f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x7d, &(0x7f0000000300)={r4, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000040)=0x100) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000080)={r4, 0x8000, 0x2, [0x1000, 0x3]}, 0xc) 16:04:13 executing program 0: syz_usb_connect(0x0, 0x33, &(0x7f0000002c40)={{0x12, 0x1, 0x0, 0x1c, 0x0, 0xf5, 0x40, 0x7c0, 0x1501, 0x6514, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x21, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x87, 0x0, 0x1, 0x3, 0x1, 0x12, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x6, 0x5, "81bb6e86"}]}}]}}]}}]}}, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000100)="20b3ce0c3b0cf57286d3df0d17d2d07793e47b9e0211c06bc18fd4e3c90e70328de766e5b4d61feca6e6f030cc3619764985fb35b4d720b2d4eaf89985ac0475e2093edc7455cc5924314944e33cac6d34edfe76cbcb67aacae9", 0x5a}, {&(0x7f0000000180)="f175c9d981dc49929dc2c12a7efebedd640c7e72bed4b0f8a933a6861ac0d7f75f86457afd336013fa8c3086336108e2f2824426787576b73ac3db64f3ad5809ec56b8df12426a65e283a16e6c50848a84948df7", 0x54}], 0x2) 16:04:13 executing program 5: r0 = socket$inet6(0xa, 0x800040000000002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x800000018, &(0x7f0000001300)=0x7ff, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fc}]}, 0x10) getsockopt$inet6_dccp_int(r0, 0x21, 0xa, &(0x7f0000000300), &(0x7f0000000800)=0x4) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r2) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x2, 0x0, @loopback, 0x2}, 0x1c) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001b40)="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", 0x7d0}], 0x1}, 0x0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r6, r5) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r7, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1c000000000000000100000002000000f0f14f118de222cff1c79e71e7d7293982533571", @ANYRES32=r8, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00'], 0x38}, 0x0) sendmsg$alg(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)="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", 0xff}, {&(0x7f0000000280)="a806a8804e080783fab1054ad77065bc643038c71e6c0a4ea47385555b464d364d66e8208825fab41bed296b3063b9939a3c148385d7352f39cffe326171f7fcaccac26096b5992a42313d20b0f249", 0x4f}, {&(0x7f00000000c0)="f3198465a8095eb529b461bac4ea", 0xe}, {&(0x7f0000000300)}, {&(0x7f0000000340)="9b822202efe6433cf09a88e072f943725941c58d7b8ccdf8accef96357ecffd41dfbf250cd310609f028c257acfc2ed8eaea4e2eb776c0069e6ad2de91a25b8be18fe44bdb9af9ec75b2", 0x4a}, {&(0x7f00000003c0)="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", 0xfe}], 0x6, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0xe8, 0x117, 0x2, 0xd4, "b12802bc434b4aed732a7a878c35a1d7d4cf188cbd219b45837430cfa0b3d2d77dd031b769152c95a478abfbb207354c67473f9a7b645e8c2b432392706f62122cdcafcd386a93df826d0f642439c9a0f744df53e183eb4ab3d6733b0b0f27c3ea445f73391d79cca67eb48724ae343bac658714e03ee24bc0c58300a1e576fd327d0f0ed2c160574214c1a7c33f0e48a0371c2c84c6b1bb2a956167bb4d36935ca7966092d45667e78bc7faab79d0fe858414de5787049b11e8919d4c51dba8642cd5c67f1f4588d4e65f22a04c84e0c2ba1159"}, @iv={0xa0, 0x117, 0x2, 0x85, "890bb212f82fd114ee0b36f7f1a7a3d8cdcb7e04c5818f99430d421bcda9409b2732c37c4804e6ba853c793d1fd0143f3df56b49cce6cccfebc44cb1e22e3c8fbc46b4f0070218039a84a3c87ce3a92070627e67809dd2badcc7a6928864664305808fc7dab229c83bebd21a1e2c1dbfe96eba276f6d0a694f88dfb4eacbac325c7e81ead2"}, @assoc={0x18, 0x117, 0x4, 0x1}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x2}, @assoc={0x18, 0x117, 0x4, 0x54497df8}], 0x200, 0x10}, 0xdd65e14ef33433bd) [ 600.582525][T11950] rtl8192cu: Chip version 0x10 16:04:13 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000a2c000/0x3000)=nil, 0x3000, 0x4, 0x810, r1, 0x0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmmsg(r6, &(0x7f0000000140)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000280)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000001ae, 0x62, 0x0) fgetxattr(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="73797374656d2e216d643573756d73797374656d75736572656d316370757365742c2770726f636264657647504c297dccd6ba832b9429216367726f7570656d31b62f00"], &(0x7f0000000240)=""/181, 0xb5) r7 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r8, r7) r9 = dup2(r8, r4) socket$inet6(0xa, 0x800, 0x0) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x80, @ipv4={[], [], @multicast1}, 0x80000001}, 0x1c) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r9, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000100007118040200", @ANYRES32=r10, @ANYRES32=0x0, @ANYRES32, @ANYRESDEC=0x0, @ANYRES32=r3, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESOCT=r5]], 0x3c}, 0x0) setsockopt$inet_tcp_TLS_TX(r9, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "400fa9879b867866", "d2b1ca1ebc2c706bbeb3e9d770c490b4", "5f8f96bd", "8cb00b454f6bbf29"}, 0x28) setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000000), 0x4) [ 600.682785][ T17] cp210x 2-1:0.111: failed to get vendor val 0x3711 size 2: -71 [ 600.690559][ T17] cp210x 2-1:0.111: GPIO initialisation failed: -71 [ 600.723013][ T17] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 600.730341][ T17] cp210x: probe of ttyUSB0 failed with error -71 [ 600.737315][T11877] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 600.768079][ T17] usb 2-1: USB disconnect, device number 27 [ 600.775717][ T17] cp210x 2-1:0.111: device disconnected [ 600.792469][ T4071] gs_usb 5-1:0.0: Configuring for 198 interfaces [ 600.799022][ T4071] gs_usb 5-1:0.0: Driver cannot handle more that 2 CAN interfaces [ 600.807068][ T4071] gs_usb: probe of 5-1:0.0 failed with error -22 16:04:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xb) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x38}, 0x0) getpeername$netlink(r4, &(0x7f00000000c0), &(0x7f0000000100)=0xc) [ 600.822258][T11840] usb 1-1: new high-speed USB device number 62 using dummy_hcd 16:04:13 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000200)={0xa927, 0x29, 0xffffffffffffffff, 0xffffffffffffff9c}) r2 = dup(r1) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0xe, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'nr0\x00', r9}) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup2(r13, r12) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r14, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r15}}}, @rights={{0x14, 0x1, 0x1, [r11]}}], 0x38}, 0x0) r16 = socket$nl_route(0x10, 0x3, 0x0) r17 = socket$nl_route(0x10, 0x3, 0x0) r18 = socket$netlink(0x10, 0x3, 0x0) r19 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r19, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r19, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r18, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r20}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x80}}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r17, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000002400070500"/20, @ANYRES32=r20, @ANYBLOB="b1000000ffffffff00f8006561645f64726f700008000200000000000000779a3c00000000000000"], 0x40}}, 0x0) sendmsg$nl_route_sched(r16, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r20, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0xe, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) setsockopt$inet_pktinfo(r11, 0x0, 0x8, &(0x7f0000000140)={r20, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, 0xc) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0x7, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_getaddr={0x18, 0x16, 0x400, 0x70bd29, 0x25dfdbfe, {0x2, 0x1, 0x40, 0x0, r10}}, 0x18}, 0x1, 0x0, 0x0, 0x44185}, 0x2000) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x30053, r2, 0x0) [ 600.964996][T20442] netlink: 'syz-executor.5': attribute type 14 has an invalid length. [ 600.976990][T20442] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 600.983927][T11877] usb 4-1: Using ep0 maxpacket: 8 [ 600.991765][T20442] netlink: 'syz-executor.5': attribute type 14 has an invalid length. 16:04:14 executing program 5: unshare(0x2000200) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/mnt\x00') setns(r0, 0x0) clone(0xf9224100, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x38}, 0x0) write$binfmt_elf64(r1, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x5, 0x8, 0x4, 0x1f, 0x2, 0x3e, 0x7ff, 0x39c, 0x40, 0x188, 0x2, 0x6, 0x38, 0x1, 0x7fff, 0xa1, 0x4}, [{0x474e551, 0x6, 0x1f, 0x3f, 0x7fffffff, 0x0, 0x1000, 0x5}, {0x323a72a8, 0x7, 0x40, 0x100000000, 0x8000, 0x240, 0x1d83, 0x6}], "b2e24a8668fca673b2e542f34e5456b65e5ad46c96008607acc24a702a9d264113a62cd717322aead997dadf9eadc5a01e418ab4fcd755a46758f07572c489a04603a2307ed84f572d086b277c524287e19bcfd7430bc7ee1ade528a1c85fd907010af77d171b52790bc55f7aa0221684ce08322b9a1a7ddfb10c62baf138db9e18399aec8573c6e463c06e60fb051a8959a77bcd82fcc46030a3818c9777596db590eea64699724b318ee43407aa69029856ec9828d3a4f3fe6aaeebd1b46b546ab89cf44", [[], [], [], [], [], []]}, 0x775) [ 601.007671][T20442] netlink: 'syz-executor.5': attribute type 14 has an invalid length. [ 601.016235][T20443] netlink: 'syz-executor.5': attribute type 14 has an invalid length. [ 601.027798][ T17] usb 5-1: USB disconnect, device number 40 [ 601.041095][T20442] netlink: 'syz-executor.5': attribute type 14 has an invalid length. [ 601.049808][T20443] netlink: 'syz-executor.5': attribute type 14 has an invalid length. [ 601.102441][T11877] usb 4-1: config 0 has an invalid interface number: 217 but max is 0 [ 601.110841][T11877] usb 4-1: config 0 has no interface number 0 [ 601.117395][T11877] usb 4-1: New USB device found, idVendor=13d3, idProduct=3275, bcdDevice=c9.7e [ 601.126808][T11877] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.140039][T11877] usb 4-1: config 0 descriptor?? [ 601.142057][T20447] IPVS: ftp: loaded support on port[0] = 21 [ 601.232603][T11840] usb 1-1: config 0 has an invalid interface number: 135 but max is 0 [ 601.240993][T11840] usb 1-1: config 0 has no interface number 0 [ 601.242286][T11950] rtl_usb: rx_max_size 15360, rx_urb_num 8, in_ep 1 [ 601.247260][T11840] usb 1-1: config 0 interface 135 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 601.264564][T11840] usb 1-1: config 0 interface 135 altsetting 0 has an invalid endpoint descriptor of length 6, skipping [ 601.275870][T11840] usb 1-1: config 0 interface 135 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 601.289053][T11840] usb 1-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=65.14 [ 601.289065][T11950] rtl8192cu: Loading firmware rtlwifi/rtl8192cufw_TMSC.bin [ 601.305481][T11840] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.355664][T11840] usb 1-1: config 0 descriptor?? [ 601.373911][ T5] usb 3-1: Direct firmware load for rtlwifi/rtl8192cufw_TMSC.bin failed with error -2 [ 601.384186][ T5] usb 3-1: Direct firmware load for rtlwifi/rtl8192cufw.bin failed with error -2 [ 601.393677][ T5] rtlwifi: Loading alternative firmware rtlwifi/rtl8192cufw.bin [ 601.401371][ T5] rtlwifi: Selected firmware is not available [ 601.407056][T11840] iowarrior 1-1:0.135: no interrupt-in endpoint found [ 601.416749][T11840] usbhid 1-1:0.135: couldn't find an input interrupt endpoint [ 601.442564][T11877] dvb-usb: found a 'AZUREWAVE DVB-S/S2 USB2.0 (AZ6027)' in cold state, will try to load a firmware [ 601.456224][T11877] usb 4-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 601.465387][T11877] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 601.480635][T11877] dvb_usb_az6027: probe of 4-1:0.217 failed with error -2 [ 601.491571][T11877] usb 4-1: USB disconnect, device number 30 [ 601.504849][ T17] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 601.513503][T11840] usb 3-1: USB disconnect, device number 15 [ 601.621026][T11950] usb 1-1: USB disconnect, device number 62 [ 601.760093][ T17] usb 2-1: Using ep0 maxpacket: 16 [ 601.852227][ T5] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 601.894395][ T17] usb 2-1: config 0 has an invalid interface number: 111 but max is 0 [ 601.902977][ T17] usb 2-1: config 0 has no interface number 0 [ 601.985608][ T17] usb 2-1: New USB device found, idVendor=10c4, idProduct=807a, bcdDevice= b.30 [ 601.994779][ T17] usb 2-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 602.002904][ T17] usb 2-1: Product: syz [ 602.043937][ T17] usb 2-1: config 0 descriptor?? [ 602.093275][ T5] usb 5-1: Using ep0 maxpacket: 8 [ 602.106763][ T17] cp210x 2-1:0.111: cp210x converter detected [ 602.202102][T11840] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 602.212387][ T5] usb 5-1: New USB device found, idVendor=1209, idProduct=2323, bcdDevice= d.fb [ 602.221710][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.266161][ T5] usb 5-1: config 0 descriptor?? [ 602.294280][ T4071] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 602.345676][ T17] cp210x 2-1:0.111: failed to get vendor val 0x370b size 1: -71 [ 602.353522][ T17] cp210x 2-1:0.111: querying part number failed [ 602.383043][ T17] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 602.390788][ T17] cp210x: probe of ttyUSB0 failed with error -71 [ 602.422962][ T17] usb 2-1: USB disconnect, device number 28 [ 602.430117][ T17] cp210x 2-1:0.111: device disconnected [ 602.482416][T11840] usb 4-1: Using ep0 maxpacket: 8 [ 602.542732][ T5] gs_usb 5-1:0.0: Couldn't get device config: (err=-71) [ 602.549943][ T5] gs_usb: probe of 5-1:0.0 failed with error -71 [ 602.587870][ T5] usb 5-1: USB disconnect, device number 41 [ 602.604281][ T4071] usb 3-1: Using ep0 maxpacket: 32 [ 602.635648][T11840] usb 4-1: config 0 has an invalid interface number: 217 but max is 0 [ 602.643997][T11840] usb 4-1: config 0 has no interface number 0 [ 602.650207][T11840] usb 4-1: New USB device found, idVendor=13d3, idProduct=3275, bcdDevice=c9.7e [ 602.659399][T11840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.730027][T11840] usb 4-1: config 0 descriptor?? [ 602.752579][ T4071] usb 3-1: config 0 has an invalid interface number: 179 but max is 0 [ 602.760889][ T4071] usb 3-1: config 0 has no interface number 0 [ 602.767556][ T4071] usb 3-1: config 0 interface 179 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 602.777616][ T4071] usb 3-1: New USB device found, idVendor=2001, idProduct=3309, bcdDevice=8a.5e [ 602.786804][ T4071] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.800918][ T4071] usb 3-1: config 0 descriptor?? [ 603.002596][T11840] dvb-usb: found a 'AZUREWAVE DVB-S/S2 USB2.0 (AZ6027)' in cold state, will try to load a firmware [ 603.014230][T11840] usb 4-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 603.023305][T11840] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 603.038403][T11840] dvb_usb_az6027: probe of 4-1:0.217 failed with error -2 16:04:16 executing program 0: syz_usb_connect(0x0, 0xbc, &(0x7f0000002c40)={{0x12, 0x1, 0x0, 0x1c, 0x0, 0xf5, 0x40, 0x7c0, 0x1501, 0x6514, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x87, 0x0, 0x1, 0x3, 0x1, 0x12, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "81bb6e86a9"}]}}]}}]}}]}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)="20b3ce0c3b0cf57286d3df0d17d2d07793e47b9e0211c06bc18fd4e3c90e70328de766e5b4d61feca6e6f030cc3619764985fb35b4d720b2d4eaf89985ac0475e2093edc7455cc5924314944e33cac6d34edfe76cbcb67aacae9", 0x5a}, {&(0x7f0000000180)="f175c9d981dc49929dc2c12a7efebedd640c7e72bed4b0f8a933a6861ac0d7f75f86457afd336013fa8c3086336108e2f2824426787576b73ac3db64f3ad5809ec56b8df12426a65e283a16e6c50848a84948df7", 0x54}], 0x2) 16:04:16 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000100)=0x4) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r1, 0x0, 0x19, &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast1}, 0xc) 16:04:16 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/560]}, 0x2a8) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, &(0x7f0000000040)={r2, r3/1000+10000}, 0x10) 16:04:16 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4f2, 0x1421, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x22, {0x22, 0x0, "57d31d71e809398748984d71a698d28902478871d0b20392736f863e326ee6b5"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 603.049397][T11840] usb 4-1: USB disconnect, device number 31 16:04:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x101ff, 0x0, 0x3000, 