b1ea93e25b2fd2e8271ca74f844bc2b3760002d68c51ee565599462121b1837f6c8043e2cf8f549b3a7e0d2fcf4a4a361809df42751bc75d4b5e19a43db8a394c8336b9ea548671ca8d4b044e2263dddb267306205b3ed7", 0xaf}], 0x2}, 0x0) recvmsg$unix(r0, &(0x7f0000001a00)={&(0x7f0000001640)=@abs, 0x6e, &(0x7f0000001940)=[{&(0x7f00000016c0)=""/213, 0xd5}, {&(0x7f00000017c0)=""/126, 0x7e}], 0x2}, 0x0) 15:19:14 executing program 3: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000005300)={0x6, 0x3, &(0x7f00000041c0)=@framed, &(0x7f0000004200)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000004240)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0xfffffffffffffffc, 0x0, 0x0, r0}, 0x80) 15:19:14 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000240)="fa", 0xfdef}], 0x1) recvfrom$inet6(r0, &(0x7f0000000640)=""/183, 0xb7, 0x10120, 0x0, 0x0) 15:19:14 executing program 3: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x89b0, &(0x7f0000000000)) 15:19:14 executing program 1: r0 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x48, 0x0, &(0x7f0000000080)) 15:19:14 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCDFWD(r0, 0x8982, 0x0) 15:19:14 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) sendmmsg(r0, &(0x7f0000001280)=[{{&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x80, 0x0}}], 0x1, 0x0) 15:19:14 executing program 1: r0 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, 0x0) 15:19:14 executing program 2: socket$igmp6(0xa, 0x3, 0x2) pipe(&(0x7f00000003c0)) [ 566.693001][ T3697] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 567.113200][ T3697] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 567.121949][ T3697] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 567.132732][ T3697] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 567.141958][ T3697] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 567.283193][ T3697] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 567.292350][ T3697] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 567.300788][ T3697] usb 1-1: Product: syz [ 567.306534][ T3697] usb 1-1: Manufacturer: syz [ 567.364364][ T3697] cdc_wdm 1-1:1.0: skipping garbage [ 567.369713][ T3697] cdc_wdm 1-1:1.0: skipping garbage [ 567.376399][ T3697] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 567.382423][ T3697] cdc_wdm 1-1:1.0: Unknown control protocol [ 568.143052][ C1] cdc_wdm 1-1:1.0: unknown notification 61 received: index 46970 len 38478 [ 568.152358][ T3697] usb 1-1: USB disconnect, device number 115 15:19:16 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="7bf3"], 0x0) syz_usb_ep_write(r0, 0x0, 0x41, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e49") syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 15:19:16 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000001340), 0xc) 15:19:16 executing program 3: r0 = socket(0x2b, 0x801, 0x0) sendmsg$alg(r0, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[@assoc={0x18}], 0x18}, 0x0) 15:19:16 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x5, &(0x7f00000003c0)=@raw=[@cb_func={0x18, 0x0, 0x4, 0x0, 0x3}, @func, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2}], &(0x7f0000000440)='syzkaller\x00', 0x6, 0xb1, &(0x7f0000000480)=""/177, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 15:19:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r1, 0x1}, 0x14}}, 0x0) 15:19:16 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000240)="fa", 0xfdef}], 0x1) recvfrom$inet6(r0, &(0x7f0000000640)=""/183, 0xb7, 0x10120, 0x0, 0x0) 15:19:16 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0xb, &(0x7f00000003c0)=@raw=[@cb_func={0x18, 0x0, 0x4, 0x0, 0x3}, @func, @exit, @cb_func, @map_fd, @jmp, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f0000000440)='syzkaller\x00', 0x6, 0xb1, &(0x7f0000000480)=""/177, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 15:19:16 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x9, &(0x7f00000003c0)=@raw=[@jmp, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0x3}, @exit, @cb_func, @cb_func], &(0x7f0000000440)='syzkaller\x00', 0x6, 0xb1, &(0x7f0000000480)=""/177, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 15:19:16 executing program 1: r0 = socket(0x2, 0xa, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}}, 0x0) 15:19:16 executing program 2: r0 = socket(0x2b, 0x801, 0x0) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, 0x0, 0x0) 15:19:16 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000003fc0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/103, 0x67}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0) 15:19:16 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000003fc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) [ 569.253167][ T3697] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 569.673143][ T3697] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 569.681910][ T3697] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 569.692323][ T3697] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 569.701599][ T3697] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 569.833706][ T3697] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 569.842821][ T3697] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 569.851060][ T3697] usb 1-1: Product: syz [ 569.855419][ T3697] usb 1-1: Manufacturer: syz [ 569.897923][ T3697] cdc_wdm 1-1:1.0: skipping garbage [ 569.904623][ T3697] cdc_wdm 1-1:1.0: skipping garbage [ 569.910868][ T3697] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 569.917334][ T3697] cdc_wdm 1-1:1.0: Unknown control protocol [ 570.673006][ C0] cdc_wdm 1-1:1.0: unknown notification 61 received: index 46970 len 38478 [ 570.674254][ T143] usb 1-1: USB disconnect, device number 116 [ 570.681645][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 15:19:19 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="7bf3"], 0x0) syz_usb_ep_write(r0, 0x0, 0x41, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e49") syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 15:19:19 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000140)="c9", 0x1}], 0x1}, 0x0) recvmsg$unix(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f00000017c0)=""/126, 0x7e}], 0x1}, 0x0) 15:19:19 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x0, 0x1939}, 0x48) 15:19:19 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x2, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x338, 0x190, 0x190, 0xffffffff, 0x478, 0x190, 0x1578, 0x1578, 0xffffffff, 0x1578, 0x1578, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @icmp_id, @icmp_id}}}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'vlan0\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, @port, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @empty, @remote, @gre_key, @icmp_id}}}}, {{@ip={@rand_addr, @rand_addr, 0x0, 0x0, 'veth0_to_bridge\x00', 'veth0_to_batadv\x00'}, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @multicast2, @loopback, @gre_key, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) 15:19:19 executing program 3: r0 = socket(0x23, 0x5, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}}) 15:19:19 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) writev(r0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000640)=""/183, 0xb7, 0x10120, 0x0, 0x0) 15:19:19 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) 15:19:19 executing program 1: r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x6, 0x7f, 0x0, 0x0) 15:19:19 executing program 2: r0 = socket(0x2b, 0x801, 0x0) read$alg(r0, 0x0, 0x0) 15:19:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, r1, 0x1}, 0x14}}, 0x0) 15:19:19 executing program 3: socketpair(0x0, 0x7fffe, 0x0, 0x0) 15:19:19 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, 0x0, 0x1000000) [ 571.743019][ T3711] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 572.103303][ T3711] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 572.111952][ T3711] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 572.123255][ T3711] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 572.132253][ T3711] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 572.263478][ T3711] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 572.272561][ T3711] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 572.286391][ T3711] usb 1-1: Product: syz [ 572.306644][ T3711] usb 1-1: Manufacturer: syz [ 572.358555][ T3711] cdc_wdm 1-1:1.0: skipping garbage [ 572.363991][ T3711] cdc_wdm 1-1:1.0: skipping garbage [ 572.371919][ T3711] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 572.378144][ T3711] cdc_wdm 1-1:1.0: Unknown control protocol [ 573.147246][ C0] cdc_wdm 1-1:1.0: unknown notification 61 received: index 46970 len 38478 [ 573.153874][ T3697] usb 1-1: USB disconnect, device number 117 [ 573.155860][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 15:19:21 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) writev(r0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000640)=""/183, 0xb7, 0x10120, 0x0, 0x0) 15:19:21 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) recvfrom(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)=@l2tp={0x2, 0x0, @loopback}, 0x80) 15:19:21 executing program 2: socketpair(0x22, 0x2, 0x2, &(0x7f00000001c0)) 15:19:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x40086602, &(0x7f00000000c0)={'pimreg0\x00', 0x0}) 15:19:21 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000480), &(0x7f00000004c0)=0x4) 15:19:21 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x6c, r1, 0xa0de6ffd8386c9b5, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_SECCTX={0x2f, 0x7, 'system_u:object_r:update_modules_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}]}, 0x6c}}, 0x0) 15:19:21 executing program 2: r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x102, 0x7f, 0x0, 0x0) 15:19:21 executing program 3: bpf$MAP_CREATE(0xb, &(0x7f0000000040)=@bloom_filter, 0x48) 15:19:21 executing program 5: r0 = socket(0x2a, 0x2, 0x0) sendmsg$AUDIT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 15:19:21 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@func]}, &(0x7f0000000080)='GPL\x00', 0x3, 0x9c, &(0x7f00000000c0)=""/156, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 15:19:21 executing program 0: socketpair(0x23, 0x0, 0xfffffffe, &(0x7f0000000000)) 15:19:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$802154_dgram(r0, &(0x7f00000008c0)={&(0x7f0000000740)={0x24, @short}, 0x14, &(0x7f0000000880)={&(0x7f0000000780)="96", 0x1}}, 0x0) 15:19:22 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) writev(r0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000640)=""/183, 0xb7, 0x10120, 0x0, 0x0) 15:19:22 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @private=0xa010100}, 0x10) 15:19:22 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 15:19:22 executing program 5: r0 = socket(0x2b, 0x801, 0x0) sendmsg$nl_crypto(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x20000000) 15:19:22 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f00000001c0)="e121", 0x2) 15:19:22 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) 15:19:22 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r1) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x1}, 0x14}}, 0x0) 15:19:22 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0xd2040, 0x0) 15:19:22 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, 0x0, &(0x7f00000004c0)) 15:19:22 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000004080)) recvmmsg$unix(r0, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1}}], 0x1, 0x0, 0x0) dup2(r0, r1) 15:19:22 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff}) dup2(r1, r0) write$FUSE_WRITE(r0, 0x0, 0x0) 15:19:22 executing program 3: poll(0x0, 0x0, 0xe5) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$cont(0x18, r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6}]}) [ 575.042764][ T27] audit: type=1326 audit(1659971962.927:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7821 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3678e89279 code=0x0 15:19:23 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) writev(r0, &(0x7f0000000340), 0x0) recvfrom$inet6(r0, &(0x7f0000000640)=""/183, 0xb7, 0x10120, 0x0, 0x0) 15:19:23 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff}) dup2(r1, r0) write$FUSE_WRITE(r0, 0x0, 0x0) 15:19:23 executing program 1: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000001180)={0x2}, 0x8, 0x0) msgrcv(r0, &(0x7f0000000000)={0x0, ""/230}, 0xee, 0x2, 0x0) 15:19:23 executing program 2: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0x178) sendfile(r0, r1, 0x0, 0x108d1521) r2 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2000006, 0x4003012, r2, 0x0) ftruncate(r0, 0x0) 15:19:23 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = dup3(r1, r0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000005140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2021, &(0x7f0000005340)) 15:19:23 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close(r0) pipe(&(0x7f0000000240)) read$FUSE(r0, 0x0, 0x0) 15:19:23 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) dup2(r1, r0) write$FUSE_ATTR(r0, 0x0, 0x0) 15:19:23 executing program 3: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001700)='./binderfs/binder-control\x00', 0x0, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) [ 575.700381][ T27] audit: type=1804 audit(1659971963.587:4): pid=7831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2938745476/syzkaller.S2GgF9/252/bus" dev="sda1" ino=1169 res=1 errno=0 15:19:23 executing program 5: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff}) dup2(r1, r0) write$FUSE_IOCTL(r0, 0x0, 0x0) 15:19:23 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff}) dup2(r1, r0) write$FUSE_WRITE(r0, 0x0, 0x0) 15:19:23 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff}) dup2(r1, r0) write$FUSE_BMAP(r0, 0x0, 0x0) 15:19:23 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff}) dup2(r1, r0) write$FUSE_INTERRUPT(r0, 0x0, 0x0) [ 575.822090][ T27] audit: type=1804 audit(1659971963.707:5): pid=7841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2938745476/syzkaller.S2GgF9/252/bus" dev="sda1" ino=1169 res=1 errno=0 [ 575.930896][ T27] audit: type=1804 audit(1659971963.707:6): pid=7841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2938745476/syzkaller.S2GgF9/252/bus" dev="sda1" ino=1169 res=1 errno=0 15:19:24 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) writev(r0, &(0x7f0000000340), 0x0) recvfrom$inet6(r0, &(0x7f0000000640)=""/183, 0xb7, 0x10120, 0x0, 0x0) 15:19:24 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff}) dup2(r1, r0) write$FUSE_WRITE(r0, 0x0, 0x0) 15:19:24 executing program 5: unshare(0x400) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) 15:19:24 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r0 = syz_io_uring_setup(0x77f, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) 15:19:24 executing program 2: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0x178) sendfile(r0, r1, 0x0, 0x108d1521) r2 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2000006, 0x4003012, r2, 0x0) ftruncate(r0, 0x0) 15:19:24 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 15:19:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000002200)=ANY=[@ANYBLOB='$\x00\x00\x00*'], 0x24}}, 0x0) [ 576.649950][ T27] audit: type=1804 audit(1659971964.537:7): pid=7859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2938745476/syzkaller.S2GgF9/253/bus" dev="sda1" ino=1178 res=1 errno=0 15:19:24 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) [ 576.810355][ T27] audit: type=1804 audit(1659971964.657:8): pid=7864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2938745476/syzkaller.S2GgF9/253/bus" dev="sda1" ino=1178 res=1 errno=0 15:19:24 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x77f, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) 15:19:24 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) [ 576.933318][ T27] audit: type=1804 audit(1659971964.667:9): pid=7864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2938745476/syzkaller.S2GgF9/253/bus" dev="sda1" ino=1178 res=1 errno=0 15:19:24 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000700)={'dvmrp1\x00', 0x2}) [ 577.041697][ T46] Bluetooth: hci7: Frame reassembly failed (-84) 15:19:25 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001140)=@bpf_lsm={0x1d, 0x7, &(0x7f0000000000)=@framed={{}, [@cb_func, @btf_id]}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1000, &(0x7f00000000c0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 15:19:25 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) writev(r0, &(0x7f0000000340), 0x0) recvfrom$inet6(r0, &(0x7f0000000640)=""/183, 0xb7, 0x10120, 0x0, 0x0) 15:19:25 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x0, 0x0, 0x0, 0x82}, 0x48) 15:19:25 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r0) 15:19:25 executing program 2: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0x178) sendfile(r0, r1, 0x0, 0x108d1521) r2 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2000006, 0x4003012, r2, 0x0) ftruncate(r0, 0x0) 15:19:25 executing program 1: bpf$BPF_BTF_LOAD(0x15, 0x0, 0x0) [ 577.630089][ T27] audit: type=1804 audit(1659971965.517:10): pid=7885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2938745476/syzkaller.S2GgF9/254/bus" dev="sda1" ino=1178 res=1 errno=0 [ 577.732402][ T27] audit: type=1804 audit(1659971965.617:11): pid=7890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2938745476/syzkaller.S2GgF9/254/bus" dev="sda1" ino=1178 res=1 errno=0 [ 577.810068][ T27] audit: type=1804 audit(1659971965.617:12): pid=7890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2938745476/syzkaller.S2GgF9/254/bus" dev="sda1" ino=1178 res=1 errno=0 15:19:26 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 15:19:26 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=@base={0x1a, 0x0, 0x0, 0x0, 0x846, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 15:19:26 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x41) 15:19:26 executing program 2: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0x178) sendfile(r0, r1, 0x0, 0x108d1521) r2 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2000006, 0x4003012, r2, 0x0) ftruncate(r0, 0x0) [ 578.883514][ T3689] Bluetooth: hci6: command 0x1003 tx timeout [ 578.889731][ T3664] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 579.017084][ T46] Bluetooth: hci6: Frame reassembly failed (-84) 15:19:27 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) 15:19:27 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) writev(r0, &(0x7f0000000340)=[{0x0}], 0x1) recvfrom$inet6(r0, &(0x7f0000000640)=""/183, 0xb7, 0x10120, 0x0, 0x0) 15:19:27 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 15:19:27 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 15:19:27 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000013c0)='ns/net\x00') [ 579.113507][ T3697] Bluetooth: hci7: command 0x1003 tx timeout [ 579.123689][ T3662] Bluetooth: hci7: Opcode 0x1003 failed: -110 15:19:27 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) close(r0) sendmsg(r0, 0x0, 0x0) [ 579.211948][ T7874] Bluetooth: hci7: sending frame failed (-49) [ 579.219705][ T3662] Bluetooth: hci7: Opcode 0x1003 failed: -49 15:19:27 executing program 1: bpf$MAP_CREATE(0x14, &(0x7f0000000180), 0x48) 15:19:27 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=[{0x80, 0x0, 0x0, "421895324f0675ae8c01a9d50045a879631defa582928e8352e5ba23cf48aacd53c2ef7f82055da3e1bec5b4266e9f818289c6a2066075971f0024c1a183b2e85a51e7584a9ae1fc0576d76034fcb992c90f22722c65457cadec7d8f645d00"/105}, {0x1010, 0x0, 0x0, "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"}, {0xf78, 0x0, 0x0, "6b322fb9c1ae81481e7f172d358d48b1168b823ef987151f4cb1e4a32166189f4acd22459b06f6a72b960b18b2c7c086d7cc1d63c578009ac26aae923d0e2cc6f1edca0c0ee58198f77ecb5fa597cad363737c01ad18669dad47f83595dc078eff1c7c26f19f8330e2ada844b50524ade88f16bc7ca9ea539d3110399f213a0ae45b71f9596328c437a1ed08053881d8ca3d55011fc3a3eaa096cacb069f1e18dc486a662be4f384855399e405337eafafff99d04293f3d5bb416ce471f3d568c56316b127c10b0a22397207a6ba9850a62941cb4e0ff8398998fe60bc0e7679d94c1f00b62b180133d9e09b243d79638c5663071fd1f22d7500e0e7941c1cb69b8d0d7822f099163bc409c499e297f77c929396cc59ccaa773cd4a87e013516a88b4ee94f8737afaf893afe442cdf33ce85f5cd6f38120b148f628d09f18d32edf9239ee10efb286115cb4537429097f0331bb000390ff6b9fb1afaabc7e74d577bc3c95b0dd54e1f63aa092d00a8b23a5ffb65c66a51345242e52b47ac2ba72b7aca7c310616cba78ce3e1c543e9e9e4ab54398c24b662ed5c9f1d1d7bfcccea2ec48f1540c8ce50e830796b68a5279be304c234e020146be65d194e6de0c0a31f7c7d8b287596c898257ab4f257985eb2bb5cbe4c6dd1be99a0787ca4506a86c7495005ed1b0239914587e291706db5c3887577652b25edd128141444793d2c532d659a70123e26fa31104dd3b4a0cee151c14e4d5b9d22abf11ce303b5e0823481f23d4f3d589f89a53b6d9c9d3042b90772cc0ab596337d7457341d2018037368138017503fcc0ab2a8b92526e316ed0ad4bfbc10d4df1357a8e4ed46fcc91fecdd5e82822d76d1294f88f479fed9dababc51712d22000407cc70469ff2805da5976cbd127dca5e5a97f30732037449dd8ff432a1d935561f20eff209dad7afb7631f0dbcaee0b8bc45b5e84f5f3f663071a87bdd7516481ec55573f6a5441709f662b81003c2142a131e731bc950b9dcf827757c12c8d9d2c59ceefc3bf4d0ac15c0e711a473aba1a6b1fe7d1ba8dcc96913a8d7bc98045d4b2701a94db62029b35a6be9b07987b52e4792f3293dc5236ff98e45ce8093dfa204233b7a04e492798259577dd695b297d77b535b09c4ffcf023688c7f09de9614ae315767d62b9bd9de50ce97013199994ae81ad6e677a88e57344c53fadf247c5d5dbc27123662cc559d34c99e8d7f08a7ce4c28e5cb6b9362a2dfa6a4b79a751bd0b228928c309448820dcab3a024bf950796d78752a15cf7ec8270c2dec6488803a20fd98e7be9def5a03ef009c57637f89f90ef25fb89d2e0476a9fab3680d9c36a7db03308c7f7ec9fdd8c1524bc5fe2631053f7dd060b3ec6346a73f71c04a1b46431a360eff3e40249fabba970885d7e1e7480a38397749fe0013c9bf21adca674a6c6bdea9db7728a5c87dc9b3cc284530bae25e937b805596d7a0049c28539649ba43ae986f250d67a60d93955bbc9a2dbf4151c5f02b1616770e2e3c28e5d923521405bd1e38c2593525ccf2bb50cb3a05d73122c90bf9ba98282ddd0eecad009ccc15f8f8b26bbf70be3f1a7a75aaa3c3e4b47920f7f6f78a05baf4405c67f7104ff3087483cc831086e643eeee4edb919b9014fa1e5359209137691a687de1e089ab2c1fbd9531bfd6a589af64500e076da77baec43a1646a88044a97c5319fbd0bd3b205c7b47d24a3b5d879b108195bf81fdaca0c901e08dc39165f0a78eaad7e98d7331b6c1a03e3279f34d8f8f21a92b40a118767abecca98a1260ae909eac2945f6252ab7bd587ea8710d0acd7ade145a87518d71c38ed33daa716d5d3ab14516a47f4269c1ebbf77b7f1a34f25b26a241481ede6396ba9819297b06ad9d50138d7949ec1b71dbf2db9438db6ecbb27ad95dbd0c6b7814ccd9c0807eb64b9329d0c7985806fc76fc0d0382973240cc6a43dc632fe9f13c26355f57a8f363c670dd19dce8baa22dd36479c652bf7e0522a913b73696d71d0ca59656bb0954e387520e38f6773b926e6eac7d7e45c686f1f70e5fc4223079b7b6571d673743432014efb5d23ee3733fd286c0ab0cfb506e7681ac7c6c07a9bf868a92539449e04091e894c04042b87140bd3681cb9bfa667569a3ee4ad05c7b3b3134b2777df471b9ba4077716153029140c6ea1ef5749574a6ccf256a25661bde18e80dfd065d9224842a4ec30f54d163db76adda0a11f90207c5e9a933ab0992fe35bd8633b2a965382098a0d0742f59737ef974110f7881d595b18a773f6cf7218df921cb650325bd809944803518f6e238c1cec24cad1d62105d21736398136781e3b6d3a535c94b2dd90c32a91e1ff0223ad087025839e8b34599d85e051b21bfb83ffc9e71625395a98f39648b1a25a07087c67101801a9d288fa09734d298c774b1726067d1dca46d01632116f10f15995828ae52f844f3e829a92b735990641b00c3bd7a6b359dd74ca7bd8ae7b685b6d4d4b3fe2872e36c953c95a17d89b449a665ecc624ebcbfdba538f7617032152951f5bf6dfd5bb4e20975adaa567266a71ad9269b3c5b4a26fa582edb6ef997ecd7f040a33ee860adc87a1b9c20a6a2184c497852ab9c86528dbac9e57218e5667b17453c1dbb3df654a5b878f08041da59d57059eac8d520a091fb07a02ee07d83626ec55b32f432717bedf89633f727214d9f02c5fcbd148e0eb1a8ab6b6a69621f7bab7b6326644b6b43bb6d05afb0fd2c0d9edd7a96b6258061848a8d7ac7467aa334c331a4c2adb06009422110429b9637d7b069b0defff61676cfc0beb8078169e2d04da4380c3c6770b6b9e4cd5c0367fefc7d09d0a06e0730fbfbc5bfb52ed4eb6de9e0b481d7117ef52671b050c4ad3e2b7d95626bb228068556e11b215845dab212eef0456cef4e8ed779586c720a9f23df9aa8653948347b018f51f7795fa847b8b751c0b9eea97dc28de1cd18822937ff28a36639cac8d2b2724e12a2ced1f689e766bef8e60b2a2490536aecc0ff8c853caf595736f93fea9f474eff5a1726ed1f8777024fec8630fec0e35c94a717f01f2537be922bb00111a7d840ddcf7f1497404f4ea7d19bf743cda49ca5df2d84fd337b9e50eae34c9cf0c1e4a42af828934e3a1c5fd39d6a2f977da6bcff1cdcd5ecd60f3fce3cce3e0c6766781df8b63bc81529775ceede0c2bf26aedfe95bdde7762ae2e5672da56fd4d7186f67a30c6976690cfb95cf77fc5799c450a24b882e44aca98c3c8fc3efe2760ecbed80df68f7bdf0f41830c92083137d5639508e2f52266cbf04fe86cfbe341919eee5252254b2c7ee13abcb18b9ddf2002f2252d81cda9585a11d92fcb3d0d0b09577ec87c7cc0519364175ce89cdf150d9eb6658c9fa66a664d3f5de2591a5abe5b31773614f6f19d6b9681ba10659a9672610419efa5ddbed61e1dc6b1340fc38f88ade7af435ab2d262195df140a3796c0577250b193429fa716dbed4e9d8c38a6b8b41d92407416b3516f6d6424e9ee3cd5933e025140ff28de7a309dc7c0822011f5768b3f7d60233f56f4a06793e1ab5dac9d6c6c212c859477e3b6e065961bc1229d2b6598b5c229b44194b00547110f6ec27c8155a46d7bec6402cd1083bd98b3094bad3dae4d94eda945f38ad1888dce6758255cf1241c4a9899b1aa5a14940ff3189e772aa34b5c8ff5b409e0be8330283425d7add006c76ba62ca8dfce2d9bf68ef185d809389709fda3b2686ecd1343e94c6d6fa45327e30e2a9c7207da6bae97ef4f94db697ca6453b97e9de5d9dc7f6d2b6c9efaf88923601dd24f29b2d4c3ce5f5b7163ffeaef436d47c2a82c04116a1c2d7544a02c00b022aa03436c262df1145e4e9ad4d89ba5e95548b70ad4a9102d472bfa7c65f63069657c0344d03620119a30f15ecb0f9e83840841364705faefb7d713ebcdb017c5e852b2062a087ea86e1a0c26ec1ae13d23ee6eff9db823914cd7f9236d38cd66088d046f210887abb2b4767f3c6cfd2bfdd511c6513fd48910a922d5b6310c7d31635450f21fecdf44ad1e6db7046799b0538fb0a39d5fd06a4d0121f34a8651caded28fa99352fbba725cc5e602ff6cef467fc71479f1a2e159bf81a0e18c9903348d6c4d033de659d38c5d63a606463ec01372c921a57f34e1aab28b0bf5f297d0e00b14f8ee4e661940769658537300077cbb807e2c287124a12f3ce7fa5cb4b68b2498c4630d7044c23d3cfb15cdc15078cffbdc8857519dac8d2df2f6643486cffd1fdbaaad98edbda49ccb80c6dbd6801d247613dee7b85ec8100f1f52030ca628e58a60bdb219f071dd1e639121edc9d701334ca892df77bb0bc5e3a4c79f69b0c8c1cf74fc71fee009af776c59c5d6484f562c97ae409c197918d9054e0ee4692f1537ba8b44ae921fbcaa4a87e73e1e27b8e20f979de48ca9150ac10b7c75b98369f6eb2c9cd8554b4e5adac2ebd5ceb761b8ad328231130602e407a8c8d1a05bdf5ddc97ba989a16001a29b19c0173e1df690cf89b9835d70ec0bbf7780112a443092829699773b1d65c940e8003e29e5756691b6685c730f912e16ff2d12c146f9689b904be21cf171310d39187cf633d9b49f7c577406e1fa4dcee3f0723b97ac18195183566e181ac64f22a609c6c8d07074c83d636d80cd96316058954e0f2d56f505bb839a7536c5714bb38ba4a5f968e3306ca1c728d410d946549fff4f2579af73da45056a1af48fd8e9a3e59e8ef0690f6fe54e63a08ecd85d1ab67e7f67b6c89f9f6729079c6d0d9f452b7f2a04ef81af207c523772929d39ed6826a661401993b4c0978a523eaf6a6c0371b6fb33b325b0358e08b45367d74b06c74f1d7b51b9016d80032ee1ecba8f22d030587e85ba904edb228d5b9d05ecf383ceaeadba06f94f3a4ea8711f8738b4b0042373652a9b9ace38281772d10fad85f15310db683c6bda30660227dfb9f5a6161277d378865f034ba02645510dd4d2a113e52d8412eae67465e3ad01b1c0455eea06634fcac072e7744445e23585955acb6d209d0a6c9f2b7fe96a82b119d31d2b4693f17ae511a1a0111dafdfd18ebd5d06d2f533f717885b026e0d3545dc8d59a93893bac2434d05e3cfbd7bba19f49677e45eab8b106700d4b3687a3f3c924e5f7f2767af664869af79b3c82ab5dfe7b70982110d9ab5c894806710ee9b634ef41f915ec0968b3f29ce091b34d5312bf7b5a205b9e505651e294e1f9a5ce3d6bbbbfdd27a8669187cf0c123ae4817ead3b3244cbffb856d0532cb1414bc65ce464b9e939264451fa3ed8530bc1ea6ff50004d7fd6e91912faf3489fb71f3e9e95a30c8b426ebe381ecaf98015c4f3f2aa326c02ac6f2d7551c256d4efa43bbe0c70b5b9e9e9b7305d6bae1466135e7703700ac37ca6cf8b82c459d4d3dcfbb3e6d3a6543b65b21cefdc4baed5797996d44b422349fc34c283b2957f430f19f754dc4a45a216cc6539416530eeb0ae0efec17dfaac43efb2080e3059e837110be30bca958387f9ca16ea4ccd6b3201f1aeab27511f0"}], 0x2008}, 0x0) [ 579.275565][ T46] Bluetooth: hci7: Frame reassembly failed (-84) 15:19:28 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0xff, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0xf}, 0x48) 15:19:28 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0xff, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x0, 0xf}, 0x48) 15:19:28 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array]}}, &(0x7f0000000100)=""/238, 0x32, 0xee, 0x1}, 0x20) 15:19:28 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) writev(r0, &(0x7f0000000340)=[{0x0}], 0x1) recvfrom$inet6(r0, &(0x7f0000000640)=""/183, 0xb7, 0x10120, 0x0, 0x0) [ 581.033144][ T3664] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 581.273214][ T3711] Bluetooth: hci8: command 0x1003 tx timeout [ 581.273636][ T7874] Bluetooth: hci8: Opcode 0x1003 failed: -110 15:19:29 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) 15:19:29 executing program 2: socketpair(0x11, 0x0, 0x0, &(0x7f00000001c0)) 15:19:29 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001dc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001e00)="aa", 0x1}], 0x1}, 0x0) 15:19:29 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000010c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, &(0x7f00000000c0)=""/4096, 0x26, 0x1000, 0x1}, 0x20) 15:19:29 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000700)={'dvmrp1\x00', 0x2}) [ 581.353468][ T7909] Bluetooth: hci7: Opcode 0x1003 failed: -110 15:19:29 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc000000010902"], 0x0) 15:19:29 executing program 2: syz_usb_connect(0x0, 0x35, &(0x7f0000000540)={{0x12, 0x1, 0x0, 0x52, 0x40, 0x7d, 0x40, 0x84d, 0x3, 0x75bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x23, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x9a, 0x64, 0x23, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x8, 0xb, "aeba9ce00b82"}]}}]}}]}}]}}, 0x0) 15:19:29 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xc6, 0xb7, 0x87, 0x40, 0x545, 0x8080, 0x30a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xf9, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x3b, 0x0, 0x0, 0xe, 0x2d, 0xd5}}]}}]}}, 0x0) 15:19:29 executing program 0: syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000900)={0x14, &(0x7f0000000a00)={0x20, 0xb, 0xfc, {0xfc, 0x23, "2cd75b9b0c02e03ddc0bcd764fb4bda291cf5a0f7d003219e102e59fe7ab744aa236374ed79fc0d70cb69d442b5135405a438cdf2ee121237eefed09ca93fa692969628eae2f2b5b373b98ce6ca37359f16e77af6134b588140e050068c6f1efc6e42ddcf7722bc0c7f58e6d7798f56804506bdb9560a7b39156fa6b696a2662679b4cf82ac7fe50100b6ab7b8b9fe5fcd382ce2f166616cfc0610747d488fde7298fe637a0bd477c4b5e14257d82f886cc2681cc504197e0a715653d56c20c8d0505166a7ae2af69263bf8607391cd87c526adf6a5de620aa831de9e1572b592aed5c2a2878800c23856f205ee269a71826139ac52b63c69c72"}}, &(0x7f00000008c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x34b86fa46111d357}}}, &(0x7f0000000c80)={0x34, &(0x7f0000000940)={0x40, 0xb, 0x3, "1456ad"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0x31}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000b80)={0x20, 0x0, 0x69, {0x67, "a8545cfbc0bcb15a6822a16a3fc0df4d2b942682fdd4002c66c6c94984ee277da4788a6a3e54894cc779f303337314e0c3533622def8b98423e73c9e8fbf5ac3c3a377689388aaae7183e0027f55717d80e32845dc6612e8cf56e6fdae9a4bdbec75c6274a57d5"}}, &(0x7f0000000c00)={0x20, 0x1, 0x1, 0x1}, &(0x7f0000000c40)={0x20, 0x0, 0x1, 0x80}}) [ 581.479625][ T6084] Bluetooth: hci6: Frame reassembly failed (-84) [ 581.753197][ T143] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 581.763184][ T3702] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 581.795594][ T26] usb 2-1: new high-speed USB device number 5 using dummy_hcd 15:19:29 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) writev(r0, &(0x7f0000000340)=[{0x0}], 0x1) recvfrom$inet6(r0, &(0x7f0000000640)=""/183, 0xb7, 0x10120, 0x0, 0x0) 15:19:29 executing program 0: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) syz_usb_connect(0x0, 0x10b, 0x0, 0x0) [ 582.193315][ T3702] usb 4-1: config 249 has an invalid interface number: 59 but max is 0 [ 582.201786][ T143] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 582.212514][ T3702] usb 4-1: config 249 has no interface number 0 [ 582.219265][ T26] usb 2-1: config 0 has no interfaces? [ 582.225449][ T26] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 582.235045][ T3702] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a [ 582.244729][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.252871][ T3702] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.270822][ T26] usb 2-1: config 0 descriptor?? [ 582.353245][ T3711] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 582.403219][ T143] usb 3-1: New USB device found, idVendor=084d, idProduct=0003, bcdDevice=75.bb [ 582.412733][ T143] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.421205][ T143] usb 3-1: Product: syz [ 582.425933][ T143] usb 3-1: Manufacturer: syz [ 582.430751][ T143] usb 3-1: SerialNumber: syz [ 582.443795][ T143] usb 3-1: config 0 descriptor?? [ 582.485320][ T143] gspca_main: spca500-2.14.0 probing 084d:0003 [ 582.537403][ T143] usb 4-1: USB disconnect, device number 6 [ 582.546826][ T3689] usb 2-1: USB disconnect, device number 5 [ 582.689170][ T26] usb 3-1: USB disconnect, device number 90 [ 582.723163][ T3711] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 15:19:30 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000240)}], 0x1) recvfrom$inet6(r0, &(0x7f0000000640)=""/183, 0xb7, 0x10120, 0x0, 0x0) [ 582.813167][ T3711] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 582.822302][ T3711] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 582.833188][ T3711] usb 1-1: SerialNumber: syz 15:19:31 executing program 5: syz_usb_connect(0x0, 0x35, &(0x7f0000000540)={{0x12, 0x1, 0x0, 0x52, 0x40, 0x7d, 0x40, 0x84d, 0x3, 0x75bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x23, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x9a, 0x64, 0x23, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x8, 0xb, "aeba9ce00b82"}]}}]}}]}}]}}, 0x0) 15:19:31 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xc6, 0xb7, 0x87, 0x40, 0x545, 0x8080, 0x30a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xf9, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x3b, 0x0, 0x0, 0xe, 0x2d, 0xd5}}]}}]}}, 0x0) 15:19:31 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000050cb5320450c10108e490102030109021b"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(r0) 15:19:31 executing program 2: syz_usb_connect(0x0, 0x35, &(0x7f0000000540)={{0x12, 0x1, 0x0, 0x52, 0x40, 0x7d, 0x40, 0x84d, 0x3, 0x75bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x23, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x9a, 