0x2000, &(0x7f0000000000/0x2000)=nil}) accept4(0xffffffffffffffff, &(0x7f0000000140)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x55, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='smaps\x00') setsockopt$inet_dccp_buf(r3, 0x21, 0x2, &(0x7f0000000480)="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", 0x1000) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="11000000000000000000b6300000000000000000000000000000000000000000c9bd490ce28a31886bfa363cf3d115f82154f88978e6a323b42473273026dfc3bd26115d32a3ea231b12486097656b62142937f6fea50100000000000000981b32"]) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x608, 0x0, 0x0, 0x6, 0x4cc, 0x0, 0x40, 0xffff, 0x0, 0x7ff, 0x9], 0x0, 0x426f2e83e12f2507}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 603.164901][T20501] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 603.195859][T20501] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 603.225101][ T4071] rtl_usb: reg 0xf0, usbctrl_vendorreq TimeOut! status:0xffffffb9 value=0x0 [ 603.233919][ T4071] rtl8192cu: Chip version 0x10 [ 603.265561][T20503] cannot load conntrack support for proto=7 [ 603.270708][T20508] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 603.287092][T20505] cannot load conntrack support for proto=7 [ 603.382683][ T17] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 603.392481][ T5] usb 1-1: new high-speed USB device number 63 using dummy_hcd 16:04:16 executing program 5: syz_emit_ethernet(0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000700000000000019078ac2314bbac1414110b04907800000000450000000000000000840000ac2314aaac141400084000000000000000000000e00000020000000000000003000000000200faff7f00000100000000ffffffff00000005e000000100000000ac14140000100000"], 0x0) 16:04:16 executing program 2: r0 = socket$inet6(0xa, 0x80000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000009340)=[{{0x0, 0x0, &(0x7f0000008c80)=[{&(0x7f0000000100)=""/179, 0xb3}, {&(0x7f0000008940)=""/113, 0x71}, {&(0x7f0000008a40)=""/237, 0xed}], 0x3}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x1f, 0x4) sendto$inet6(r0, &(0x7f0000000300), 0xfe02, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @remote}, 0x1c) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r5, r4) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r7}}}, @rights={{0x14, 0x1, 0x1, [r3]}}], 0x38}, 0x0) setsockopt$inet6_dccp_int(r3, 0x21, 0x5, &(0x7f0000000040)=0x9, 0x4) set_mempolicy(0x0, &(0x7f00000001c0), 0x9) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xffe0) 16:04:16 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f00000000c0)={0x1}, 0x8) connect$inet6(r0, &(0x7f00000041c0)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000000140)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000280)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000001ae, 0x62, 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000100)=ANY=[@ANYBLOB="f0fffffffffff3ff02000000000000000200000000000000", @ANYRES32=r0, @ANYBLOB="000000008000"/28, @ANYRES32=r3, @ANYBLOB="000000000100"/28]) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24000004) [ 603.465085][ T4071] rtl_usb: reg 0xa, usbctrl_vendorreq TimeOut! status:0xffffffb9 value=0x0 16:04:16 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000001200)={0xa, 0x4e20, 0x100, @rand_addr="00f100"}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$session_to_parent(0x12) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000100)=0xc) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, &(0x7f0000000140)={0x7ff, 0x95a9}) sendmsg$netlink(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) ioctl$VIDIOC_S_EDID(r1, 0xc0285629, &(0x7f00000000c0)={0x0, 0x7, 0x5, [], &(0x7f0000000040)=0x7}) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[], 0xffdc) read(r0, &(0x7f0000000200)=""/4096, 0xff21) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r6, r5) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r7, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r11, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r12, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r8, @ANYBLOB="00cb7872ccdb37f4230f2688e21788b70000b7"], 0x38}, 0x0) fstat(r8, &(0x7f0000001280)) 16:04:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) fcntl$setflags(r1, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r3, 0x40045731, &(0x7f0000000080)=0x1) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x160) faccessat(r4, &(0x7f0000000100)='./file0\x00', 0x102, 0x1000) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(0xffffffffffffffff, 0xc0385720, &(0x7f0000000140)={0x1, {0x77359400}, 0x1f, 0x9}) [ 603.652656][ T17] usb 5-1: Using ep0 maxpacket: 8 16:04:16 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x2010, r0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r1, 0x0) [ 603.702340][ T4071] rtl_usb: reg 0xfe66, usbctrl_vendorreq TimeOut! status:0xffffffb9 value=0x0 [ 603.734073][T20528] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 603.752942][ T5] usb 1-1: config 0 has an invalid interface number: 135 but max is 0 [ 603.761461][ T5] usb 1-1: config 0 has no interface number 0 [ 603.767900][ T5] usb 1-1: config 0 interface 135 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 603.779553][ T5] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 603.791095][ T5] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has invalid maxpacket 1646, setting to 1024 [ 603.802496][ T5] usb 1-1: config 0 interface 135 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 603.815834][ T5] usb 1-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=65.14 [ 603.825018][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.832385][ T17] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 16:04:16 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x281, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) connect$l2tp(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1c000000000000000002001700bc14c95aecfe0eb04559d58bcd19a6350a9d3d71f7342d282134ad515611361ef10bfd98fad9a00de15c6f912cf165516d8e51b0cf7bc71030bdf816ffead10c1010a523e651a468e37ec4b5e32610cda6e6992672c4818d8718353ead7b6e60f6e31479d8cb5a991be8ceb1537312f77d1c6e321e900623b5ea60ff762d8551ddffc6d296e7b0ed0d8c381e136231bc7dc6adad89491f9995b233ac257644130230fb6d83f2542bcae46adac28dc19be2952850116915e267f0479d323866c8cf8a6fb841ea7807cf7e2e3454236f4dfa27c21e002b0a2cf27dfdc1266450961388e3e919fcc9", @ANYRES32=r6, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000f000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x38}, 0x0) getpeername$inet6(r5, 0x0, &(0x7f0000000140)) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x0, {0xb, @win={{0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000340)={0x0, 0xb, 0x4, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "eb182cf7"}, 0x0, 0x0, @userptr, 0x4}) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xfffffffffffeffff}}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x2000000004e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r8 = dup2(r7, r7) sendmsg$tipc(r8, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)="fefdf715ea0d886cba48a1fdb6c664486cbdcad3d711c368d7443dbf3b27927e298009b2467799e1488a495d956fb2ccf08f765ab78b6f91af5952b6f2afe6d3192981e7b6", 0x45}], 0x1, 0x0, 0xfffffe11, 0x6}, 0x40004) r9 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "eb182cf7"}, 0x0, 0x0, @userptr, 0x4}) r10 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r10, 0xc100565c, 0x0) ioctl$VIDIOC_PREPARE_BUF(r10, 0xc0585611, &(0x7f0000000340)={0x0, 0xb, 0x4, 0x0, {0x0, 0x2710}, {0x0, 0xc, 0x0, 0x0, 0x0, 0x0, "eb182cf7"}, 0x0, 0x0, @userptr, 0x4}) sendmmsg$inet6(r10, &(0x7f00000007c0)=[{{&(0x7f0000000200)={0xa, 0x0, 0x3, @local, 0x85}, 0xffffff7c, &(0x7f00000003c0)}}], 0xbf, 0x4000000) ioctl(r9, 0x40, &(0x7f0000000300)="7ef94dc00311fd797dcdc2253ec3047f24a6c4d94f63e38f0aadb4a9eb70e4824a3e8ca38619fb7efddd10bad80a3c3a7e80a253e1626921979b70eacb32f560456ab45093af65208339e19b56cfe397cca6d9486d88d1474ad9e6ac2877f1f040f5d3429b3d1101af3474c1235fb1ed9ca49ec341144b7ebb080ad67ed790e958afd989490e634eac34e21b6a8508a26cc0ee4ce018a11e61d5") write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="73797a30a39472fb3bbc8601846a05e4f37b83b96307000000000000c773b77aa60281b3dad40f00000000000023f810e8baf2583090068c8561136446abdb572fff977b20ac286a5ebd65b93e"], 0x4d) sendto$inet(r7, &(0x7f0000000400)="f62ab313949355e0273e65d3abda21f068933ec46b1fdf41a833e981e7de5b6aa4a1b65d8ec8094ee099d8271d26428366e221fc061208889c5686a4dc0c2d3d4fd66741cc11c4c833102fc156857f99a8b799636ea87c35b0283036520e5953baf9c51316d8d93aa5096030bd0d0dfbbdf445006af75ad33303c89c2de7ee8ac49a59a6605f3343c51ee399b1977da2e34ffbe0425866c7b7ad499ab8611286d60c0f27a1e62be4fb4b9e41eabec273531810fb81d733a5ea29408c19aba4587f9da5920ad564ad6bb89ac4565194535c7f6f54993deceb58a75e137be85d7600", 0xffffff90, 0x60, 0x0, 0x127) [ 603.844179][ T17] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 603.855347][ T17] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 603.868580][ T17] usb 5-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 603.877805][ T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.882366][ T5] usb 1-1: config 0 descriptor?? [ 603.944854][ T5] iowarrior 1-1:0.135: IOWarrior product=0x1501, serial= interface=135 now attached to iowarrior0 [ 604.014267][ T4071] rtl_usb: reg 0xfe67, usbctrl_vendorreq TimeOut! status:0xffffffb9 value=0x0 [ 604.023327][ T4071] rtl_usb: rx_max_size 15360, rx_urb_num 8, in_ep 1 [ 604.073750][ T4071] usb 3-1: USB disconnect, device number 16 [ 604.109045][ T17] usb 5-1: config 0 descriptor?? [ 604.184674][T11840] usb 1-1: USB disconnect, device number 63 [ 604.208751][T11840] iowarrior 1-1:0.135: I/O-Warror #0 now disconnected [ 604.585188][ T17] chicony 0003:04F2:1421.000B: unknown main item tag 0x2 [ 604.592523][ T17] chicony 0003:04F2:1421.000B: unknown main item tag 0xd [ 604.599761][ T17] chicony 0003:04F2:1421.000B: unknown main item tag 0x0 [ 604.607070][ T17] chicony 0003:04F2:1421.000B: item fetching failed at offset -991091550 [ 604.616018][ T17] chicony: probe of 0003:04F2:1421.000B failed with error -22 16:04:17 executing program 0: syz_usb_connect(0x0, 0xbc, &(0x7f0000002c40)={{0x12, 0x1, 0x0, 0x1c, 0x0, 0xf5, 0x40, 0x7c0, 0x1501, 0x6514, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x87, 0x0, 0x1, 0x3, 0x1, 0x12, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "81bb6e86a9"}]}}]}}]}}]}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)="20b3ce0c3b0cf57286d3df0d17d2d07793e47b9e0211c06bc18fd4e3c90e70328de766e5b4d61feca6e6f030cc3619764985fb35b4d720b2d4eaf89985ac0475e2093edc7455cc5924314944e33cac6d34edfe76cbcb67aacae9", 0x5a}, {&(0x7f0000000180)="f175c9d981dc49929dc2c12a7efebedd640c7e72bed4b0f8a933a6861ac0d7f75f86457afd336013fa8c3086336108e2f2824426787576b73ac3db64f3ad5809ec56b8df12426a65e283a16e6c50848a84948df7", 0x54}], 0x2) 16:04:17 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x40000000000088) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x40000000000014d, 0x0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) socket$l2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x38}, 0x0) ioctl$SG_SET_COMMAND_Q(r4, 0x2271, &(0x7f0000000040)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) 16:04:17 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000000)={@random="395d3fd49a29", @link_local, [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast, {[@timestamp={0x44, 0x8, 0x3a, 0xeb5c625834d0c1e1, 0x0, [{[], 0x6}]}, @end]}}, @igmp={0x16, 0x0, 0x0, @multicast2}}}}}, &(0x7f0000000180)={0x0, 0x0, [0x0, 0x3, 0x0, 0xe8]}) r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40) r1 = syz_open_dev$radio(&(0x7f0000000280)=',de\xf7 \x00\x00\x00\x00o\x01\x04', 0x2, 0x2) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000440)='nbd\x00') r3 = epoll_create1(0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000300)) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000480)='/dev/dlm-monitor\x00', 0x385280, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) r7 = epoll_create1(0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r8, &(0x7f0000000300)) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1a00}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x7c, r2, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, [{0x8, 0x1, r4}, {0x8, 0x1, r5}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xac}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0xc, 0x7, [{0x8, 0x1, r8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0x4, 0x2, 0x2}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x4044181) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x3f5d5032f3f4d0d9}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r2, 0x2, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8001}]}, 0x20}, 0x1, 0x0, 0x0, 0x480}, 0x20000000) [ 604.786686][ T17] usb 5-1: USB disconnect, device number 42 [ 605.122190][T11840] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 605.492410][T11840] usb 1-1: config 0 has an invalid interface number: 135 but max is 0 [ 605.500779][T11840] usb 1-1: config 0 has no interface number 0 [ 605.507095][T11840] usb 1-1: config 0 interface 135 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 605.517784][T11840] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 605.529408][T11840] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has invalid maxpacket 1646, setting to 1024 [ 605.540782][T11840] usb 1-1: config 0 interface 135 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 605.554089][T11840] usb 1-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=65.14 [ 605.562179][ T5] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 605.563239][T11840] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.580054][T11840] usb 1-1: config 0 descriptor?? [ 605.628965][T11840] iowarrior 1-1:0.135: IOWarrior product=0x1501, serial= interface=135 now attached to iowarrior0 [ 605.812082][ T5] usb 5-1: Using ep0 maxpacket: 8 [ 605.826725][T11950] usb 1-1: USB disconnect, device number 64 [ 605.844171][T11950] iowarrior 1-1:0.135: I/O-Warror #0 now disconnected [ 605.932312][ T5] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 605.943401][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 605.954491][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 605.967549][ T5] usb 5-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 605.976797][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.986197][ T5] usb 5-1: config 0 descriptor?? 16:04:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0x0, 0x2) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x5, 0x14, 0x43, 0x7, 0x0, 0x0, 0x2210, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0xffffffff, 0x7}, 0x710, 0xc88, 0x9, 0x4, 0x8000000d77, 0x5, 0x418}, r6, 0xc, 0xffffffffffffffff, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r7, &(0x7f0000012000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 16:04:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0xe, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x170, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8847}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x148, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x138, 0x2, [@tunl6_policy=[@IFLA_IPTUN_LOCAL={0x14, 0x2, @dev}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @dev}, @IFLA_IPTUN_FLOWINFO={0x8}, @IFLA_IPTUN_ENCAP_LIMIT={0x8}, @IFLA_IPTUN_ENCAP_LIMIT={0x8}], @tunl6_policy=[@IFLA_IPTUN_LOCAL={0x14, 0x2, @mcast2}, @IFLA_IPTUN_FLAGS={0x8}], @IFLA_IPTUN_PROTO={0x8}, @IFLA_IPTUN_PROTO={0x8}, @tunl6_policy=[@IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_FLOWINFO={0x8}, @IFLA_IPTUN_FLOWINFO={0x8}, @IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @empty}, @tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8}, @IFLA_IPTUN_TTL={0x8}, @IFLA_IPTUN_LINK={0x8, 0x2, r5}, @IFLA_IPTUN_ENCAP_FLAGS={0x8}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_ENCAP_DPORT={0x8}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_ENCAP_TYPE={0x8}], @tunl_policy=[@IFLA_IPTUN_ENCAP_DPORT={0x8}, @IFLA_IPTUN_ENCAP_DPORT={0x8}, @IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_ENCAP_SPORT={0x8}, @IFLA_IPTUN_TTL={0x8}, @IFLA_IPTUN_TTL={0x8}, @IFLA_IPTUN_ENCAP_TYPE={0x8}, @IFLA_IPTUN_FWMARK={0x8}]], @IFLA_IPTUN_PROTO={0x8}]}}}]}, 0x170}}, 0x0) 16:04:19 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x10280) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r2, 0x800, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x4}, @FOU_ATTR_PEER_PORT={0x8, 0xa, 0x4e24}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000c00}, 0x800) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r6, r5) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r7, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r8}}}, @rights={{0x14, 0x1, 0x1, [r4]}}], 0x38}, 0x0) splice(r3, &(0x7f0000000280), r7, &(0x7f00000002c0), 0x200, 0x4) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r9, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") write$P9_RSTATu(r3, &(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRES32=r9, @ANYBLOB="1f6d685026a4c9f7d1ff0f375ab0540eb9d4e7620e7b93e6c2ff3fc9fe7387c1f156a707124864ca93bf04434b3fd2cf5cb9f733f81abe61d35c9297ff1b03d5352c637ce6b6bf88351e9abba103c8444949ae073b7bd10454d5997aa9199bfb9ea253400150a8f2f4139bb5", @ANYRES16, @ANYBLOB="3bff5a1983232675415adb4630d446f76240f065034b887d7810bf0685c6a0104fd5383aa1d50c12b3b9d56479394a7555b3e589e4740f90855e70c720a5a734855814f90dce190548489e2908d60338bbec8e64528f3e17a034d4d75188e1a1c897f30988967319c75a8d617d662faffb306213c3480d0290ff286fc52a2f61d156984206f08e6ffb5b0e0429cefc60450614"], 0x117) io_setup(0x200000003, &(0x7f00000000c0)=0x0) io_submit(r10, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 16:04:19 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000017e7dd32457301001d04400002a57fd20009050f1f00e9ffdfff0905830300000000000000000000000000000007f808ef004257af5603af002b11fcaa2cd4a7eb461155ddf85c70c0f338575b7a9bc5eebff189bd0e671d71d2d91ad720f8d092d155377e2fe536a4c43afe863d7c7c8271559bf7e82d22d3716dedb397a86326752c7cf6a10568ac0e"], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x10200, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.controllers\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 16:04:19 executing program 3: pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000100)=0xc) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r6, r5) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r7, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r8}}}, @rights={{0x14, 0x1, 0x1, [r4]}}], 0x38}, 0x0) r9 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000300)='/proc/capi/capi20\x00', 0x0, 0x0) sendmsg$netlink(r7, &(0x7f0000000440)={0x0, 0xffffff47, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r9, @ANYBLOB="00000000539e000000000000013256beee1a0000a0a74ddf632379000000025904c9ac1de30164241e88d6", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}, 0x0) ioctl$EVIOCGBITSW(r3, 0x80404525, &(0x7f0000000200)=""/229) fsetxattr$security_smack_transmute(0xffffffffffffffff, &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', 0x0, 0x0, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) r15 = dup2(r14, r13) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r11, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r11, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x109000}) ioctl$KDDISABIO(r15, 0x4b37) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r12, 0xae9a) ioctl$KVM_RUN(r12, 0xae80, 0x0) [ 606.372431][ T5] usbhid 5-1:0.0: can't add hid device: -71 [ 606.378752][ T5] usbhid: probe of 5-1:0.0 failed with error -71 [ 606.411238][ T5] usb 5-1: USB disconnect, device number 43 16:04:19 executing program 0: syz_usb_connect(0x0, 0xbc, &(0x7f0000002c40)={{0x12, 0x1, 0x0, 0x1c, 0x0, 0xf5, 0x40, 0x7c0, 0x1501, 0x6514, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x87, 0x0, 0x1, 0x3, 0x1, 0x12, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "81bb6e86a9"}]}}]}}]}}]}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)="20b3ce0c3b0cf57286d3df0d17d2d07793e47b9e0211c06bc18fd4e3c90e70328de766e5b4d61feca6e6f030cc3619764985fb35b4d720b2d4eaf89985ac0475e2093edc7455cc5924314944e33cac6d34edfe76cbcb67aacae9", 0x5a}, {&(0x7f0000000180)="f175c9d981dc49929dc2c12a7efebedd640c7e72bed4b0f8a933a6861ac0d7f75f86457afd336013fa8c3086336108e2f2824426787576b73ac3db64f3ad5809ec56b8df12426a65e283a16e6c50848a84948df7", 0x54}], 0x2) [ 606.435615][T20573] netlink: 'syz-executor.1': attribute type 14 has an invalid length. 16:04:19 executing program 5: r0 = gettid() read(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) nanosleep(&(0x7f0000000100)={0x0, r1+10000000}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x44000, 0x0) tkill(r0, 0x15) [ 606.490304][T20580] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 606.498965][T20580] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 606.507204][T20580] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 606.515394][T20580] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 606.523599][T20580] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 606.523623][T20580] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 16:04:19 executing program 4: syz_usb_connect(0x4, 0xfffffffffffffe6f, &(0x7f0000000080)=ANY=[@ANYBLOB="090150022d10c8107b07b4085a9400000001090209000100000000090475000023405201000000000005240000000d240f01000001000008000000"], 0x0) [ 606.598068][T20580] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 606.606436][T20580] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 606.614701][T20580] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 16:04:19 executing program 1: syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)=@kern={0x10, 0x0, 0x0, 0x200000}, 0x6, 0x0, 0x0, 0x0, 0x1b3}, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r5, r4) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r7}}}, @rights={{0x14, 0x1, 0x1, [r3]}}], 0x38}, 0x0) write$capi20(r6, &(0x7f00000004c0)={0x10, 0xeb3, 0x1, 0x80, 0x0, 0x4}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSDEBUG(0xffffffffffffffff, 0x40047440, &(0x7f0000000480)=0x4) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 606.683069][T11840] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 606.815861][T11950] usb 1-1: new high-speed USB device number 65 using dummy_hcd 16:04:19 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x0, 0x44000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getpgrp(0x0) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000440)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@remote, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@local}}, &(0x7f0000000580)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000005c0)={{{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in6=@remote, 0x4e24, 0x0, 0x4e21, 0x1f, 0xa, 0x80, 0x20, 0x29, r5, r6}, {0x101, 0x1, 0x6, 0x8, 0x800, 0x7, 0xfff, 0x3}, {0x8000, 0x2, 0x1, 0x6106}, 0x7, 0x6e6bbb, 0x2, 0x1, 0x1, 0x1}, {{@in=@remote, 0x4d4, 0x56}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x24}, 0x3500, 0x4, 0x3, 0x4, 0x1, 0x4, 0x7b}}, 0xe8) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, 0x0) r7 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$KDDISABIO(r7, 0x4b37) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$TIOCSWINSZ(r7, 0x5414, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0), 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080), 0x4) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b0000000000081f8adc74770180f2f64441036aa2ad150511da3158e3abd2ef0eade7da4c9fcabadad103d87f79c10cbe570440f10d5a65c7c2e4e2501ce0d2231f565ac15a583f482fd77b4bfddc6a59f9c0b5eaa1c7c9f30c9e01cdc130c0b183549c41b8f2ec587a91605ce7f01fd05b659fb340952b778a9af49f73cc21bb3645ffb6b10b14c1cfcc165cd18cf144197ab16996bf5706551821786db281a45e8a31cbe4889a3b546310019a"], 0x28}}, 0x0) 16:04:19 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000080)=0x1c) listen(r1, 0x2) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r2) accept(r3, &(0x7f00000000c0)=@caif, &(0x7f00000001c0)=0x80) sendmmsg$inet6(r0, &(0x7f0000003700)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c, 0x0}}, {{&(0x7f0000000240)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="24000000000000002900000032000000ff02005dbc290000000000000000000006c258adc9c0d85b8be576c7b0bb4443fab758ae9b7bba65e0cd9475172bccfa996ad44a23d5f10d968dbffdbd8a92", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x57}}], 0x2, 0x0) [ 606.982529][T11840] usb 3-1: device descriptor read/64, error 18 16:04:20 executing program 1: r0 = socket(0x10, 0x803, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x8, 0x8001, 0x9, 0x7fffffff, 0x9e}) mlock2(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3) process_vm_writev(0x0, &(0x7f0000000f40)=[{&(0x7f0000000280)=""/99, 0x42a}], 0x1, 0x0, 0xfffffffffffffcb2, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x49d}, {&(0x7f0000000400)=""/120, 0x2ce}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000002a, 0x0, &(0x7f0000003700)={0x77359400}) [ 607.117653][T20598] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 16:04:20 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000ed019408950b2a17dcdcf1ff0001092b049f687dee5bddfff602120001000000"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 607.297106][ T5] usb 5-1: new high-speed USB device number 44 using dummy_hcd 16:04:20 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000000)=0x14) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000480)={'filter\x00'}, &(0x7f0000000280)=0x54) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0xc4b, 0x0, 0x800, 0x0, 0x0, 0x9, 0x4ce, 0x0, 0x0, 0x0, 0xed2e]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_open_dev$vcsa(0x0, 0x6, 0x0) [ 607.402255][T20607] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 607.438526][T11840] usb 3-1: device descriptor read/64, error 18 [ 607.475629][T11950] usb 1-1: config 0 has an invalid interface number: 135 but max is 0 [ 607.484033][T11950] usb 1-1: config 0 has no interface number 0 [ 607.490264][T11950] usb 1-1: config 0 interface 135 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 607.501029][T11950] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 607.512495][T11950] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has invalid maxpacket 1646, setting to 1024 [ 607.523899][T11950] usb 1-1: config 0 interface 135 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 607.537082][T11950] usb 1-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=65.14 [ 607.546266][T11950] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 16:04:20 executing program 3: syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000352c7bc00c04230208c60000000109022d0001000000000314421ae7cc556767b5a812d0363005400000f3489250000d240f0100000000086a7ec4cf000000000000000502000000000000000000030000"], 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x3c, 0x81, 0x57, 0x40, 0x1b80, 0xe755, 0x1e97, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x61, 0x0, 0x1, 0x1b, 0xd5, 0xc6, 0x0, [], [{{0x7, 0x5, 0x83, 0xe0d5d1e99ce80e0d}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000fc0)={0xac, &(0x7f0000000200)=ANY=[@ANYBLOB="0000010056d545d94ae0ebdf5866c79342f60e6354643b670c9ad8f011869d114669171be6047e6b4426559ca9de6c55f9a7ad50c80b9472934f568e3694ead968e4bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x1b, 0xcf, &(0x7f0000000100)="94c816bb080ad8c62dcf47f419a7304775445df366b9ac372c002bdede4a66f700388f12bae2dc4b1f112ae88473b08a56b8cb905778aebd03bd600a17de10840e6d63d32a54ccd4e255b6e7892904ef7de9a3031be56965dafd7c717664c06f4e0b3e51bb01c27e5c787eb6399b01dbda7c0a70ddb232086a81b0b35324f4c38724c7f0dd7278b770b8c16cfc1a432d685ac6accaf7eaac78197c03dbb3fd50e77f8cb6470a46a9a0d79fd621a22e73aea1c081bfc9c9eb9dc034d9344d59990ea2636976a2f2e9b4b9b6fc2412b7") [ 607.576743][T11950] usb 1-1: config 0 descriptor?? [ 607.591631][T20613] kvm: pic: non byte read [ 607.602549][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 607.603375][T20613] kvm: pic: non byte read [ 607.625563][T20613] kvm: pic: non byte read [ 607.632194][T11950] iowarrior 1-1:0.135: IOWarrior product=0x1501, serial= interface=135 now attached to iowarrior0 [ 607.641988][T20613] kvm: pic: non byte read [ 607.657811][T20613] kvm: pic: non byte read [ 607.682123][T20613] kvm: pic: non byte read [ 607.690693][T20613] kvm: pic: non byte read [ 607.704607][T20613] kvm: pic: non byte read [ 607.715397][T11877] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 607.723496][ T5] usb 5-1: unable to get BOS descriptor or descriptor too short [ 607.734269][T20613] kvm: pic: non byte read [ 607.741226][T20613] kvm: pic: non byte read [ 607.753054][T11840] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 607.782447][ T5] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 607.790154][ T5] usb 5-1: can't read configurations, error -71 [ 607.833498][ T17] usb 1-1: USB disconnect, device number 65 [ 607.848008][ T17] iowarrior 1-1:0.135: I/O-Warror #0 now disconnected [ 607.942179][T11874] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 607.963212][T11877] usb 6-1: Using ep0 maxpacket: 8 [ 608.033985][T11840] usb 3-1: device descriptor read/64, error 18 16:04:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe07002b0000000000ff0711000000450001070000001419001a00120002000a0001ee0300000000000000f400000000", 0x39}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000140)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000280)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000001ae, 0x62, 0x0) close(r1) [ 608.122426][T11877] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 608.130425][T11877] usb 6-1: can't read configurations, error -61 [ 608.165820][T20622] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. [ 608.175822][T20622] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. [ 608.212220][T11874] usb 4-1: device descriptor read/64, error 18 [ 608.292111][T11877] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 608.452292][T11840] usb 3-1: device descriptor read/64, error 18 [ 608.492048][ T5] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 608.532182][T11877] usb 6-1: Using ep0 maxpacket: 8 [ 608.572493][T11840] usb usb3-port1: attempt power cycle [ 608.602042][T11874] usb 4-1: device descriptor read/64, error 18 [ 608.692302][T11877] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 608.700071][T11877] usb 6-1: can't read configurations, error -61 [ 608.706968][T11877] usb usb6-port1: attempt power cycle [ 608.732492][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 608.852297][ T5] usb 5-1: unable to get BOS descriptor or descriptor too short [ 608.872295][T11874] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 608.912535][ T5] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 608.920443][ T5] usb 5-1: can't read configurations, error -71 [ 608.928688][ T5] usb usb5-port1: attempt power cycle [ 609.152079][T11874] usb 4-1: device descriptor read/64, error 18 [ 609.312192][T11840] usb 3-1: new high-speed USB device number 19 using dummy_hcd 16:04:22 executing program 2: r0 = syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) set_mempolicy(0x4003, &(0x7f0000000140)=0x101, 0x6) socket$inet_udplite(0x2, 0x2, 0x88) r1 = userfaultfd(0x0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r6}}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x38}, 0x0) ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f00000000c0)={0xa, [0x0, 0x9, 0x8e2, 0x5, 0x3ff, 0x0, 0x9, 0x8, 0x3, 0x5]}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x5, 0x84) r7 = dup3(0xffffffffffffffff, r1, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x0, 0x1a, 0x0, r0}) ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0) clone(0x42108000, 0x0, 0x0, 0x0, 0x0) 16:04:22 executing program 1: sendmmsg$unix(0xffffffffffffffff, &(0x7f00000096c0)=[{0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000000300)="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", 0xe42}], 0x1}], 0x1, 0x0) pipe(&(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000140)={0x4a5, 0x15}) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000180)={{0x29, @loopback, 0x0, 0x0, 'sh\x00'}, {@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x44) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r6, r5) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r7, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r8}}}, @rights={{0x14, 0x1, 0x1, [r4]}}], 0x38}, 0x0) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4021}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r9, 0x100, 0x70bd28, 0x25dfdbfb, {{}, 