0x64, 0x23, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x8, 0xb, "aeba9ce00b82"}]}}]}}]}}]}}, 0x0) [ 583.513179][ T7909] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 583.513288][ T26] Bluetooth: hci6: command 0x1003 tx timeout [ 583.599316][ T3711] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 15:19:31 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000240)}], 0x1) recvfrom$inet6(r0, &(0x7f0000000640)=""/183, 0xb7, 0x10120, 0x0, 0x0) [ 583.865412][ T2988] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 583.873126][ T3697] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 583.880739][ T22] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 583.888887][ T3702] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 583.954086][ T26] usb 1-1: USB disconnect, device number 118 [ 583.961146][ T26] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 584.135117][ T3697] usb 2-1: Using ep0 maxpacket: 32 [ 584.263985][ T3697] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 584.279611][ T3697] usb 2-1: config 0 has no interfaces? [ 584.313543][ T2988] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 584.324512][ T3702] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 584.335211][ T22] usb 4-1: config 249 has an invalid interface number: 59 but max is 0 [ 584.351262][ T22] usb 4-1: config 249 has no interface number 0 [ 584.360902][ T22] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a [ 584.380699][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 15:19:32 executing program 0: syz_usb_connect(0x0, 0x46, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xae, 0xc3, 0x88, 0x10, 0x1b3d, 0x9307, 0x2c0b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3d, 0x6f, 0xd9, 0x0, [], [{}, {}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}]}}]}}]}}, 0x0) r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x0) ioctl$HIDIOCGRAWNAME(r0, 0x40086602, &(0x7f0000000080)) [ 584.493525][ T3697] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 584.502624][ T3697] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.530586][ T3697] usb 2-1: Product: syz [ 584.535403][ T3697] usb 2-1: Manufacturer: syz [ 584.540025][ T3697] usb 2-1: SerialNumber: syz [ 584.548584][ T3697] usb 2-1: config 0 descriptor?? [ 584.554213][ T2988] usb 3-1: New USB device found, idVendor=084d, idProduct=0003, bcdDevice=75.bb [ 584.563495][ T3702] usb 6-1: New USB device found, idVendor=084d, idProduct=0003, bcdDevice=75.bb [ 584.572551][ T3702] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 15:19:32 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000240)}], 0x1) recvfrom$inet6(r0, &(0x7f0000000640)=""/183, 0xb7, 0x10120, 0x0, 0x0) [ 584.587813][ T2988] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.596173][ T2988] usb 3-1: Product: syz [ 584.600364][ T2988] usb 3-1: Manufacturer: syz [ 584.606671][ T3702] usb 6-1: Product: syz [ 584.611398][ T3702] usb 6-1: Manufacturer: syz [ 584.616396][ T3702] usb 6-1: SerialNumber: syz [ 584.621879][ T2988] usb 3-1: SerialNumber: syz [ 584.629675][ T3702] usb 6-1: config 0 descriptor?? [ 584.649726][ T2988] usb 3-1: config 0 descriptor?? [ 584.685280][ T3697] usb 4-1: USB disconnect, device number 7 [ 584.706631][ T2988] gspca_main: spca500-2.14.0 probing 084d:0003 [ 584.715126][ T3702] gspca_main: spca500-2.14.0 probing 084d:0003 [ 584.773125][ T3711] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 584.837755][ T2988] usb 2-1: USB disconnect, device number 6 [ 584.947947][ T3702] usb 3-1: USB disconnect, device number 91 [ 584.995299][ T3689] usb 6-1: USB disconnect, device number 68 [ 585.013276][ T3711] usb 1-1: Using ep0 maxpacket: 16 [ 585.133195][ T3711] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 585.144144][ T3711] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 585.155074][ T3711] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 585.165813][ T3711] usb 1-1: New USB device found, idVendor=1b3d, idProduct=9307, bcdDevice=2c.0b [ 585.175251][ T3711] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 15:19:33 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100"], 0x0) syz_open_dev$hidraw(&(0x7f0000000480), 0x0, 0x641) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x0) [ 585.194130][ T3711] usb 1-1: config 0 descriptor?? [ 585.234050][ T3711] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 585.242161][ T3711] usb 1-1: Detected FT-X 15:19:33 executing program 2: syz_usb_connect(0x0, 0x35, &(0x7f0000000540)={{0x12, 0x1, 0x0, 0x52, 0x40, 0x7d, 0x40, 0x84d, 0x3, 0x75bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x23, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x9a, 0x64, 0x23, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x8, 0xb, "aeba9ce00b82"}]}}]}}]}}]}}, 0x0) [ 585.453188][ T3711] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 585.473313][ T3711] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 585.490517][ T26] usb 4-1: new high-speed USB device number 8 using dummy_hcd 15:19:33 executing program 5: syz_usb_connect$cdc_ecm(0x0, 0x67, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000402505a1a4400000000101090255000101000000090400000002060000052406000005240000000d240f01000000000000000000152412"], 0x0) [ 585.496668][ T3711] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 15:19:33 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000240)="fa", 0xfdef}], 0x1) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000640)=""/183, 0xb7, 0x10120, 0x0, 0x0) 15:19:33 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1c1241) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, 0x0) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) syz_usb_disconnect(r0) [ 585.540995][ T3711] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 585.584032][ T3711] usb 1-1: USB disconnect, device number 119 15:19:33 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000240)="fa", 0xfdef}], 0x1) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000640)=""/183, 0xb7, 0x10120, 0x0, 0x0) 15:19:33 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000240)="fa", 0xfdef}], 0x1) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000640)=""/183, 0xb7, 0x10120, 0x0, 0x0) [ 585.625876][ T3711] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 585.649344][ T3711] ftdi_sio 1-1:0.0: device disconnected 15:19:33 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000240)="fa", 0xfdef}], 0x1) recvfrom$inet6(r0, 0x0, 0x0, 0x10120, 0x0, 0x0) [ 585.753213][ T26] usb 4-1: Using ep0 maxpacket: 8 15:19:33 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000240)="fa", 0xfdef}], 0x1) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 15:19:33 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000240)="fa", 0xfdef}], 0x1) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 585.853531][ T3702] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 585.857694][ T3689] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 585.893373][ T26] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 585.903603][ T22] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 585.911322][ T26] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 585.921458][ T26] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 585.934972][ T26] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 15:19:33 executing program 0: syz_usb_connect(0x0, 0x52, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xae, 0xc3, 0x88, 0x10, 0x1b3d, 0x9307, 0x2c0b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3d, 0x6f, 0xd9, 0x0, [], [{}, {}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x3, 0x0, "d1"}]}}]}}]}}]}}, 0x0) r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x0) ioctl$HIDIOCGRAWNAME(r0, 0x401c5820, &(0x7f0000000080)) 15:19:33 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000240)="fa", 0xfdef}], 0x1) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 585.952042][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.026962][ T26] hub 4-1:1.0: bad descriptor, ignoring hub [ 586.033265][ T26] hub: probe of 4-1:1.0 failed with error -5 [ 586.046699][ T26] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 586.183396][ T22] usb 2-1: Using ep0 maxpacket: 16 [ 586.233466][ T3689] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 586.253412][ T3702] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 586.264258][ T3697] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 586.313255][ T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 586.324882][ T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 586.333272][ T3689] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 586.334805][ T22] usb 2-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 586.349745][ T3689] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 586.354581][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.370780][ T3689] usb 6-1: SerialNumber: syz [ 586.372550][ T22] usb 2-1: config 0 descriptor?? [ 586.377307][ T3711] usb 4-1: USB disconnect, device number 8 [ 586.433868][ T3689] usb 6-1: bad CDC descriptors [ 586.453206][ T3702] usb 3-1: New USB device found, idVendor=084d, idProduct=0003, bcdDevice=75.bb [ 586.463170][ T3702] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.471445][ T3702] usb 3-1: Product: syz [ 586.476424][ T3702] usb 3-1: Manufacturer: syz [ 586.481273][ T3702] usb 3-1: SerialNumber: syz [ 586.489102][ T3702] usb 3-1: config 0 descriptor?? [ 586.534682][ T3702] gspca_main: spca500-2.14.0 probing 084d:0003 [ 586.543243][ T3697] usb 1-1: Using ep0 maxpacket: 16 [ 586.615676][ T8017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 586.629512][ T8017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.643686][ T3689] usb 6-1: USB disconnect, device number 69 [ 586.663234][ T3697] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 586.675012][ T3697] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 586.685899][ T3697] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 586.696665][ T3697] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 586.707386][ T3697] usb 1-1: New USB device found, idVendor=1b3d, idProduct=9307, bcdDevice=2c.0b 15:19:34 executing program 3: r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) [ 586.721521][ T3697] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.733552][ T3697] usb 1-1: config 0 descriptor?? [ 586.754575][ T3711] usb 3-1: USB disconnect, device number 92 [ 586.812235][ T3697] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 586.821403][ T3697] usb 1-1: Detected FT-X [ 587.033204][ T3697] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 587.063239][ T3697] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 587.083249][ T2988] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 587.091967][ T3697] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 587.100147][ T3697] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 587.113337][ T3697] usb 1-1: USB disconnect, device number 120 [ 587.127200][ T3697] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 587.137294][ T3697] ftdi_sio 1-1:0.0: device disconnected [ 587.183204][ T22] usbhid 2-1:0.0: can't add hid device: -71 [ 587.189195][ T22] usbhid: probe of 2-1:0.0 failed with error -71 [ 587.207541][ T22] usb 2-1: USB disconnect, device number 7 15:19:35 executing program 2: syz_usb_connect(0x0, 0x35, &(0x7f0000000540)={{0x12, 0x1, 0x0, 0x52, 0x40, 0x7d, 0x40, 0x84d, 0x3, 0x75bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x23, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x9a, 0x64, 0x23, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x8, 0xb, "aeba9ce00b82"}]}}]}}]}}]}}, 0x0) 15:19:35 executing program 4: syz_usb_connect$uac1(0x0, 0x79, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x82}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x8, 0x1, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000600)={0x0, 0x0, 0x5, &(0x7f0000000280)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x1c01}}, {0x0, 0x0}, {0x2, &(0x7f0000000440)=@string={0x2}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x2c01}}, {0x0, 0x0}]}) 15:19:35 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000480), 0x0, 0x641) write$hidraw(r0, &(0x7f0000000000)='4', 0x20000001) [ 587.486278][ T2988] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 587.502941][ T2988] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 587.527623][ T2988] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 587.543925][ T2988] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.554706][ T2988] usb 4-1: config 0 descriptor?? [ 587.556451][ T3698] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 587.593162][ T3702] usb 3-1: new high-speed USB device number 93 using dummy_hcd 15:19:35 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 15:19:35 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x40044590, &(0x7f0000000180)=""/180) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x40044590, &(0x7f0000000180)=""/180) 15:19:35 executing program 5: syz_open_dev$hidraw(&(0x7f0000000480), 0x0, 0x641) [ 587.813035][ T3698] usb 5-1: Using ep0 maxpacket: 8 15:19:35 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000200)=@ready={0x0, 0x0, 0x8, 'k3\vF'}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000240)=@conn_svc_rsp={0x0, 0x0, 0xa, "df005c34", {0x3, 0x100, 0x0, 0x8}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xd0, &(0x7f00000002c0)=ANY=[@ANYBLOB="080000c856876fae95"]) [ 587.954314][ T3698] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 587.963222][ T3702] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 587.971630][ T3698] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 587.994772][ T3698] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 15:19:35 executing program 5: syz_open_dev$hidraw(&(0x7f0000000480), 0x0, 0x641) [ 588.026747][ T2988] HID 045e:07da: Invalid code 65791 type 1 [ 588.048587][ T2988] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0032/input/input8 15:19:36 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000980)={0x1c, &(0x7f0000000880)={0x0, 0x0, 0x1, '{'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001580)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0x21, 0x1}}) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) [ 588.075010][ T2988] microsoft 0003:045E:07DA.0032: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 588.153344][ T3702] usb 3-1: New USB device found, idVendor=084d, idProduct=0003, bcdDevice=75.bb [ 588.170613][ T3702] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.179490][ T3702] usb 3-1: Product: syz [ 588.183098][ T3689] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 588.184415][ T3702] usb 3-1: Manufacturer: syz [ 588.201030][ T3702] usb 3-1: SerialNumber: syz [ 588.207953][ T3702] usb 3-1: config 0 descriptor?? [ 588.227411][ T14] usb 4-1: USB disconnect, device number 9 [ 588.255172][ T3702] gspca_main: spca500-2.14.0 probing 084d:0003 [ 588.261925][ T2988] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 588.413286][ T3698] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 588.422441][ T3698] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.430986][ T3698] usb 5-1: SerialNumber: Ⰱ [ 588.453116][ T3711] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 588.471787][ T3702] usb 3-1: USB disconnect, device number 93 [ 588.583145][ T3689] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 588.593337][ T3689] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 588.603362][ T3689] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 588.614258][ T3689] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 588.624260][ T3689] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 15:19:36 executing program 3: r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) [ 588.714204][ T3689] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 588.723695][ T3689] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 588.731776][ T3689] usb 2-1: SerialNumber: syz [ 588.755780][ T3698] usb 5-1: 0:2 : does not exist [ 588.784029][ T3689] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 588.784129][ T2988] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 588.797117][ T3698] usb 5-1: USB disconnect, device number 4 [ 588.830979][ T2988] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.842273][ T2988] usb 1-1: Product: syz [ 588.852421][ T2988] usb 1-1: Manufacturer: syz [ 588.860390][ T2988] usb 1-1: SerialNumber: syz [ 588.875467][ T3711] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 588.894417][ T3711] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.913894][ T3711] usb 6-1: config 0 descriptor?? [ 588.923913][ T2988] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 15:19:36 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000480), 0x0, 0x641) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000300)=ANY=[], 0x0) [ 588.999073][ T3689] usb 2-1: USB disconnect, device number 8 [ 589.153132][ T3702] usb 4-1: new full-speed USB device number 10 using dummy_hcd 15:19:37 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12014000246b9f4013206104ecee1b7b2a0109021b000100000000090400000113ac820009058301"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000880)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000001180)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 589.283019][ T14] usb 3-1: new high-speed USB device number 94 using dummy_hcd 15:19:37 executing program 1: syz_usb_connect$uac1(0x6, 0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000001300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x3f, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff}}}}}]}}]}}, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, &(0x7f0000001e40)={0xa, &(0x7f0000001d40)={0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) [ 589.503133][ T2988] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 589.512283][ T3697] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 589.523071][ T3702] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 589.541913][ T3702] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 589.543718][ T14] usb 3-1: Using ep0 maxpacket: 8 [ 589.555373][ T3702] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 589.573745][ T3702] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.587548][ T3702] usb 4-1: config 0 descriptor?? [ 589.713166][ T14] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 589.723496][ T14] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 589.735371][ T14] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 589.746905][ T14] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 589.758549][ T14] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 589.767923][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.804164][ T8057] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 589.826579][ T14] hub 3-1:1.0: bad descriptor, ignoring hub [ 589.837770][ T14] hub: probe of 3-1:1.0 failed with error -5 [ 589.850162][ T14] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 589.857789][ T3698] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 589.868487][ T14] cdc_wdm 3-1:1.0: Unknown control protocol [ 589.893178][ T3697] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 590.063110][ T3697] usb 5-1: New USB device found, idVendor=2013, idProduct=0461, bcdDevice=ee.ec [ 590.063246][ T3711] usb 6-1: non-Atmel transceiver xxxx007b [ 590.076198][ T3702] HID 045e:07da: Invalid code 65791 type 1 [ 590.090253][ T3697] usb 5-1: New USB device strings: Mfr=27, Product=123, SerialNumber=42 [ 590.102796][ T3702] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0033/input/input9 [ 590.115599][ T3697] usb 5-1: Product: syz [ 590.119840][ T3697] usb 5-1: Manufacturer: syz [ 590.125093][ T3697] usb 5-1: SerialNumber: syz [ 590.131608][ T3702] microsoft 0003:045E:07DA.0033: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 590.148154][ T3697] usb 5-1: config 0 descriptor?? [ 590.153437][ T3698] usb 2-1: Using ep0 maxpacket: 32 [ 590.195558][ T3697] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2013:0461, interface 0, class 0) [ 590.214615][ T3697] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 590.293263][ T3711] usb 6-1: Firmware version (0.0) predates our first public release. [ 590.296949][ T26] usb 4-1: USB disconnect, device number 10 [ 590.304830][ T3711] usb 6-1: Please update to version 0.2 or newer [ 590.315164][ T3698] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 590.343630][ T3711] usb 6-1: atusb_probe: initialization failed, error = -19 [ 590.348030][ T143] usb 1-1: USB disconnect, device number 121 [ 590.359450][ T3711] usb 6-1: USB disconnect, device number 70 [ 590.483286][ T3698] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 590.495811][ T3698] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.509346][ T3698] usb 2-1: Product: syz [ 590.513753][ T3698] usb 2-1: Manufacturer: syz [ 590.518394][ T3698] usb 2-1: SerialNumber: syz [ 590.543333][ T8061] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 590.597269][ T8057] usb 3-1: reset high-speed USB device number 94 using dummy_hcd [ 590.693161][ T3697] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 590.715344][ T3697] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 590.733089][ T3697] em28xx 5-1:0.0: AC97 chip type couldn't be determined 15:19:38 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000980)={0x1c, &(0x7f0000000880)={0x0, 0x0, 0x1, '{'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001580)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0x21, 0x1}}) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) [ 590.740136][ T3697] em28xx 5-1:0.0: No AC97 audio processor [ 590.756686][ T3697] usb 5-1: USB disconnect, device number 5 [ 590.772193][ T3697] em28xx 5-1:0.0: Disconnecting em28xx 15:19:38 executing program 3: r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000040)=ANY=[@ANYBLOB="05010000b24b4a10e60403007701000000010902240001010000000904000002ccb8280009050b02000000000009058a02"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="0015f4000000c3fd"], 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090003206d041cc340000000000109022400010000a00009045791dc6b01010009"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x70, &(0x7f0000000840)=ANY=[@ANYBLOB="0007ff010000000000"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000008c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000c80)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000001140)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000d00)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000cc0)={0x24, 0x0, &(0x7f0000000d40)={0x0, 0x3, 0x4, @lang_id={0x4}}, &(0x7f0000001240)={0x0, 0x22, 0x6, {[@global=@item_012={0x0, 0x1, 0x5}, @main=@item_4={0x3, 0x0, 0xb, "cc2f6f39"}]}}, &(0x7f0000000c40)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x7}}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) [ 590.800240][ T3697] em28xx 5-1:0.0: Freeing device [ 590.818562][ T3698] usb 2-1: USB disconnect, device number 9 15:19:38 executing program 0: syz_usb_connect(0x0, 0x42, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xae, 0xc3, 0x88, 0x10, 0x1b3d, 0x9307, 0x2c0b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3d, 0x6f, 0xd9, 0x0, [], [{}, {}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x3, 0x0, "d1"}]}}]}}]}}]}}, 0x0) r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x0) ioctl$HIDIOCGRAWNAME(r0, 0x401c5820, &(0x7f0000000080)) [ 590.875016][ T8057] usb 3-1: Using ep0 maxpacket: 8 [ 590.953233][ T2988] usb 1-1: Service connection timeout for: 257 [ 590.960997][ T2988] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 590.969965][ T2988] ath9k_htc: Failed to initialize the device [ 590.976514][ T143] usb 1-1: ath9k_htc: USB layer deinitialized [ 590.983834][ T8062] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 15:19:39 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12014000246b9f4013206104ecee1b7b2a0109021b000100000000090400000113ac820009058301"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000880)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000001180)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 591.113220][ T3711] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 591.173035][ T26] usb 4-1: new high-speed USB device number 11 using dummy_hcd 15:19:39 executing program 1: syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) [ 591.324977][ T3702] usb 3-1: USB disconnect, device number 94 [ 591.343171][ T143] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 591.413036][ T26] usb 4-1: Using ep0 maxpacket: 16 [ 591.443246][ T14] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 591.493220][ T3711] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 591.502664][ T3711] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.519545][ T3711] usb 6-1: config 0 descriptor?? [ 591.533363][ T26] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 591.543418][ T26] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 591.553646][ T26] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 591.564026][ T26] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 591.574769][ T26] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 591.584158][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.593036][ T143] usb 1-1: Using ep0 maxpacket: 16 [ 591.635053][ T26] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 591.713143][ T143] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 591.723838][ T143] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 591.734543][ T143] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 591.745335][ T143] usb 1-1: New USB device found, idVendor=1b3d, idProduct=9307, bcdDevice=2c.0b [ 591.754660][ T143] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.772056][ T143] usb 1-1: config 0 descriptor?? 15:19:39 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002a377840e91760db04490102030109021b0001000000000904000001ff000008"], 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @string={0x4, 0x3, "ec78"}}, 0x0, 0x0, 0x0}, 0x0) [ 591.815212][ T143] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 591.837338][ T143] usb 1-1: Detected FT-X [ 591.853391][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 592.023327][ T14] usb 5-1: New USB device found, idVendor=2013, idProduct=0461, bcdDevice=ee.ec [ 592.032424][ T14] usb 5-1: New USB device strings: Mfr=27, Product=123, SerialNumber=42 [ 592.033190][ T143] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 592.041077][ T14] usb 5-1: Product: syz [ 592.051847][ T14] usb 5-1: Manufacturer: syz [ 592.056913][ T14] usb 5-1: SerialNumber: syz [ 592.066899][ T14] usb 5-1: config 0 descriptor?? [ 592.072213][ T26] scsi host1: usb-storage 4-1:1.0 [ 592.077666][ T143] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 592.113358][ T143] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 592.115578][ T14] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2013:0461, interface 0, class 0) [ 592.129856][ T3698] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 592.139553][ T14] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 592.141130][ T143] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 592.165788][ T143] usb 1-1: USB disconnect, device number 122 [ 592.182624][ T143] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 592.198788][ T143] ftdi_sio 1-1:0.0: device disconnected 15:19:40 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000b8a17508950b201775cc000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000200)={0x0, 0x0, 0x6, "a33bbc6728d3"}, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 592.533366][ T3698] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 592.558611][ T3698] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 592.653217][ T14] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 592.683185][ T3711] usb 6-1: non-Atmel transceiver xxxx007b [ 592.689173][ T14] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 592.716605][ T14] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 592.723801][ T14] em28xx 5-1:0.0: No AC97 audio processor [ 592.748371][ T14] usb 5-1: USB disconnect, device number 6 [ 592.755102][ T14] em28xx 5-1:0.0: Disconnecting em28xx [ 592.764458][ T14] em28xx 5-1:0.0: Freeing device [ 592.783255][ T3698] usb 2-1: New USB device found, idVendor=17e9, idProduct=db60, bcdDevice=49.04 [ 592.792618][ T3698] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.800912][ T3698] usb 2-1: Product: syz [ 592.807721][ T3698] usb 2-1: Manufacturer: syz [ 592.812481][ T3698] usb 2-1: SerialNumber: syz [ 592.813105][ T2988] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 592.826549][ T3698] usb 2-1: config 0 descriptor?? [ 592.893475][ T3711] usb 6-1: Firmware version (0.0) predates our first public release. [ 592.901688][ T3711] usb 6-1: Please update to version 0.2 or newer [ 592.923319][ T3711] usb 6-1: atusb_probe: initialization failed, error = -19 [ 592.933858][ T3711] usb 6-1: USB disconnect, device number 71 [ 592.970046][ T8081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.979778][ T8081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 15:19:40 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 593.080684][ T2988] usb 1-1: Using ep0 maxpacket: 8 [ 593.123660][ T6084] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 593.146188][ T6084] scsi 1:0:0:0: Attached scsi generic sg1 type 0 [ 593.203318][ T2988] usb 1-1: New USB device found, idVendor=0b95, idProduct=1720, bcdDevice=cc.75 [ 593.215484][ T2988] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.228046][ T2988] usb 1-1: config 0 descriptor?? [ 593.303324][ T8077] sddr09: could not read card info [ 593.309789][ T8] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 593.317655][ T8] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 593.324384][ T8] sd 1:0:0:0: [sdb] Test WP failed, assume Write Enabled [ 593.331715][ T8] sd 1:0:0:0: [sdb] Asking for cache data failed [ 593.341580][ T8] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 593.348806][ T3698] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 593.362508][ T3698] [drm:udl_init.cold] *ERROR* Unrecognized vendor firmware descriptor [ 593.373047][ T143] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 593.388613][ T8] sd 1:0:0:0: [sdb] Attached SCSI removable disk 15:19:41 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000980)={0x1c, &(0x7f0000000880)={0x0, 0x0, 0x1, '{'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001580)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0x21, 0x1}}) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) [ 593.413228][ T3698] [drm:udl_init] *ERROR* Selecting channel failed [ 593.449394][ T3698] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 593.467839][ T3698] [drm] Initialized udl on minor 2 [ 593.509588][ T3711] usb 4-1: USB disconnect, device number 11 [ 593.515952][ T3698] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 593.553482][ T3698] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 593.564255][ T3698] usb 2-1: USB disconnect, device number 10 [ 593.614019][ T143] usb 5-1: Using ep0 maxpacket: 32 [ 593.733072][ T143] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 593.753728][ T14] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 593.903073][ T143] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 593.912244][ T143] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 593.922615][ T143] usb 5-1: Product: syz [ 593.927359][ T143] usb 5-1: Manufacturer: syz [ 593.933213][ T143] usb 5-1: SerialNumber: syz [ 593.940719][ T143] usb 5-1: config 0 descriptor?? [ 593.984954][ T143] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 593.996213][ T143] ldusb 5-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 594.153612][ T14] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 594.162703][ T14] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.177313][ T14] usb 6-1: config 0 descriptor?? [ 594.353140][ T2988] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 594.563096][ T2988] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 594.573805][ T2988] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 594.584694][ T2988] asix: probe of 1-1:0.0 failed with error -71 [ 594.594337][ T2988] usb 1-1: USB disconnect, device number 123 [ 595.303281][ T14] usb 6-1: non-Atmel transceiver xxxx007b [ 595.523238][ T14] usb 6-1: Firmware version (0.0) predates our first public release. [ 595.531451][ T14] usb 6-1: Please update to version 0.2 or newer [ 595.548198][ T8083] cdc_wdm 3-1:1.0: Error autopm - -16 [ 595.560844][ T2988] usb 5-1: USB disconnect, device number 7 15:19:43 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000480), 0x0, 0x641) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000300)=ANY=[], 0x0) 15:19:43 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x0, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) 15:19:43 executing program 3: r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000040)=ANY=[@ANYBLOB="05010000b24b4a10e60403007701000000010902240001010000000904000002ccb8280009050b02000000000009058a02"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="0015f4000000c3fd"], 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090003206d041cc340000000000109022400010000a00009045791dc6b01010009"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x70, &(0x7f0000000840)=ANY=[@ANYBLOB="0007ff010000000000"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000008c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000c80)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000001140)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000d00)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000cc0)={0x24, 0x0, &(0x7f0000000d40)={0x0, 0x3, 0x4, @lang_id={0x4}}, &(0x7f0000001240)={0x0, 0x22, 0x6, {[@global=@item_012={0x0, 0x1, 0x5}, @main=@item_4={0x3, 0x0, 0xb, "cc2f6f39"}]}}, &(0x7f0000000c40)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x7}}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 15:19:43 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000019b40320d812010085de0102030109021b0001000000000904000001bed54c00090585020004"], 0x0) syz_usb_disconnect(r0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x0, 