0x0, 0x4101, 0x0, {0x20, 0x17, {0x18, 0x10001, @l2={'eth', 0x3a, 'veth1_to_bond\x00'}}}}, ["", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0xc1}, 0xc004) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00', 0x0}) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @random="a97ed998fe8a"}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f00000000c0)=0x5, 0x4) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) r11 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x4880, 0x0) ioctl$TIOCSSERIAL(r11, 0x541f, &(0x7f0000001200)={0xa7, 0xfffffc00, 0x800, 0x9, 0x482b, 0x80, 0x0, 0xffffffff, 0x3, 0x7f, 0xff, 0x7, 0x5, 0xa9d, &(0x7f0000001180)=""/102, 0xf0e, 0x38b, 0x800}) 16:04:22 executing program 0: syz_usb_connect(0x0, 0xbc, &(0x7f0000002c40)={{0x12, 0x1, 0x0, 0x1c, 0x0, 0xf5, 0x40, 0x7c0, 0x1501, 0x6514, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x87, 0x0, 0x1, 0x3, 0x1, 0x12, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "81bb6e86a9"}]}}]}}]}}]}}, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, 0x0, 0x0) 16:04:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x155555555555583b, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6901ff007259bcc68e485b"], 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x7d, &(0x7f0000000300)={r5, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000040)=0x100) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000100)={r5, 0xf502, 0x0, 0x200, 0xffffffffffffa38d}, &(0x7f00000001c0)=0x18) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 609.423077][T11877] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 609.509438][T20636] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 609.548454][T20638] IPVS: ftp: loaded support on port[0] = 21 [ 609.551714][T20639] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 609.559467][T11874] usb 4-1: device descriptor read/64, error 18 16:04:22 executing program 4: r0 = socket(0x1, 0x0, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_mtu(r1, 0x0, 0xa, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r6}}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x38}, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x9, 0x10, 0x7090, 0x9}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f00000000c0)={r7, 0x5, 0xa, [0x8000, 0x0, 0xff4, 0x8000, 0x6, 0x4, 0x3, 0x1, 0x3f, 0x30d]}, &(0x7f0000000100)=0x1c) 16:04:22 executing program 2: request_key(&(0x7f0000000140)='keyring\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0xfffffffffffffffb) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r4}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x38}, 0x0) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000000)={0x400, 0x2}) [ 609.692677][T11874] usb usb4-port1: attempt power cycle [ 609.722112][T11877] usb 6-1: device descriptor read/64, error 18 [ 609.742646][ T17] usb 1-1: new high-speed USB device number 66 using dummy_hcd 16:04:22 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) ioctl$sock_ifreq(r0, 0x0, &(0x7f0000000000)={'irlan0\x00', @ifru_ivalue=0xeeb2}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d6c0bcfe47bf070") r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000c0016000800010400c7aa7193601b86673bae47"], 0x34}}, 0x0) [ 609.911225][T20657] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 609.946975][T20658] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 16:04:23 executing program 2: r0 = socket(0x40000000000010, 0x803, 0x0) write(r0, &(0x7f0000000140)="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", 0x100) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) fcntl$setsig(r1, 0xa, 0x2) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x2001, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0xf0ffffffffffff}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) ioctl$USBDEVFS_DISCSIGNAL(r2, 0x8010550e, &(0x7f0000000240)={0x200, &(0x7f0000000080)="321a1e0f0813d1360f93a2d50376fe778537540a01cc0aa0ff625fcd0ba0ae6db94f73460907e417c5fe57104faeba3a94fa7d78b14e0c58a37cf3c877d57e0e9f5f2eed940c148a09219ab0fe9f9b27b06a7a9209e5ff2cfc4c2b56ad6c35ca7c3b7ba5192e5b0827011592eeb3711695fe6cbde7f477849c347687fe77151165911fb4baf6a7ab51d9bb3acfb30fcaa7b9d379b1dcc4289e4ffa6b2dbb0c84827b14770f403da582cc52ce08a05d"}) [ 610.102949][ T17] usb 1-1: config 0 has an invalid interface number: 135 but max is 0 [ 610.111421][ T17] usb 1-1: config 0 has no interface number 0 [ 610.117738][ T17] usb 1-1: config 0 interface 135 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 610.128513][ T17] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 610.140140][ T17] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has invalid maxpacket 1646, setting to 1024 [ 610.140227][ T17] usb 1-1: config 0 interface 135 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 610.140305][ T17] usb 1-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=65.14 [ 610.140347][ T17] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.167611][ T17] usb 1-1: config 0 descriptor?? [ 610.190818][T11877] usb 6-1: device descriptor read/64, error 18 [ 610.230845][ T17] iowarrior 1-1:0.135: IOWarrior product=0x1501, serial= interface=135 now attached to iowarrior0 16:04:23 executing program 5: clone(0x47fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) tkill(r0, 0x9) socketpair$unix(0x1, 0x8000000000005, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup2(r7, r6) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r8, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r9}}}, @rights={{0x14, 0x1, 0x1, [r5]}}], 0x38}, 0x0) ioctl$VIDIOC_S_OUTPUT(r8, 0xc004562f, &(0x7f0000000000)=0x7) wait4(r0, 0x0, 0x0, &(0x7f0000000480)) 16:04:23 executing program 1: pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) utimensat(r0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={{r2, r3/1000+30000}, {r4, r5/1000+10000}}, 0x100) r6 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup2(r7, r6) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r8, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r9}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x38}, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect(r10, &(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x6e, &(0x7f00000f8000)={@random="cd390b081bf2", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "a2fbe8", 0x38, 0x3a, 0x0, @ipv4={[], [], @multicast2}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x3a, 0x0, @mcast2, @loopback, [], "fca967e17f791010"}}}}}}}, 0x0) [ 610.427103][ T5] usb 1-1: USB disconnect, device number 66 [ 610.443795][ T5] iowarrior 1-1:0.135: I/O-Warror #0 now disconnected [ 610.462824][T11877] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 610.492616][T11874] usb 4-1: new high-speed USB device number 34 using dummy_hcd 16:04:23 executing program 3: syz_usb_connect(0x0, 0x56, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000052638740937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f004000000000090507f300000000000905000000000000000e213400200000010000004a2f72801e87dfba6031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537040400a011334f5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72d4877fd223dbe580811bfb2dcc2ad4f3a67f4d4c5644"], 0x0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r4}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x38}, 0x0) ioctl$VIDIOC_G_TUNER(r3, 0xc054561d, &(0x7f0000000000)={0x7f, "d972b2fe7a47bad4357684210ff57d7a84518f03fef1c87f3f8e98e45de84104", 0x1bbaa4fe06d82c64, 0x0, 0xffff, 0x9, 0x8, 0x1, 0xfff, 0xffffffff}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000140)='y\x00', 0x2, 0x1) 16:04:23 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xd8, 0x9b, 0x50, 0x20, 0x4cb, 0x113, 0x5843, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x56, 0x0, 0x1, 0x96, 0x94, 0x94, 0x0, [], [{{0x9, 0x5, 0xb}}]}}]}}]}}, 0x0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r4}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x38}, 0x0) r5 = msgget$private(0x0, 0x0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup2(r9, r8) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r11}}}, @rights={{0x14, 0x1, 0x1, [r7]}}], 0x38}, 0x0) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r7, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r12, 0x600, 0x70bd26, 0x25dfdbfd, {{}, 0x0, 0xb, 0x0, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040010) msgsnd(r5, &(0x7f0000000a80)=ANY=[@ANYBLOB="03"], 0x1, 0x0) msgrcv(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000005535d4d8b2c4573c00000000000000000000000000000000000000000000000000000000000700"/121], 0x79, 0x3, 0x405a556a350f348f) msgsnd(r5, &(0x7f0000000080)=ANY=[@ANYPTR64=&(0x7f0000000000)=ANY=[]], 0x1, 0x0) msgctl$MSG_INFO(r5, 0xc, &(0x7f0000000140)=""/10) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000000)={{0x2, 0x99}, 'port1\x00', 0x8, 0x20400, 0x18000000, 0xffffff81, 0x49, 0xd1, 0x6, 0x0, 0xa, 0x6}) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = dup2(r15, r14) getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r16, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r17}}}, @rights={{0x14, 0x1, 0x1, [r13]}}], 0x38}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r16, 0x29, 0x23, &(0x7f0000000480)={{{@in6, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f0000000580)={@rand_addr="57dc7b0793349c42a0a3d8179f83692c", @empty, @loopback, 0x1ff, 0x0, 0x5, 0x900, 0x0, 0x80000, r18}) 16:04:23 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x80004e22, 0x0, @empty}, 0x1c) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) sendto$inet6(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @empty}, 0x1c) 16:04:23 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="41010b2cbe52da0430d381b543587006dc2a7b3b04eb024efdd25392cd58780e333c559b57c0abb7dd3af66f20fed20b624941009be180428c88f20bc99a7d1310d4d346e6540c707ad9514fb652851e414bff5da7a6a7394d5e274d8327d486a5299602d82149cdd27423911ddcd0a9af50fa6676bf0cda7d1db4747b7222898b8b91fe1a85d41d025b2fd9dafd51db5f8c617175b408be3a0dd1fa01dff9f3a8f179927c892441b34bcff472e6a4cbb7"], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000780)=ANY=[@ANYPTR64], 0x8) ftruncate(r4, 0x10099b7) sendfile(r0, r4, 0x0, 0x88000fc000000) [ 610.792352][T11874] usb 4-1: device descriptor read/64, error 18 16:04:24 executing program 0: syz_usb_connect(0x0, 0xbc, &(0x7f0000002c40)={{0x12, 0x1, 0x0, 0x1c, 0x0, 0xf5, 0x40, 0x7c0, 0x1501, 0x6514, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x87, 0x0, 0x1, 0x3, 0x1, 0x12, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "81bb6e86a9"}]}}]}}]}}]}}, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, 0x0, 0x0) 16:04:24 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x3c3}, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) r4 = fcntl$dupfd(r2, 0x0, r2) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r7 = dup2(r3, r6) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r7, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r8}}}, @rights={{0x14, 0x1, 0x1, [r5]}}], 0x38}, 0x0) ioctl$TIOCMIWAIT(r5, 0x545c, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x0, 0x400200007fd, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) socket$inet(0x10, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0xffffff84) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x20013a5a}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) 16:04:24 executing program 4: mount$fuseblk(&(0x7f0000000040)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffd000/0x2000)=nil) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)={@empty, @multicast2, 0x0, 0x1, [@local]}, 0x14) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) r4 = socket$inet6_sctp(0xa, 0x2, 0x84) write$binfmt_script(r4, &(0x7f0000000140)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES16, @ANYBLOB="fa5b4e9df5d5c5182ec1749b3c71d6565ad608450f5c68b16785355436121ad2e027677ae2b6442aeebe278e729afbf8f138af9a500e3af02dea1e236d9fa7eedae873dd36bd9460e6bbee9f2b6e54965cf927eabb70535bf105859aba6fb76806d8fe8f0b797418b2927b373cee5b2a8b1cae1a210bb7053bca0762a78468353461f99950e5b1f233c4237eb6f9894b295c8eda041783997cc9c7ebadfe634ae34e21f107d64296355830495b928452ebcf4f54a88f10862dd6244a39e8fe27d5b27a8686fc98587606b54be1cdee0ef2efecd8e85690b8de1f682c0277a11fe61f5bb062ed24b8280189b4f0"]], 0xfffffffffffffe70) sendfile(r1, r2, 0x0, 0x20000102000007) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) socket(0x10, 0x2, 0x0) [ 611.042557][T11840] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 611.293903][T11840] usb 3-1: Using ep0 maxpacket: 32 [ 611.332539][ T5] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 611.429787][T11874] usb 4-1: device descriptor read/64, error -71 [ 611.444815][T11840] usb 3-1: config 0 has an invalid interface number: 86 but max is 0 [ 611.453611][T11840] usb 3-1: config 0 has no interface number 0 [ 611.459860][T11840] usb 3-1: New USB device found, idVendor=04cb, idProduct=0113, bcdDevice=58.43 [ 611.469077][T11840] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.532535][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 611.538877][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 611.542384][T11840] usb 3-1: config 0 descriptor?? [ 611.590653][T11840] gspca_main: finepix-2.14.0 probing 04cb:0113 [ 611.622603][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 611.629046][ C1] protocol 88fb is buggy, dev hsr_slave_1 16:04:24 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff}, 0xa96dca1c764e9507) write$binfmt_elf64(r2, &(0x7f0000000700)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x1, 0x81, 0x0, 0x8, 0x3, 0x3, 0x6, 0x95, 0xffffffffffffff73, 0x86, 0x79, 0x7ff, 0x38, 0x2, 0x6, 0x82, 0xfff9}, [{0x4, 0x1f, 0xdc4, 0x8, 0x9, 0x400, 0x5, 0x9}], "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", [[], [], [], []]}, 0xfffffffffffffe47) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r3, 0x8, 0x70bd28, 0x25dfdbff, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x3, 0x6, 0x8, 0x80000000}}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = shmget(0x0, 0x3000, 0x318, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_RMID(r5, 0x0) shmctl$SHM_UNLOCK(r5, 0xc) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5400000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="c830f8e8678e3a493e24ec36ef43880b2e05000000086905be8d73a082bd61aad931dcb404d1bbf8a6f77738020a00d8c68533ab", @ANYRES32=0x6, @ANYBLOB="2c0012000800010073697400200002000800edff1a00000014000200de800f00000076000000000040000000"], 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) [ 611.743150][T11874] usb 4-1: new high-speed USB device number 35 using dummy_hcd 16:04:24 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00\x02\x00\x1d\xff\xff\xfe\x00', 0x19, 0x1, 0x218, [0x20000440, 0x0, 0x0, 0x20000470, 0x20000628], 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"]}, 0x290) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x38}, 0x0) ioprio_set$pid(0x1, r5, 0xffff) [ 611.814484][T20723] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. [ 611.826219][ T5] usb 1-1: config 0 has an invalid interface number: 135 but max is 0 [ 611.835127][ T5] usb 1-1: config 0 has no interface number 0 [ 611.841370][ T5] usb 1-1: config 0 interface 135 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 611.852192][ T5] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 611.863781][ T5] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has invalid maxpacket 1646, setting to 1024 [ 611.875906][ T5] usb 1-1: config 0 interface 135 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 611.889316][ T5] usb 1-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=65.14 [ 611.898498][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.914437][T11840] usb 3-1: USB disconnect, device number 20 16:04:25 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) pipe(&(0x7f0000000a00)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup2(r7, r6) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r8, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r9}}}, @rights={{0x14, 0x1, 0x1, [r5]}}], 0x38}, 0x0) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000003f00)='./file0\x00', &(0x7f0000003f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, r11) sendmsg$netlink(r8, &(0x7f0000000440)={0x0, 0x0, 0x0, 