0x2d, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x3a, 0x37, 0xea, 0x0, 0x5d1, 0x9004, 0x941e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xf, 0x1, 0x14, 0x6f, 0x31, 0x3, [], [{}]}}]}}]}}, &(0x7f0000000b40)={0x0, 0x0, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x4, [{0x2, &(0x7f0000000100)=@string={0x2}}, {0x4, &(0x7f0000000140)=@lang_id={0x4}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4}}]}) syz_usb_connect(0x0, 0x0, 0x0, 0x0) [ 595.562001][ T14] usb 6-1: atusb_probe: initialization failed, error = -19 [ 595.610702][ T14] usb 6-1: USB disconnect, device number 72 [ 595.613761][ T2988] ldusb 5-1:0.0: LD USB Device #1 now disconnected [ 595.863002][ T3689] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 595.873058][ T3698] usb 1-1: new high-speed USB device number 124 using dummy_hcd 15:19:43 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000980)={0x1c, &(0x7f0000000880)={0x0, 0x0, 0x1, '{'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001580)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0x21, 0x1}}) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) [ 595.972986][ T145] usb 3-1: new high-speed USB device number 95 using dummy_hcd 15:19:43 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 596.107708][ T3689] usb 2-1: Using ep0 maxpacket: 16 [ 596.113116][ T3698] usb 1-1: Using ep0 maxpacket: 32 [ 596.213059][ T145] usb 3-1: Using ep0 maxpacket: 8 [ 596.233219][ T3689] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 596.244377][ T3698] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 596.254675][ T3689] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 596.267620][ T3689] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 596.276797][ T3689] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.289462][ T3689] usb 2-1: config 0 descriptor?? [ 596.323097][ T2988] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 596.333254][ T145] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 596.347405][ T145] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 596.356557][ T6] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 596.364368][ T145] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 596.375739][ T145] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 596.388070][ T145] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 596.397308][ T145] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.423144][ T3698] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.85 [ 596.423442][ T8094] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 596.432200][ T3698] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.448656][ T145] hub 3-1:1.0: bad descriptor, ignoring hub [ 596.454676][ T145] hub: probe of 3-1:1.0 failed with error -5 [ 596.462380][ T3698] usb 1-1: Product: syz [ 596.468972][ T145] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 596.475231][ T3698] usb 1-1: Manufacturer: syz [ 596.479852][ T3698] usb 1-1: SerialNumber: syz [ 596.485470][ T145] cdc_wdm 3-1:1.0: Unknown control protocol [ 596.505568][ T3698] usb 1-1: config 0 descriptor?? [ 596.523375][ T8092] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 596.603040][ T6] usb 5-1: Using ep0 maxpacket: 32 [ 596.713349][ T2988] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 596.722425][ T2988] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.723131][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 596.759547][ T2988] usb 6-1: config 0 descriptor?? [ 596.768140][ T143] usb 1-1: USB disconnect, device number 124 [ 596.784981][ T3689] microsoft 0003:045E:07DA.0034: unknown main item tag 0x0 [ 596.792499][ T3689] microsoft 0003:045E:07DA.0034: No inputs registered, leaving [ 596.802460][ T3689] microsoft 0003:045E:07DA.0034: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 596.814633][ T3689] microsoft 0003:045E:07DA.0034: no inputs found [ 596.820977][ T3689] microsoft 0003:045E:07DA.0034: could not initialize ff, continuing anyway [ 596.913882][ T6] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 596.923082][ T6] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 596.931535][ T6] usb 5-1: Product: syz [ 596.936142][ T6] usb 5-1: Manufacturer: syz [ 596.940767][ T6] usb 5-1: SerialNumber: syz [ 596.956161][ T6] usb 5-1: config 0 descriptor?? [ 596.989018][ T3702] usb 2-1: USB disconnect, device number 11 [ 596.994544][ T6] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 597.253967][ T8094] usb 3-1: reset high-speed USB device number 95 using dummy_hcd 15:19:45 executing program 1: syz_usb_connect(0x0, 0x43, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x38, 0xce, 0x48, 0x8, 0x7c0, 0x1512, 0x1b68, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x31, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa6, 0xbd, 0xe6, 0x0, [@generic={0x1f, 0x0, "af8ddf47b785020118a89f4c8a99c0d0a6818494fe99fcdb18f3d8ca2c"}]}}]}}]}}, 0x0) r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x0) ioctl$HIDIOCGRAWNAME(r0, 0x401c5820, &(0x7f0000000080)) [ 597.513269][ T8094] usb 3-1: Using ep0 maxpacket: 8 [ 597.643528][ T8099] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 597.685512][ T6] ldusb 5-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 597.798384][ T3689] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 597.893164][ T2988] usb 6-1: non-Atmel transceiver xxxx007b [ 597.893465][ T3698] usb 3-1: USB disconnect, device number 95 [ 597.912061][ T145] usb 5-1: USB disconnect, device number 8 [ 597.925776][ T145] ldusb 5-1:0.0: LD USB Device #1 now disconnected [ 598.043136][ T3689] usb 2-1: Using ep0 maxpacket: 8 [ 598.072994][ T143] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 598.103216][ T2988] usb 6-1: Firmware version (0.0) predates our first public release. [ 598.111941][ T2988] usb 6-1: Please update to version 0.2 or newer [ 598.133838][ T2988] usb 6-1: atusb_probe: initialization failed, error = -19 [ 598.153250][ T2988] usb 6-1: USB disconnect, device number 73 [ 598.163193][ T3689] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=1b.68 [ 598.172411][ T3689] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.189730][ T3689] usb 2-1: config 0 descriptor?? [ 598.234821][ T3689] iowarrior 2-1:0.0: no interrupt-in endpoint found [ 598.353036][ T143] usb 1-1: Using ep0 maxpacket: 32 15:19:46 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000480), 0x0, 0x641) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000300)=ANY=[], 0x0) 15:19:46 executing program 4: syz_usb_connect(0x0, 0xf4, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x9f, 0x39, 0xf0, 0x20, 0x582, 0x25, 0xc08c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe2, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x6, 0x47, 0x0, 0x4d, 0x0, [@uac_control={{}, [@mixer_unit={0x6, 0x24, 0x4, 0x4, 0x9, '\\'}]}], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}, @generic={0x15, 0x0, "145130aaa477ae114b7f9f62366ae8c3a92e2e"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x6f, 0x0, "fbe61fe69f354071748653401a7d424a44851d4d3d5d29703deddd498e0aa7a031e0f538f7523ee32a5365c07185d13acf5d710109d3edfc5ef91618b63fa1c9a5f58561b1a1ebf224bfebe6df33a497d176f4a9cdaaf8c9d3264d861a9b7997d5f9d5bb4f997732ba5b45eb94"}]}}, {}, {{0x9, 0x5, 0x7}}, {{0x9, 0x5, 0x3}}, {{0x9, 0x5, 0x9}}]}}]}}]}}, 0x0) [ 598.450421][ T3689] usb 2-1: USB disconnect, device number 12 [ 598.483861][ T143] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 598.533115][ T143] usb 1-1: language id specifier not provided by device, defaulting to English 15:19:46 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) 15:19:46 executing program 3: r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000040)=ANY=[@ANYBLOB="05010000b24b4a10e60403007701000000010902240001010000000904000002ccb8280009050b02000000000009058a02"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="0015f4000000c3fd"], 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090003206d041cc340000000000109022400010000a00009045791dc6b01010009"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x70, &(0x7f0000000840)=ANY=[@ANYBLOB="0007ff010000000000"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000008c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000c80)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000001140)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000d00)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000cc0)={0x24, 0x0, &(0x7f0000000d40)={0x0, 0x3, 0x4, @lang_id={0x4}}, &(0x7f0000001240)={0x0, 0x22, 0x6, {[@global=@item_012={0x0, 0x1, 0x5}, @main=@item_4={0x3, 0x0, 0xb, "cc2f6f39"}]}}, &(0x7f0000000c40)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x7}}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 15:19:46 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000980)={0x1c, &(0x7f0000000880)={0x0, 0x0, 0x1, '{'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001580)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0x21, 0x1}}) [ 598.693355][ T143] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.85 [ 598.703358][ T143] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.711528][ T143] usb 1-1: Product: Ь [ 598.718210][ T143] usb 1-1: config 0 descriptor?? [ 598.743063][ T2988] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 598.751104][ T143] usb 1-1: can't set config #0, error -71 [ 598.760197][ T143] usb 1-1: USB disconnect, device number 125 [ 598.783042][ T3702] usb 5-1: new high-speed USB device number 9 using dummy_hcd 15:19:46 executing program 1: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x78, 0xb2, 0x4d, 0x40, 0x413c, 0x4912, 0x497b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0x1, 0x1, 0x0, [], [{{0x9, 0x5, 0x3, 0x0, 0x8}}]}}]}}]}}, 0x0) [ 598.943036][ T3689] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 599.003015][ T2988] usb 3-1: Using ep0 maxpacket: 8 [ 599.043001][ T3702] usb 5-1: Using ep0 maxpacket: 32 [ 599.153019][ T143] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 599.163155][ T2988] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 599.173515][ T2988] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 599.182432][ T2988] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 599.194034][ T3702] usb 5-1: config 0 has an invalid interface number: 4 but max is 0 [ 599.202045][ T3702] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 599.212430][ T2988] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 599.223788][ T3702] usb 5-1: config 0 has no interface number 1 [ 599.229945][ T2988] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 599.239130][ T3702] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 599.252083][ T2988] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.262018][ T3702] usb 5-1: too many endpoints for config 0 interface 4 altsetting 9: 92, using maximum allowed: 30 [ 599.263309][ T145] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 599.281799][ T3702] usb 5-1: config 0 interface 4 altsetting 9 endpoint 0x3 has invalid wMaxPacketSize 0 [ 599.293297][ T3702] usb 5-1: config 0 interface 4 altsetting 9 endpoint 0x9 has invalid wMaxPacketSize 0 [ 599.303412][ T8104] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 599.303593][ T3689] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 599.310642][ T3702] usb 5-1: config 0 interface 4 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 92 [ 599.327956][ T3689] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.333820][ T3702] usb 5-1: config 0 interface 4 has no altsetting 0 [ 599.349016][ T2988] hub 3-1:1.0: bad descriptor, ignoring hub [ 599.356426][ T2988] hub: probe of 3-1:1.0 failed with error -5 [ 599.371610][ T3689] usb 6-1: config 0 descriptor?? [ 599.373990][ T2988] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 599.385814][ T2988] cdc_wdm 3-1:1.0: Unknown control protocol [ 599.553299][ T143] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 599.563662][ T3702] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice=c0.8c [ 599.572736][ T3702] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.581768][ T143] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 599.591721][ T3702] usb 5-1: Product: syz [ 599.596203][ T143] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 599.606087][ T3702] usb 5-1: Manufacturer: syz [ 599.610796][ T3702] usb 5-1: SerialNumber: syz [ 599.615647][ T143] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 599.634935][ T3702] usb 5-1: config 0 descriptor?? [ 599.641689][ T143] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 599.686847][ T3702] hub 5-1:0.4: bad descriptor, ignoring hub [ 599.700774][ T3702] hub: probe of 5-1:0.4 failed with error -5 [ 599.753397][ T143] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 599.762484][ T143] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 599.777492][ T143] usb 1-1: SerialNumber: syz [ 599.825449][ T145] usb 2-1: New USB device found, idVendor=413c, idProduct=4912, bcdDevice=49.7b [ 599.834649][ T143] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 599.842367][ T145] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.864394][ T145] usb 2-1: Product: syz [ 599.869726][ T145] usb 2-1: Manufacturer: syz [ 599.874491][ T145] usb 2-1: SerialNumber: syz [ 599.895047][ T145] usb 2-1: config 0 descriptor?? [ 600.003533][ T8104] usb 3-1: reset high-speed USB device number 96 using dummy_hcd [ 600.003585][ T143] usb 5-1: USB disconnect, device number 9 [ 600.046230][ T2988] usb 1-1: USB disconnect, device number 126 [ 600.137228][ T145] usb 2-1: USB disconnect, device number 13 [ 600.263039][ T8104] usb 3-1: Using ep0 maxpacket: 8 15:19:48 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x2c}}, {{0x9, 0x5, 0x81, 0x3, 0x68}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000001040)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f00000010c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 600.393538][ T8114] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 15:19:48 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) [ 600.513111][ T3689] usb 6-1: non-Atmel transceiver xxxx007b 15:19:48 executing program 1: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x28, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 600.693189][ T145] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 600.733086][ T3689] usb 6-1: Firmware version (0.0) predates our first public release. [ 600.742836][ T3689] usb 6-1: Please update to version 0.2 or newer [ 600.773374][ T3689] usb 6-1: atusb_probe: initialization failed, error = -19 [ 600.793672][ T3689] usb 6-1: USB disconnect, device number 74 [ 600.863073][ T143] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 600.943016][ T3698] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 601.073275][ T145] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 15:19:49 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000980)={0x1c, &(0x7f0000000880)={0x0, 0x0, 0x1, '{'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001580)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0x21, 0x1}}) [ 601.233181][ T143] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 601.243877][ T145] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 601.257975][ T143] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 601.263661][ T145] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.273720][ T143] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 601.285744][ T145] usb 5-1: Product: syz [ 601.290222][ T145] usb 5-1: Manufacturer: syz [ 601.293418][ T143] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 601.295581][ T145] usb 5-1: SerialNumber: syz [ 601.306259][ T143] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 601.309997][ T3698] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 601.413474][ T3698] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 601.422610][ T3698] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 601.430900][ T3698] usb 2-1: SerialNumber: syz [ 601.433150][ T143] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 601.452546][ T143] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 601.460824][ T143] usb 1-1: SerialNumber: syz [ 601.503795][ T143] cdc_ether: probe of 1-1:1.0 failed with error -22 15:19:49 executing program 3: r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000040)=ANY=[@ANYBLOB="05010000b24b4a10e60403007701000000010902240001010000000904000002ccb8280009050b02000000000009058a02"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="0015f4000000c3fd"], 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090003206d041cc340000000000109022400010000a00009045791dc6b01010009"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x70, &(0x7f0000000840)=ANY=[@ANYBLOB="0007ff010000000000"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000008c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000c80)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000001140)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000d00)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000cc0)={0x24, 0x0, &(0x7f0000000d40)={0x0, 0x3, 0x4, @lang_id={0x4}}, &(0x7f0000001240)={0x0, 0x22, 0x6, {[@global=@item_012={0x0, 0x1, 0x5}, @main=@item_4={0x3, 0x0, 0xb, "cc2f6f39"}]}}, &(0x7f0000000c40)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x7}}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) [ 601.603107][ T6] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 601.713899][ T3698] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 601.741609][ T143] usb 1-1: USB disconnect, device number 127 [ 601.916258][ T3697] usb 2-1: USB disconnect, device number 14 [ 601.983108][ T6] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 601.992283][ T6] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.002276][ T6] usb 6-1: config 0 descriptor?? 15:19:50 executing program 0: r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMSETDEVNAME(r0, 0x80184947, &(0x7f0000000140)={0x0, 'syz0\x00'}) [ 602.473364][ T145] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 602.479841][ T145] cdc_ncm 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 602.488083][ T145] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 602.693267][ T145] cdc_ncm 5-1:1.0: setting tx_max = 184 [ 602.718199][ T145] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 602.746224][ T145] usb 5-1: USB disconnect, device number 10 [ 602.756048][ T145] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 603.143156][ T6] usb 6-1: non-Atmel transceiver xxxx007b [ 603.363095][ T6] usb 6-1: Firmware version (0.0) predates our first public release. [ 603.371225][ T6] usb 6-1: Please update to version 0.2 or newer [ 603.393106][ T6] usb 6-1: atusb_probe: initialization failed, error = -19 [ 603.409605][ T6] usb 6-1: USB disconnect, device number 75 15:19:52 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000480), 0x0, 0x641) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000300)=ANY=[], 0x0) 15:19:52 executing program 0: futex(&(0x7f00000001c0)=0x2, 0xd, 0x0, &(0x7f0000000200)={0x77359400}, 0x0, 0x0) 15:19:52 executing program 1: r0 = socket$isdn_base(0x22, 0x3, 0x0) bind$isdn_base(r0, &(0x7f0000000340), 0x6) 15:19:52 executing program 4: r0 = eventfd(0xe77) read$eventfd(r0, &(0x7f0000000540), 0x8) 15:19:52 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000980)={0x1c, &(0x7f0000000880)={0x0, 0x0, 0x1, '{'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001580)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={0x40, 0x21, 0x1}}) 15:19:52 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x10}, 0x10}}, 0x0) [ 604.940481][ T14] usb 3-1: USB disconnect, device number 96 15:19:52 executing program 4: socketpair(0x18, 0x0, 0x0, &(0x7f0000000380)) 15:19:52 executing program 0: syz_open_dev$vcsa(&(0x7f00000005c0), 0x0, 0xa32080) 15:19:52 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x3, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}]}, 0x1c}}, 0x0) 15:19:52 executing program 3: select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x2710}) 15:19:52 executing program 4: select(0x40, &(0x7f0000000080), &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x0, 0xea60}) 15:19:53 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x49c}, 0x48) [ 605.252991][ T6] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 605.303173][ T145] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 605.553080][ T145] usb 3-1: Using ep0 maxpacket: 8 [ 605.633282][ T6] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 605.642398][ T6] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.652276][ T6] usb 6-1: config 0 descriptor?? [ 605.693272][ T145] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 605.709379][ T145] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 605.718351][ T145] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 605.729689][ T145] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 605.740927][ T145] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 605.750023][ T145] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.773329][ T8144] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 605.794282][ T145] hub 3-1:1.0: bad descriptor, ignoring hub [ 605.800238][ T145] hub: probe of 3-1:1.0 failed with error -5 [ 605.808796][ T145] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 605.814842][ T145] cdc_wdm 3-1:1.0: Unknown control protocol [ 606.453907][ T8144] usb 3-1: reset high-speed USB device number 97 using dummy_hcd [ 606.693013][ T8144] usb 3-1: Using ep0 maxpacket: 8 [ 606.793521][ T8157] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 606.803109][ T6] usb 6-1: Firmware version (0.0) predates our first public release. [ 606.811377][ T6] usb 6-1: Please update to version 0.2 or newer [ 606.904520][ T6] usb 6-1: USB disconnect, device number 76 [ 607.154264][ T3697] usb 3-1: USB disconnect, device number 97 15:19:59 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000480), 0x0, 0x641) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) 15:19:59 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000900000000000000230000001846"], &(0x7f0000000080)='syzkaller\x00', 0x1, 0xe8, &(0x7f0000000180)=""/232, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 15:19:59 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x3, 0x8, 0x301}, 0x14}}, 0x0) 15:19:59 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lgetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@known='security.apparmor\x00', &(0x7f0000000240)=""/217, 0xd9) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xc86ade39) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) lseek(r6, 0xbb6, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4c100, 0x0) sendfile(r6, r7, 0x0, 0x80000007) 15:19:59 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @dev}], 0x1c) 15:19:59 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000980)={0x1c, &(0x7f0000000880)={0x0, 0x0, 0x1, '{'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001580)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={0x40, 0x21, 0x1}}) 15:19:59 executing program 3: r0 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ff3000/0xd000)=nil, 0x930, 0x0, 0x40010, r0, 0x0) 15:19:59 executing program 1: socketpair(0x36, 0x0, 0x0, &(0x7f0000000040)) 15:19:59 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000240)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x0, 0x0, @dev}], 0x2c) 15:19:59 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xc86ade39) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) lseek(r4, 0xbb6, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4c100, 0x0) sendfile(r4, r5, 0x0, 0x80000007) 15:19:59 executing program 3: openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f00000000c0), 0x842, 0x0) 15:19:59 executing program 4: syz_open_dev$audion(&(0x7f0000000000), 0x1, 0x121001) [ 611.763045][ T6] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 611.814178][ T14] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 612.073072][ T14] usb 3-1: Using ep0 maxpacket: 8 [ 612.143250][ T6] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 612.172454][ T6] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.193150][ T14] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 612.228690][ T14] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 612.265036][ T6] usb 6-1: config 0 descriptor?? [ 612.303372][ T14] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 612.353970][ T14] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 612.403787][ T14] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 612.413066][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.443445][ T8170] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 612.464694][ T14] hub 3-1:1.0: bad descriptor, ignoring hub [ 612.472146][ T14] hub: probe of 3-1:1.0 failed with error -5 [ 612.488784][ T14] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 612.494900][ T14] cdc_wdm 3-1:1.0: Unknown control protocol [ 613.463215][ T6] usb 6-1: Firmware version (0.0) predates our first public release. [ 613.471344][ T6] usb 6-1: Please update to version 0.2 or newer [ 613.564659][ T6] usb 6-1: USB disconnect, device number 77 15:20:04 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x5000) 15:20:04 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xd2b}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), r0) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000540)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0xc001101c}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x60, r2, 0x100, 0x70bd2d, 0x7, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x800) r3 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380), 0x434501, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, '.\x00'}) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000000)=@raw=[@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0xd6b}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}, @jmp={0x5, 0x0, 0x8, 0x4, 0x6, 0xffffffffffffffe2, 0xfffffffffffffffc}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x6}], &(0x7f0000000080)='GPL\x00', 0x2, 0xde, &(0x7f00000000c0)=""/222, 0x41100, 0x14, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x0, 0xa, 0xffffff7f, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r0, r1, r3]}, 0x80) 15:20:04 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lgetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@known='security.apparmor\x00', &(0x7f0000000240)=""/217, 0xd9) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xc86ade39) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) lseek(r6, 0xbb6, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4c100, 0x0) sendfile(r6, r7, 0x0, 0x80000007) 15:20:04 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000480), 0x0, 0x641) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) 15:20:04 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xc86ade39) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) lseek(r4, 0xbb6, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4c100, 0x0) sendfile(r4, r5, 0x0, 0x80000007) 15:20:04 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000980)={0x1c, &(0x7f0000000880)={0x0, 0x0, 0x1, '{'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001580)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={0x40, 0x21, 0x1}}) [ 616.946595][ T3697] usb 3-1: USB disconnect, device number 98 [ 616.950431][ T8170] cdc_wdm 3-1:1.0: Error autopm - -16 15:20:04 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xc86ade39) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) lseek(r4, 0xbb6, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4c100, 0x0) sendfile(r4, r5, 0x0, 0x80000007) 15:20:05 executing program 4: select(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, &(0x7f0000000140)={0x0, 0xea60}) 15:20:05 executing program 4: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x5000) [ 617.303148][ T6] usb 6-1: new high-speed USB device number 78 using dummy_hcd 15:20:05 executing program 4: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x5000) [ 617.462995][ T3697] usb 3-1: new high-speed USB device number 99 using dummy_hcd 15:20:05 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockname$qrtr(r0, 0x0, 0x0) 15:20:05 executing program 4: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x5000) clock_getres(0x0, &(0x7f0000000040)) [ 617.712988][ T3697] usb 3-1: Using ep0 maxpacket: 8 [ 617.723476][ T6] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 617.776602][ T6] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.833172][ T3697] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 617.846094][ T6] usb 6-1: config 0 descriptor?? 15:20:05 executing program 4: select(0xfefdffff, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x0, 0xea60}) [ 617.893886][ T3697] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 15:20:05 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lgetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@known='security.apparmor\x00', &(0x7f0000000240)=""/217, 0xd9) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xc86ade39) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) lseek(r6, 0xbb6, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4c100, 0x0) sendfile(r6, r7, 0x0, 0x80000007) 15:20:05 executing program 1: socketpair(0x18, 0x0, 0x7fff, &(0x7f0000000380)) [ 617.986108][ T3697] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 618.015443][ T3697] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 618.070104][ T3697] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 618.083131][ T3697] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.113299][ T8198] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 618.153941][ T3697] hub 3-1:1.0: bad descriptor, ignoring hub [ 618.171322][ T3697] hub: probe of 3-1:1.0 failed with error -5 [ 618.254040][ T3697] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 618.262129][ T3697] cdc_wdm 3-1:1.0: Unknown control protocol [ 618.983318][ T6] usb 6-1: Firmware version (0.0) predates our first public release. [ 618.991444][ T6] usb 6-1: Please update to version 0.2 or newer [ 619.093746][ T6] usb 6-1: USB disconnect, device number 78 15:20:10 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000480), 0x0, 0x641) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) 15:20:10 executing program 1: futex(0x0, 0x7, 0x0, 0x0, 0xfffffffffffffffe, 0x0) 15:20:10 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xc86ade39) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) lseek(r4, 0xbb6, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4c100, 0x0) sendfile(r4, r5, 0x0, 0x80000007) 15:20:10 executing program 3: io_uring_setup(0x0, &(0x7f0000000000)) 15:20:10 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lgetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@known='security.apparmor\x00', &(0x7f0000000240)=""/217, 0xd9) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xc86ade39) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) lseek(r6, 0xbb6, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4c100, 0x0) sendfile(r6, r7, 0x0, 0x80000007) 15:20:10 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000980)={0x1c, &(0x7f0000000880)={0x0, 0x0, 0x1, '{'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001580)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0x21, 0x1}}) [ 622.585140][ T8198] cdc_wdm 3-1:1.0: Error autopm - -16 [ 622.585419][ T14] usb 3-1: USB disconnect, device number 99 15:20:10 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, 0x0, &(0x7f0000000080)) 15:20:10 executing program 1: socketpair(0x1d, 0x0, 0x3fc000, &(0x7f0000000080)) 15:20:10 executing program 3: futex(&(0x7f00000001c0)=0x2, 0xd, 0x0, 0x0, 0x0, 0x0) 15:20:10 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) dup(r4) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xc86ade39) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) lseek(r5, 0xbb6, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4c100, 0x0) sendfile(r5, r6, 0x0, 0x80000007) 15:20:10 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000380), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000000)={0x3}) [ 622.922981][ T3699] usb 6-1: new high-speed USB device number 79 using dummy_hcd 15:20:11 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000380), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000000)={0x3}) [ 623.115067][ T14] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 623.343147][ T3699] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 623.387017][ T3699] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.395143][ T14] usb 3-1: Using ep0 maxpacket: 8 [ 623.513348][ T14] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 623.555580][ T3699] usb 6-1: config 0 descriptor?? [ 623.576387][ T14] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 623.592682][ T14] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 623.616961][ T14] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 623.636663][ T14] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 623.645935][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.695869][ T8235] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 623.724536][ T14] hub 3-1:1.0: bad descriptor, ignoring hub [ 623.736225][ T14] hub: probe of 3-1:1.0 failed with error -5 [ 623.745196][ T14] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 623.762953][ T14] cdc_wdm 3-1:1.0: Unknown control protocol [ 624.003890][ T1239] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.010206][ T1239] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.715396][ T3699] usb 6-1: Firmware version (0.0) predates our first public release. [ 624.723621][ T3699] usb 6-1: Please update to version 0.2 or newer [ 624.826017][ T3699] usb 6-1: USB disconnect, device number 79 15:20:16 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000480), 0x0, 0x641) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000300)=ANY=[], 0x0) 15:20:16 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfa78c366658a1f57, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 15:20:16 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xc86ade39) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) lseek(r4, 0xbb6, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4c100, 0x0) sendfile(r4, r5, 0x0, 0x80000007) 15:20:16 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) dup(r4) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xc86ade39) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) lseek(r5, 0xbb6, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4c100, 0x0) sendfile(r5, r6, 0x0, 0x80000007) 15:20:16 executing program 0: getgroups(0x2, &(0x7f0000000040)=[0xffffffffffffffff, 0xee01]) 15:20:16 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000980)={0x1c, &(0x7f0000000880)={0x0, 0x0, 0x1, '{'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001580)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0x21, 0x1}}) [ 628.245749][ T8235] cdc_wdm 3-1:1.0: Error autopm - -16 [ 628.245973][ T3697] usb 3-1: USB disconnect, device number 100 15:20:16 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) dup(r4) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xc86ade39) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) lseek(r5, 0xbb6, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4c100, 0x0) sendfile(r5, r6, 0x0, 0x80000007) 15:20:16 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) dup(r4) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xc86ade39) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) lseek(r5, 0xbb6, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4c100, 0x0) sendfile(r5, r6, 0x0, 0x80000007) [ 628.563037][ T3689] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 628.683266][ T3697] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 628.933046][ T3689] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 628.962960][ T3697] usb 3-1: Using ep0 maxpacket: 8 [ 628.984934][ T3689] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.088302][ T3689] usb 6-1: config 0 descriptor?? [ 629.124895][ T3697] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 629.189690][ T3697] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 629.287129][ T3697] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 15:20:17 executing program 1: getgroups(0x2, &(0x7f0000000040)=[0xffffffffffffffff, 0xee01]) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x3, 0x70bd25, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = socket$isdn_base(0x22, 0x3, 0x0) bind$isdn_base(r0, &(0x7f0000000340)={0x22, 0x80, 0x0, 0x0, 0x3f}, 0x6) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x801) r1 = openat$damon_kdamond_pid(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000380), 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) openat$mice(0xffffffffffffff9c, &(0x7f00000001c0), 0x6000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x0) 15:20:17 executing program 0: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x5000) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) shmat(r1, &(0x7f0000ff9000/0x4000)=nil, 0x5000) [ 629.473085][ T3697] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 629.484470][ T3697] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 15:20:17 executing program 4: socket$rds(0x15, 0x5, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) select(0x40, &(0x7f0000000000)={0x20}, 0x0, 0x0, 0x0) [ 629.529083][ T3697] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.563258][ T8264] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 15:20:17 executing program 1: r0 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) [ 629.584253][ T3697] hub 3-1:1.0: bad descriptor, ignoring hub [ 629.618188][ T3697] hub: probe of 3-1:1.0 failed with error -5 [ 629.661044][ T3697] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 629.680607][ T3697] cdc_wdm 3-1:1.0: Unknown control protocol [ 629.840584][ T8281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 629.859050][ T8281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 629.907780][ T2988] usb 3-1: USB disconnect, device number 101 [ 630.323245][ T3689] usb 6-1: Firmware version (0.0) predates our first public release. [ 630.331529][ T3689] usb 6-1: Please update to version 0.2 or newer 15:20:18 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000480), 0x0, 0x641) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000300)=ANY=[], 0x0) 15:20:18 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x6000) 15:20:18 executing program 3: select(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000100), &(0x7f0000000140)={0x0, 0xea60}) 15:20:18 executing program 1: mmap$KVM_VCPU(&(0x7f0000ffd000/0x2000)=nil, 0x930, 0x2000004, 0x30, 0xffffffffffffffff, 0x0) 15:20:18 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f00000021c0)={{}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001]}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35a0) [ 630.424798][ T3689] usb 6-1: USB disconnect, device number 80 15:20:18 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000980)={0x1c, &(0x7f0000000880)={0x0, 0x0, 0x1, '{'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001580)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0x21, 0x1}}) 15:20:18 executing program 4: socketpair(0x22, 0x0, 0x7, &(0x7f0000000100)) [ 630.743054][ T145] usb 3-1: new high-speed USB device number 102 using dummy_hcd 15:20:18 executing program 0: socketpair(0x28, 0x0, 0x8, &(0x7f0000000100)) 15:20:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01007692876223002100626200009c"], 0x28}}, 0x0) 15:20:18 executing program 1: socket$inet(0x2, 0x7a696debd03ef5ca, 0x0) 15:20:18 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) dup(0xffffffffffffffff) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lgetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@known='security.apparmor\x00', 0x0, 0x0) r2 = dup(0xffffffffffffffff) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xc86ade39) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) lseek(r3, 0xbb6, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4c100, 0x0) sendfile(r3, r4, 0x0, 0x80000007) 15:20:18 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x0) r1 = dup(r0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0) syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = syz_io_uring_setup(0x77f, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) [ 630.834049][ T8297] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 630.983105][ T145] usb 3-1: Using ep0 maxpacket: 8 [ 631.103088][ T145] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 631.113418][ T145] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 631.122415][ T145] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 631.133774][ T3689] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 631.141472][ T145] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 631.152985][ T145] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 631.166703][ T145] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.193262][ T8290] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 631.215807][ T145] hub 3-1:1.0: bad descriptor, ignoring hub [ 631.221719][ T145] hub: probe of 3-1:1.0 failed with error -5 [ 631.235101][ T145] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 631.241006][ T145] cdc_wdm 3-1:1.0: Unknown control protocol [ 631.468958][ T8307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 631.478820][ T8307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 631.513310][ T3689] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 631.522388][ T3689] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.537907][ T145] usb 3-1: USB disconnect, device number 102 [ 631.547094][ T3689] usb 6-1: config 0 descriptor?? 15:20:19 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000480), 0x0, 0x641) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000300)=ANY=[], 0x0) 15:20:19 executing program 1: select(0x8000000, 0x0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x0, 0xea60}) 15:20:19 executing program 3: select(0x40, &(0x7f0000000080)={0x2}, 0x0, 0x0, &(0x7f0000000140)={0x0, 0xea60}) 15:20:19 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) dup(0xffffffffffffffff) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lgetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@known='security.apparmor\x00', 0x0, 0x0) r2 = dup(0xffffffffffffffff) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xc86ade39) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) lseek(r3, 0xbb6, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4c100, 0x0) sendfile(r3, r4, 0x0, 0x80000007) 15:20:19 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) dup(0xffffffffffffffff) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lgetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@known='security.apparmor\x00', 0x0, 0x0) r2 = dup(0xffffffffffffffff) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xc86ade39) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) lseek(r3, 0xbb6, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4c100, 0x0) sendfile(r3, r4, 0x0, 0x80000007) [ 632.393205][ T2988] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 632.643130][ T2988] usb 3-1: Using ep0 maxpacket: 8 [ 632.703266][ T3689] usb 6-1: Firmware version (0.0) predates our first public release. [ 632.711595][ T3689] usb 6-1: Please update to version 0.2 or newer [ 632.774617][ T2988] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 632.784786][ T2988] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 632.794105][ T2988] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 632.804701][ T3689] usb 6-1: USB disconnect, device number 81 [ 632.817668][ T2988] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 632.831201][ T2988] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 632.841187][ T2988] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.873397][ T8317] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 632.895848][ T2988] hub 3-1:1.0: bad descriptor, ignoring hub [ 632.907484][ T2988] hub: probe of 3-1:1.0 failed with error -5 [ 632.915256][ T2988] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 632.921259][ T2988] cdc_wdm 3-1:1.0: Unknown control protocol 15:20:21 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000980)={0x1c, &(0x7f0000000880)={0x0, 0x0, 0x1, '{'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0x21, 0x1}}) 15:20:21 executing program 3: select(0x86, &(0x7f0000000080)={0x0, 0x0, 0xa8}, 0x0, 0x0, &(0x7f00000001c0)={0x77359400}) 15:20:21 executing program 4: eventfd2(0xfffffffd, 0x0) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f00000001c0), 0xdd7bf8e008971b10, 0x0) r0 = openat$damon_kdamond_pid(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000200)={{0x1, 0x1, 0x18}, './file0\x00'}) io_uring_setup(0x0, 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x200, 0x3, 0x0, 0x2, 0x20, 0xa7}, 0x5c, &(0x7f0000000280)={0x5, 0xf, 0x5c, 0x2, [@generic={0x4c, 0x10, 0x3, "9c8e3ee158b9087fe4e29bea095de90fc3a972d928b3e87bf73be40b0fafdbed3876a79387226dff982a068f446089f7d8185cb99983d6a40f9b8829ea21d65f4cb54508e2fd6f6f7d"}, @wireless={0xb, 0x10, 0x1, 0xc, 0xc, 0x3f, 0x3, 0x7}]}, 0x3, [{0x6f, &(0x7f0000000300)=@string={0x6f, 0x3, "4a76b87a3ac0dff82549d9d818a8f668e842095f9c893c206a5a313a2c3776b6a5e8eef54d3c3159e8dc8b19b11266ba15c21e3d9a57b1bc354e455a16151bee8d0f37f68ecfc6996caa3bf85a49496a21353e89750920a4c83de78a16c9ed583fb2cecd6cd474a189bddfe196"}}, {0x34, &(0x7f0000000380)=@string={0x34, 0x3, "75d2bdb593a0881c698a5b592441c30529962e6d5fdafbd5725d59eb55d5a6580e01baf463ea7cdc1c6193cbfdac529ba66b"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x8ec90473f2224e77}}]}) 15:20:21 executing program 1: r0 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) inotify_rm_watch(r0, 0x0) 15:20:21 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000000)={{0x0, 0xcc}}, 0x10) [ 633.158528][ T8319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.171233][ T8319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 15:20:21 executing program 0: sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x5000) 15:20:21 executing program 3: mlock2(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0) [ 633.236869][ T3689] usb 3-1: USB disconnect, device number 103 [ 633.513051][ T3702] usb 6-1: new high-speed USB device number 82 using dummy_hcd 15:20:21 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000480), 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000300)=ANY=[], 0x0) 15:20:21 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f00000001c0)={'filter\x00', 0x4, "a73764b2"}, &(0x7f0000000300)=0x28) 15:20:21 executing program 1: getresgid(&(0x7f0000000080), &(0x7f0000000100), &(0x7f00000003c0)) 15:20:21 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt(r0, 0x0, 0x2, 0x0, &(0x7f00000000c0)) 15:20:21 executing program 0: r0 = epoll_create(0x401) r1 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) [ 633.903420][ T3702] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 633.912503][ T3702] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.924585][ T3702] usb 6-1: config 0 descriptor?? [ 634.112986][ T145] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 634.363058][ T145] usb 3-1: Using ep0 maxpacket: 8 [ 634.513155][ T145] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 634.523390][ T145] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 634.532324][ T145] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 634.543824][ T145] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 634.555381][ T145] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 634.564676][ T145] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.593465][ T8343] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 634.615635][ T145] hub 3-1:1.0: bad descriptor, ignoring hub [ 634.621648][ T145] hub: probe of 3-1:1.0 failed with error -5 [ 634.634334][ T145] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 634.640244][ T145] cdc_wdm 3-1:1.0: Unknown control protocol [ 635.073900][ T3702] usb 6-1: Firmware version (0.0) predates our first public release. [ 635.082032][ T3702] usb 6-1: Please update to version 0.2 or newer [ 635.178654][ T3702] usb 6-1: USB disconnect, device number 82 [ 635.253462][ T8343] usb 3-1: reset high-speed USB device number 104 using dummy_hcd [ 635.493019][ T8343] usb 3-1: Using ep0 maxpacket: 8 15:20:23 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000980)={0x1c, &(0x7f0000000880)={0x0, 0x0, 0x1, '{'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0x21, 0x1}}) 15:20:23 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET(r0, &(0x7f0000000ec0)={&(0x7f0000000e00), 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x3c, 0x3ed, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffffffffffff}}, 0x3c}}, 0x0) 15:20:23 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x143040, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file1\x00', 0x10) 15:20:23 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/class/power_supply', 0x0, 0x0) symlinkat(&(0x7f0000000440)='./file1\x00', r0, &(0x7f0000000480)='./file1\x00') 15:20:23 executing program 1: unlinkat(0xffffffffffffffff, &(0x7f0000000740)='./file0\x00', 0x200) 15:20:23 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x4e21, @dev}, 0x10) 15:20:23 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, 0x0, &(0x7f0000000000)) [ 635.593555][ T8344] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 635.863128][ T14] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 636.233142][ T14] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 636.242276][ T14] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.252867][ T14] usb 6-1: config 0 descriptor?? [ 637.413375][ T14] usb 6-1: Firmware version (0.0) predates our first public release. [ 637.421505][ T14] usb 6-1: Please update to version 0.2 or newer [ 637.515804][ T14] usb 6-1: USB disconnect, device number 83 15:20:28 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000480), 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000300)=ANY=[], 0x0) 15:20:28 executing program 0: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/power_supply', 0x8c0, 0x0) 15:20:28 executing program 1: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff8000/0x3000)=nil) 15:20:28 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/class/power_supply', 0x0, 0x0) mknodat(r0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) 15:20:28 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) getsockname(r0, 0x0, 0x0) 15:20:28 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000980)={0x1c, &(0x7f0000000880)={0x0, 0x0, 0x1, '{'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0x21, 0x1}}) 15:20:28 executing program 0: inotify_add_watch(0xffffffffffffffff, 0x0, 0x30008c0) [ 640.141610][ T3702] usb 3-1: USB disconnect, device number 104 15:20:28 executing program 1: symlinkat(&(0x7f00000001c0)='./file1/file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./file1\x00') 15:20:28 executing program 4: inotify_init1(0x1000) 15:20:28 executing program 3: r0 = eventfd2(0xeb3, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) 15:20:28 executing program 1: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000140)={0x2}, 0x8, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x3000) 15:20:28 executing program 3: openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x143040, 0x0) [ 640.492954][ T143] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 640.500603][ T3702] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 640.743064][ T3702] usb 3-1: Using ep0 maxpacket: 8 [ 640.863117][ T143] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 640.872247][ T143] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.880674][ T3702] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 640.890834][ T3702] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 640.900420][ T3702] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 640.912584][ T143] usb 6-1: config 0 descriptor?? [ 640.917716][ T3702] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 640.929307][ T3702] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 640.939009][ T3702] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.963184][ T8372] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 640.983956][ T3702] hub 3-1:1.0: bad descriptor, ignoring hub [ 640.989900][ T3702] hub: probe of 3-1:1.0 failed with error -5 [ 641.002439][ T3702] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 641.008451][ T3702] cdc_wdm 3-1:1.0: Unknown control protocol [ 641.597063][ T8372] usb 3-1: reset high-speed USB device number 105 using dummy_hcd [ 641.843786][ T8372] usb 3-1: Using ep0 maxpacket: 8 [ 641.943860][ T8385] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 642.073404][ T143] usb 6-1: Firmware version (0.0) predates our first public release. [ 642.081556][ T143] usb 6-1: Please update to version 0.2 or newer [ 642.175611][ T143] usb 6-1: USB disconnect, device number 84 15:20:34 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000480), 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000300)=ANY=[], 0x0) 15:20:34 executing program 0: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 15:20:34 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) 15:20:34 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/class/power_supply', 0x0, 0x0) linkat(r0, &(0x7f00000003c0)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', 0x0) 15:20:34 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/class/power_supply', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/class/power_supply', 0x0, 0x0) linkat(r0, &(0x7f00000003c0)='./file1\x00', r1, &(0x7f0000000400)='./file1\x00', 0x0) 15:20:34 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001580)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0x21, 0x1}}) [ 646.519121][ T14] usb 3-1: USB disconnect, device number 105 15:20:34 executing program 0: mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x0, 0x0, 0x0) 15:20:34 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000), &(0x7f0000000080)=0x4) 15:20:34 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, &(0x7f0000000040)=0xffffffffffffff2d) 15:20:34 executing program 1: execveat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000500)=[&(0x7f0000000840)='/dev\xd7\xa3,*\xf0\x04\x00\x00|\xc5\x00\x00\x00\x00BFC7.0\x06m\xd0\xc8\x14*\n\xc7;\xb8\xf0\xe9l\xfb3\xda\x13\xf3\xbd5\xcbB\x9d\aCk\xd8\xf3E\xca\xf2\x8a{O\xc1\xb7\xf4\xbdZ\x9b0\xe5\xb0\xc6\xd0bn;\xa6\xbe\xa0~\xcc3C/\xae\x97D\x142S_\xc2\xc3\xf5\x9b\xf7S\xc9]f&\x0e\x9d\x17\x15\xf8\x9e?\xa2\x00F\xb8^\xa2\xf4$\x84\xe0dq\xcf\x97\xf1\x92\xb1O\xc97\x16\x0e\xc3\xba\xb6\xc3\x17\x1c)\xf1E\xad \x91A\x1e\x94\x8e\xae\xfa\xfb\x88&\xaan\x98\xdd\xb0\x1a\xf6\x15w;\x99\x82&q\xbe\xa0~\xcc3C/\xae\x97D\x142S_\xc2\xc3\xf5\x9b', &(0x7f0000000600)='\x00', &(0x7f0000000640)=')/%#\x00', &(0x7f0000000680)='{\x00', &(0x7f00000006c0)='+\x00', &(0x7f0000000700)='\x00', &(0x7f0000000740)='(#&/\x00', &(0x7f0000000780)='/dev\xd7\xa3,*\xf0\x04\x00\x00|\xc5\x00\x00\x00\x00BFC7.0\x06m\xd0\xc8\x14*\n\xc7;\xb8\xf0\xe9l\xfb3\xda\x13\xf3\xbd5\xcbB\x9d\aCk\xd8\xf3E\xca\xf2\x8a{O\xc1\xb7\xf4\xbdZ\x9b0\xe5\xb0\xc6\xd0bn;\xa6\xbe\xa0~\xcc3C/\xae\x97D\x142S_\xc2\xc3\xf5\x9b\xf7S\xc9]f&\x0e\x9d\x17\x15\xf8\x9e?\xa2\x00'], 0x0) 15:20:34 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000040)={'security\x00', 0x4, "ce21388d"}, &(0x7f00000000c0)=0x28) 15:20:34 executing program 3: syz_open_procfs(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) [ 646.813178][ T145] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 646.863059][ T14] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 647.112984][ T14] usb 3-1: Using ep0 maxpacket: 8 [ 647.183126][ T145] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 647.192320][ T145] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.203715][ T145] usb 6-1: config 0 descriptor?? [ 647.233069][ T14] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 647.244324][ T14] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 647.253660][ T14] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 647.264930][ T14] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 647.276288][ T14] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 647.286449][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.313467][ T8398] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 647.334111][ T14] hub 3-1:1.0: bad descriptor, ignoring hub [ 647.340091][ T14] hub: probe of 3-1:1.0 failed with error -5 [ 647.347706][ T14] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 647.354492][ T14] cdc_wdm 3-1:1.0: Unknown control protocol [ 647.994672][ T8398] usb 3-1: reset high-speed USB device number 106 using dummy_hcd [ 648.263015][ T8398] usb 3-1: Using ep0 maxpacket: 8 [ 648.363159][ T145] usb 6-1: Firmware version (0.0) predates our first public release. [ 648.363372][ T8411] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 648.371330][ T145] usb 6-1: Please update to version 0.2 or newer [ 648.474836][ T145] usb 6-1: USB disconnect, device number 85 [ 648.743795][ T3702] usb 3-1: USB disconnect, device number 106 15:20:37 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000300)=ANY=[], 0x0) 15:20:37 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='attr/exec\x00') ioctl$PPPIOCGCHAN(r0, 0x80047437, 0x0) 15:20:37 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000540)=[{0x2}]}) 15:20:37 executing program 1: mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x1ff) 15:20:37 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='attr/exec\x00') ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r0, 0x4068aea3, 0x0) 15:20:37 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001580)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0x21, 0x1}}) 15:20:37 executing program 3: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000000c0)='projid_map\x00') 15:20:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, 0x0, 0x0) 15:20:37 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair(0x23, 0x80000, 0x401, &(0x7f0000000300)) 15:20:37 executing program 4: openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair(0x0, 0x80000, 0x0, &(0x7f0000000300)) 15:20:37 executing program 1: openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x1ff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000140)=0x74c) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000600)={0x2}) socket$l2tp6(0xa, 0x2, 0x73) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000640)) 15:20:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={0x0}}, 0x0) [ 649.563253][ T3699] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 649.603401][ T3702] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 649.853016][ T3702] usb 3-1: Using ep0 maxpacket: 8 [ 649.923064][ T3699] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 649.932222][ T3699] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.954544][ T3699] usb 6-1: config 0 descriptor?? [ 650.003157][ T3702] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 650.013590][ T3702] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 650.026628][ T3702] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 650.037805][ T3702] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 650.050247][ T3702] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 650.059398][ T3702] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.083334][ T8424] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 650.115116][ T3702] hub 3-1:1.0: bad descriptor, ignoring hub [ 650.121139][ T3702] hub: probe of 3-1:1.0 failed with error -5 [ 650.130152][ T3702] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 650.136251][ T3702] cdc_wdm 3-1:1.0: Unknown control protocol [ 650.754750][ T8424] usb 3-1: reset high-speed USB device number 107 using dummy_hcd [ 651.033167][ T8424] usb 3-1: Using ep0 maxpacket: 8 [ 651.113332][ T3699] usb 6-1: Firmware version (0.0) predates our first public release. [ 651.121454][ T3699] usb 6-1: Please update to version 0.2 or newer [ 651.133246][ T8439] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 651.234896][ T3699] usb 6-1: USB disconnect, device number 86 [ 651.483298][ T143] usb 3-1: USB disconnect, device number 107 [ 654.609836][ T2972] udevd[2972]: worker [3666] /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/host1/target1:0:0/1:0:0:0/block/sdb is taking a long time 15:20:43 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 15:20:43 executing program 1: bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x700) 15:20:43 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000140)) 15:20:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r0) 15:20:43 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000300)=ANY=[], 0x0) 15:20:43 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001580)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0x21, 0x1}}) 15:20:43 executing program 1: bpf$BPF_LINK_CREATE_XDP(0x17, 0x0, 0x0) 15:20:43 executing program 4: bpf$BPF_LINK_CREATE_XDP(0xb, 0x0, 0x0) 15:20:43 executing program 0: shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000680)={{0x1, 0xee00, 0x0, 0xee00, 0x0, 0x0, 0x81}, 0x4, 0x7fffffff, 0x8, 0x2, 0x0, 0x0, 0x1}) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000001300)=0x0, &(0x7f00000012c0)=0x0) r3 = socket$caif_stream(0x25, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@caif=@rfm={0x25, 0x0, "0e42e6076a700402afc822562e1e83f6"}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0, 0x0, 0x0, 0x50}}], 0x1, 0x20004001) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@ax25={{0x3, @default}, [@null, @rose, @bcast, @bcast, @netrom, @null, @netrom, @netrom]}, &(0x7f0000000500)=0x80) syz_io_uring_setup(0x2a4b, &(0x7f0000000040)={0x0, 0x22e3, 0x0, 0x1, 0x2a2}, &(0x7f0000002000/0x1000)=nil, &(0x7f0000003000/0x2000)=nil, 0x0, 0x0) r4 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0) recvfrom(r4, &(0x7f0000000300)=""/242, 0xf2, 0x0, &(0x7f0000000400)=@in={0x2, 0x4e21, @multicast1}, 0x80) io_setup(0x1, &(0x7f0000000000)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2600, 0xc8, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xd14}]) socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000000)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2600, 0xc8, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xd14}]) io_uring_enter(r0, 0x2ea4, 0x0, 0x0, 0x0, 0xef) 15:20:43 executing program 3: r0 = socket(0x18, 0x800, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) 15:20:43 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00'}}, 0x118) 15:20:43 executing program 4: r0 = getpid() sched_rr_get_interval(r0, &(0x7f0000000240)) 15:20:43 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000001180), 0x1ad041, 0x0) 15:20:43 executing program 1: sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0xe8f4b099d36323cd) 15:20:43 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=@isdn={0xa}, 0x80) 15:20:43 executing program 3: io_cancel(0x0, 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) syz_genetlink_get_family_id$batadv(&(0x7f0000001240), 0xffffffffffffffff) [ 656.053054][ T143] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 656.060885][ T2988] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 656.313948][ T143] usb 3-1: Using ep0 maxpacket: 8 [ 656.433101][ T2988] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 656.442268][ T143] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 656.452516][ T2988] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.460853][ T143] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 656.471277][ T2988] usb 6-1: config 0 descriptor?? [ 656.476543][ T143] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 656.488035][ T143] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 656.499733][ T143] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 656.509279][ T143] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.533332][ T8450] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 656.555762][ T143] hub 3-1:1.0: bad descriptor, ignoring hub [ 656.561869][ T143] hub: probe of 3-1:1.0 failed with error -5 [ 656.571132][ T143] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 656.577307][ T143] cdc_wdm 3-1:1.0: Unknown control protocol [ 657.173556][ T8450] usb 3-1: reset high-speed USB device number 108 using dummy_hcd [ 657.433019][ T8450] usb 3-1: Using ep0 maxpacket: 8 [ 657.543279][ T8473] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 657.643135][ T2988] usb 6-1: Firmware version (0.0) predates our first public release. [ 657.651239][ T2988] usb 6-1: Please update to version 0.2 or newer [ 657.756106][ T2988] usb 6-1: USB disconnect, device number 87 15:20:49 executing program 2: write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000300)=ANY=[], 0x0) 15:20:49 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0305302, &(0x7f0000000000)) 15:20:49 executing program 3: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x40305839, 0x0) 15:20:49 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x401c5820, &(0x7f0000000180)={{}, 'port0\x00'}) 15:20:49 executing program 0: shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000680)={{0x1, 0xee00, 0x0, 0xee00, 0x0, 0x0, 0x81}, 0x4, 0x7fffffff, 0x8, 0x2, 0x0, 0x0, 0x1}) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000001300)=0x0, &(0x7f00000012c0)=0x0) r3 = socket$caif_stream(0x25, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@caif=@rfm={0x25, 0x0, "0e42e6076a700402afc822562e1e83f6"}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0, 0x0, 0x0, 0x50}}], 0x1, 0x20004001) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@ax25={{0x3, @default}, [@null, @rose, @bcast, @bcast, @netrom, @null, @netrom, @netrom]}, &(0x7f0000000500)=0x80) syz_io_uring_setup(0x2a4b, &(0x7f0000000040)={0x0, 0x22e3, 0x0, 0x1, 0x2a2}, &(0x7f0000002000/0x1000)=nil, &(0x7f0000003000/0x2000)=nil, 0x0, 0x0) r4 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0) recvfrom(r4, &(0x7f0000000300)=""/242, 0xf2, 0x0, &(0x7f0000000400)=@in={0x2, 0x4e21, @multicast1}, 0x80) io_setup(0x1, &(0x7f0000000000)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2600, 0xc8, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xd14}]) socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000000)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2600, 0xc8, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xd14}]) io_uring_enter(r0, 0x2ea4, 0x0, 0x0, 0x0, 0xef) 15:20:49 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000980)={0x1c, &(0x7f0000000880)={0x0, 0x0, 0x1, '{'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001580)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0x21, 0x1}}) [ 662.079143][ T3699] usb 3-1: USB disconnect, device number 108 15:20:50 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85320, &(0x7f0000000180)={{}, 'port0\x00'}) 15:20:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="011629bd70000400000001000000000000000741"], 0x28}}, 0x0) 15:20:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000006c0)={&(0x7f0000000480), 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x9c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0xfffb}}, 0x0) 15:20:50 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x15}, 0x48) 15:20:50 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000600), 0x0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000640)=ANY=[]) 15:20:50 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc08c5334, &(0x7f0000000180)={{}, 'port0\x00'}) [ 662.373051][ T3697] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 662.663111][ T3699] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 662.733139][ T3697] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 662.742981][ T3697] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.758655][ T3697] usb 6-1: config 0 descriptor?? [ 662.862998][ T3699] usb 3-1: device descriptor read/64, error 18 [ 663.133058][ T3699] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 663.333048][ T3699] usb 3-1: device descriptor read/64, error 18 [ 663.466021][ T3699] usb usb3-port1: attempt power cycle [ 663.893122][ T3699] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 663.923124][ T3697] usb 6-1: Firmware version (0.0) predates our first public release. [ 663.931415][ T3697] usb 6-1: Please update to version 0.2 or newer [ 664.025356][ T3697] usb 6-1: USB disconnect, device number 88 [ 664.063184][ T3699] usb 3-1: device descriptor