0xfffffef2, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {r4, 0x0, r10}}}, @cred={{0x0, 0x1, 0x2, {r4, 0xee00, r11}}}], 0x242}, 0xe316514b59e3b37c) getdents64(r3, &(0x7f00000000c0)=""/156, 0x9c) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r12 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffff, 0xffffffff, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x2, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x9}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r12, &(0x7f0000000440)={0x24, &(0x7f0000000340)={0x0, 0x0, 0x2, {0x2, 0x5}}, 0x0, 0x0, 0x0}, 0x0) [ 612.062773][ T5] usb 1-1: config 0 descriptor?? [ 612.109674][T20728] xt_connbytes: cannot load conntrack support for proto=7 [ 612.117023][T20728] xt_connbytes: Forcing CT accounting to be enabled [ 612.142179][ T5] iowarrior 1-1:0.135: IOWarrior product=0x1501, serial= interface=135 now attached to iowarrior0 16:04:25 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xe) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0xd4, &(0x7f0000000000), &(0x7f000026bfec), &(0x7f0000002000), 0x0) 16:04:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@ipv6_getroute={0x30, 0x1a, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_GATEWAY={0xfffffffffffffdf6, 0x1e, @mcast1}]}, 0x30}}, 0x0) [ 612.173867][T11874] usb 4-1: config 0 has an invalid interface number: 66 but max is 0 [ 612.182211][T11874] usb 4-1: config 0 has no interface number 0 [ 612.188406][T11874] usb 4-1: config 0 interface 66 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 612.199586][T11874] usb 4-1: config 0 interface 66 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 612.210620][T11874] usb 4-1: config 0 interface 66 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 612.303869][T11874] usb 4-1: New USB device found, idVendor=7f93, idProduct=5611, bcdDevice=40.15 [ 612.313276][T11874] usb 4-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 612.321453][T11874] usb 4-1: Manufacturer: syz [ 612.328777][T11874] usb 4-1: config 0 descriptor?? [ 612.347005][ T5] usb 1-1: USB disconnect, device number 67 [ 612.368361][ T5] iowarrior 1-1:0.135: I/O-Warror #0 now disconnected [ 612.379641][T11874] hwa-hc 4-1:0.66: FIXME: USB_MAXCHILDREN too low for WUSB adapter (32 ports) [ 612.388895][T11874] usb 4-1: BUG? WUSB host has no security descriptors [ 612.407274][T11874] hwa-hc 4-1:0.66: Wireless USB HWA host controller [ 612.422523][T11874] hwa-hc 4-1:0.66: new USB bus registered, assigned bus number 41 [ 612.447942][T11840] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 612.582612][T11874] hwa-hc 4-1:0.66: error commanding HC to reset: -71 [ 612.589425][T11874] hwa-hc 4-1:0.66: can't setup: -71 [ 612.594977][T11874] hwa-hc 4-1:0.66: USB bus 41 deregistered [ 612.602448][T11874] hwa-hc 4-1:0.66: Cannot add HCD: -71 [ 612.609101][T11874] hwa-hc: probe of 4-1:0.66 failed with error -71 [ 612.620238][T11874] usb 4-1: USB disconnect, device number 35 [ 612.722115][T11840] usb 5-1: Using ep0 maxpacket: 8 [ 612.727463][ T17] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 612.842259][T11840] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 612.972852][ T17] usb 3-1: Using ep0 maxpacket: 32 [ 613.012373][T11840] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.40 [ 613.021600][T11840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.029922][T11840] usb 5-1: Product: syz [ 613.034326][T11840] usb 5-1: Manufacturer: syz [ 613.039027][T11840] usb 5-1: SerialNumber: syz [ 613.142420][ T17] usb 3-1: config 0 has an invalid interface number: 86 but max is 0 [ 613.150639][ T17] usb 3-1: config 0 has no interface number 0 [ 613.156990][ T17] usb 3-1: New USB device found, idVendor=04cb, idProduct=0113, bcdDevice=58.43 [ 613.166172][ T17] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.175789][ T17] usb 3-1: config 0 descriptor?? [ 613.216816][ T17] gspca_main: finepix-2.14.0 probing 04cb:0113 [ 613.352179][T11874] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 613.419647][ T5] usb 3-1: USB disconnect, device number 21 [ 613.546244][T11840] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 613.555936][T11840] usb 5-1: USB disconnect, device number 47 [ 613.722254][T11874] usb 4-1: config 0 has an invalid interface number: 66 but max is 0 [ 613.730504][T11874] usb 4-1: config 0 has no interface number 0 [ 613.736853][T11874] usb 4-1: config 0 interface 66 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 613.747953][T11874] usb 4-1: config 0 interface 66 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 613.758984][T11874] usb 4-1: config 0 interface 66 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 613.842331][T11874] usb 4-1: New USB device found, idVendor=7f93, idProduct=5611, bcdDevice=40.15 [ 613.851510][T11874] usb 4-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 613.860207][T11874] usb 4-1: Manufacturer: syz [ 613.866377][T11874] usb 4-1: config 0 descriptor?? [ 613.904775][T11874] hwa-hc 4-1:0.66: FIXME: USB_MAXCHILDREN too low for WUSB adapter (32 ports) [ 613.913778][T11874] usb 4-1: BUG? WUSB host has no security descriptors [ 613.921412][T11874] hwa-hc 4-1:0.66: Wireless USB HWA host controller [ 613.930606][T11874] hwa-hc 4-1:0.66: new USB bus registered, assigned bus number 41 16:04:27 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="cc0000002400070500"/20, @ANYRES32=r1, @ANYRES64=r3], 0x3}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 16:04:27 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1b1c, 0x1b02, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f00000003c0)={0x0, 0x0, 0x22, {0x22, 0x0, "5cdba0d5b2f22fea542b2388675e925daab1f5649a605d68bdf1cbd052f37fec"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000017c0)={0x2c, &(0x7f0000001500)={0x0, 0x0, 0x5, "d5a46b4986"}, 0x0, 0x0, 0x0, 0x0}) 16:04:27 executing program 0: syz_usb_connect(0x0, 0xbc, &(0x7f0000002c40)={{0x12, 0x1, 0x0, 0x1c, 0x0, 0xf5, 0x40, 0x7c0, 0x1501, 0x6514, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x87, 0x0, 0x1, 0x3, 0x1, 0x12, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "81bb6e86a9"}]}}]}}]}}]}}, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, 0x0, 0x0) 16:04:27 executing program 3: clone(0x400200000041fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000040)=r1) sync() r3 = socket$inet6(0xa, 0x1000000000002, 0x0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r6, r5) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r7, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r8}}}, @rights={{0x14, 0x1, 0x1, [r4]}}], 0x38}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$pptp(0x18, 0x1, 0x2) fchmod(r10, 0x40) r11 = dup2(r9, r3) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r11, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r12}}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x38}, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ptrace$pokeuser(0x6, r13, 0x4, 0xff) rt_tgsigqueueinfo(r0, r0, 0x4000000000014, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$getsig(0x4, r0, 0x7ffff9, 0x0) 16:04:27 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, &(0x7f0000000000)={0x3, 0x800, {0x54, 0x7, 0x9, {0x44, 0x3}, {0x401}, @const={0x0, {0x5, 0x20, 0x6, 0x2}}}, {0x0, 0x800, 0x518, {0x6d, 0x1}, {0x9, 0x8001}, @cond=[{0x5, 0x0, 0x400, 0x8000, 0x400, 0x3}, {0x6, 0x6, 0x7, 0x0, 0x7fff, 0x400}]}}) close(r0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x3e7, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x4, 0x1, 0x1, [r1]}}], 0x38, 0x2000010}, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000080)=0x1, 0x4) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r7, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r8 = dup2(r6, 0xffffffffffffffff) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r8, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r9}}}, @rights={{0x14, 0x1, 0x1, [r6]}}], 0x38}, 0x0) ioctl$sock_inet_SIOCDARP(r8, 0x8953, &(0x7f0000000140)={{0x2, 0x4e24, @broadcast}, {0x306, @dev={[], 0x1c}}, 0x40, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'vlan0\x00'}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'batadv0\x00\x80\x01\xa0\xff\xff\xff\xff\x00', @random="0100040c0b10"}) [ 614.120040][T11874] hwa-hc 4-1:0.66: error commanding HC to reset: -71 [ 614.127028][T11874] hwa-hc 4-1:0.66: can't setup: -71 [ 614.132528][T11874] hwa-hc 4-1:0.66: USB bus 41 deregistered [ 614.173648][T11874] hwa-hc 4-1:0.66: Cannot add HCD: -71 [ 614.198603][T11874] hwa-hc: probe of 4-1:0.66 failed with error -71 16:04:27 executing program 2: r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x2}, 0x8) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x2}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @multicast1}, 0xfffffffffffffffa, &(0x7f0000007f80)=[{&(0x7f0000000200)='*', 0x1}], 0x1}, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000300)='/dev/midi#\x00', 0x5, 0x82000) r2 = accept$inet6(r1, &(0x7f00000002c0), &(0x7f00000000c0)=0xfffffffffffffd63) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000140), 0x4) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x101000, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r3, 0xc008551b, &(0x7f0000000280)=ANY=[@ANYBLOB]) r4 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0xffff, 0x8100) bind$rds(r4, &(0x7f00000001c0)={0x2, 0x4e23, @local}, 0x10) r5 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x6, 0x400000) ioctl$LOOP_SET_CAPACITY(r5, 0x4c07) [ 614.225742][T11874] usb 4-1: USB disconnect, device number 36 16:04:27 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) setxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:iptables_initrc_exec_t:s0\x00', 0x2c, 0x1) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x200000004e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xee, &(0x7f0000000140), &(0x7f0000000040)=0x8) [ 614.312176][ T5] usb 5-1: new high-speed USB device number 48 using dummy_hcd 16:04:27 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x1, 0xfe18) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000000)={'syzkaller1\x00', {0x2, 0x4e23, @multicast1}}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="0000ee000000000000000900"}, 0x1c) 16:04:27 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f00000000c0)={0x0, 0xffffffffffffff4d, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000040107031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x100000000000019e}, 0x0) [ 614.422061][T11840] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 614.452632][ T17] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 614.552325][ T5] usb 5-1: Using ep0 maxpacket: 8 [ 614.672317][ T5] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 614.702080][ T17] usb 2-1: Using ep0 maxpacket: 8 [ 614.812152][T11840] usb 1-1: config 0 has an invalid interface number: 135 but max is 0 [ 614.820593][T11840] usb 1-1: config 0 has no interface number 0 [ 614.827021][T11840] usb 1-1: config 0 interface 135 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 614.838277][T11840] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 614.849729][T11840] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has invalid maxpacket 1646, setting to 1024 [ 614.853927][ T5] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.40 [ 614.861124][T11840] usb 1-1: config 0 interface 135 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 614.861218][T11840] usb 1-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=65.14 [ 614.870372][ T5] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.884095][T11840] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.893250][ T5] usb 5-1: Product: syz [ 614.902099][ T17] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 614.909264][ T5] usb 5-1: Manufacturer: syz [ 614.913475][ T17] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 614.924372][ T5] usb 5-1: SerialNumber: syz [ 614.928995][ T17] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 614.955562][ T17] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.965097][T11840] usb 1-1: config 0 descriptor?? [ 614.971086][ T17] usb 2-1: config 0 descriptor?? [ 615.010650][T11840] iowarrior 1-1:0.135: IOWarrior product=0x1501, serial= interface=135 now attached to iowarrior0 16:04:28 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x3}}, 0x1b) getsockname$inet(r0, 0x0, &(0x7f0000000080)) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0xc0800, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f00000000c0)=0x1, r2, 0x0, 0x0, 0x1}}, 0x20) 16:04:28 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x3, 0x10) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000040)=[0x401, 0x2e5, 0x1, 0x20, 0x8, 0x200, 0x52b, 0x2]) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r0, 0x0) mlock(&(0x7f0000a0c000/0x1000)=nil, 0x1000) fadvise64(r0, 0x1, 0x0, 0x4) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r6}}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x38}, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x6}, 0x8) 16:04:28 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='yeah\x00', 0x5) sendto$inet(r0, &(0x7f00000012c0)="0b268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, r1) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r4, 0xc008551c, &(0x7f0000000040)={0x7, 0x4, [0x9]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r5, r3) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r7}}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x38}, 0x0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r11, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r12}}}, @rights={{0x14, 0x1, 0x1, [r8]}}], 0x38}, 0x0) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) r14 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r14, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r13, 0x84, 0x7d, &(0x7f0000000300)={r15, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000040)=0x100) getsockopt$inet_sctp_SCTP_MAXSEG(r8, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r15, 0x77}, &(0x7f0000000180)=0x8) r16 = socket$unix(0x1, 0x2, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r16) 16:04:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x4c2a01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x310400, 0x0) ioctl$PIO_FONT(r3, 0x4b61, &(0x7f0000000080)="f08335de128dd1d59fe6a2cf2b95a32dbc5c1a1d54f219ba62487065e6a89b64a0e432d936e6929db418fabdc0668d069f19ac1066b4c0b35967cbba2844a83c8e692aeebc55ad5f5ba78e606bd0ddff9d20d6c910079c825c2efb2c78fb27119ced2d664aaf71b65aa81dd2") ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2000000000000202) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) [ 615.157181][ T5] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 615.235306][T11874] usb 1-1: USB disconnect, device number 68 [ 615.243419][ T5] usb 5-1: USB disconnect, device number 48 [ 615.253965][T11874] iowarrior 1-1:0.135: I/O-Warror #0 now disconnected [ 615.471583][ T17] corsair 0003:1B1C:1B02.000C: unknown main item tag 0x2 [ 615.483548][ T17] corsair 0003:1B1C:1B02.000C: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.1-1/input0 [ 615.672319][ T17] corsair 0003:1B1C:1B02.000C: Read invalid backlight brightness: 86. [ 615.886600][ T5] usb 2-1: USB disconnect, device number 29 [ 616.652118][ T17] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 616.892099][ T17] usb 2-1: Using ep0 maxpacket: 8 [ 617.032276][ T17] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 617.043360][ T17] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 617.056393][ T17] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 617.065506][ T17] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.074974][ T17] usb 2-1: config 0 descriptor?? 16:04:30 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000911000)={{&(0x7f00003e3000/0x1000)=nil, 0x1000}, 0x1}) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0xe}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00004b4000/0x1000)=nil, 0x1000}, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000913000)={{&(0x7f00004b3000/0x5000)=nil, 0x5000}, 0x1}) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000040)={0x1, [0x200]}, 0x6) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r5, r4) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r7}}}, @rights={{0x14, 0x1, 0x1, [r3]}}], 0x38}, 0x0) r8 = fcntl$dupfd(0xffffffffffffffff, 0x406, r3) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1}) read(r1, &(0x7f0000000200)=""/100, 0x64) read(r0, &(0x7f0000000400)=""/100, 0x64) 16:04:30 executing program 5: syz_usb_connect(0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x0) 16:04:30 executing program 4: syz_usb_connect(0x0, 0x3f, &(0x7f0000000340)=ANY=[@ANYBLOB="120100003ee7ed40b82227604e210000000109022d0001000000000904320000020a0000053e0600001fb2909eab2205240000b9e78d590ebe60dd000000000000042413d96319cb4d106569a787a5d2873b0a34aaec598a98cbf0e740754429973246814815a971132541a2b3941e9d53163f4c07d34e99aad130b7d8a5387fe8485837da95277994cecfcd447ec6672e3057aa11cc1a80053ec1f21bf056aa5d03e7274f7e0a7d4abe5b40fdbb2369882ea1e66c303c44cc05687ee74538b0e55446e097bb6d429902caf06bbfeeee8f8d98dc29a43bf623a3bde96c5099388fdd01c05148aee2520e436181"], 0x0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r4}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x38}, 0x0) getresuid(&(0x7f0000000100), &(0x7f0000000200)=0x0, &(0x7f0000000240)) r6 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x27) r7 = socket(0xa, 0x3, 0x6) connect$bt_rfcomm(r7, &(0x7f0000000000)={0x1f, {0xfe, 0x0, 0x1000, 0x80000001, 0x6, 0x5}, 0x8}, 0xa) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x6}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f0000000480)=0xe8) r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r9, 0x84, 0x6d, &(0x7f0000000900)=ANY=[@ANYBLOB="ab000000a6d23fa0c9cb488b619002d1d896e5ffb3b62ccfa516aec8038d482cd2aa0b6ac0d684fba227e9983be9f367da66938eddee11b161213cdf2bd00a8ae552bc17ec5e976fa67846060aa7629aed35eb9bb9e096cc3825df10acb8c0dff4569bb0f686a3856eb778df7afa4a3112676e9547e0d65bee83afa0b4f46a0b10af299da7efdcc6c573074de84403de7902a06096d7483194ad47775d355b9800000008008b0500"/193], &(0x7f0000000540)=0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8) setuid(r11) r12 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r12, 0x84, 0x6d, &(0x7f00000006c0)=ANY=[@ANYBLOB="ab000000a6d23fa0c9cb488bfdee3eb191726190f2d1d896773545328b79d2b3b62ccfa516aec8038d48d684fba227e9983be9f367da66938eddee11b1613f0d5ff3b2213c782bd00a8ae552bc17ec5e976fa67846060aa7629aed35eb9bb9e096cc3825df10acb8c0dff4569bb0f6f309ab46fa86a3856eb778df7afa4a3112676e9547e0d65bee83afa0b4f46a0b10af299da7efdcc6c573074de84403de7902a07096d7483194ad47775d355bd65460a5a52aa9cc384c962b12062cf85884362f08008907665c6716449a30c81bd56a349d36094f2add75bf53000100000000000000678a50a09ff13589016438d0c5f0044462e676a23850b5c862e289843fe3bb7d0fb8bcdcd9c07ccacbf83de79626720dae5ec76e30837a2c9dea5637c2ad6439cd6bf51986860a677896248acef0867cfdedb1f0f8e592c6105aef57c1c073c23507bd28cfcd47a74cafba3762f6b6c1c6ee238a2bfe44d0b9e8ef5a7998b7317c4b9dd2f9a20b0031abf74f7d16d6907e95b2addeda2f736ccb52ea2a1d243ce205c3a88af23045c0614b21cbf1b3cf4ece451658e9785da902db6baa4895a67e96c8eacc5e8fcf8de57aa3c70518f31e0d89b0a35a336c2e68e7846f8330302b729eceffdf18b98e510a6c236daeef51b4ea88a6326060d504db45d42ac1881dd10ff951cfd04d7ae550ccce2eaa0f62e03aa8b38c5e"], &(0x7f0000000540)=0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8) setuid(r13) r14 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r14, 0x84, 0x6d, &(0x7f0000000b40)=ANY=[@ANYBLOB="ab000000a6d23fa0c9cb488b6190f2d1d89677354590dde5ffb3b62ccfa516aec8038d48d684fba227e9983be9f367da66938eddee11b1613f0d5ff3b2213cdf2bd00a8ae552bc17ec5e976fa67846060aa7629aed35eb9bb9e096cc3825df10acb8c0dff4569bb0f6a15cab46fa86a3856eb778df7afa4a3112676e9547e0d65bee83afa0b4f46a0b10af299da7efdcc6c573074de84403de7902a07096d7483194ad47775d355bd65460a5a52aa9cc384c962b12062cf85884362f08008b07"], &(0x7f0000000540)=0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r14, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8) setuid(r15) r16 = request_key(0x0, &(0x7f0000001300)={'syz', 0x2}, &(0x7f0000001340)='em0cpusetmime_type\x00', 0xfffffffffffffff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) keyctl$chown(0x4, r16, 0x0, r17) r18 = request_key(0x0, &(0x7f0000001300)={'syz', 0x2}, &(0x7f0000001340)='em0cpusetmime_type\x00', 0xfffffffffffffff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) keyctl$chown(0x4, r18, 0x0, r19) r20 = request_key(0x0, &(0x7f0000001300)={'syz', 0x2}, &(0x7f0000001340)='em0cpusetmime_type\x00', 0xfffffffffffffff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) keyctl$chown(0x4, r20, 0x0, r21) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r6, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000a00)=ANY=[@ANYBLOB="02000000010002000000000002000400", @ANYRES32=r8, @ANYBLOB="02000200", @ANYRES32=r10, @ANYBLOB="02000100bb86b4c5600d592e64b86edda53135e0f392e4c9ca69b61556778ccf29c4990d1893fd049001c62278a88220d8bb3ef088a2bbfd6fdd3bbbaa8e7ff1e7d747037c523caba1237cfd937b81d9ae40c8e42df69a9ad815e799bd07b8468681a262136f0b4027e75c77b74f2bc0ad4402225b8f934741a657b08fa3e58bffe4394310ebab08c71788455eb3b79d61d24d289378388103fdaa96ee42a18df1027aa5865c0b", @ANYRES32=r11, @ANYBLOB="02000400", @ANYRES32=r5, @ANYBLOB, @ANYRES32=r13, @ANYBLOB="02000200", @ANYRES32=r15, @ANYBLOB="02000500", @ANYRES32=r5, @ANYBLOB="040002000000000008000100", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=r17, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r19, @ANYBLOB="08000400", @ANYRES32=r21, @ANYBLOB="08000300", @ANYRES32=r22, @ANYRES32, @ANYBLOB="0800d8b8", @ANYRES32, @ANYBLOB="10000200000000002000d6f800000000"], 0x1c, 0x2) lstat(&(0x7f0000003f00)='./file0\x00', &(0x7f0000003f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, r23) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@loopback}}, &(0x7f0000000180)=0xe8) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x3000, &(0x7f0000000440)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r13}, 0x2c, {'group_id', 0x3d, r23}, 0x2c, {[{@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x3fe}}, {@blksize={'blksize'}}, {@blksize={'blksize', 0x3d, 0x800}}, {@max_read={'max_read', 0x3d, 0xffffffffffff8001}}, {@allow_other='allow_other'}, {@allow_other='allow_other'}], [{@fsname={'fsname', 0x3d, '!,'}}, {@measure='measure'}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@dont_measure='dont_measure'}, {@smackfshat={'smackfshat', 0x3d, '.^cgroup+'}}, {@obj_type={'obj_type'}}, {@smackfshat={'smackfshat', 0x3d, '$'}}, {@fowner_gt={'fowner>', r24}}, {@measure='measure'}, {@obj_user={'obj_user', 0x3d, '-'}}]}}) 16:04:30 executing program 2: r0 = syz_usb_connect(0x0, 0x1e0, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000018b706000000350000060000000000000000000000090400000145e54f00090584033e330000008dc7f50c47e32ee9896bfa1700"/67], 0x0) syz_usb_control_io(r0, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='(em1\x8a\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) [ 617.385752][ T17] corsair 0003:1B1C:1B02.000D: unknown main item tag 0x2 [ 617.402572][ T17] corsair 0003:1B1C:1B02.000D: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.1-1/input0 16:04:30 executing program 0: syz_usb_connect(0x0, 0xbc, &(0x7f0000002c40)={{0x12, 0x1, 0x0, 0x1c, 0x0, 0xf5, 0x40, 0x7c0, 0x1501, 0x6514, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x87, 0x0, 0x1, 0x3, 0x1, 0x12, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "81bb6e86a9"}]}}]}}]}}]}}, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000100)="20b3ce0c3b0cf57286d3df0d17d2d07793e47b9e0211c06bc18fd4e3c90e70328de766e5b4d61feca6e6f030cc3619764985fb35b4d720b2d4eaf89985ac0475e2093edc7455cc5924314944e33cac6d34edfe76cbcb67aacae9", 0x5a}], 0x1) [ 617.504084][ T17] corsair 0003:1B1C:1B02.000D: Failed to get K90 initial state (error -71). 16:04:30 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$inet6(0x10, 0x3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup2(r8, r7) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r9, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r10}}}, @rights={{0x14, 0x1, 0x1, [r6]}}], 0x38}, 0x0) r11 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r12, r11) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = dup2(r16, r14) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r17, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r18}}}, @rights={{0x14, 0x1, 0x1, [r13]}}], 0x38}, 0x0) r19 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r20, r19) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r22 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r24 = dup2(r23, r22) getsockopt$sock_cred(r24, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r24, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r25}}}, @rights={{0x14, 0x1, 0x1, [r21]}}], 0x38}, 0x0) write$binfmt_misc(r3, &(0x7f0000000480)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000040)=ANY=[@ANYPTR, @ANYRES32=r5], @ANYRES16=r10, @ANYRESDEC=r2, @ANYPTR64=&(0x7f0000000100)=ANY=[@ANYBLOB="4f737efecc86e7ee9f86c7da90306b3d12f32ca25d2feeeb5ede9ffdd1a6945e1fbdf9b453ce7af38f8c9bbc796ecec8e9a7425af67cf157e1b7267b28c6f354051de21cb5dcac55c348c99c4b20847ddafc5d15f31b27cc55fbf4069e1974f8b3cbd77c47ac4c3847d9eeebc305f03f11fd98222a9d46a447a3a851a96b16b88f0b04b20ee4a8cb9e3138e69bad944e16121fcf4863a53fe5d539f17fc710a3024b67dfbf", @ANYRESHEX=0x0, @ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRESOCT=r15, @ANYRES32], @ANYPTR]], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYPTR, @ANYRESHEX=r7], @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000280)=ANY=[@ANYRES64=0x0, @ANYRES64, @ANYBLOB="d328c16f15e96c0143484ab943431d5a681e24c8fcd9d06385555268f0cde6207491b7824a82a4596d68a60815547870ab5b62cc5db55c84f76c29f46e384a5d544a34131f862dcce479230c716456d5f4b9cecee5a27f6d619b2d", @ANYRES64], @ANYRESOCT=0x0, @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYPTR64=&(0x7f0000000300)=ANY=[@ANYRESDEC, @ANYRESOCT=r11], @ANYRES32=r18, @ANYRES16, @ANYRESOCT=r19, @ANYRES16=r6, @ANYRESDEC=r9, @ANYRESHEX=r10, @ANYRES16=r24], @ANYRES32=0x0], 0x43) write$P9_RREMOVE(r3, &(0x7f00000000c0)={0x7}, 0x7) splice(r2, 0x0, r4, 0x0, 0x20000001100a, 0x0) [ 617.553962][ T17] usb 2-1: USB disconnect, device number 30 16:04:30 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000040)="ff2432ad0dfb5252e1c568c501a8bf2ca67f3672889f2b512f8f8e6d157cd45857efe458c1eb7b152916e78b158b5056599ef74c2af83047dc5c55ccdaea6c618fba08293bbc00e2612010baf947bcf58fae54a8e54aaf66de97b0378a80a6833ce98a416cbf7fd1") r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000100)=0x5, 0x4) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x801, 0x0) mq_notify(r2, &(0x7f0000000380)={0x0, 0xf, 0x4, @thr={&(0x7f0000000180)="4778c224fbcdebf6699ceccdb47aa5c8156d021103164be2a1b9f8e297471368228067f2d6d521049b129ca3c4a16c28911ea5e9eea21a1f84150265a80a89d9c24d587715dfb5744d24bdeac08f8d124ab1c470c333a85c96958790da6d52048d5bb5136abb158c02c7e974e7b48a65ae11d8f573d3bf19a753e77f096b6678eb16c5ea23e2083f76dea0c23080118d89c0ea597a41bbd77c20980edae2ee611a15001ad5785612f9125b414e517ad7ee9e28a3107767cd61371f4caa95a796b11487b8e5282cea8b9abe74d166", &(0x7f0000000280)="71a884498aac6f2438be5c14bcdd5b73d54e414c1d6bc22f372505715dc14b4887242523e73070993c5a03b79477b1aceb19929e1c462c611aa7277bd5c3afd4c95aacd40d9074a91f3c240b2837a544caae4559fed0d2c70ef2b95c9f8ef5fa00eef76416373d7747e298dfb7c202d170f869ad14af8684ee217a647c8e65134cf5069a592477dbeba1f2560d13515dee373dc21929d5479adcd9af9110cec78850c3158152237a032d47e523472128243b46abfa9741178d49f3aca0f56aa38ff85dec591a38e2315c53c66d"}}) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{}]}) r3 = syz_open_dev$adsp(&(0x7f0000000440)='/dev/adsp#\x00', 0x1, 0x1) accept4(r3, 0x0, &(0x7f0000000480), 0x80000) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x102000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x38, r4, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x9baa24e1c74a6c36}, 0x8018) r5 = socket$isdn(0x22, 0x3, 0x11) ioctl$sock_SIOCADDDLCI(r5, 0x8980, &(0x7f0000000600)={'netdevsim0\x00', 0xffff}) r6 = syz_open_dev$sndpcmp(&(0x7f0000000640)='/dev/snd/pcmC#D#p\x00', 0x8, 0x40) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f0000000680)=0xffffffffffffffff, 0x4) r7 = openat$full(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/full\x00', 0x40100, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r7, 0x541b, &(0x7f0000000700)) r8 = dup3(r5, 0xffffffffffffffff, 0x80000) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000740)=r8, 0x4) r9 = syz_open_dev$admmidi(&(0x7f0000000780)='/dev/admmidi#\x00', 0x8001, 0x880000) ioctl$VIDIOC_ENUM_FMT(r9, 0xc0405602, &(0x7f00000007c0)={0x3, 0x3c597e7a778bd8dd, 0x6eb0c0361c4d9589, "514cd93fce0d2ae9c6191c5719f2f2fe3679b7b8fc070e3da1ce685da01c1ce2", 0x3136564e}) r10 = accept4$inet(r3, &(0x7f0000000800)={0x2, 0x0, @multicast1}, &(0x7f0000000840)=0x10, 0x800) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000880)={0x0, 0x8, 0x3fbd}, &(0x7f00000008c0)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r10, 0x84, 0x0, &(0x7f0000000900)={r11, 0x1, 0x8000, 0x1}, 0x10) accept4$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @dev}, &(0x7f0000000980)=0x10, 0x40000) openat$dir(0xffffffffffffff9c, &(0x7f00000009c0)='./file0\x00', 0x40000, 0x40) r12 = openat$full(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/full\x00', 0x2000, 0x0) clock_gettime(0x0, &(0x7f0000000a80)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000ac0)={0x0, 0x0}) utimensat(r12, &(0x7f0000000a40)='./file0\x00', &(0x7f0000000b00)={{r13, r14/1000+30000}, {r15, r16/1000+10000}}, 0x0) 16:04:30 executing program 3: pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r4}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x38}, 0x0) write$rfkill(r3, &(0x7f0000000340)={0x7, 0x5, 0x0, 0x1}, 0x8) open(&(0x7f0000000080)='./file0\x00', 0x27b, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup2(r8, r7) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r9, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r10}}}, @rights={{0x14, 0x1, 0x1, [r6]}}], 0x38}, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r6, 0xc06855c8, &(0x7f00000002c0)={0x0, 0x4, {0x55, 0x800, 0x74a, {0x5, 0xaa59}, {0x639, 0x3ff}, @rumble={0x7, 0x8}}, {0x53, 0x8, 0x100, {0xad8, 0x401}, {0x0, 0x1}, @cond=[{0x0, 0x6, 0x0, 0x7fff, 0x7, 0x4}, {0xb998, 0xf0, 0x6, 0x7, 0x20, 0xb49}]}}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='mqueue\x00', 0x0, &(0x7f00000001c0)='cputsetppp1-\xd2\x16\x9f\xde\x03\xbd\x8dk\xd2\x1d\xf0\x80\xb7\xca\xf1\x03\xe8=E\x00>\xe9\x13uU\t\xe0NKFD~\xeb9\xd8\x04\aE\x94\x0e\x19iR\x0fS\x9d=\x19\xc3x\xe2\n\xb5\x15\x14\xfa\xb1\xbb\x829:\x902s\xa9\xe0\xba\xd7=\xc2\xff5\x04\xe5$\xd6\xc5v\x9d\x80y(\x91\x1f\xd9\x0ek\xc2g\xf3\x11)\b\x1e\xad\t\x03\xf2H\x9f&\xef:q\x91mx\x1d\x8b\xf2\xb2\v\x92\xd3s\"p4\xf5\x8b\xa8~\xea\xbe6\xb6Ez3\xdc\xfa\x14l\xeb\x1bo\x88\t! \xc7f\xc3?\xe9\xe1\xbc\x1c\x11\\\xf7\a]\x87\xb4\xb1\xca\x9d?