read/8, error -61 [ 664.342989][ T3699] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 664.523115][ T3699] usb 3-1: device descriptor read/8, error -61 [ 664.653144][ T3699] usb usb3-port1: unable to enumerate USB device 15:20:53 executing program 2: write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000300)=ANY=[], 0x0) 15:20:53 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, 0x0, &(0x7f0000000280)) 15:20:53 executing program 1: pselect6(0x40, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}, &(0x7f0000000240)={0x8, 0x52a8e93a, 0x0, 0x0, 0x0, 0x0, 0x101, 0x72cc}, &(0x7f0000000280)={0x3, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000300)={[0x3]}, 0x8}) 15:20:53 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85322, &(0x7f0000000180)={{}, 'port0\x00'}) 15:20:53 executing program 0: shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000680)={{0x1, 0xee00, 0x0, 0xee00, 0x0, 0x0, 0x81}, 0x4, 0x7fffffff, 0x8, 0x2, 0x0, 0x0, 0x1}) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000001300)=0x0, &(0x7f00000012c0)=0x0) r3 = socket$caif_stream(0x25, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@caif=@rfm={0x25, 0x0, "0e42e6076a700402afc822562e1e83f6"}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0, 0x0, 0x0, 0x50}}], 0x1, 0x20004001) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@ax25={{0x3, @default}, [@null, @rose, @bcast, @bcast, @netrom, @null, @netrom, @netrom]}, &(0x7f0000000500)=0x80) syz_io_uring_setup(0x2a4b, &(0x7f0000000040)={0x0, 0x22e3, 0x0, 0x1, 0x2a2}, &(0x7f0000002000/0x1000)=nil, &(0x7f0000003000/0x2000)=nil, 0x0, 0x0) r4 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0) recvfrom(r4, &(0x7f0000000300)=""/242, 0xf2, 0x0, &(0x7f0000000400)=@in={0x2, 0x4e21, @multicast1}, 0x80) io_setup(0x1, &(0x7f0000000000)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2600, 0xc8, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xd14}]) socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000000)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2600, 0xc8, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xd14}]) io_uring_enter(r0, 0x2ea4, 0x0, 0x0, 0x0, 0xef) 15:20:53 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000980)={0x1c, &(0x7f0000000880)={0x0, 0x0, 0x1, '{'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001580)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0x21, 0x1}}) 15:20:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x14, r1, 0x1}, 0x14}}, 0x0) 15:20:53 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000180)={{}, 'port0\x00'}) 15:20:53 executing program 4: ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000000)) socketpair(0xb, 0x0, 0x0, &(0x7f0000000040)) 15:20:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x20, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x7}]}]}, 0x20}}, 0x0) 15:20:53 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, 0x0, 0x0) 15:20:53 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40049409, &(0x7f0000000180)={{}, 'port0\x00'}) [ 665.379879][ T8519] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 665.443274][ T3697] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 665.734977][ T14] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 665.803117][ T3697] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 665.812213][ T3697] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.829722][ T3697] usb 6-1: config 0 descriptor?? [ 665.933167][ T14] usb 3-1: device descriptor read/64, error 18 [ 666.223625][ T14] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 666.422985][ T14] usb 3-1: device descriptor read/64, error 18 [ 666.543278][ T14] usb usb3-port1: attempt power cycle [ 666.953066][ T14] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 666.995033][ T3697] usb 6-1: Firmware version (0.0) predates our first public release. [ 667.003354][ T3697] usb 6-1: Please update to version 0.2 or newer [ 667.133175][ T14] usb 3-1: device descriptor read/8, error -61 [ 667.133392][ T3697] usb 6-1: USB disconnect, device number 89 [ 667.403170][ T14] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 667.573455][ T14] usb 3-1: device descriptor read/8, error -61 [ 667.693146][ T14] usb usb3-port1: unable to enumerate USB device 15:20:56 executing program 2: write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000300)=ANY=[], 0x0) 15:20:56 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="677265748a479b2e1ac9ba8040c35086617030000000000000000000c7a90e717ab6e37651adf6e44193bdffa9906c7069"]}) 15:20:56 executing program 3: clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) pselect6(0x0, 0x0, 0x0, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, &(0x7f0000000140)={0x0, r0+10000000}, &(0x7f00000001c0)={&(0x7f0000000180)={[0xca4]}, 0x8}) 15:20:56 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40049409, &(0x7f0000000180)={{}, 'port0\x00'}) 15:20:56 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r0, &(0x7f0000000d80)={0x2020}, 0x2020) 15:20:56 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000980)={0x1c, &(0x7f0000000880)={0x0, 0x0, 0x1, '{'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001580)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0x21, 0x1}}) 15:20:56 executing program 4: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card0/oss_mixer\x00', 0x41, 0x0) write$proc_mixer(r0, 0x0, 0x0) 15:20:56 executing program 0: pselect6(0x40, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x70, 0x8, 0x9, 0x5}, &(0x7f0000000080)={0x2}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6}, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000180)={&(0x7f0000000140)={[0x1ff]}, 0x8}) 15:20:56 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="677265748a479b2e1ac9ba8040c35086617030000000000000000000c7a90e717ab6e37651adf6e44193bdffa9906c7069"]}) 15:20:56 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="677265748a479b2e1ac9ba8040c35086617030000000000000000000c7a90e717ab6e37651adf6e44193bdffa9906c7069"]}) 15:20:56 executing program 0: r0 = syz_io_uring_setup(0x1678, &(0x7f0000000000), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x56c4, &(0x7f0000000100), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x29bc, &(0x7f0000000200)={0x0, 0x9fe2, 0x8}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000280), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x8000000) 15:20:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000100)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@nested={0xead, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4}, @typed={0xd5, 0x0, 0x0, 0x0, @binary="8870e44e27b2f230636a7d135d76c27e8235f301b2d008e1e832a34c007e0f09e3dc732fce2c96e351c65b4a967c540d535b696beef8270a4ff4b7f4545fd15343d4cdadee7c5da5c6a85172eb7940589d610e852d943561e80b220fba9ec996f67b1e4a9bcffd31fe89f9e6b7a6250c135796593ac308a51c153bc6d25974d9444690699b8bf8a778739313a1eb5ccd4faf12e16b0f08e481fc867a9265505268afb558091b6a94d5e33cde5348504394a371babb134923b857f21e47a8b1ebf8d3cb3dcdb796a3f3820b20afbb587140"}, @generic="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"]}]}, 0xec4}}, 0x0) [ 668.523150][ T3702] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 668.793034][ T3699] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 668.913085][ T3702] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 668.922162][ T3702] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.933515][ T3702] usb 6-1: config 0 descriptor?? [ 668.982975][ T3699] usb 3-1: device descriptor read/64, error 18 [ 669.253068][ T3699] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 669.463076][ T3699] usb 3-1: device descriptor read/64, error 18 [ 669.584046][ T3699] usb usb3-port1: attempt power cycle [ 670.013517][ T3699] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 670.083947][ T3702] usb 6-1: Firmware version (0.0) predates our first public release. [ 670.092067][ T3702] usb 6-1: Please update to version 0.2 or newer [ 670.183145][ T3699] usb 3-1: device descriptor read/8, error -61 [ 670.209239][ T3702] usb 6-1: USB disconnect, device number 90 [ 670.453028][ T3699] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 670.623078][ T3699] usb 3-1: device descriptor read/8, error -61 [ 670.743346][ T3699] usb usb3-port1: unable to enumerate USB device 15:20:59 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000300)=ANY=[], 0x0) 15:20:59 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0) write$UHID_DESTROY(r0, 0x0, 0x0) 15:20:59 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="677265748a479b2e1ac9ba8040c35086617030000000000000000000c7a90e717ab6e37651adf6e44193bdffa9906c7069"]}) 15:20:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x28}}, 0x0) 15:20:59 executing program 0: pipe2(&(0x7f0000000240), 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020) socketpair(0x0, 0x0, 0x0, &(0x7f0000000040)) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 15:20:59 executing program 5: syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000980)={0x1c, &(0x7f0000000880)={0x0, 0x0, 0x1, '{'}, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001580)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)={0x40, 0x21, 0x1}}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={0x40, 0x21, 0x1}}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0x21, 0x1}}) 15:20:59 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x3f}, 0x14) 15:20:59 executing program 1: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="677265748a479b2e1ac9ba8040c35086617030000000000000000000c7a90e717ab6e37651adf6e44193bdffa9906c7069"]}) 15:20:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c01000031000903"], 0x13c}}, 0x0) 15:20:59 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x2, 0xa0}) 15:20:59 executing program 1: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="677265748a479b2e1ac9ba8040c35086617030000000000000000000c7a90e717ab6e37651adf6e44193bdffa9906c7069"]}) 15:20:59 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000000c0)=ANY=[]}) [ 671.537429][ T8574] blktrace: Concurrent blktraces are not allowed on nullb0 [ 671.842961][ T143] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 672.043009][ T143] usb 3-1: device descriptor read/64, error 18 [ 672.313061][ T143] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 672.513047][ T143] usb 3-1: device descriptor read/64, error 18 [ 672.634216][ T143] usb usb3-port1: attempt power cycle [ 673.043027][ T143] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 673.213093][ T143] usb 3-1: device descriptor read/8, error -61 [ 673.483044][ T143] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 673.653088][ T143] usb 3-1: device descriptor read/8, error -61 [ 673.773505][ T143] usb usb3-port1: unable to enumerate USB device 15:21:02 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000300)=ANY=[], 0x0) 15:21:02 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x401c5820, &(0x7f00000001c0)={{0x7c}, 'port0\x00'}) 15:21:02 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x19}}, 0x20) 15:21:02 executing program 1: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="677265748a479b2e1ac9ba8040c35086617030000000000000000000c7a90e717ab6e37651adf6e44193bdffa9906c7069"]}) 15:21:02 executing program 0: getresuid(&(0x7f0000000180), 0x0, 0x0) 15:21:02 executing program 5: syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000980)={0x1c, &(0x7f0000000880)={0x0, 0x0, 0x1, '{'}, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001580)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)={0x40, 0x21, 0x1}}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={0x40, 0x21, 0x1}}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0x21, 0x1}}) 15:21:02 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="677265748a479b2e1ac9ba8040c35086617030000000000000000000c7a90e717ab6e37651adf6e44193bdffa9906c7069"]}) 15:21:02 executing program 0: pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x1, &(0x7f0000000000)=0x0) io_destroy(r0) io_setup(0x6, &(0x7f0000000200)) 15:21:02 executing program 3: execveat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000500)=[0xfffffffffffffffd], 0x0) 15:21:02 executing program 4: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)) 15:21:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000100)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@nested={0xead, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @typed={0xd6, 0x28, 0x0, 0x0, @binary="8870e44e27b2f230636a7d135d76c27e8235f301b2d008e1e832a34c007e0f09e3dc732fce2c96e351c65b4a967c540d535b696beef8270a4ff4b7f4545fd15343d4cdadee7c5da5c6a85172eb7940589d610e852d943561e80b220fba9ec996f67b1e4a9bcffd31fe89f9e6b7a6250c135796593ac308a51c153bc6d25974d9444690699b8bf8a778739313a1eb5ccd4faf12e16b0f08e481fc867a9265505268afb558091b6a94d5e33cde5348504394a371babb134923b857f21e47a8b1ebf8d3cb3dcdb796a3f3820b20afbb5871403f"}, @generic="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", @generic, @generic, @generic]}]}, 0xec4}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000) 15:21:02 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="677265748a479b2e1ac9ba8040c35086617030000000000000000000c7a90e717ab6e37651adf6e44193bdffa9906c7069"]}) [ 674.526949][ T8596] process 'syz-executor.3' launched '/dev/fd/-1/./file0' with NULL argv: empty string added [ 674.943160][ T14] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 675.163121][ T14] usb 3-1: device descriptor read/64, error 18 [ 675.433355][ T14] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 675.622982][ T14] usb 3-1: device descriptor read/64, error 18 [ 675.743765][ T14] usb usb3-port1: attempt power cycle [ 676.162982][ T14] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 676.333308][ T14] usb 3-1: device descriptor read/8, error -61 [ 676.603062][ T14] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 676.783172][ T14] usb 3-1: device descriptor read/8, error -61 [ 676.904735][ T14] usb usb3-port1: unable to enumerate USB device 15:21:05 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000300)=ANY=[], 0x0) 15:21:05 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) 15:21:05 executing program 4: syz_clone(0x40000000, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)="73e1a845992e126c422aa9987e2d8c9405788cc469961fcb0ec7d966a7236c4455dfb8d4dafcaea154dc3de8bd74") 15:21:05 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="677265748a479b2e1ac9ba8040c35086617030000000000000000000c7a90e717ab6e37651adf6e44193bdffa9906c7069"]}) 15:21:05 executing program 5: syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000980)={0x1c, &(0x7f0000000880)={0x0, 0x0, 0x1, '{'}, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001580)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)={0x40, 0x21, 0x1}}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={0x40, 0x21, 0x1}}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0x21, 0x1}}) 15:21:05 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x401c5820, &(0x7f00000001c0)={{0x80}, 'port0\x00'}) 15:21:05 executing program 0: socket(0x3fc5715e8cf7302d, 0x0, 0x0) 15:21:05 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$evdev(r0, 0x0, 0x0) 15:21:05 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) 15:21:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x34, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}]}]}, 0x34}}, 0x0) 15:21:05 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) 15:21:05 executing program 3: openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) [ 677.953172][ T14] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 678.153147][ T14] usb 3-1: device descriptor read/64, error 18 [ 678.423209][ T14] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 678.612941][ T14] usb 3-1: device descriptor read/64, error 18 [ 678.755945][ T14] usb usb3-port1: attempt power cycle [ 679.182951][ T14] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 679.353622][ T14] usb 3-1: device descriptor read/8, error -61 [ 679.622964][ T14] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 679.793093][ T14] usb 3-1: device descriptor read/8, error -61 [ 679.914194][ T14] usb usb3-port1: unable to enumerate USB device 15:21:08 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000300)=ANY=[], 0x0) 15:21:08 executing program 0: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000440), 0x490081, 0x0) 15:21:08 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0x541b, 0x0) 15:21:08 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) 15:21:08 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x402c5342, &(0x7f0000000180)={{}, 'port0\x00'}) 15:21:08 executing program 5: r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000980)={0x1c, &(0x7f0000000880)={0x0, 0x0, 0x1, '{'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001580)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0x21, 0x1}}) 15:21:08 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', 0x0}) 15:21:08 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0x5452, &(0x7f0000000000)) 15:21:08 executing program 3: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x107802) 15:21:08 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000100), &(0x7f0000000040)=0x4) 15:21:08 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', 0x0}) 15:21:08 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="a2"], 0xc5) [ 680.953114][ T143] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 681.213041][ T143] usb 3-1: Using ep0 maxpacket: 8 [ 681.363047][ T143] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 681.373214][ T143] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 681.382554][ T143] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 681.392734][ T143] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 681.402070][ T143] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.466232][ T143] hub 3-1:1.0: bad descriptor, ignoring hub [ 681.472251][ T143] hub: probe of 3-1:1.0 failed with error -5 [ 681.478914][ T143] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 681.783227][ T14] usb 3-1: USB disconnect, device number 7 [ 682.143101][ T14] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 682.393129][ T14] usb 3-1: Using ep0 maxpacket: 8 [ 682.523077][ T14] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 682.533379][ T14] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 682.542349][ T14] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 682.552170][ T14] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 682.561311][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.603993][ T14] hub 3-1:1.0: bad descriptor, ignoring hub [ 682.610553][ T14] hub: probe of 3-1:1.0 failed with error -5 [ 682.617284][ T14] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 682.923689][ T14] usb 3-1: USB disconnect, device number 8 15:21:11 executing program 3: r0 = socket(0x1d, 0x2, 0x7) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, 0x0, 0x0) 15:21:11 executing program 0: pselect6(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x2}, 0x0, 0x0, 0x0) 15:21:11 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x7, 0x2, 0x26bd678b, 0x0, 0x1}, 0x48) 15:21:11 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', 0x0}) 15:21:11 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000300)=ANY=[], 0x0) 15:21:11 executing program 5: r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000980)={0x1c, &(0x7f0000000880)={0x0, 0x0, 0x1, '{'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001580)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0x21, 0x1}}) 15:21:11 executing program 4: pselect6(0x0, 0x0, 0x0, &(0x7f0000000280), &(0x7f00000002c0)={0x77359400}, &(0x7f0000000340)={0x0}) 15:21:11 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x80) 15:21:11 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000080)=ANY=[]}) 15:21:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x28, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}]}, 0x28}}, 0x0) 15:21:11 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, 0x0) 15:21:11 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000080)=ANY=[]}) 15:21:11 executing program 3: r0 = syz_clone(0x40000000, &(0x7f0000000080)="2b9a99a3f83d11a9c79359c89a70cdf4cd7984e21edbd3e644102afbf4755eebea4d9dbc6743d33821cfccf5c0b55e2e2b10640540f664dbbf3950028357accef78cd7a994ea1db5cd0bf54b7e59a1ebbee1b0700ee464481c79e5dbca1c", 0x5e, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="73e1a845992e126c422aa9987e2d8c9405788cc469961fcb0ec7d966a7236c4455dfb8d4dafcaea154dc3de8bd746093c82d888bc18e6bbea137") sched_rr_get_interval(r0, &(0x7f0000000200)) mq_open(&(0x7f0000000000)='}/7\\t!\x00', 0x800, 0x10, &(0x7f0000000040)={0x81, 0x5, 0x4c22616200000000, 0x11}) 15:21:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x20, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x20}}, 0x0) [ 683.464762][ T8672] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 15:21:11 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000080)=ANY=[]}) 15:21:11 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0x40086602, &(0x7f0000002a00)) [ 683.623155][ T143] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 683.880470][ T143] usb 3-1: Using ep0 maxpacket: 8 [ 684.003086][ T143] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 684.013343][ T143] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 684.022322][ T143] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 684.032208][ T143] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 684.042444][ T143] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.094688][ T143] hub 3-1:1.0: bad descriptor, ignoring hub [ 684.100646][ T143] hub: probe of 3-1:1.0 failed with error -5 [ 684.107347][ T143] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 684.413389][ T143] usb 3-1: USB disconnect, device number 9 [ 684.773057][ T3697] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 685.012986][ T3697] usb 3-1: Using ep0 maxpacket: 8 [ 685.133079][ T3697] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 685.143446][ T3697] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 685.152353][ T3697] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 685.162342][ T3697] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 685.172004][ T3697] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.225767][ T3697] hub 3-1:1.0: bad descriptor, ignoring hub [ 685.231711][ T3697] hub: probe of 3-1:1.0 failed with error -5 [ 685.238201][ T3697] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 685.445311][ T1239] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.451632][ T1239] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.543657][ T3697] usb 3-1: USB disconnect, device number 10 15:21:13 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581"], 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000300)=ANY=[], 0x0) 15:21:13 executing program 0: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0xc0045878, 0x0) 15:21:13 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000080)=ANY=[@ANYBLOB]}) 15:21:13 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0105303, &(0x7f00000001c0)={{0x7c}, 'port0\x00'}) 15:21:13 executing program 5: r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000980)={0x1c, &(0x7f0000000880)={0x0, 0x0, 0x1, '{'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001580)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0x21, 0x1}}) 15:21:13 executing program 4: io_pgetevents(0x0, 0x0, 0x3, &(0x7f0000000340)=[{}, {}, {}, {}, {}], &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000000), 0x3}) 15:21:13 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000140)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @private2}, r1}}, 0x38) 15:21:13 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000080)=ANY=[@ANYBLOB]}) 15:21:13 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc08c5336, &(0x7f0000000180)={{}, 'port0\x00'}) 15:21:13 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000600), &(0x7f0000000640)=0x4) 15:21:13 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000080)=ANY=[@ANYBLOB]}) 15:21:14 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0) [ 686.104313][ T8707] sctp: [Deprecated]: syz-executor.3 (pid 8707) Use of int in maxseg socket option. [ 686.104313][ T8707] Use struct sctp_assoc_value instead [ 686.313121][ T3697] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 686.583015][ T3697] usb 3-1: Using ep0 maxpacket: 8 [ 686.723138][ T3697] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 686.733382][ T3697] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 686.742272][ T3697] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 686.752074][ T3697] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 686.761174][ T3697] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.803957][ T3697] hub 3-1:1.0: bad descriptor, ignoring hub [ 686.810379][ T3697] hub: probe of 3-1:1.0 failed with error -5 [ 686.817177][ T3697] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 687.123824][ T3697] usb 3-1: USB disconnect, device number 11 [ 687.472986][ T3697] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 687.712955][ T3697] usb 3-1: Using ep0 maxpacket: 8 [ 687.833081][ T3697] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 687.843409][ T3697] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 687.852306][ T3697] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 687.862095][ T3697] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 687.871178][ T3697] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.914102][ T3697] hub 3-1:1.0: bad descriptor, ignoring hub [ 687.920068][ T3697] hub: probe of 3-1:1.0 failed with error -5 [ 687.926798][ T3697] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 688.234207][ T3689] usb 3-1: USB disconnect, device number 12 15:21:16 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYRES64], 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000300)=ANY=[], 0x0) 15:21:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'wlan0\x00'}}}}, 0x2c}}, 0x0) 15:21:16 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @remote}}) 15:21:16 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="677265748a479b2e1ac9ba8040c35086617030000000000000"]}) 15:21:16 executing program 4: socket(0x1d, 0x2, 0x0) 15:21:16 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000980)={0x1c, &(0x7f0000000880)={0x0, 0x0, 0x1, '{'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001580)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0x21, 0x1}}) 15:21:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) 15:21:16 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="677265748a479b2e1ac9ba8040c35086617030000000000000"]}) 15:21:16 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000840)={'tunl0\x00', &(0x7f0000000780)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @broadcast, {[@generic={0x0, 0x2}]}}}}}) 15:21:16 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="677265748a479b2e1ac9ba8040c35086617030000000000000"]}) 15:21:16 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x401c5820, &(0x7f00000001c0)={{0x0, 0xfe}, 'port0\x00'}) [ 688.778857][ T8717] can: request_module (can-proto-0) failed. 15:21:16 executing program 4: ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, 0x0) syz_clone(0x201200, &(0x7f0000000040), 0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) [ 688.962999][ T3702] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 688.973153][ T3697] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 689.152971][ T3702] usb 6-1: device descriptor read/64, error 18 [ 689.162965][ T3697] usb 3-1: device descriptor read/64, error 18 [ 689.433195][ T3697] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 689.440877][ T3702] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 689.632987][ T3702] usb 6-1: device descriptor read/64, error 18 [ 689.639269][ T3697] usb 3-1: device descriptor read/64, error 18 [ 689.753938][ T3702] usb usb6-port1: attempt power cycle [ 689.773235][ T3697] usb usb3-port1: attempt power cycle [ 690.172996][ T3702] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 690.203052][ T3697] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 690.373172][ T3702] usb 6-1: device descriptor read/8, error -61 [ 690.379524][ T3697] usb 3-1: device descriptor read/8, error -61 [ 690.663027][ T3697] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 690.670757][ T3702] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 690.853173][ T3697] usb 3-1: device descriptor read/8, error -61 [ 690.859451][ T3702] usb 6-1: device descriptor read/8, error -61 [ 690.983586][ T3702] usb usb6-port1: unable to enumerate USB device [ 690.990069][ T3697] usb usb3-port1: unable to enumerate USB device 15:21:19 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYRES64], 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000300)=ANY=[], 0x0) 15:21:19 executing program 3: syz_clone(0x201200, 0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000100)) 15:21:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x18, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4, 0x1, 0x0, 0x0}]}, 0x18}}, 0x0) 15:21:19 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="677265748a479b2e1ac9ba8040c35086617030000000000000000000c7a90e717ab6e37651"]}) 15:21:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) 15:21:19 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000980)={0x1c, &(0x7f0000000880)={0x0, 0x0, 0x1, '{'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001580)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0x21, 0x1}}) 15:21:19 executing program 4: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card0/oss_mixer\x00', 0x41, 0x0) write$proc_mixer(r0, 0x0, 0x400000) 15:21:19 executing program 3: ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_pgetevents(0x0, 0x10001, 0x6, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000), 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x9) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001180), 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 15:21:19 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="677265748a479b2e1ac9ba8040c35086617030000000000000000000c7a90e717ab6e37651"]}) 15:21:19 executing program 4: pselect6(0x8, 0x0, &(0x7f0000000240)={0x8}, &(0x7f0000000280), &(0x7f00000002c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000300), 0x8}) 15:21:19 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="677265748a479b2e1ac9ba8040c35086617030000000000000000000c7a90e717ab6e37651"]}) 15:21:19 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40086602, &(0x7f0000000180)={{}, 'port0\x00'}) [ 692.162977][ T3702] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 692.173203][ T3699] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 692.353047][ T3702] usb 3-1: device descriptor read/64, error 18 [ 692.382972][ T3699] usb 6-1: device descriptor read/64, error 18 [ 692.622966][ T3702] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 692.663204][ T3699] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 692.812966][ T3702] usb 3-1: device descriptor read/64, error 18 [ 692.873173][ T3699] usb 6-1: device descriptor read/64, error 18 [ 692.933119][ T3702] usb usb3-port1: attempt power cycle [ 692.993229][ T3699] usb usb6-port1: attempt power cycle [ 693.343047][ T3702] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 693.423516][ T3699] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 693.513739][ T3702] usb 3-1: device descriptor read/8, error -61 [ 693.603102][ T3699] usb 6-1: device descriptor read/8, error -61 [ 693.794470][ T3702] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 693.882984][ T3699] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 693.973037][ T3702] usb 3-1: device descriptor read/8, error -61 [ 694.063164][ T3699] usb 6-1: device descriptor read/8, error -61 [ 694.093154][ T3702] usb usb3-port1: unable to enumerate USB device [ 694.183076][ T3699] usb usb6-port1: unable to enumerate USB device 15:21:22 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="6772654ef642c92e1ac9ba8040c35086617030000000dfff0000c7a90e717a0000f3"]}) 15:21:22 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000980)={0x1c, &(0x7f0000000880)={0x0, 0x0, 0x1, '{'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001580)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0x21, 0x1}}) 15:21:22 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0x301, 0x0) 15:21:22 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="677265748a479b2e1ac9ba8040c35086617030000000000000000000c7a90e717ab6e37651adf6e44193bd"]}) 15:21:22 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYRES64], 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000300)=ANY=[], 0x0) 15:21:22 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x40, 0x4, 0x9, 0x9, 0x7f, 0x2, "d23c1f788b36d969f914fc03664240287bd45ba7b7885c4e9054ec81efe79ece17704e9d4234395ee662e19c49215c15694d600b18711bf3ca132ce573245bb7"}}, 0x158) write$UHID_DESTROY(r0, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, &(0x7f0000000280)=0x8) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000040)={0xa, {0x5, 0x81, 0x2}}, 0xa) 15:21:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="011629bd70000400000001000000000000000c410000000c0014"], 0x28}}, 0x0) 15:21:22 executing program 0: socket(0x11, 0x2, 0xfffffffb) 15:21:22 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="677265748a479b2e1ac9ba8040c35086617030000000000000000000c7a90e717ab6e37651adf6e44193bd"]}) 15:21:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x20, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}}, 0x0) [ 694.854743][ T3702] hid (null): unknown global tag 0xe [ 694.860372][ T3702] hid (null): unknown global tag 0xe [ 694.868146][ T3702] hid (null): unknown global tag 0xe [ 694.882457][ T3702] hid-generic 0004:0009:0009.0035: unknown main item tag 0xd [ 694.891291][ T3702] hid-generic 0004:0009:0009.0035: unexpected long global item 15:21:22 executing program 0: pselect6(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000180)={&(0x7f0000000140), 0x8}) [ 694.900326][ T3702] hid-generic: probe of 0004:0009:0009.0035 failed with error -22 15:21:22 executing program 