\xb7\xb8s\xe7{\x91\x0eI\xfd\xac\xe6\xc3\x1e\xfc\xab\xd3,\xefy\x125\xf9\xc6\xd1\xd40\xb4g%J\xeeT\rt\xff%\x15\x81O\x19E*') r11 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x101000, 0x0) fsetxattr$trusted_overlay_opaque(r11, &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0x2, 0x2) [ 617.762276][ T5] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 617.801287][T20847] mqueue: Unknown parameter 'cputsetppp1-ÒŸÞ½kÒð€·Êñè' 16:04:30 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18e, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) [ 617.814458][T11874] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 617.822423][T11877] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 617.830074][T20847] mqueue: Unknown parameter 'cputsetppp1-ÒŸÞ½kÒð€·Êñè' 16:04:30 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x80000101005, 0x0) r1 = dup2(r0, r0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000000)=""/246) pwritev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)='\x00!', 0x2}], 0x1, 0x0) [ 617.927701][T20851] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 16:04:31 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0x7ffffffffffff00c}, {0x6}]}, 0x10) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r6, r5) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r7, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r8}}}, @rights={{0x14, 0x1, 0x1, [r4]}}], 0x38}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) write$UHID_INPUT2(0xffffffffffffffff, &(0x7f0000000140), 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10001, 0x0) 16:04:31 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000102505a1a44000010203010902680002010000000904000001020d0000052406000105240000000d240f0100000000000000000006391a0000000c241b0000000000000000000905810300000000000904010100020d00000904010102020d0000090582020000000000090503020000000000"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) r3 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 618.112428][T11874] usb 3-1: device descriptor read/64, error 18 [ 618.152282][ T5] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 618.160536][ T5] usb 5-1: config 0 has an invalid descriptor of length 31, skipping remainder of the config [ 618.170904][ T5] usb 5-1: config 0 has no interface number 0 [ 618.177138][ T5] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=21.4e [ 618.186505][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.196065][ T5] usb 5-1: config 0 descriptor?? [ 618.232386][T11877] usb 1-1: config 0 has an invalid interface number: 135 but max is 0 [ 618.240711][T11877] usb 1-1: config 0 has no interface number 0 [ 618.247059][T11877] usb 1-1: config 0 interface 135 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 618.258243][T11877] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 618.269710][T11877] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has invalid maxpacket 1646, setting to 1024 [ 618.281015][T11877] usb 1-1: config 0 interface 135 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 618.294202][T11877] usb 1-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=65.14 [ 618.303377][T11877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.314914][ T5] cdc_ether 5-1:0.50: skipping garbage [ 618.320584][ T5] usb 5-1: bad CDC descriptors [ 618.326161][ T5] usb 5-1: unsupported MDLM descriptors [ 618.338772][T11877] usb 1-1: config 0 descriptor?? [ 618.398558][T11877] iowarrior 1-1:0.135: IOWarrior product=0x1501, serial= interface=135 now attached to iowarrior0 16:04:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xd, 0x58283) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000040)={0x2, [0xfd5, 0x6]}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x1c, 0x2, [@IFLA_BOND_FAIL_OVER_MAC={0x8}, @IFLA_BOND_MODE={0x8}, @IFLA_BOND_XMIT_HASH_POLICY={0x8}]}}}]}, 0x4c}}, 0x0) [ 618.462522][T11950] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 618.513195][T11877] usb 5-1: USB disconnect, device number 49 [ 618.555009][T20868] validate_nla: 3 callbacks suppressed [ 618.555022][T20868] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 618.569299][T20868] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 618.577477][T20868] netlink: 'syz-executor.5': attribute type 14 has an invalid length. [ 618.586956][T11874] usb 3-1: device descriptor read/64, error 18 [ 618.614248][ T5] usb 1-1: USB disconnect, device number 69 [ 618.624317][T20870] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 618.632984][T20870] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 618.641109][T20870] netlink: 'syz-executor.5': attribute type 14 has an invalid length. [ 618.652231][ T5] iowarrior 1-1:0.135: I/O-Warror #0 now disconnected 16:04:31 executing program 5: ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0) r0 = syz_usb_connect$hid(0x0, 0xb7, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000085e1e1303000000000001090224c30100000000090401000903000000092100000001222209090581030000000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="090001010000000000002a54426402ed88413a953c3215f523b546d3b92ca2240969fe2b4a83"], 0x0, 0x0, 0x0, 0x0}, 0x0) [ 618.714549][T11950] usb 2-1: Using ep0 maxpacket: 16 [ 618.852412][T11950] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 618.863543][T11950] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 1, skipping [ 618.873083][T11950] usb 2-1: config 1 interface 1 has no altsetting 0 [ 618.882110][T11874] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 619.033164][T11950] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 619.042586][T11950] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.050669][T11950] usb 2-1: Product: syz [ 619.055112][T11950] usb 2-1: Manufacturer: syz [ 619.059758][T11950] usb 2-1: SerialNumber: syz [ 619.065303][T11876] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 619.114987][T11950] cdc_ncm 2-1:1.0: skipping garbage [ 619.120299][T11950] cdc_ncm 2-1:1.0: bind() failure [ 619.152095][T11874] usb 3-1: device descriptor read/64, error 18 [ 619.293054][ T17] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 619.312444][T11876] usb 6-1: Using ep0 maxpacket: 8 [ 619.322811][T11950] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 619.335025][T11950] usb 2-1: USB disconnect, device number 31 [ 619.432350][T11876] usb 6-1: config index 0 descriptor too short (expected 49956, got 165) [ 619.440896][T11876] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 619.449087][T11876] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 619.459333][T11876] usb 6-1: config 0 has no interface number 0 [ 619.465526][T11876] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 619.476542][T11876] usb 6-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 619.489575][T11876] usb 6-1: New USB device found, idVendor=1e5e, idProduct=0313, bcdDevice= 0.00 [ 619.498795][T11876] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.508639][T11876] usb 6-1: config 0 descriptor?? [ 619.572129][T11874] usb 3-1: device descriptor read/64, error 18 [ 619.662285][ T17] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 619.670672][ T17] usb 5-1: config 0 has an invalid descriptor of length 31, skipping remainder of the config [ 619.681165][ T17] usb 5-1: config 0 has no interface number 0 [ 619.687575][ T17] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=21.4e [ 619.692333][T11874] usb usb3-port1: attempt power cycle [ 619.696762][ T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.712285][ T17] usb 5-1: config 0 descriptor?? [ 619.754601][ T17] cdc_ether 5-1:0.50: skipping garbage [ 619.760240][ T17] usb 5-1: bad CDC descriptors [ 619.765960][ T17] usb 5-1: unsupported MDLM descriptors [ 619.961870][T11950] usb 5-1: USB disconnect, device number 50 [ 620.092165][ T17] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 620.232313][T11876] usbhid 6-1:0.1: can't add hid device: -71 [ 620.238596][T11876] usbhid: probe of 6-1:0.1 failed with error -71 [ 620.249500][T11876] usb 6-1: USB disconnect, device number 42 [ 620.342084][ T17] usb 2-1: Using ep0 maxpacket: 16 [ 620.422090][T11874] usb 3-1: new high-speed USB device number 24 using dummy_hcd 16:04:33 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x45e, 0x9d, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x6, {[@main=@item_012={0x0, 0x0, 0xa}, @global=@item_4={0x3, 0x1, 0xa, "8c3544b0"}]}}, 0x0}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x104400, 0x0) getpeername$tipc(r1, &(0x7f0000000080)=@name, &(0x7f0000000100)=0x10) [ 620.462315][ T17] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 620.473511][ T17] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 1, skipping [ 620.473575][ T17] usb 2-1: config 1 interface 1 has no altsetting 0 16:04:33 executing program 0: syz_usb_connect(0x0, 0xbc, &(0x7f0000002c40)={{0x12, 0x1, 0x0, 0x1c, 0x0, 0xf5, 0x40, 0x7c0, 0x1501, 0x6514, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x87, 0x0, 0x1, 0x3, 0x1, 0x12, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "81bb6e86a9"}]}}]}}]}}]}}, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f0000000200), 0x0) 16:04:33 executing program 4: syz_usb_connect(0x0, 0x3b, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000095005eda010000000000000206000005240600"/61], 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x81003, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000000300)={0x0, 0x0, [0xca, 0x7, 0xb6, 0x1]}) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x20, r2, 0x415, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000200}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="84014000", @ANYRES16=r2, @ANYBLOB="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"], 0x184}}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) ioctl$PPPIOCGFLAGS1(r3, 0x8004745a, &(0x7f00000003c0)) 16:04:33 executing program 2: write$apparmor_exec(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x7) r0 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x2, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x38, &(0x7f0000000040)=0x548c7b03, 0x4) execve(&(0x7f0000000440)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000580)='wlan1\x00', &(0x7f0000000600)='security.capability\x00'], &(0x7f0000000780)=[&(0x7f00000007c0)='\xd7\x06\xac>(\x10\xe0\xc1\xd9\xb6\x01\x97\x97\xe31\xd1\xe5\xebw-\xb7\xc3=\xb8|B\x12\xcbk\x92]\xc34;W\a\xdd[\x96\xbe\xcb\x9b\x8cDS\xa1\xd4H\x114\xc1f*W\x01r?+\x05\x8b\xa6G\xb8\x7fS\x0e\xbf\x06\x1f^\xa3zv\xc60\xa5\xd8\xe3\xee\x19p\x9aW]\xb5T\r\xbam\xd2\x9eR\f^f\xa5\xdb\xc5\xe2\xa3\x16\x1bs\xa3)_?\xc9\f\xa35\x10\xe2\xd4\x86\f\x91\xeeY9\t \xaf\xeb\xf3\xed/\x9c\xa9\x86\x95E\x98)\xcb1!T\xbc\x84=\x1feQ\xf9S\xd9\xbd`]\x16\xbf\x03\xb5Co\xacb,\xd3\xe6\xbf\x9a\xecN%\x9c\xbb\xb0\x98\xf0\x93PG[\xeb\x92\xfd(\xd3\x96J\x14\xfc\x10\xff\tE\xcae\xe2\xce\x1cV|2Z\x19\x8d\xb7\x13\x9c\x9b\x04\xb9$\xfe\xd9', &(0x7f0000000740)='!\x00']) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000080)={0x0}) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r5, r4) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r7}}}, @rights={{0x14, 0x1, 0x1, [r3]}}], 0x38}, 0x0) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000140)=0x100) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f00000000c0)={r2, 0x2}) r8 = socket$caif_stream(0x25, 0x1, 0x5) getsockopt$bt_hci(r8, 0x0, 0x1, &(0x7f00000008c0)=""/4096, &(0x7f0000000100)=0x1000) socket$can_bcm(0x1d, 0x2, 0x2) [ 620.632459][ T17] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 620.641641][ T17] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.650046][ T17] usb 2-1: Product: syz [ 620.654426][ T17] usb 2-1: Manufacturer: syz [ 620.659090][ T17] usb 2-1: SerialNumber: syz [ 620.676120][T20894] Unknown ioctl 1074291748 16:04:33 executing program 2: write$apparmor_exec(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x7) r0 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x2, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x38, &(0x7f0000000040)=0x548c7b03, 0x4) execve(&(0x7f0000000440)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000580)='wlan1\x00', &(0x7f0000000600)='security.capability\x00'], &(0x7f0000000780)=[&(0x7f00000007c0)='\xd7\x06\xac>(\x10\xe0\xc1\xd9\xb6\x01\x97\x97\xe31\xd1\xe5\xebw-\xb7\xc3=\xb8|B\x12\xcbk\x92]\xc34;W\a\xdd[\x96\xbe\xcb\x9b\x8cDS\xa1\xd4H\x114\xc1f*W\x01r?+\x05\x8b\xa6G\xb8\x7fS\x0e\xbf\x06\x1f^\xa3zv\xc60\xa5\xd8\xe3\xee\x19p\x9aW]\xb5T\r\xbam\xd2\x9eR\f^f\xa5\xdb\xc5\xe2\xa3\x16\x1bs\xa3)_?\xc9\f\xa35\x10\xe2\xd4\x86\f\x91\xeeY9\t \xaf\xeb\xf3\xed/\x9c\xa9\x86\x95E\x98)\xcb1!T\xbc\x84=\x1feQ\xf9S\xd9\xbd`]\x16\xbf\x03\xb5Co\xacb,\xd3\xe6\xbf\x9a\xecN%\x9c\xbb\xb0\x98\xf0\x93PG[\xeb\x92\xfd(\xd3\x96J\x14\xfc\x10\xff\tE\xcae\xe2\xce\x1cV|2Z\x19\x8d\xb7\x13\x9c\x9b\x04\xb9$\xfe\xd9', &(0x7f0000000740)='!\x00']) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000080)={0x0}) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r5, r4) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r7}}}, @rights={{0x14, 0x1, 0x1, [r3]}}], 0x38}, 0x0) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000140)=0x100) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f00000000c0)={r2, 0x2}) r8 = socket$caif_stream(0x25, 0x1, 0x5) getsockopt$bt_hci(r8, 0x0, 0x1, &(0x7f00000008c0)=""/4096, &(0x7f0000000100)=0x1000) socket$can_bcm(0x1d, 0x2, 0x2) [ 620.703769][T20900] Unknown ioctl 1074291748 [ 620.757987][ T17] cdc_ncm 2-1:1.0: skipping garbage [ 620.763464][ T17] cdc_ncm 2-1:1.0: bind() failure [ 620.778384][T20907] Unknown ioctl 1074291748 16:04:33 executing program 2: write$apparmor_exec(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x7) r0 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x2, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x38, &(0x7f0000000040)=0x548c7b03, 0x4) execve(&(0x7f0000000440)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000580)='wlan1\x00', &(0x7f0000000600)='security.capability\x00'], &(0x7f0000000780)=[&(0x7f00000007c0)='\xd7\x06\xac>(\x10\xe0\xc1\xd9\xb6\x01\x97\x97\xe31\xd1\xe5\xebw-\xb7\xc3=\xb8|B\x12\xcbk\x92]\xc34;W\a\xdd[\x96\xbe\xcb\x9b\x8cDS\xa1\xd4H\x114\xc1f*W\x01r?+\x05\x8b\xa6G\xb8\x7fS\x0e\xbf\x06\x1f^\xa3zv\xc60\xa5\xd8\xe3\xee\x19p\x9aW]\xb5T\r\xbam\xd2\x9eR\f^f\xa5\xdb\xc5\xe2\xa3\x16\x1bs\xa3)_?\xc9\f\xa35\x10\xe2\xd4\x86\f\x91\xeeY9\t \xaf\xeb\xf3\xed/\x9c\xa9\x86\x95E\x98)\xcb1!T\xbc\x84=\x1feQ\xf9S\xd9\xbd`]\x16\xbf\x03\xb5Co\xacb,\xd3\xe6\xbf\x9a\xecN%\x9c\xbb\xb0\x98\xf0\x93PG[\xeb\x92\xfd(\xd3\x96J\x14\xfc\x10\xff\tE\xcae\xe2\xce\x1cV|2Z\x19\x8d\xb7\x13\x9c\x9b\x04\xb9$\xfe\xd9', &(0x7f0000000740)='!\x00']) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000080)={0x0}) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r5, r4) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r7}}}, @rights={{0x14, 0x1, 0x1, [r3]}}], 0x38}, 0x0) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000140)=0x100) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f00000000c0)={r2, 0x2}) r8 = socket$caif_stream(0x25, 0x1, 0x5) getsockopt$bt_hci(r8, 0x0, 0x1, &(0x7f00000008c0)=""/4096, &(0x7f0000000100)=0x1000) socket$can_bcm(0x1d, 0x2, 0x2) [ 620.814447][T11840] usb 4-1: new high-speed USB device number 37 using dummy_hcd 16:04:33 executing program 2: write$apparmor_exec(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x7) r0 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x2, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x38, &(0x7f0000000040)=0x548c7b03, 0x4) execve(&(0x7f0000000440)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000580)='wlan1\x00', &(0x7f0000000600)='security.capability\x00'], &(0x7f0000000780)=[&(0x7f00000007c0)='\xd7\x06\xac>(\x10\xe0\xc1\xd9\xb6\x01\x97\x97\xe31\xd1\xe5\xebw-\xb7\xc3=\xb8|B\x12\xcbk\x92]\xc34;W\a\xdd[\x96\xbe\xcb\x9b\x8cDS\xa1\xd4H\x114\xc1f*W\x01r?+\x05\x8b\xa6G\xb8\x7fS\x0e\xbf\x06\x1f^\xa3zv\xc60\xa5\xd8\xe3\xee\x19p\x9aW]\xb5T\r\xbam\xd2\x9eR\f^f\xa5\xdb\xc5\xe2\xa3\x16\x1bs\xa3)_?\xc9\f\xa35\x10\xe2\xd4\x86\f\x91\xeeY9\t \xaf\xeb\xf3\xed/\x9c\xa9\x86\x95E\x98)\xcb1!T\xbc\x84=\x1feQ\xf9S\xd9\xbd`]\x16\xbf\x03\xb5Co\xacb,\xd3\xe6\xbf\x9a\xecN%\x9c\xbb\xb0\x98\xf0\x93PG[\xeb\x92\xfd(\xd3\x96J\x14\xfc\x10\xff\tE\xcae\xe2\xce\x1cV|2Z\x19\x8d\xb7\x13\x9c\x9b\x04\xb9$\xfe\xd9', &(0x7f0000000740)='!\x00']) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000080)={0x0}) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r5, r4) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r7}}}, @rights={{0x14, 0x1, 0x1, [r3]}}], 0x38}, 0x0) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000140)=0x100) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f00000000c0)={r2, 0x2}) r8 = socket$caif_stream(0x25, 0x1, 0x5) getsockopt$bt_hci(r8, 0x0, 0x1, &(0x7f00000008c0)=""/4096, &(0x7f0000000100)=0x1000) socket$can_bcm(0x1d, 0x2, 0x2) [ 620.862546][T11876] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 620.892315][ T4071] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 620.905881][T20915] Unknown ioctl 1074291748 [ 620.972893][ T17] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 621.000805][T20923] Unknown ioctl 1074291748 [ 621.015708][ T17] usb 2-1: USB disconnect, device number 32 16:04:34 executing program 2: write$apparmor_exec(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="65786563203a0c4ecd541384a281d75f72da1bc5f814e7f441ae458c64730830c84594cbd49bd269b03054f71bd5f94a59151e5c449af209c513e30a16739575870837939f3fd5946d27cc7b21822088c670a3c3b3b2f84975faa9657ea7aba23703920e36070aea867d3ec620495e31d04fbfbacd72cab8fe35997486df4efe11ca9a01d49839511733adda47d24195adacec5fa1a25aa20d4690cb90282cf72499d1477d1a88421a08476e0d6d2fa71d3baf783c41f17d163fb781725f95fe3a261a02027ebd5becb5110f524f25082e4d3794b0e8dcb2898525fc13840b3806890d008bbe1fc3932abe8720dea31d5ce78ec7ea80790f2341463ffba964d9c855227d455c65abad7098f18d06900b35c032b2b980133265095d9467bb309ba044f23ed9383c9c800d06b15f1c5aa26620df1bf168a993bcbb0ae158c589561642e51f5f787af0e76afec46a0771d4c65dc57ff6c12587fdb31fcf57964c0dfe4a0e6525822e05cf8f0af42f05b6c8ae60031f89b00c64b72f69ea4699"], 0x7) r0 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x2, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x38, &(0x7f0000000040)=0x548c7b03, 0x4) execve(&(0x7f0000000440)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000580)='wlan1\x00', &(0x7f0000000600)='security.capability\x00'], &(0x7f0000000780)=[&(0x7f00000007c0)='\xd7\x06\xac>(\x10\xe0\xc1\xd9\xb6\x01\x97\x97\xe31\xd1\xe5\xebw-\xb7\xc3=\xb8|B\x12\xcbk\x92]\xc34;W\a\xdd[\x96\xbe\xcb\x9b\x8cDS\xa1\xd4H\x114\xc1f*W\x01r?