4: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_clone(0x201200, 0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000100)) 15:21:22 executing program 4: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_clone(0x201200, 0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000100)) [ 695.217739][ T3699] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 695.263043][ T3702] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 695.413031][ T3699] usb 3-1: device descriptor read/64, error 18 [ 695.463210][ T3702] usb 6-1: device descriptor read/64, error 18 [ 695.683023][ T3699] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 695.752983][ T3702] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 695.873105][ T3699] usb 3-1: device descriptor read/64, error 18 [ 695.955083][ T3702] usb 6-1: device descriptor read/64, error 18 [ 695.993123][ T3699] usb usb3-port1: attempt power cycle [ 696.083789][ T3702] usb usb6-port1: attempt power cycle [ 696.402963][ T3699] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 696.512981][ T3702] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 696.573926][ T3699] usb 3-1: device descriptor read/8, error -61 [ 696.693145][ T3702] usb 6-1: device descriptor read/8, error -61 [ 696.842979][ T3699] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 696.973005][ T3702] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 697.014118][ T3699] usb 3-1: device descriptor read/8, error -61 [ 697.133862][ T3699] usb usb3-port1: unable to enumerate USB device [ 697.143056][ T3702] usb 6-1: device descriptor read/8, error -61 [ 697.263820][ T3702] usb usb6-port1: unable to enumerate USB device 15:21:25 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES64], 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000300)=ANY=[], 0x0) 15:21:25 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000980)={0x1c, &(0x7f0000000880)={0x0, 0x0, 0x1, '{'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001580)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0x21, 0x1}}) 15:21:25 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000600), &(0x7f0000000640)=0x4) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0) 15:21:25 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="677265748a479b2e1ac9ba8040c35086617030000000000000000000c7a90e717ab6e37651adf6e44193bd"]}) 15:21:25 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0x5452, &(0x7f0000002a00)) 15:21:25 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001500), 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, 0x0, 0x0) 15:21:25 executing program 0: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 15:21:25 executing program 4: syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$usbmon(&(0x7f00000000c0), 0x9, 0x84800) 15:21:25 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="677265748a479b2e1ac9ba8040c35086617030000000000000000000c7a90e717ab6e37651adf6e44193bdffa990"]}) [ 697.844351][ T8807] sctp: [Deprecated]: syz-executor.3 (pid 8807) Use of int in maxseg socket option. [ 697.844351][ T8807] Use struct sctp_assoc_value instead 15:21:25 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, 0x0) 15:21:25 executing program 0: syz_open_dev$evdev(&(0x7f0000000800), 0x0, 0x0) 15:21:25 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="677265748a479b2e1ac9ba8040c35086617030000000000000000000c7a90e717ab6e37651adf6e44193bdffa990"]}) [ 698.252970][ T3702] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 698.283018][ T3689] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 698.443084][ T3702] usb 6-1: device descriptor read/64, error 18 [ 698.473211][ T3689] usb 3-1: device descriptor read/64, error 18 [ 698.723451][ T3702] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 698.743120][ T3689] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 698.912979][ T3702] usb 6-1: device descriptor read/64, error 18 [ 698.933022][ T3689] usb 3-1: device descriptor read/64, error 18 [ 699.044101][ T3702] usb usb6-port1: attempt power cycle [ 699.059629][ T3689] usb usb3-port1: attempt power cycle [ 699.479701][ T3689] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 699.492979][ T3702] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 699.667760][ T3689] usb 3-1: device descriptor read/8, error -61 [ 699.713070][ T3702] usb 6-1: device descriptor read/8, error -61 [ 699.943009][ T3689] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 700.003080][ T3702] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 700.113180][ T3689] usb 3-1: device descriptor read/8, error -61 [ 700.213074][ T3702] usb 6-1: device descriptor read/8, error -61 [ 700.233145][ T3689] usb usb3-port1: unable to enumerate USB device [ 700.333860][ T3702] usb usb6-port1: unable to enumerate USB device 15:21:28 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES64], 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000300)=ANY=[], 0x0) 15:21:28 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000980)={0x1c, &(0x7f0000000880)={0x0, 0x0, 0x1, '{'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001580)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0x21, 0x1}}) 15:21:28 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0xffffffff, 0x2}) 15:21:28 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) recvmsg(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x2) 15:21:28 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0x5421, &(0x7f0000002a00)) 15:21:28 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="677265748a479b2e1ac9ba8040c35086617030000000000000000000c7a90e717ab6e37651adf6e44193bdffa990"]}) 15:21:28 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000005c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000600)={{}, 'port1\x00'}) 15:21:28 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="677265748a479b2e1ac9ba8040c35086617030000000000000000000c7a90e717ab6e37651adf6e44193bdffa9906c70"]}) 15:21:28 executing program 0: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x7fffffffffffffff, &(0x7f0000000180)={0x0, 0x989680}) [ 700.919218][ T8833] blktrace: Concurrent blktraces are not allowed on nullb0 15:21:28 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x280) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x80) 15:21:28 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc058534b, &(0x7f0000000180)={{}, 'port0\x00'}) 15:21:28 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x5452, &(0x7f0000000180)={{}, 'port0\x00'}) [ 701.313098][ T14] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 701.362972][ T3702] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 701.513108][ T14] usb 3-1: device descriptor read/64, error 18 [ 701.555027][ T3702] usb 6-1: device descriptor read/64, error 18 [ 701.782973][ T14] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 701.833262][ T3702] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 701.972965][ T14] usb 3-1: device descriptor read/64, error 18 [ 702.042940][ T3702] usb 6-1: device descriptor read/64, error 18 [ 702.094094][ T14] usb usb3-port1: attempt power cycle [ 702.163128][ T3702] usb usb6-port1: attempt power cycle [ 702.503012][ T14] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 702.583066][ T3702] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 702.673041][ T14] usb 3-1: device descriptor read/8, error -61 [ 702.763053][ T3702] usb 6-1: device descriptor read/8, error -61 [ 702.942990][ T14] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 703.042996][ T3702] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 703.113102][ T14] usb 3-1: device descriptor read/8, error -61 [ 703.233195][ T3702] usb 6-1: device descriptor read/8, error -61 [ 703.233371][ T14] usb usb3-port1: unable to enumerate USB device [ 703.364851][ T3702] usb usb6-port1: unable to enumerate USB device 15:21:31 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES64], 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000300)=ANY=[], 0x0) 15:21:31 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000980)={0x1c, &(0x7f0000000880)={0x0, 0x0, 0x1, '{'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001580)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0x21, 0x1}}) 15:21:31 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x4040534e, &(0x7f00000001c0)={{}, 'port0\x00'}) 15:21:31 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="677265748a479b2e1ac9ba8040c35086617030000000000000000000c7a90e717ab6e37651adf6e44193bdffa9906c70"]}) 15:21:31 executing program 3: syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), 0xffffffffffffffff) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000200)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000100)=""/212, 0xd4}}, 0x120) write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000003c0), 0xa) 15:21:31 executing program 4: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) read$proc_mixer(r0, &(0x7f00000000c0)=""/234, 0x81) 15:21:31 executing program 4: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) read$proc_mixer(r0, &(0x7f00000000c0)=""/234, 0x81) 15:21:31 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="677265748a479b2e1ac9ba8040c35086617030000000000000000000c7a90e717ab6e37651adf6e44193bdffa9906c70"]}) 15:21:31 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x38, 0x4, 0x0, 0x9, 0x0, 0x0, "d23c1f788b36d969f914fc03664240287bd45ba7b7885c4e9054ec81efe79ece17704e9d4234395ee662e19c49215c15694d600b18711bf3"}}, 0x150) write$UHID_DESTROY(r0, 0x0, 0x0) [ 703.988496][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.016646][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.033358][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.041537][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.069771][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.078762][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.097420][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.106502][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.121263][ T3699] hid (null): unknown global tag 0xe [ 704.123179][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.134739][ T3699] hid (null): unknown global tag 0xe [ 704.134752][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 15:21:32 executing program 4: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) read$proc_mixer(r0, &(0x7f00000000c0)=""/234, 0x81) 15:21:32 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) [ 704.148843][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.160607][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.169624][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.177533][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.178504][ T3699] hid-generic 0004:0000:0009.0037: unknown main item tag 0xd [ 704.185014][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.185041][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.207350][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.215469][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.223052][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.230543][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.238120][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.242346][ T3699] hid-generic 0004:0000:0009.0037: unexpected long global item [ 704.261617][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.279278][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.283907][ T3699] hid-generic: probe of 0004:0000:0009.0037 failed with error -22 15:21:32 executing program 4: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) read$proc_mixer(r0, &(0x7f00000000c0)=""/234, 0x81) [ 704.288222][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.323734][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.331167][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.352284][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.352699][ T14] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 704.360730][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.386302][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.394184][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.401668][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.409740][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.419627][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.427423][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.435266][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.442734][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.450454][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.475154][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.482552][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.490927][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.499098][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.509898][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.517554][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.526312][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.534032][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.541418][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.549116][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.557256][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.564909][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.572307][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.579952][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.587571][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.592972][ T14] usb 3-1: device descriptor read/64, error 18 [ 704.595305][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.608666][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.616133][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.629325][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.637070][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.644600][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.652004][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.659447][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.666921][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.674366][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.681773][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.689267][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.696669][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.704096][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.711490][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.719003][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.727961][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.735425][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.742885][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.750279][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.757812][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.765325][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.772718][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.780362][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.788493][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.796215][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.803846][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.811334][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.818974][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.826589][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.834946][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.842430][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.850143][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.857797][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.863058][ T14] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 704.865486][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.880420][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.887962][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.895792][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.903555][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.910943][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.918537][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.926070][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.934779][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.942182][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.949732][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.957430][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.964979][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.972448][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.980078][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.987652][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 704.995862][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.003397][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.010790][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.019289][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.026904][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.036148][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.043892][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.051410][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.059232][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.063022][ T14] usb 3-1: device descriptor read/64, error 18 [ 705.066983][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.080546][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.088209][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.095779][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.103274][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.110709][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.118188][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.125655][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.133138][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.140920][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.148358][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.155856][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.163313][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.170717][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.178211][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.185641][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.193469][ T14] usb usb3-port1: attempt power cycle [ 705.194306][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.206411][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.213915][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.221359][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.228854][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.236311][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.244443][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.251886][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.259389][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.266896][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.274615][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.282071][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.289584][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.297114][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.304621][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.312102][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.319629][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.327147][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.334637][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.342462][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.349987][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.357493][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.364991][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.372425][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.379914][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.387394][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.394898][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.402352][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.409904][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.417379][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.424893][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.432324][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.440223][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.448364][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.455862][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.463392][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.470964][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.478472][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.485983][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.493490][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.500924][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.508409][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.515929][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.523449][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.530913][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.538420][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.547566][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.555062][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.562513][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.570029][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.577535][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.585041][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.592515][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.600008][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.607513][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.607510][ T14] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 705.626910][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.634351][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.641745][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.649981][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.657432][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.664853][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.672236][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.679834][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.687268][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.694687][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.702070][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.709500][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.716935][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.724376][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.731788][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.739216][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.746691][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.755507][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.763221][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.770626][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.773093][ T14] usb 3-1: device descriptor read/8, error -61 [ 705.778410][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.791782][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.799233][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.806670][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.814092][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.821463][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.828886][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.836311][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.843730][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.851125][ T143] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 705.878131][ T143] hid-generic 0000:0000:0000.0036: hidraw0: HID v0.00 Device [syz1] on syz0 [ 706.053021][ T14] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 706.152962][ T3702] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 706.233055][ T14] usb 3-1: device descriptor read/8, error -61 [ 706.353055][ T3702] usb 6-1: device descriptor read/64, error 18 [ 706.353157][ T14] usb usb3-port1: unable to enumerate USB device [ 706.642967][ T3702] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 706.832967][ T3702] usb 6-1: device descriptor read/64, error 18 15:21:34 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a09040000010209", @ANYRES64], 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000300)=ANY=[], 0x0) 15:21:34 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000980)={0x1c, &(0x7f0000000880)={0x0, 0x0, 0x1, '{'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001580)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0x21, 0x1}}) 15:21:34 executing program 4: read$proc_mixer(0xffffffffffffffff, &(0x7f00000000c0)=""/234, 0x81) 15:21:34 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x401c5820, &(0x7f00000001c0)={{0x8}, 'port0\x00'}) 15:21:34 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0105303, &(0x7f00000001c0)={{0x7c}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7ff, 0x0, 0x0, 0x80}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x4, 0x3f, 0x9b, 0x270, 0x21, @loopback, @local, 0x40, 0x7800, 0x0, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', r2, 0x0, 0x0, 0x8, 0xd9, 0x22, @rand_addr=' \x01\x00', @remote, 0x7, 0x8, 0x2, 0x6}}) 15:21:34 executing program 3: mmap$KVM_VCPU(&(0x7f0000ff9000/0x4000)=nil, 0x930, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 706.953584][ T3702] usb usb6-port1: attempt power cycle 15:21:34 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40505330, &(0x7f0000000180)={{}, 'port0\x00'}) 15:21:34 executing program 1: r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@get={0xe0, 0x13, 0x1, 0x0, 0x0, {{'sm3-generic\x00'}}}, 0xe0}}, 0x0) 15:21:34 executing program 4: read$proc_mixer(0xffffffffffffffff, &(0x7f00000000c0)=""/234, 0x81) 15:21:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x20, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x8}]}]}, 0x20}}, 0x0) 15:21:35 executing program 3: write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f00000000c0), 0x4) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x4) 15:21:35 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, 0x0) [ 707.167899][ T8896] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 707.230543][ T8900] sctp: [Deprecated]: syz-executor.3 (pid 8900) Use of int in max_burst socket option. [ 707.230543][ T8900] Use struct sctp_assoc_value instead [ 707.362997][ T3702] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 707.383099][ T145] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 707.493044][ T3702] usb 6-1: no configurations [ 707.497748][ T3702] usb 6-1: can't read configurations, error -22 [ 707.632956][ T145] usb 3-1: Using ep0 maxpacket: 8 [ 707.653139][ T3702] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 707.753040][ T145] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 707.763494][ T145] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 707.772494][ T145] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 707.785612][ T145] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 707.800686][ T145] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.813089][ T3702] usb 6-1: no configurations [ 707.817889][ T3702] usb 6-1: can't read configurations, error -22 [ 707.824753][ T3702] usb usb6-port1: unable to enumerate USB device [ 708.093181][ T145] usb 3-1: string descriptor 0 read error: -71 [ 708.100202][ T145] hub 3-1:1.0: bad descriptor, ignoring hub [ 708.107617][ T145] hub: probe of 3-1:1.0 failed with error -5 [ 708.114156][ T145] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 708.155402][ T145] usb 3-1: USB disconnect, device number 37 [ 708.612943][ T145] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 708.873173][ T145] usb 3-1: Using ep0 maxpacket: 8 [ 709.033240][ T145] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 709.043820][ T145] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 709.052725][ T145] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 709.068851][ T145] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 709.077936][ T145] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.383054][ T145] usb 3-1: string descriptor 0 read error: -71 [ 709.390033][ T145] hub 3-1:1.0: bad descriptor, ignoring hub [ 709.396097][ T145] hub: probe of 3-1:1.0 failed with error -5 [ 709.402428][ T145] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 709.447864][ T145] usb 3-1: USB disconnect, device number 38 15:21:37 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a09040000010209", @ANYRES64], 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000300)=ANY=[], 0x0) 15:21:37 executing program 0: sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0x72ae164ee803c171) 15:21:37 executing program 4: read$proc_mixer(0xffffffffffffffff, &(0x7f00000000c0)=""/234, 0x81) 15:21:37 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000980)={0x1c, &(0x7f0000000880)={0x0, 0x0, 0x1, '{'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001580)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0x21, 0x1}}) 15:21:37 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0xc0189436, &(0x7f0000002a00)) 15:21:37 executing program 3: io_setup(0x1, &(0x7f0000000000)) io_setup(0x4, &(0x7f0000000180)) 15:21:38 executing program 4: r0 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$proc_mixer(r0, &(0x7f00000000c0)=""/234, 0x81) 15:21:38 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0189436, &(0x7f0000000180)={{}, 'port0\x00'}) 15:21:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom$packet(r0, 0x0, 0x0, 0x10160, 0x0, 0x0) 15:21:38 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0x301, &(0x7f0000000040)) 15:21:38 executing program 4: r0 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$proc_mixer(r0, &(0x7f00000000c0)=""/234, 0x81) 15:21:38 executing program 0: pselect6(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x2}, &(0x7f00000000c0), &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000180)={&(0x7f0000000140)={[0x1ff]}, 0x8}) [ 710.163099][ T143] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 710.442991][ T143] usb 3-1: Using ep0 maxpacket: 8 [ 710.573188][ T143] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 710.583626][ T3697] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 710.591453][ T143] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 710.600790][ T143] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 710.614289][ T143] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 710.623696][ T143] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.893239][ T3697] usb 6-1: no configurations [ 710.897900][ T3697] usb 6-1: can't read configurations, error -22 [ 710.913043][ T143] usb 3-1: string descriptor 0 read error: -71 [ 710.924167][ T143] hub 3-1:1.0: bad descriptor, ignoring hub [ 710.930098][ T143] hub: probe of 3-1:1.0 failed with error -5 [ 710.939446][ T143] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 710.986335][ T143] usb 3-1: USB disconnect, device number 39 [ 711.052989][ T3697] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 711.333145][ T3697] usb 6-1: no configurations [ 711.337900][ T3697] usb 6-1: can't read configurations, error -22 [ 711.344718][ T3697] usb usb6-port1: attempt power cycle [ 711.452954][ T143] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 711.692996][ T143] usb 3-1: Using ep0 maxpacket: 8 [ 711.755045][ T3697] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 711.813150][ T143] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 711.823649][ T143] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 711.832515][ T143] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 711.845846][ T143] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 711.855062][ T143] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.883881][ T3697] usb 6-1: no configurations [ 711.888537][ T3697] usb 6-1: can't read configurations, error -22 [ 712.043038][ T3697] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 712.143182][ T143] usb 3-1: string descriptor 0 read error: -71 [ 712.150993][ T143] hub 3-1:1.0: bad descriptor, ignoring hub [ 712.157262][ T143] hub: probe of 3-1:1.0 failed with error -5 [ 712.164044][ T143] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 712.183189][ T3697] usb 6-1: no configurations [ 712.187842][ T3697] usb 6-1: can't read configurations, error -22 [ 712.194956][ T143] usb 3-1: USB disconnect, device number 40 [ 712.202241][ T3697] usb usb6-port1: unable to enumerate USB device 15:21:40 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a09040000010209", @ANYRES64], 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000300)=ANY=[], 0x0) 15:21:40 executing program 1: mq_notify(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x4}) [ 712.922961][ T143] usb 3-1: new high-speed USB device number 41 using dummy_hcd 15:21:41 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000980)={0x1c, &(0x7f0000000880)={0x0, 0x0, 0x1, '{'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001580)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0x21, 0x1}}) 15:21:41 executing program 4: r0 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$proc_mixer(r0, &(0x7f00000000c0)=""/234, 0x81) 15:21:41 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000100)={0x1, 0x8, 0x2000}, 0x8) 15:21:41 executing program 0: syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x0) 15:21:41 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x6deb7) 15:21:41 executing program 4: openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) read$proc_mixer(0xffffffffffffffff, &(0x7f00000000c0)=""/234, 0x81) 15:21:41 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f0000000180)={{}, 'port0\x00'}) [ 713.163024][ T143] usb 3-1: Using ep0 maxpacket: 8 15:21:41 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=@can, 0x80) 15:21:41 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0505350, &(0x7f00000001c0)={{0x80}, 'port0\x00'}) 15:21:41 executing program 4: openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) read$proc_mixer(0xffffffffffffffff, &(0x7f00000000c0)=""/234, 0x81) [ 713.293291][ T143] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 713.316086][ T143] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 713.333585][ T143] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 713.361841][ T143] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 713.372059][ T143] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.654173][ T2988] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 713.673065][ T143] usb 3-1: string descriptor 0 read error: -71 [ 713.680216][ T143] hub 3-1:1.0: bad descriptor, ignoring hub [ 713.686278][ T143] hub: probe of 3-1:1.0 failed with error -5 [ 713.692550][ T143] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 713.736394][ T143] usb 3-1: USB disconnect, device number 41 [ 713.993132][ T2988] usb 6-1: no configurations [ 713.997784][ T2988] usb 6-1: can't read configurations, error -22 [ 714.153497][ T2988] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 714.212968][ T143] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 714.433278][ T2988] usb 6-1: no configurations [ 714.437927][ T2988] usb 6-1: can't read configurations, error -22 [ 714.444619][ T2988] usb usb6-port1: attempt power cycle [ 714.453020][ T143] usb 3-1: Using ep0 maxpacket: 8 [ 714.573098][ T143] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 714.583534][ T143] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 714.592456][ T143] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 714.605602][ T143] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 714.614904][ T143] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.854375][ T2988] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 714.893151][ T143] usb 3-1: string descriptor 0 read error: -71 [ 714.900111][ T143] hub 3-1:1.0: bad descriptor, ignoring hub [ 714.906372][ T143] hub: probe of 3-1:1.0 failed with error -5 [ 714.912651][ T143] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 714.954252][ T143] usb 3-1: USB disconnect, device number 42 [ 714.997820][ T2988] usb 6-1: no configurations [ 715.002451][ T2988] usb 6-1: can't read configurations, error -22 [ 715.162948][ T2988] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 715.305181][ T2988] usb 6-1: no configurations [ 715.309833][ T2988] usb 6-1: can't read configurations, error -22 [ 715.316282][ T2988] usb usb6-port1: unable to enumerate USB device 15:21:43 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100", @ANYRES64], 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000300)=ANY=[], 0x0) 15:21:43 executing program 3: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card0/oss_mixer\x00', 0x41, 0x0) write$proc_mixer(r0, 0x0, 0x40000000000000) [ 715.673057][ T3699] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 715.932960][ T3699] usb 3-1: Using ep0 maxpacket: 8 [ 716.063085][ T3699] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 716.073326][ T3699] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 716.082216][ T3699] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 716.096612][ T3699] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 716.106057][ T3699] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 15:21:44 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef0000000109021200010000"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000980)={0x1c, &(0x7f0000000880)={0x0, 0x0, 0x1, '{'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001580)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0x21, 0x1}}) 15:21:44 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x40, 0x4, 0x9, 0x9, 0x7f, 0x2, "d23c1f788b36d969f914fc03664240287bd45ba7b7885c4e9054ec81efe79ece17704e9d4234395ee662e19c49215c15694d600b18711bf3ca132ce573245bb7"}}, 0x158) write$UHID_DESTROY(r0, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, &(0x7f0000000280)=0x8) 15:21:44 executing program 1: mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x1}) 15:21:44 executing program 4: openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) read$proc_mixer(0xffffffffffffffff, &(0x7f00000000c0)=""/234, 0x81) 15:21:44 executing program 3: socketpair(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r0, &(0x7f0000000380)=[{0x0, 0x0, 0x0}], 0x1, 0x3) [ 716.168682][ T3699] hub 3-1:1.0: bad descriptor, ignoring hub [ 716.174781][ T3699] hub: probe of 3-1:1.0 failed with error -5 [ 716.181082][ T3699] cdc_wdm: probe of 3-1:1.0 failed with error -22 15:21:44 executing program 4: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) read$proc_mixer(r0, 0x0, 0x0) 15:21:44 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev, {[@ssrr={0x89, 0x3}]}}}}}) 15:21:44 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x0, &(0x7f0000000100), 0x0, 0x4) 15:21:44 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev, {[@ssrr={0x89, 0x3}]}}}}}) [ 716.280789][ T3699] hid (null): unknown global tag 0xe [ 716.288358][ T3699] hid (null): unknown global tag 0xe [ 716.314751][ T3699] hid (null): unknown global tag 0xe 15:21:44 executing program 4: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) read$proc_mixer(r0, 0x0, 0x0) [ 716.351168][ T3699] hid-generic 0004:0009:0009.0038: unknown main item tag 0xd [ 716.403715][ T3699] hid-generic 0004:0009:0009.0038: unexpected long global item [ 716.433569][ T3699] hid-generic: probe of 0004:0009:0009.0038 failed with error -22 [ 716.797916][ T3689] usb 3-1: reset high-speed USB device number 43 using dummy_hcd [ 716.853060][ T14] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 717.073021][ T3689] usb 3-1: Using ep0 maxpacket: 8 [ 717.233095][ T14] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 717.244256][ T14] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 717.254632][ T14] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 717.263960][ T14] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.279984][ T14] usb 6-1: config 0 descriptor?? [ 717.533107][ T2988] usb 3-1: USB disconnect, device number 43 15:21:45 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100", @ANYRES64], 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000300)=ANY=[], 0x0) 15:21:45 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev, {[@ssrr={0x89, 0x3}]}}}}}) [ 718.222986][ T14] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 718.462914][ T14] usb 3-1: Using ep0 maxpacket: 8 [ 718.584858][ T14] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 718.595028][ T14] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 718.604083][ T14] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 718.617054][ T14] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 718.626311][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.673830][ T14] hub 3-1:1.0: bad descriptor, ignoring hub [ 718.679761][ T14] hub: probe of 3-1:1.0 failed with error -5 [ 718.690426][ T14] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 718.994736][ T2988] usb 3-1: USB disconnect, device number 44 15:21:47 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef0000000109021200010000"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000980)={0x1c, &(0x7f0000000880)={0x0, 0x0, 0x1, '{'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001580)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0x21, 0x1}}) 15:21:47 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, 0x0, &(0x7f0000000200)) 15:21:47 executing program 4: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) read$proc_mixer(r0, 0x0, 0x0) 15:21:47 executing program 0: pselect6(0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000300), 0x7ffffffff000}) 15:21:47 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev, {[@ssrr={0x89, 0x3}]}}}}}) [ 719.264370][ T2988] usb 6-1: USB disconnect, device number 123 15:21:47 executing program 3: r0 = syz_io_uring_setup(0x1678, &(0x7f0000000000), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0xe62, &(0x7f0000000100), &(0x7f0000c00000/0x400000)=nil, &(0x7f0000f07000/0x3000)=nil, &(0x7f0000000180), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x8000000) 15:21:47 executing program 4: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) 15:21:47 executing program 1: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev, {[@ssrr={0x89, 0x3}]}}}}}) 15:21:47 executing program 0: syz_open_dev$usbmon(&(0x7f0000001e00), 0x52d, 0x0) [ 719.343095][ T14] usb 3-1: new high-speed USB device number 45 using dummy_hcd 15:21:47 executing program 0: epoll_create(0x15be) [ 719.593066][ T14] usb 3-1: Using ep0 maxpacket: 8 [ 719.713363][ T14] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 719.727250][ T14] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 719.736726][ T14] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 719.750056][ T14] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 719.759345][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.804067][ T14] hub 3-1:1.0: bad descriptor, ignoring hub [ 719.810146][ T14] hub: probe of 3-1:1.0 failed with error -5 [ 719.813014][ T2988] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 719.817012][ T14] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 720.123187][ T3699] usb 3-1: USB disconnect, device number 45 [ 720.233091][ T2988] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 720.247355][ T2988] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 720.256649][ T2988] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 720.266050][ T2988] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.277067][ T2988] usb 6-1: config 0 descriptor?? 15:21:48 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100", @ANYRES64], 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000300)=ANY=[], 0x0) 15:21:48 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000100)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "0be6f4339887fa116ceed77fc67c90fda5897be7f2e7499084208235537b6eb689ee96adaa3a32e35d9a5315aeed7b30728394d94dc7197cbfefaaa869636fae", "39738d1fb96c3905dbf464f0046a0884b5a8689b96e330513b60315ae0be4bd2"}) [ 720.843111][ T143] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 721.103073][ T143] usb 3-1: Using ep0 maxpacket: 8 [ 721.222989][ T143] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 721.233259][ T143] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 721.242224][ T143] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 721.255583][ T143] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 721.265133][ T143] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.313997][ T143] hub 3-1:1.0: bad descriptor, ignoring hub [ 721.320443][ T143] hub: probe of 3-1:1.0 failed with error -5 [ 721.327793][ T143] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 721.645539][ T3699] usb 3-1: USB disconnect, device number 46 [ 722.012981][ T3699] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 722.292953][ T3699] usb 3-1: Using ep0 maxpacket: 8 15:21:50 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef0000000109021200010000"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000980)={0x1c, &(0x7f0000000880)={0x0, 0x0, 0x1, '{'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001580)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0x21, 0x1}}) 15:21:50 executing program 0: pselect6(0x40, &(0x7f0000007cc0), 0x0, 0x0, &(0x7f0000007d80), 0x0) 15:21:50 executing program 1: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev, {[@ssrr={0x89, 0x3}]}}}}}) 15:21:50 executing program 3: syz_clone(0x200080, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="ab5803a9cd804b97ac74c834be976297ad6a88f77ec799d30171dc276cbdeec7aa823e39dd05a76061792425e68a1dea06e499205b1e38fbc43e9803d35311305ba37a3ffd20aabc342a0097e353") 15:21:50 executing program 4: syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x115ac0) [ 722.365538][ T143] usb 6-1: USB disconnect, device number 124 15:21:50 executing program 1: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev, {[@ssrr={0x89, 0x3}]}}}}}) 15:21:50 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000140), &(0x7f0000000180)=0xc) 15:21:50 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000000)={0x7, 'pimreg0\x00'}) [ 722.433699][ T3699] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config 15:21:50 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev, {[@ssrr={0x89, 0x3}]}}}}}) 15:21:50 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$dlm_monitor(0xffffff9c, &(0x7f0000003300), 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000100)=r1, 0x4) [ 722.479100][ T3699] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 722.513418][ T3699] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 722.541934][ T3699] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 722.585484][ T3699] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.664205][ T3699] hub 3-1:1.0: bad descriptor, ignoring hub [ 722.670170][ T3699] hub: probe of 3-1:1.0 failed with error -5 [ 722.677151][ T3699] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 722.843057][ T143] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 722.993543][ T14] usb 3-1: USB disconnect, device number 47 [ 723.203055][ T143] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 723.213404][ T143] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 723.222472][ T143] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 723.232430][ T143] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.248182][ T143] usb 6-1: config 0 descriptor?? 15:21:51 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006", @ANYRES64], 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000300)=ANY=[], 0x0) 15:21:51 executing program 0: syz_clone(0x40000480, &(0x7f0000000180)="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", 0x7c0, &(0x7f0000001180), 0x0, 0x0) epoll_create1(0x0) openat$dlm_monitor(0xffffff9c, &(0x7f0000003300), 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x0, @fd_index=0x6, 0x7f, 0x0, 0x0, 0x6, 0x1}, 0x1) write$char_usb(0xffffffffffffffff, 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000000)="7136330efe38761e09965e4931d037a742142d2dc290071ff2189b49b782dd93fc932d63f4f202ad9e808aa9493b9ae5", 0x30) [ 723.693102][ T145] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 723.957155][ T145] usb 3-1: Using ep0 maxpacket: 8 [ 724.093016][ T145] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 724.103450][ T145] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 724.112439][ T145] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 724.126225][ T145] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 724.135667][ T145] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.204060][ T145] hub 3-1:1.0: bad descriptor, ignoring hub [ 724.210017][ T145] hub: probe of 3-1:1.0 failed with error -5 [ 724.227534][ T145] cdc_wdm 3-1:1.0: skipping garbage [ 724.239522][ T145] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 724.524410][ T143] usb 3-1: USB disconnect, device number 48 [ 724.883054][ T143] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 725.122995][ T143] usb 3-1: Using ep0 maxpacket: 8 [ 725.243095][ T143] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 725.253564][ T143] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 725.262579][ T143] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 725.276053][ T143] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 725.285536][ T143] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.336658][ T143] hub 3-1:1.0: bad descriptor, ignoring hub [ 725.342819][ T143] hub: probe of 3-1:1.0 failed with error -5 [ 725.349600][ T143] cdc_wdm 3-1:1.0: skipping garbage [ 725.355065][ T143] cdc_wdm: probe of 3-1:1.0 failed with error -22 15:21:53 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000980)={0x1c, &(0x7f0000000880)={0x0, 0x0, 0x1, '{'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001580)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0x21, 0x1}}) 15:21:53 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev, {[@ssrr={0x89, 0x3}]}}}}}) 15:21:53 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000380), 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0) 15:21:53 executing program 4: syz_io_uring_setup(0x6be4, &(0x7f0000000200), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000300), &(0x7f00000002c0)) 15:21:53 executing program 0: r0 = syz_io_uring_setup(0x5785, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000080)=0x0) socket$alg(0x26, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2a, 0x0, 0x0, 0x0, 0x70c) 15:21:53 executing program 3: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x0, 0x0) [ 725.442285][ T145] usb 6-1: USB disconnect, device number 125 15:21:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5000000024000b1d000800800000000000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000003000d00010066715f636f64656c"], 0x50}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000c0000000b000100666c6f770006"], 0x44}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 15:21:53 executing program 0: r0 = syz_io_uring_setup(0x5785, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000080)=0x0) socket$alg(0x26, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2a, 0x0, 0x0, 0x0, 0x70c) 15:21:53 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev, {[@ssrr={0x89, 0x3}]}}}}}) 15:21:53 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) [ 725.563769][ T9055] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 725.651946][ T9061] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 725.666402][ T3699] usb 3-1: USB disconnect, device number 49 [ 725.703800][ T9061] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 725.942931][ T145] usb 6-1: new high-speed USB device number 126 using dummy_hcd 15:21:53 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006", @ANYRES64], 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000300)=ANY=[], 0x0) 15:21:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5000000024000b1d000800800000000000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000003000d00010066715f636f64656c"], 0x50}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000c0000000b000100666c6f770006"], 0x44}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 726.080371][ T9065] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 726.110068][ T9065] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 726.120106][ T9065] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 726.323191][ T145] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 726.333373][ T145] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.345563][ T145] usb 6-1: config 0 descriptor?? [ 726.353219][ T14] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 726.613107][ T14] usb 3-1: Using ep0 maxpacket: 8 [ 726.733099][ T14] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 726.744373][ T14] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 726.753647][ T14] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 726.767077][ T14] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 726.776698][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.824629][ T14] hub 3-1:1.0: bad descriptor, ignoring hub [ 726.830583][ T14] hub: probe of 3-1:1.0 failed with error -5 [ 726.837061][ T14] cdc_wdm 3-1:1.0: skipping garbage [ 726.842295][ T14] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 727.143642][ T143] usb 3-1: USB disconnect, device number 50 [ 727.503019][ T143] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 727.743107][ T143] usb 3-1: Using ep0 maxpacket: 8 [ 727.863112][ T143] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 727.874096][ T143] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 727.883094][ T143] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 727.896031][ T143] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 727.905181][ T143] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.964849][ T143] hub 3-1:1.0: bad descriptor, ignoring hub [ 727.972612][ T143] hub: probe of 3-1:1.0 failed with error -5 [ 727.979090][ T143] cdc_wdm 3-1:1.0: skipping garbage [ 727.984517][ T143] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 728.283161][ T143] usb 3-1: USB disconnect, device number 51 15:21:56 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) 15:21:56 executing program 0: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() tkill(r0, 0x21) io_setup(0x7, &(0x7f0000000280)=0x0) io_pgetevents(r1, 0x80, 0x8d7, &(0x7f0000000480)=[{}, {}, {}, {}], 0x0, &(0x7f00000001c0)={&(0x7f0000000140), 0x8}) 15:21:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5000000024000b1d000800800000000000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000003000d00010066715f636f64656c"], 0x50}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000c0000000b000100666c6f770006"], 0x44}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 15:21:56 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000980)={0x1c, &(0x7f0000000880)={0x0, 0x0, 0x1, '{'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001580)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0x21, 0x1}}) 15:21:56 executing program 3: unshare(0x40000000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) unshare(0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000340)={'filter\x00'}, &(0x7f0000000080)=0x54) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f00000000c0)={'nat\x00', 0x0, [0x0, 0x9, 0x1]}, &(0x7f0000000140)=0x54) r2 = dup2(r1, r1) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000240)={@local}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/snd_usb_hiface', 0x0, 0xa) unshare(0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0x6, @private1, 0xffffffc1}, 0x1c) unshare(0x42000000) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f00000003c0)={0x0, @capture={0x0, 0x0, {0x0, 0x3}, 0x105}}) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, 0x0, &(0x7f0000000040)) 15:21:56 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) [ 728.528892][ T3689] usb 6-1: USB disconnect, device number 126 [ 728.558757][ T9078] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 15:21:56 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', 0x0}) 15:21:56 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006", @ANYRES64], 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000300)=ANY=[], 0x0) [ 728.680820][ T9084] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 15:21:56 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', 0x0}) [ 728.730156][ T9084] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 15:21:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5000000024000b1d000800800000000000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000003000d00010066715f636f64656c"], 0x50}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000c0000000b000100666c6f770006"], 0x44}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 15:21:56 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', 0x0}) 15:21:56 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}}}) [ 728.871547][ T9098] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 15:21:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5000000024000b1d000800800000000000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000003000d00010066715f636f64656c"], 0x50}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000c0000000b000100666c6f770006"], 0x44}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 729.023016][ T3689] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 729.034369][ T2988] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 729.302973][ T2988] usb 3-1: Using ep0 maxpacket: 8 [ 729.393219][ T3689] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 729.402468][ T3689] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.414229][ T3689] usb 6-1: config 0 descriptor?? 15:21:57 executing program 0: pipe(&(0x7f0000000000)) socketpair(0x1a, 0x0, 0x0, &(0x7f0000000400)) 15:21:57 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) set_mempolicy(0x8003, &(0x7f00000000c0)=0x7, 0x2) set_mempolicy(0x0, &(0x7f0000000400), 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x5b556) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, 0x0) [ 729.466901][ T2988] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 729.481070][ T2988] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 729.511510][ T2988] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 729.532460][ T2988] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 729.550319][ T2988] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.594439][ T2988] hub 3-1:1.0: bad descriptor, ignoring hub [ 729.600393][ T2988] hub: probe of 3-1:1.0 failed with error -5 [ 729.617648][ T2988] cdc_wdm 3-1:1.0: skipping garbage [ 729.629858][ T2988] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 729.934009][ T3702] usb 3-1: USB disconnect, device number 52 [ 730.300525][ T22] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 730.563084][ T22] usb 3-1: Using ep0 maxpacket: 8 [ 730.683306][ T22] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 730.693805][ T22] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 730.702760][ T22] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 730.715984][ T22] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 730.731930][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.797730][ T22] hub 3-1:1.0: bad descriptor, ignoring hub [ 730.803843][ T22] hub: probe of 3-1:1.0 failed with error -5 [ 730.810110][ T22] cdc_wdm 3-1:1.0: skipping garbage [ 730.815447][ T22] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 731.123179][ T22] usb 3-1: USB disconnect, device number 53 15:21:59 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000980)={0x1c, &(0x7f0000000880)={0x0, 0x0, 0x1, '{'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001580)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0x21, 0x1}}) 15:21:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5000000024000b1d000800800000000000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000003000d00010066715f636f64656c"], 0x50}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000c0000000b000100666c6f770006"], 0x44}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 15:21:59 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000004100)={0x0, 0x0, &(0x7f00000040c0)={&(0x7f0000004080)={0x28, 0x3, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) 15:21:59 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 15:21:59 executing program 1: r0 = socket(0x29, 0x5, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) 15:21:59 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a0000", @ANYRES64], 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000300)=ANY=[], 0x0) [ 731.634218][ T3702] usb 6-1: USB disconnect, device number 127 15:21:59 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@enum={0x2}]}, {0x0, [0x0]}}, &(0x7f00000001c0)=""/205, 0x27, 0xcd, 0x1}, 0x20) [ 731.676555][ T9123] __nla_validate_parse: 3 callbacks suppressed [ 731.676576][ T9123] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 15:21:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000002800cb3d0000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\a'], 0x2c}}, 0x0) 15:21:59 executing program 3: r0 = socket(0x15, 0x5, 0x0) accept$inet6(r0, 0x0, 0x0) 15:21:59 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x40, 0x33, 0x58, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, 0x0, 0x80, 0x0, 0x7}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000a00)={'erspan0\x00', 0x0}) pipe(&(0x7f00000013c0)={0xffffffffffffffff}) sendmsg$IPSET_CMD_TEST(r0, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x30, 0xb, 0x6, 0x101, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x881}, 0x24000004) 15:21:59 executing program 3: bpf$MAP_CREATE(0x3, &(0x7f0000005500), 0x48) 15:21:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5000000024000b1d000800800000000000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000003000d00010066715f636f64656c"], 0x50}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000c0000000b000100666c6f770006"], 0x44}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 731.804448][ T9132] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 731.905700][ T9141] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 731.973059][ T14] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 732.142931][ T3702] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 732.253187][ T14] usb 3-1: Using ep0 maxpacket: 8 [ 732.383025][ T14] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 732.393604][ T14] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 732.402620][ T14] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 732.416192][ T14] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 732.425657][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.484138][ T14] hub 3-1:1.0: bad descriptor, ignoring hub [ 732.490100][ T14] hub: probe of 3-1:1.0 failed with error -5 [ 732.496901][ T14] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 732.503242][ T3702] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 732.512574][ T3702] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.531174][ T3702] usb 6-1: config 0 descriptor?? [ 732.803098][ T3702] usb 3-1: USB disconnect, device number 54 [ 733.173097][ T22] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 733.422974][ T22] usb 3-1: Using ep0 maxpacket: 8 [ 733.543003][ T22] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 733.553427][ T22] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 733.562383][ T22] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 733.575422][ T22] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 733.584696][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.635604][ T22] hub 3-1:1.0: bad descriptor, ignoring hub [ 733.641771][ T22] hub: probe of 3-1:1.0 failed with error -5 [ 733.648366][ T22] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 733.954519][ T145] usb 3-1: USB disconnect, device number 55 15:22:02 executing program 3: bpf$MAP_CREATE(0x14, &(0x7f0000005500), 0x48) 15:22:02 executing program 1: bpf$MAP_CREATE(0xa, 0x0, 0x0) 15:22:02 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x140b, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) 15:22:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5000000024000b1d000800800000000000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000003000d00010066715f636f64656c"], 0x50}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 15:22:02 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef0000000109021200010000000009040000"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000980)={0x1c, &(0x7f0000000880)={0x0, 0x0, 0x1, '{'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001580)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0x21, 0x1}}) 15:22:02 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a0000", @ANYRES64], 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000300)=ANY=[], 0x0) 15:22:02 executing program 1: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) [ 734.741247][ T2988] usb 6-1: USB disconnect, device number 2 [ 734.775485][ T9153] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 15:22:02 executing program 3: r0 = epoll_create1(0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) 15:22:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, 0x0, 0x0) 15:22:02 executing program 3: syz_emit_ethernet(0x3a, &(0x7f0000000000)={@multicast, @dev, @void, {@ipv4={0x8864, @tipc={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x57, 0x0, 0x6, 0x0, @rand_addr, @dev}, @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}, 0x0) 15:22:02 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x4, &(0x7f00000002c0)=@framed={{}, [@ldst={0x0, 0x0, 0x2}]}, &(0x7f0000000300)='GPL\x00', 0x1, 0xc4, &(0x7f0000000340)=""/196, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480), 0x8, 0x10, 0x0}, 0x80) [ 734.852164][ T9160] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 15:22:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5000000024000b1d000800800000000000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000003000d00010066715f636f64656c"], 0x50}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 15:22:02 executing program 0: syz_emit_ethernet(0x3a, &(0x7f0000000000)={@multicast, @dev, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr, @dev}, @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}, 0x0) 15:22:02 executing program 1: syz_emit_ethernet(0x4e, &(0x7f00000003c0)={@multicast, @random="10b2fe2c81ee", @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "eb9b7c", 0x18, 0x21, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, @private1, {[@routing], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "27d90c", 0x0, "41d972"}}}}}}}, 0x0) 15:22:02 executing program 3: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="070800000000000000000f"], 0x14}}, 0x0) [ 735.000742][ T9172] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 15:22:02 executing program 3: r0 = socket(0x1e, 0x1, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x10f, 0x1, 0x0, 0x3c) [ 735.063075][ T22] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 735.073154][ T9179] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 735.193209][ T2988] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 735.313039][ T22] usb 3-1: Using ep0 maxpacket: 8 [ 735.433127][ T22] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 735.443470][ T22] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 735.452751][ T22] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 735.465981][ T22] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 735.475277][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.526162][ T22] hub 3-1:1.0: bad descriptor, ignoring hub [ 735.532118][ T22] hub: probe of 3-1:1.0 failed with error -5 [ 735.538752][ T22] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 735.563009][ T2988] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 735.572066][ T2988] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.587231][ T2988] usb 6-1: config 0 descriptor?? [ 735.843243][ T2988] usb 3-1: USB disconnect, device number 56 [ 736.203061][ T2988] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 736.453069][ T2988] usb 3-1: Using ep0 maxpacket: 8 [ 736.583131][ T2988] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 736.593567][ T2988] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 736.602537][ T2988] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 736.615964][ T2988] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 736.625326][ T2988] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.684155][ T2988] hub 3-1:1.0: bad descriptor, ignoring hub [ 736.690138][ T2988] hub: probe of 3-1:1.0 failed with error -5 [ 736.696728][ T2988] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 737.003170][ T2988] usb 3-1: USB disconnect, device number 57 15:22:05 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef0000000109021200010000000009040000"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000980)={0x1c, &(0x7f0000000880)={0x0, 0x0, 0x1, '{'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001580)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0x21, 0x1}}) 15:22:05 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a0000", @ANYRES64], 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000300)=ANY=[], 0x0) 15:22:05 executing program 0: r0 = socket(0x2, 0xa, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) 15:22:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5000000024000b1d000800800000000000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000003000d00010066715f636f64656c"], 0x50}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 15:22:05 executing program 3: syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) 15:22:05 executing program 1: syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @val={@void}, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "f48066", 0x10, 0x21, 0x0, @dev, @mcast1, {[], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "b5130a", 0x0, "bd986b"}}}}}}}, 0x0) [ 737.780338][ T14] usb 6-1: USB disconnect, device number 3 15:22:05 executing program 1: syz_emit_ethernet(0x3a, &(0x7f0000000000)={@multicast, @dev, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr, @dev}, @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}, 0x0) 15:22:05 executing program 0: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x80000002, 0x0) 15:22:05 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000005500)=@base={0x9, 0x5, 0x200, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) [ 737.841996][ T9194] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 15:22:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) 15:22:05 executing program 0: syz_emit_ethernet(0x36, &(0x7f0000000380)={@random="12d09f751edd", @local, @val={@void}, {@ipv4={0x8100, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "33a2b7", 0x0, "5c8a13"}}}}}}, 0x0) [ 737.933506][ T9197] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 15:22:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000c0000000b000100666c6f770006"], 0x44}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 738.065729][ T9210] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 738.093044][ T3702] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 738.283048][ T14] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 738.362963][ T3702] usb 3-1: Using ep0 maxpacket: 8 [ 738.503161][ T3702] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 738.513522][ T3702] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 738.523336][ T3702] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 738.536490][ T3702] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 738.545846][ T3702] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.594241][ T3702] hub 3-1:1.0: bad descriptor, ignoring hub [ 738.600208][ T3702] hub: probe of 3-1:1.0 failed with error -5 [ 738.606919][ T3702] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 738.643138][ T14] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 738.652216][ T14] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.668906][ T14] usb 6-1: config 0 descriptor?? [ 738.917768][ T14] usb 3-1: USB disconnect, device number 58 [ 739.273031][ T14] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 739.532941][ T14] usb 3-1: Using ep0 maxpacket: 8 [ 739.652982][ T14] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 739.663413][ T14] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 739.672350][ T14] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 739.685639][ T14] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 739.696653][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.744508][ T14] hub 3-1:1.0: bad descriptor, ignoring hub [ 739.751051][ T14] hub: probe of 3-1:1.0 failed with error -5 [ 739.758210][ T14] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 740.076177][ T14] usb 3-1: USB disconnect, device number 59 15:22:08 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef0000000109021200010000000009040000"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000980)={0x1c, &(0x7f0000000880)={0x0, 0x0, 0x1, '{'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001580)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0x21, 0x1}}) 15:22:08 executing program 3: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@multicast, @dev, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x3, 0x0, 0x6, 0x0, @rand_addr, @dev}, @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}, 0x0) 15:22:08 executing program 1: timer_create(0x0, 0x0, &(0x7f00000001c0)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, r0+60000000}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{0x77359400}}, 0x0) 15:22:08 executing program 0: timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @tid=0xffffffffffffffff}, 0x0) 15:22:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000c0000000b000100666c6f770006"], 0x44}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 15:22:08 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a00000019", @ANYRES64], 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000300)=ANY=[], 0x0) 15:22:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) 15:22:08 executing program 1: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000001180)={0x2}, 0x8, 0x0) msgrcv(r0, &(0x7f0000000380)={0x0, ""/259}, 0x2b, 0x2, 0x0) 15:22:08 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, 0x0) [ 740.899766][ T3702] usb 6-1: USB disconnect, device number 4 [ 740.931607][ T9219] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 15:22:08 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)) 15:22:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @private}, {0x2, 0x0, @broadcast}, {0x2, 0x0, @broadcast}, 0x200}) 15:22:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000c0000000b000100666c6f770006"], 0x44}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 741.135264][ T9240] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 741.203011][ T2988] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 741.382927][ T3702] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 741.442984][ T2988] usb 3-1: Using ep0 maxpacket: 8 [ 741.563020][ T2988] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 741.573352][ T2988] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 741.582263][ T2988] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 741.597858][ T2988] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 741.607264][ T2988] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.654526][ T2988] hub 3-1:1.0: bad descriptor, ignoring hub [ 741.660466][ T2988] hub: probe of 3-1:1.0 failed with error -5 [ 741.671652][ T2988] cdc_wdm 3-1:1.0: skipping garbage [ 741.677805][ T2988] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 741.743271][ T3702] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 741.752409][ T3702] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.763896][ T3702] usb 6-1: config 0 descriptor?? [ 741.973672][ T3702] usb 3-1: USB disconnect, device number 60 [ 742.322953][ T3702] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 742.563008][ T3702] usb 3-1: Using ep0 maxpacket: 8 [ 742.683052][ T3702] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 742.693317][ T3702] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 742.702193][ T3702] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 742.716811][ T3702] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 742.725948][ T3702] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.774194][ T3702] hub 3-1:1.0: bad descriptor, ignoring hub [ 742.780165][ T3702] hub: probe of 3-1:1.0 failed with error -5 [ 742.786857][ T3702] cdc_wdm 3-1:1.0: skipping garbage [ 742.792104][ T3702] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 743.093200][ T3702] usb 3-1: USB disconnect, device number 61 15:22:11 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000980)={0x1c, &(0x7f0000000880)={0x0, 0x0, 0x1, '{'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001580)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0x21, 0x1}}) 15:22:11 executing program 1: r0 = add_key$keyring(&(0x7f0000000c80), &(0x7f0000000cc0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) add_key$fscrypt_v1(&(0x7f0000000b80), &(0x7f0000000bc0)={'fscrypt:', @desc1}, &(0x7f0000000c00)={0x0, "0cc115d93fc674883f8456658bb888f5c1bcfcb48dc5f1337581b423ba9e8afcd99a950f1c35b7d8bb41d89f5631aae393cfd75ba446e58759be7cbffe3f9301"}, 0x48, r0) 15:22:11 executing program 0: syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@subvolid}]}) 15:22:11 executing program 3: request_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0xfffffffffffffff8) 15:22:11 executing program 4: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5000000024000b1d000800800000000000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff000003000d00010066715f636f64656c"], 0x50}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r1, @ANYBLOB="00000000000000000c0000000b000100666c6f770006"], 0x44}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 15:22:11 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a00000019", @ANYRES64], 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000300)=ANY=[], 0x0) [ 743.982657][ T3699] usb 6-1: USB disconnect, device number 5 15:22:11 executing program 3: r0 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)) mknodat(r0, &(0x7f0000000080)='./file1\x00', 0xc000, 0x0) openat(r0, &(0x7f0000000000)='./file1\x00', 0x40, 0x0) 15:22:11 executing program 0: r0 = add_key$keyring(&(0x7f0000000c80), &(0x7f0000000cc0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r0, 0x0) 15:22:11 executing program 1: syz_mount_image$tmpfs(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) lsetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000100)=@random={'user.', '}!!:\x00'}, 0x0, 0x0, 0x0) [ 744.041042][ T9253] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 15:22:12 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x0) 15:22:12 executing program 3: r0 = socket$inet(0x2, 0xa, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, 0x0, 0x0) [ 744.091499][ T9253] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 15:22:12 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) ioctl$BLKBSZSET(r0, 0x4c06, 0x0) [ 744.272933][ T3702] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 744.462977][ T3699] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 744.532935][ T3702] usb 3-1: Using ep0 maxpacket: 8 [ 744.652997][ T3702] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 744.663601][ T3702] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 744.672577][ T3702] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 744.686183][ T3702] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 744.696279][ T3702] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.744792][ T3702] hub 3-1:1.0: bad descriptor, ignoring hub [ 744.750721][ T3702] hub: probe of 3-1:1.0 failed with error -5 [ 744.757213][ T3702] cdc_wdm 3-1:1.0: skipping garbage [ 744.762454][ T3702] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 744.823129][ T3699] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 744.832271][ T3699] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.844682][ T3699] usb 6-1: config 0 descriptor?? [ 744.953266][ T28] INFO: task kworker/0:6:3711 blocked for more than 143 seconds. [ 744.961041][ T28] Not tainted 5.19.0-next-20220808-syzkaller #0 [ 744.968336][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 744.978470][ T28] task:kworker/0:6 state:D stack:21872 pid:3711 ppid:2 flags:0x00004000 [ 744.988250][ T28] Workqueue: usb_hub_wq hub_event [ 744.993764][ T28] Call Trace: [ 744.997144][ T28] [ 745.000279][ T28] __schedule+0xadf/0x52b0 [ 745.005367][ T28] ? find_held_lock+0x2d/0x110 [ 745.010259][ T28] ? mark_held_locks+0x52/0xe0 [ 745.015246][ T28] ? io_schedule_timeout+0x140/0x140 [ 745.020571][ T28] ? lockdep_hardirqs_on+0x79/0x100 [ 745.027028][ T28] schedule+0xda/0x1b0 [ 745.031281][ T28] scsi_remove_host+0x348/0x440 [ 745.036576][ T28] ? scsi_host_set_state+0x220/0x220 [ 745.041971][ T28] ? _raw_spin_unlock_irq+0x2a/0x40 [ 745.047484][ T28] ? prepare_to_wait_exclusive+0x2b0/0x2b0 [ 745.053727][ T28] usb_stor_disconnect+0x115/0x260 [ 745.059088][ T28] usb_unbind_interface+0x1d8/0x8e0 [ 745.064781][ T3699] usb 3-1: USB disconnect, device number 62 [ 745.070794][ T28] ? usb_unbind_device+0x1a0/0x1a0 [ 745.077440][ T28] device_remove+0x11f/0x170 [ 745.082157][ T28] device_release_driver_internal+0x4a1/0x700 [ 745.092119][ T28] ? put_device+0x1b/0x30 [ 745.097113][ T28] bus_remove_device+0x2e3/0x590 [ 745.102186][ T28] device_del+0x4f3/0xc80 [ 745.106877][ T28] ? __device_link_del+0x380/0x380 [ 745.112071][ T28] ? kobject_put+0x1e4/0x4c0 [ 745.117606][ T28] usb_disable_device+0x356/0x7a0 [ 745.122756][ T28] usb_disconnect.cold+0x259/0x6ed [ 745.128208][ T28] hub_event+0x1f86/0x4610 [ 745.132715][ T28] ? hub_port_debounce+0x3b0/0x3b0 [ 745.138160][ T28] ? lock_release+0x780/0x780 [ 745.143098][ T28] ? lock_downgrade+0x6e0/0x6e0 [ 745.150111][ T28] ? lockdep_hardirqs_on+0x79/0x100 [ 745.155479][ T28] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 745.161519][ T28] process_one_work+0x991/0x1610 [ 745.166788][ T28] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 745.172357][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 745.178232][ T28] ? _raw_spin_lock_irq+0x41/0x50 [ 745.183573][ T28] worker_thread+0x665/0x1080 [ 745.188352][ T28] ? __kthread_parkme+0x15f/0x220 [ 745.193893][ T28] ? process_one_work+0x1610/0x1610 [ 745.199264][ T28] kthread+0x2e4/0x3a0 [ 745.203599][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 745.209292][ T28] ret_from_fork+0x1f/0x30 [ 745.213987][ T28] [ 745.217274][ T28] [ 745.217274][ T28] Showing all threads with locks held in the system: [ 745.226571][ T28] task:rcu_tasks_kthre state:I stack:29096 pid:12 ppid:2 flags:0x00004000 [ 745.236076][ T28] Call Trace: [ 745.239431][ T28] [ 745.242424][ T28] __schedule+0xadf/0x52b0 [ 745.250046][ T28] ? find_held_lock+0x2d/0x110 [ 745.256220][ T28] ? rcu_tasks_one_gp+0x6f5/0xc70 [ 745.261370][ T28] ? io_schedule_timeout+0x140/0x140 [ 745.267328][ T28] ? mark_held_locks+0x9f/0xe0 [ 745.272291][ T28] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 745.279062][ T28] schedule+0xda/0x1b0 [ 745.283560][ T28] rcu_tasks_one_gp+0x3e5/0xc70 [ 745.288715][ T28] rcu_tasks_kthread+0x73/0xa0 [ 745.294068][ T28] ? synchronize_rcu_tasks_trace+0x60/0x60 [ 745.299999][ T28] kthread+0x2e4/0x3a0 [ 745.304380][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 745.310148][ T28] ret_from_fork+0x1f/0x30 [ 745.315361][ T28] [ 745.318488][ T28] 1 lock held by rcu_tasks_kthre/12: [ 745.325124][ T28] #0: ffffffff8bf889b0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc70 [ 745.335981][ T28] task:rcu_tasks_trace state:I stack:29120 pid:13 ppid:2 flags:0x00004000 [ 745.345718][ T28] Call Trace: [ 745.349093][ T28] [ 745.352071][ T28] __schedule+0xadf/0x52b0 [ 745.357571][ T28] ? find_held_lock+0x2d/0x110 [ 745.363351][ T28] ? rcu_tasks_one_gp+0x6f5/0xc70 [ 745.368537][ T28] ? io_schedule_timeout+0x140/0x140 [ 745.374184][ T28] ? mark_held_locks+0x9f/0xe0 [ 745.380908][ T28] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 745.386972][ T28] schedule+0xda/0x1b0 [ 745.391089][ T28] rcu_tasks_one_gp+0x3e5/0xc70 [ 745.397449][ T28] rcu_tasks_kthread+0x73/0xa0 [ 745.402259][ T28] ? synchronize_rcu_tasks_trace+0x60/0x60 [ 745.408133][ T28] kthread+0x2e4/0x3a0 [ 745.412223][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 745.413069][ T3699] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 745.418007][ T28] ret_from_fork+0x1f/0x30 [ 745.429916][ T28] [ 745.434317][ T28] 1 lock held by rcu_tasks_trace/13: [ 745.440341][ T28] #0: ffffffff8bf886b0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc70 [ 745.453227][ T28] task:getty state:S stack:23392 pid:3290 ppid:1 flags:0x00000000 [ 745.462464][ T28] Call Trace: [ 745.465791][ T28] [ 745.468945][ T28] __schedule+0xadf/0x52b0 [ 745.473446][ T28] ? io_schedule_timeout+0x140/0x140 [ 745.478953][ T28] schedule+0xda/0x1b0 [ 745.484482][ T28] schedule_timeout+0x1db/0x2a0 [ 745.489390][ T28] ? usleep_range_state+0x1b0/0x1b0 [ 745.494666][ T28] ? __up_read+0x192/0x720 [ 745.499117][ T28] ? down_read+0x198/0x450 [ 745.504903][ T28] ? up_write+0x470/0x470 [ 745.509322][ T28] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 745.515934][ T28] wait_woken+0x18b/0x1f0 [ 745.520307][ T28] n_tty_read+0x1051/0x13e0 [ 745.525042][ T28] ? n_tty_open+0x170/0x170 [ 745.529601][ T28] ? __init_waitqueue_head+0x150/0x150 [ 745.535154][ T28] tty_read+0x33a/0x5d0 [ 745.539360][ T28] ? do_SAK+0x70/0x70 [ 745.544121][ T28] ? fsnotify_perm.part.0+0x221/0x610 [ 745.549608][ T28] ? apparmor_file_permission+0x264/0x4e0 [ 745.555479][ T28] ? security_file_permission+0xab/0xd0 [ 745.561097][ T28] vfs_read+0x67d/0x930 [ 745.565307][ T28] ? kernel_read+0x1c0/0x1c0 [ 745.569919][ T28] ? __ct_user_exit+0xff/0x150 [ 745.574814][ T28] ? lock_downgrade+0x6e0/0x6e0 [ 745.579704][ T28] ? lock_downgrade+0x6e0/0x6e0 [ 745.585587][ T28] ? __fget_light+0x20a/0x270 [ 745.590315][ T28] ksys_read+0x127/0x250 [ 745.596021][ T28] ? vfs_write+0xdd0/0xdd0 [ 745.600573][ T28] ? syscall_enter_from_user_mode+0x22/0xb0 [ 745.607577][ T28] do_syscall_64+0x35/0xb0 [ 745.612162][ T28] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 745.618430][ T28] RIP: 0033:0x7fec1e6d58fe [ 745.623264][ T28] RSP: 002b:00007ffff88b3798 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 745.631783][ T28] RAX: ffffffffffffffda RBX: 000055c40bad3910 RCX: 00007fec1e6d58fe [ 745.640112][ T28] RDX: 0000000000000001 RSI: 00007ffff88b37b0 RDI: 0000000000000000 [ 745.648434][ T28] RBP: 000055c40bad3970 R08: 0000000000000007 R09: 000055c40bad4cd0 [ 745.656804][ T28] R10: 0000000000000063 R11: 0000000000000246 R12: 000055c40bad39ac [ 745.664882][ T28] R13: 00007ffff88b37b0 R14: 0000000000000000 R15: 000055c40bad39ac [ 745.673218][ T3699] usb 3-1: Using ep0 maxpacket: 8 [ 745.676775][ T28] [ 745.681314][ T28] 2 locks held by getty/3290: [ 745.686808][ T28] #0: ffff88807ee58098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x22/0x80 [ 745.696726][ T28] #1: ffffc90002d232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xef0/0x13e0 [ 745.707087][ T28] task:udevd state:S stack:27096 pid:3666 ppid:2972 flags:0x00000000 [ 745.716477][ T28] Call Trace: [ 745.720066][ T28] [ 745.723131][ T28] __schedule+0xadf/0x52b0 [ 745.727753][ T28] ? io_schedule_timeout+0x140/0x140 [ 745.734507][ T28] schedule+0xda/0x1b0 [ 745.738626][ T28] schedule_preempt_disabled+0xf/0x20 [ 745.744156][ T28] __mutex_lock+0xa44/0x1350 [ 745.748966][ T28] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 745.755007][ T28] ? read_descriptors+0x3c/0x2c0 [ 745.760124][ T28] ? mutex_lock_io_nested+0x1190/0x1190 [ 745.766227][ T28] ? lock_release+0x780/0x780 [ 745.770920][ T28] read_descriptors+0x3c/0x2c0 [ 745.775784][ T28] sysfs_kf_bin_read+0x196/0x270 [ 745.780755][ T28] ? urbnum_show+0x70/0x70 [ 745.785232][ T28] ? kernfs_create_link+0x230/0x230 [ 745.790981][ T28] kernfs_fop_read_iter+0x3dc/0x710 [ 745.793439][ T3699] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 745.796597][ T28] vfs_read+0x67d/0x930 [ 745.810522][ T28] ? kernel_read+0x1c0/0x1c0 [ 745.814716][ T3699] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 745.815229][ T28] ? __ct_user_exit+0xff/0x150 [ 745.828819][ T28] ? lock_downgrade+0x6e0/0x6e0 [ 745.829866][ T3699] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 745.833886][ T28] ? lock_downgrade+0x6e0/0x6e0 [ 745.851972][ T28] ? __fget_light+0x20a/0x270 [ 745.858424][ T28] ksys_read+0x127/0x250 [ 745.862807][ T3699] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 745.863431][ T28] ? vfs_write+0xdd0/0xdd0 [ 745.872762][ T28] ? syscall_enter_from_user_mode+0x22/0xb0 [ 745.883869][ T28] do_syscall_64+0x35/0xb0 [ 745.884140][ T3699] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.888379][ T28] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 745.903095][ T28] RIP: 0033:0x7ff9045768fe [ 745.907624][ T28] RSP: 002b:00007ffca1812d28 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 745.916461][ T28] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff9045768fe [ 745.925366][ T28] RDX: 0000000000010011 RSI: 00007ffca1812d57 RDI: 0000000000000009 [ 745.933647][ T28] RBP: 00007ffca1823428 R08: 00007ff904646a00 R09: 0000565465ed54e0 [ 745.941689][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 745.950092][ T28] R13: 0000565465ee68d0 R14: 00007ffca1812d57 R15: 00000000000000cc [ 745.954022][ T3699] hub 3-1:1.0: bad descriptor, ignoring hub [ 745.958395][ T28] [ 745.968956][ T28] 3 locks held by udevd/3666: [ 745.972430][ T3699] hub: probe of 3-1:1.0 failed with error -5 [ 745.973967][ T28] #0: ffff88801f1eb088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_read_iter+0x189/0x710 [ 745.982772][ T3699] cdc_wdm 3-1:1.0: skipping garbage [ 745.989764][ T28] #1: ffff88801dffd2c0 (kn->active#82){++++}-{0:0}, at: kernfs_fop_read_iter+0x1ac/0x710 [ 746.006015][ T3699] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 746.007954][ T28] #2: ffff88807a8f7190 (&dev->mutex){....}-{3:3}, at: read_descriptors+0x3c/0x2c0 [ 746.029136][ T28] task:kworker/0:5 state:D stack:22992 pid:3699 ppid:2 flags:0x00004000 [ 746.038584][ T28] Workqueue: usb_hub_wq hub_event [ 746.044034][ T28] Call Trace: [ 746.047421][ T28] [ 746.050448][ T28] __schedule+0xadf/0x52b0 [ 746.055275][ T28] ? lock_chain_count+0x20/0x20 [ 746.060228][ T28] ? mark_lock.part.0+0xee/0x1910 [ 746.065609][ T28] ? lock_chain_count+0x20/0x20 [ 746.070564][ T28] ? mark_lock.part.0+0xee/0x1910 [ 746.077551][ T28] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 746.084019][ T28] ? lock_chain_count+0x20/0x20 [ 746.088987][ T28] ? mark_lock.part.0+0xee/0x1910 [ 746.094341][ T28] ? mark_lock.part.0+0xee/0x1910 [ 746.099830][ T28] mark_lock.part.0+0xee/0x1910 [ 746.105726][ T28] ? lock_chain_count+0x20/0x20 [ 746.110686][ T28] ? lock_chain_count+0x20/0x20 [ 746.115946][ T28] ? lock_chain_count+0x20/0x20 [ 746.120930][ T28] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 746.127247][ T28] ? mark_held_locks+0x9f/0xe0 [ 746.132148][ T28] ? mark_lock.part.0+0xee/0x1910 [ 746.138713][ T28] ? ret_from_fork+0x1f/0x30 [ 746.143688][ T28] ? mark_lock.part.0+0xee/0x1910 [ 746.148896][ T28] ? mark_lock.part.0+0xee/0x1910 [ 746.154444][ T28] ? save_stack+0xbb/0x1e0 [ 746.165327][ T28] ? msleep+0x63/0xf0 [ 746.169455][ T28] ? lockdep_hardirqs_on+0x79/0x100 [ 746.175145][ T28] ? msleep+0x63/0xf0 [ 746.179269][ T28] ? schedule+0xda/0x1b0 [ 746.185418][ T28] ? schedule_timeout+0x14a/0x2a0 [ 746.190575][ T28] ? usleep_range_state+0x1b0/0x1b0 [ 746.196155][ T28] ? destroy_timer_on_stack+0x20/0x20 [ 746.202026][ T28] ? usb_start_wait_urb+0x4b0/0x4b0 [ 746.207589][ T28] ? hub_ext_port_status+0x19d/0x450 [ 746.213775][ T28] ? msleep+0xb2/0xf0 [ 746.217789][ T28] ? hub_activate+0x1416/0x1ce0 [ 746.222669][ T28] ? hub_port_logical_disconnect+0xd0/0xd0 [ 746.228717][ T28] ? usbfs_notify_resume+0x21/0xf0 [ 746.234483][ T28] ? hub_resume+0xa6/0x3e0 [ 746.238938][ T28] ? wait_for_completion_io_timeout+0x20/0x20 [ 746.245671][ T28] ? hub_reset_resume+0x80/0x80 [ 746.250569][ T28] ? usb_hcd_get_frame_number+0xf0/0xf0 [ 746.256483][ T28] ? usb_resume_interface.part.0.isra.0+0x271/0x360 [ 746.263349][ T28] ? usb_resume_both+0x2a7/0x8d0 [ 746.268325][ T28] ? usb_resume_interface.part.0.isra.0+0x360/0x360 [ 746.273233][ T3699] usb 3-1: USB disconnect, device number 63 [ 746.275257][ T28] ? hub_event+0x1f86/0x4610 [ 746.292344][ T28] ? lock_downgrade+0x6e0/0x6e0 [ 746.297492][ T28] ? __mod_timer+0xaa/0xe30 [ 746.302540][ T28] ? psi_group_change+0x7bf/0xc70 [ 746.309217][ T28] ? find_held_lock+0x2d/0x110 [ 746.314734][ T28] ? __schedule+0xa57/0x52b0 [ 746.319365][ T28] ? lock_downgrade+0x6e0/0x6e0 [ 746.325195][ T28] ? __schedule+0xadf/0x52b0 [ 746.329847][ T28] ? worker_thread+0xc0/0x1080 [ 746.334861][ T28] ? io_schedule_timeout+0x140/0x140 [ 746.340186][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 746.345415][ T28] ? schedule+0xda/0x1b0 [ 746.349713][ T28] ? worker_thread+0x15c/0x1080 [ 746.354873][ T28] ? __kthread_parkme+0x15f/0x220 [ 746.359952][ T28] ? process_one_work+0x1610/0x1610 [ 746.365489][ T28] ? kthread+0x2e4/0x3a0 [ 746.369769][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 746.375681][ T28] ? ret_from_fork+0x1f/0x30 [ 746.380307][ T28] [ 746.383676][ T28] no locks held by kworker/0:5/3699. [ 746.388983][ T28] task:kworker/0:6 state:D stack:21872 pid:3711 ppid:2 flags:0x00004000 [ 746.398382][ T28] Workqueue: usb_hub_wq hub_event [ 746.404470][ T28] Call Trace: [ 746.407940][ T28] [ 746.411014][ T28] __schedule+0xadf/0x52b0 [ 746.415687][ T28] ? find_held_lock+0x2d/0x110 [ 746.420615][ T28] ? mark_held_locks+0x52/0xe0 [ 746.426300][ T28] ? io_schedule_timeout+0x140/0x140 [ 746.431762][ T28] ? lockdep_hardirqs_on+0x79/0x100 [ 746.437189][ T28] schedule+0xda/0x1b0 [ 746.441424][ T28] scsi_remove_host+0x348/0x440 [ 746.446527][ T28] ? scsi_host_set_state+0x220/0x220 [ 746.452075][ T28] ? _raw_spin_unlock_irq+0x2a/0x40 [ 746.457495][ T28] ? prepare_to_wait_exclusive+0x2b0/0x2b0 [ 746.464184][ T28] usb_stor_disconnect+0x115/0x260 [ 746.469428][ T28] usb_unbind_interface+0x1d8/0x8e0 [ 746.475559][ T28] ? usb_unbind_device+0x1a0/0x1a0 [ 746.480857][ T28] device_remove+0x11f/0x170 [ 746.485818][ T28] device_release_driver_internal+0x4a1/0x700 [ 746.491998][ T28] ? put_device+0x1b/0x30 [ 746.496686][ T28] bus_remove_device+0x2e3/0x590 [ 746.501735][ T28] device_del+0x4f3/0xc80 [ 746.507200][ T28] ? __device_link_del+0x380/0x380 [ 746.512421][ T28] ? kobject_put+0x1e4/0x4c0 [ 746.517325][ T28] usb_disable_device+0x356/0x7a0 [ 746.522499][ T28] usb_disconnect.cold+0x259/0x6ed [ 746.527902][ T28] hub_event+0x1f86/0x4610 [ 746.532454][ T28] ? hub_port_debounce+0x3b0/0x3b0 [ 746.538159][ T28] ? lock_release+0x780/0x780 [ 746.543102][ T28] ? lock_downgrade+0x6e0/0x6e0 [ 746.548075][ T28] ? lockdep_hardirqs_on+0x79/0x100 [ 746.554366][ T28] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 746.560449][ T28] process_one_work+0x991/0x1610 [ 746.565866][ T28] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 746.571398][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 746.578056][ T28] ? _raw_spin_lock_irq+0x41/0x50 [ 746.583467][ T28] worker_thread+0x665/0x1080 [ 746.588200][ T28] ? __kthread_parkme+0x15f/0x220 [ 746.593339][ T28] ? process_one_work+0x1610/0x1610 [ 746.598768][ T28] kthread+0x2e4/0x3a0 [ 746.602947][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 746.609320][ T28] ret_from_fork+0x1f/0x30 [ 746.613991][ T28] [ 746.617023][ T28] 5 locks held by kworker/0:6/3711: [ 746.622215][ T28] #0: ffff888145aa0138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x87a/0x1610 [ 746.633710][ T28] #1: ffffc900046f7da8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8ae/0x1610 [ 746.645207][ T28] #2: ffff8880215e0190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1bc/0x4610 [ 746.655741][ T28] #3: ffff88807a8f7190 (&dev->mutex){....}-{3:3}, at: usb_disconnect.cold+0x43/0x6ed [ 746.665766][ T28] #4: ffff88807a8f5118 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa0/0x700 [ 746.676665][ T28] task:syz-executor.2 state:R running task stack:28056 pid:9251 ppid:3644 flags:0x00004000 [ 746.697074][ T28] Call Trace: [ 746.700472][ T28] [ 746.706097][ T28] __schedule+0xadf/0x52b0 [ 746.716444][ T28] ? lock_downgrade+0x6e0/0x6e0 [ 746.721335][ T28] ? io_schedule_timeout+0x140/0x140 [ 746.727004][ T28] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 746.733186][ T28] do_task_dead+0xd1/0x100 [ 746.737641][ T28] do_exit+0x1a22/0x2b60 [ 746.741913][ T28] ? get_signal+0x93b/0x2610 [ 746.746850][ T28] ? mm_update_next_owner+0x7a0/0x7a0 [ 746.752230][ T28] do_group_exit+0xd0/0x2a0 [ 746.757134][ T28] get_signal+0x238c/0x2610 [ 746.761674][ T28] ? exit_signals+0x8b0/0x8b0 [ 746.767538][ T28] arch_do_signal_or_restart+0x82/0x2300 [ 746.773593][ T28] ? do_futex+0x12e/0x300 [ 746.777972][ T28] ? __ia32_sys_get_robust_list+0x3b0/0x3b0 [ 746.784444][ T28] ? get_sigframe_size+0x10/0x10 [ 746.789433][ T28] ? __x64_sys_futex+0x1b0/0x4a0 [ 746.794821][ T28] ? do_futex+0x300/0x300 [ 746.799194][ T28] ? exit_to_user_mode_prepare+0x137/0x250 [ 746.805650][ T28] exit_to_user_mode_prepare+0x15f/0x250 [ 746.811412][ T28] syscall_exit_to_user_mode+0x19/0x50 [ 746.818292][ T28] do_syscall_64+0x42/0xb0 [ 746.822758][ T28] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 746.828962][ T28] RIP: 0033:0x7f5807a89279 [ 746.833640][ T28] RSP: 002b:00007f5808c29218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 746.842073][ T28] RAX: fffffffffffffe00 RBX: 00007f5807b9bf88 RCX: 00007f5807a89279 [ 746.850373][ T28] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5807b9bf88 [ 746.858630][ T28] RBP: 00007f5807b9bf80 R08: 0000000000000000 R09: 0000000000000000 [ 746.866874][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5807b9bf8c [ 746.874796][ T1239] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.874886][ T1239] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.888647][ T28] R13: 00007ffd9061230f R14: 00007f5808c29300 R15: 0000000000022000 [ 746.899297][ T28] [ 746.902389][ T28] no locks held by syz-executor.2/9251. [ 746.911568][ T28] [ 746.918088][ T28] ============================================= [ 746.918088][ T28] [ 746.926699][ T28] NMI backtrace for cpu 1 [ 746.931039][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 5.19.0-next-20220808-syzkaller #0 [ 746.940064][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 746.950126][ T28] Call Trace: [ 746.953406][ T28] [ 746.956343][ T28] dump_stack_lvl+0xcd/0x134 [ 746.961020][ T28] nmi_cpu_backtrace.cold+0x46/0x14f [ 746.966332][ T28] ? lockdep_hardirqs_off+0x90/0xd0 [ 746.971562][ T28] ? lapic_can_unplug_cpu+0x80/0x80 [ 746.976783][ T28] nmi_trigger_cpumask_backtrace+0x206/0x250 [ 746.982783][ T28] watchdog+0xcf7/0xfd0 [ 746.986968][ T28] ? proc_dohung_task_timeout_secs+0x80/0x80 [ 746.992969][ T28] kthread+0x2e4/0x3a0 [ 746.997045][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 747.002695][ T28] ret_from_fork+0x1f/0x30 [ 747.007137][ T28] [ 747.010552][ T28] Sending NMI from CPU 1 to CPUs 0: [ 747.015814][ C0] NMI backtrace for cpu 0 [ 747.015823][ C0] CPU: 0 PID: 14 Comm: kworker/0:1 Not tainted 5.19.0-next-20220808-syzkaller #0 [ 747.015844][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 747.015855][ C0] Workqueue: events nsim_dev_trap_report_work [ 747.015943][ C0] RIP: 0010:memset_erms+0x9/0x10 [ 747.015974][ C0] Code: c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 f3 48 ab 89 d1 f3 aa 4c 89 c8 c3 90 49 89 f9 40 88 f0 48 89 d1 aa 4c 89 c8 c3 90 49 89 fa 40 0f b6 ce 48 b8 01 01 01 01 01 01 [ 747.015993][ C0] RSP: 0018:ffffc90000137ad0 EFLAGS: 00010206 [ 747.016007][ C0] RAX: dffffc00000000fb RBX: 0000000000000000 RCX: 0000000000000140 [ 747.016019][ C0] RDX: 0000000000000200 RSI: 00000000000000fb RDI: ffffed10068e78c0 [ 747.016031][ C0] RBP: ffff88803473c000 R08: 0000000000000007 R09: ffffed10068e7800 [ 747.016044][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888011842140 [ 747.016056][ C0] R13: 0000000000000001 R14: ffffffff81c7bf12 R15: ffffea0000d1ce00 [ 747.016068][ C0] FS: 0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 747.016087][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 747.016099][ C0] CR2: 0000001b2f028000 CR3: 000000000bc8e000 CR4: 00000000003506f0 [ 747.016111][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 747.016122][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 747.016134][ C0] Call Trace: [ 747.016138][ C0] [ 747.016144][ C0] ____kasan_slab_free+0x119/0x1c0 [ 747.016171][ C0] slab_free_freelist_hook+0x8b/0x1c0 [ 747.016193][ C0] ? skb_free_head+0xac/0x110 [ 747.016220][ C0] kfree+0xe2/0x580 [ 747.016242][ C0] skb_free_head+0xac/0x110 [ 747.016262][ C0] skb_release_data+0x5f1/0x870 [ 747.016290][ C0] consume_skb+0xc2/0x160 [ 747.016314][ C0] nsim_dev_trap_report_work+0x871/0xc50 [ 747.016341][ C0] process_one_work+0x991/0x1610 [ 747.016372][ C0] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 747.016406][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 747.016429][ C0] ? _raw_spin_lock_irq+0x41/0x50 [ 747.016465][ C0] worker_thread+0x665/0x1080 [ 747.016494][ C0] ? __kthread_parkme+0x15f/0x220 [ 747.016516][ C0] ? process_one_work+0x1610/0x1610 [ 747.016544][ C0] kthread+0x2e4/0x3a0 [ 747.016564][ C0] ? kthread_complete_and_exit+0x40/0x40 [ 747.016589][ C0] ret_from_fork+0x1f/0x30 [ 747.016620][ C0] [ 747.020168][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 747.262950][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 5.19.0-next-20220808-syzkaller #0 [ 747.271985][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 747.282059][ T28] Call Trace: [ 747.285332][ T28] [ 747.288258][ T28] dump_stack_lvl+0xcd/0x134 [ 747.292884][ T28] panic+0x2c8/0x627 [ 747.296802][ T28] ? panic_print_sys_info.part.0+0x10b/0x10b [ 747.302783][ T28] ? lapic_can_unplug_cpu+0x80/0x80 [ 747.307978][ T28] ? preempt_schedule_thunk+0x16/0x18 [ 747.313362][ T28] ? watchdog.cold+0x135/0x426 [ 747.318180][ T28] watchdog.cold+0x146/0x426 [ 747.322799][ T28] ? proc_dohung_task_timeout_secs+0x80/0x80 [ 747.328809][ T28] kthread+0x2e4/0x3a0 [ 747.332884][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 747.338516][ T28] ret_from_fork+0x1f/0x30 [ 747.342934][ T28] [ 747.346175][ T28] Kernel Offset: disabled [ 747.350506][ T28] Rebooting in 86400 seconds..