+\x05\x8b\xa6G\xb8\x7fS\x0e\xbf\x06\x1f^\xa3zv\xc60\xa5\xd8\xe3\xee\x19p\x9aW]\xb5T\r\xbam\xd2\x9eR\f^f\xa5\xdb\xc5\xe2\xa3\x16\x1bs\xa3)_?\xc9\f\xa35\x10\xe2\xd4\x86\f\x91\xeeY9\t \xaf\xeb\xf3\xed/\x9c\xa9\x86\x95E\x98)\xcb1!T\xbc\x84=\x1feQ\xf9S\xd9\xbd`]\x16\xbf\x03\xb5Co\xacb,\xd3\xe6\xbf\x9a\xecN%\x9c\xbb\xb0\x98\xf0\x93PG[\xeb\x92\xfd(\xd3\x96J\x14\xfc\x10\xff\tE\xcae\xe2\xce\x1cV|2Z\x19\x8d\xb7\x13\x9c\x9b\x04\xb9$\xfe\xd9', &(0x7f0000000740)='!\x00']) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000080)={0x0}) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r5, r4) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r7}}}, @rights={{0x14, 0x1, 0x1, [r3]}}], 0x38}, 0x0) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000140)=0x100) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f00000000c0)={r2, 0x2}) r8 = socket$caif_stream(0x25, 0x1, 0x5) getsockopt$bt_hci(r8, 0x0, 0x1, &(0x7f00000008c0)=""/4096, &(0x7f0000000100)=0x1000) socket$can_bcm(0x1d, 0x2, 0x2) [ 621.034431][T12046] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 621.063130][T11840] usb 4-1: Using ep0 maxpacket: 8 16:04:34 executing program 2: write$apparmor_exec(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="65786563203a0c4ecd541384a281d75f72da1bc5f814e7f441ae458c64730830c84594cbd49bd269b03054f71bd5f94a59151e5c449af209c513e30a16739575870837939f3fd5946d27cc7b21822088c670a3c3b3b2f84975faa9657ea7aba23703920e36070aea867d3ec620495e31d04fbfbacd72cab8fe35997486df4efe11ca9a01d49839511733adda47d24195adacec5fa1a25aa20d4690cb90282cf72499d1477d1a88421a08476e0d6d2fa71d3baf783c41f17d163fb781725f95fe3a261a02027ebd5becb5110f524f25082e4d3794b0e8dcb2898525fc13840b3806890d008bbe1fc3932abe8720dea31d5ce78ec7ea80790f2341463ffba964d9c855227d455c65abad7098f18d06900b35c032b2b980133265095d9467bb309ba044f23ed9383c9c800d06b15f1c5aa26620df1bf168a993bcbb0ae158c589561642e51f5f787af0e76afec46a0771d4c65dc57ff6c12587fdb31fcf57964c0dfe4a0e6525822e05cf8f0af42f05b6c8ae60031f89b00c64b72f69ea4699"], 0x7) r0 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x2, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x38, &(0x7f0000000040)=0x548c7b03, 0x4) execve(&(0x7f0000000440)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000580)='wlan1\x00', &(0x7f0000000600)='security.capability\x00'], &(0x7f0000000780)=[&(0x7f00000007c0)='\xd7\x06\xac>(\x10\xe0\xc1\xd9\xb6\x01\x97\x97\xe31\xd1\xe5\xebw-\xb7\xc3=\xb8|B\x12\xcbk\x92]\xc34;W\a\xdd[\x96\xbe\xcb\x9b\x8cDS\xa1\xd4H\x114\xc1f*W\x01r?+\x05\x8b\xa6G\xb8\x7fS\x0e\xbf\x06\x1f^\xa3zv\xc60\xa5\xd8\xe3\xee\x19p\x9aW]\xb5T\r\xbam\xd2\x9eR\f^f\xa5\xdb\xc5\xe2\xa3\x16\x1bs\xa3)_?\xc9\f\xa35\x10\xe2\xd4\x86\f\x91\xeeY9\t \xaf\xeb\xf3\xed/\x9c\xa9\x86\x95E\x98)\xcb1!T\xbc\x84=\x1feQ\xf9S\xd9\xbd`]\x16\xbf\x03\xb5Co\xacb,\xd3\xe6\xbf\x9a\xecN%\x9c\xbb\xb0\x98\xf0\x93PG[\xeb\x92\xfd(\xd3\x96J\x14\xfc\x10\xff\tE\xcae\xe2\xce\x1cV|2Z\x19\x8d\xb7\x13\x9c\x9b\x04\xb9$\xfe\xd9', &(0x7f0000000740)='!\x00']) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000080)={0x0}) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r5, r4) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r7}}}, @rights={{0x14, 0x1, 0x1, [r3]}}], 0x38}, 0x0) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000140)=0x100) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f00000000c0)={r2, 0x2}) r8 = socket$caif_stream(0x25, 0x1, 0x5) getsockopt$bt_hci(r8, 0x0, 0x1, &(0x7f00000008c0)=""/4096, &(0x7f0000000100)=0x1000) socket$can_bcm(0x1d, 0x2, 0x2) [ 621.136647][T20932] Unknown ioctl 1074291748 16:04:34 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x1, 0xffffffbd}, [@ldst={0x7, 0x3, 0x2, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0x3, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) [ 621.182159][T11876] usb 5-1: device descriptor read/64, error 18 [ 621.182763][T11840] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 621.199460][T11840] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 621.212418][T11840] usb 4-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.40 [ 621.221545][T11840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.273332][T11840] usb 4-1: config 0 descriptor?? [ 621.292755][ T4071] usb 1-1: config 0 has an invalid interface number: 135 but max is 0 [ 621.301052][ T4071] usb 1-1: config 0 has no interface number 0 [ 621.307654][ T4071] usb 1-1: config 0 interface 135 altsetting 0 has an invalid endpoint with address 0x0, skipping 16:04:34 executing program 1: socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r4}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x38}, 0x0) getsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_emit_ethernet(0x66, &(0x7f00000006c0)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0x63], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0xffffff89, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @gre}}}}, 0x0) socket$l2tp(0x18, 0x1, 0x1) [ 621.318410][ T4071] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 621.329856][ T4071] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has invalid maxpacket 1646, setting to 1024 [ 621.341263][ T4071] usb 1-1: config 0 interface 135 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 621.354455][ T4071] usb 1-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=65.14 [ 621.363595][ T4071] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.457301][T20944] Unknown ioctl 1074291748 16:04:34 executing program 5: gettid() r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) r1 = socket$inet(0x2, 0x200000000003, 0x19) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e0000002ac1414aa0000000002000000e0000002e0000002b1dbbe772000cd5a88da553a6f2c96989d4e8abc73d0c029572314"], 0x18) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000000)={{{@in6=@dev={0xfe, 0x80, [], 0xc}, @in=@multicast1, 0x4e24, 0x8431, 0x4e22, 0xfffd, 0xa, 0xa0, 0x20, 0x3c}, {0xfffffffffffffff8, 0x80000001, 0x3, 0x7, 0xbde, 0x40000000, 0x8, 0x2}, {0x7, 0x400, 0x7ff, 0x1f}, 0x2, 0x6e6bbf, 0x0, 0x3, 0x2, 0x4}, {{@in6=@rand_addr="e0829984b016dbc84d729deaf307173d", 0x4d3, 0x33}, 0xa, @in=@remote, 0x34ff, 0x4, 0x3, 0x22, 0x1, 0x9, 0x5}}, 0xe8) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=r6, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x38}, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5387, &(0x7f0000000140)) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0', [{}, {0x20, '#! '}, {0x20, '#! '}, {0x20, '#! '}, {0x20, '#! '}, {0x20, '#! '}, {0x20, '+'}, {0x20, 'cpu\xd5\x02\xa4se\x8d,D|\x8c\xbf\x14\xc6\x01\x00\x84t\x8d\xb4\xda|\"\xfd\xe6\x95\rh\xc9\x94\x1f\x129\x90\xf5\xc2\xa2\xa5'}]}, 0x4b) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) close(r0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r11, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r12 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r13, r12) getsockopt$inet6_tcp_buf(r12, 0x6, 0x1a, &(0x7f00000002c0)=""/167, &(0x7f0000000380)=0xa7) ioctl$sock_inet_udp_SIOCOUTQ(r11, 0x5411, &(0x7f0000000240)) r14 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = dup2(r15, r14) getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000100)=0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmmsg(r17, &(0x7f0000000140)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/15}, {&(0x7f0000000500)=""/38}, {&(0x7f0000000540)=""/43}], 0x0, &(0x7f0000000280)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x18}}], 0x4000000000001ae, 0x62, 0x0) r18 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r19, r18) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r21 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r23 = dup2(r22, r21) getsockopt$sock_cred(r23, 0x1, 0x11, &(0x7f00000003c0)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r23, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32=r24, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r20, @ANYBLOB="3400008000000000000000"], 0x38}, 0x0) r25 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r26, r25) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmmsg(r27, &(0x7f0000000140)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000280)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x2, 0x60, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vfio/vfio\x00', 0x80, 0x0) sendmsg$netlink(r16, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="100000000000000001000000010000001000000000000000014cd1d85b6e8dffb9415d032ccc9ed300000001000000"], 0xffffffffffffff8e}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r7, &(0x7f0000000100)={0x70000010}) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) [ 621.529476][ T4071] usb 1-1: config 0 descriptor?? [ 621.604744][ T4071] iowarrior 1-1:0.135: IOWarrior product=0x1501, serial= interface=135 now attached to iowarrior0 [ 621.622823][T11876] usb 5-1: device descriptor read/64, error 18 [ 621.778777][ T4071] usb 1-1: USB disconnect, device number 70 [ 621.794345][ T4071] iowarrior 1-1:0.135: I/O-Warror #0 now disconnected [ 621.825780][T11840] microsoft 0003:045E:009D.000E: unbalanced collection at end of report description [ 621.835852][T11840] microsoft 0003:045E:009D.000E: parse failed [ 621.842611][T11840] microsoft: probe of 0003:045E:009D.000E failed with error -22 [ 621.892175][T11876] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 622.025826][T11874] usb 4-1: USB disconnect, device number 37 [ 622.162190][T11876] usb 5-1: device descriptor read/64, error 18 [ 622.572101][T11876] usb 5-1: device descriptor read/64, error 18 [ 622.692372][T11876] usb usb5-port1: attempt power cycle [ 622.802162][T12046] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 623.042509][T12046] usb 4-1: Using ep0 maxpacket: 8 [ 623.172617][T12046] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 623.183783][T12046] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 623.196775][T12046] usb 4-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.40 [ 623.205912][T12046] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.216134][T12046] usb 4-1: config 0 descriptor?? [ 623.402176][T11876] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 623.505518][T12046] microsoft 0003:045E:009D.000F: unbalanced collection at end of report description [ 623.515579][T12046] microsoft 0003:045E:009D.000F: parse failed [ 623.521873][T12046] microsoft: probe of 0003:045E:009D.000F failed with error -22 16:04:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socketpair(0x2, 0x6, 0x6, &(0x7f0000000240)={0xffffffffffffffff}) accept4(r5, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0xffffffffffffff41, 0x800) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4cb], 0x12000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 16:04:36 executing program 2: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup(0xffffffffffffffff) getsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @empty}, &(0x7f0000000040)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_usb_connect(0x0, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x4, 0xb2, 0x18, 0x40, 0x17e9, 0x8226, 0x8118, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xe0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) [ 623.556657][T11874] usb 4-1: USB disconnect, device number 38 16:04:36 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1100082) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x38}, 0x0) write$apparmor_current(r4, &(0x7f0000000000)=@profile={'stack ', 'user+cpuset$)},nodev!ppp0ppp0}user\x00'}, 0x29) r6 = memfd_create(&(0x7f0000000140)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000300)='\'', 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x5b8, 0x0, 0x0, 0x0, 0x0, "7001e0f57c8cf6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b39d778066f9d1ac8a570e3a42f70a7c0f30f66157a96aae15813f0dceb297", "a8a4cd01e527e6fd3de4538700000000e8904667033a61edb75c8d51c05dfaf7f4fdb16e0cdaa42700", "7b8ddcc0c891591c4116893616105829576914e70bfed06d00f900040000b8a7"}) sendfile(r0, r0, 0x0, 0x2000005) 16:04:36 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$packet(0x11, 0x0, 0x300) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20000003, &(0x7f0000000080)={0x2, 0x1000004e23, @local}, 0x10) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r6}}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x38}, 0x0) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req={0x1, 0x401, 0x1000, 0x6}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='sit0\x00', 0x10) r7 = memfd_create(&(0x7f00000000c0)='n\x9e\xc2ux/.bdevh\x01\xd9\"\x8f\xa9\x91\x95\x7f\b\x00\x00', 0x0) ftruncate(r7, 0x4000b) sendfile(r1, r7, 0x0, 0x10010000000002) 16:04:36 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x2f}, [@ldst={0x5, 0x0, 0x2, 0x4901}], {0x95, 0xe0040000000000}}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x67a5f05b93f3c51f, 0x10, &(0x7f0000000000), 0x295}, 0x48) r0 = syz_open_dev$vivid(&(0x7f0000000100)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x0, 0xa, 0x4}) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x1, 0x800) write$P9_RSTAT(r1, &(0x7f0000000080)={0x46, 0x7d, 0x2, {0x0, 0x3f, 0x7ff, 0x3, {0x61, 0x4, 0x6}, 0x4040000, 0xf685, 0xfff00000, 0x1, 0x4, 'OPL\x00', 0x4, 'OPL\x00', 0x4, '#]@.'}}, 0x46) 16:04:36 executing program 0: syz_usb_connect(0x0, 0xbc, &(0x7f0000002c40)={{0x12, 0x1, 0x0, 0x1c, 0x0, 0xf5, 0x40, 0x7c0, 0x1501, 0x6514, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x87, 0x0, 0x1, 0x3, 0x1, 0x12, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "81bb6e86a9"}]}}]}}]}}]}}, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f0000000200), 0x0) [ 623.701891][T11876] usb 5-1: device descriptor read/64, error 18 16:04:36 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000080)=0x5) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f00000000c0)=0x200006d26, 0x4) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x38}, 0x0) setsockopt$inet6_int(r1, 0x29, 0x9, &(0x7f0000000100)=0x2a3, 0x4) read(r0, &(0x7f0000000140)=""/165, 0x1000000eb) 16:04:36 executing program 4: pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r4}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x38}, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r3, 0xae03, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x3b, 0x91, 0xb7, 0x8, 0x14c8, 0x3, 0x9fa6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x48, 0x0, 0x1, 0x37, 0xe2, 0x45, 0x0, [], [{{0x9, 0x5, 0x8f}}]}}]}}]}}, 0x0) [ 623.865730][T12046] usb 3-1: new high-speed USB device number 25 using dummy_hcd 16:04:37 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) dup(r0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x38}, 0x0) write$FUSE_ATTR(r1, &(0x7f0000000180)={0x78, 0x0, 0x1, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x1ff, 0x4}}}, 0x78) 16:04:37 executing program 5: socketpair$unix(0x1, 0x2000000000002, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x2000089a2, &(0x7f0000000000)={'bridge0\x00\x00\f4\xbd\x19\n\x00', @ifru_addrs=@nl=@proc}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(r3, &(0x7f0000000080)="240000001a005f0014f9f407000904000a00000000000000000000000800030000000000", 0x24) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r4, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x1, @loopback}, 0x8b) ioctl$PPPIOCGFLAGS(r3, 0x8004745a, &(0x7f0000000100)) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000580)=ANY=[@ANYBLOB="01000000fe080391aa9a0d893c611542bd9c4147da62b84be1e6bf42ebfb5500dc385c92e9a5363fee6a4f66bca24943809c7d2502a48c8bd4a50004fe578c276c0649d352904e5c60bda7ab21c05ece7d19458d1bdea7d3b52d7f8b86266b387db146dc4a737511436c93b3c7f12bf168c26d6d55e22566304bdca93b7918519209cde08fd58ed351494b04d3022e663c05c37aa92c1169ca933ee041fe54e4b4951b82519260a1cd4eeab74a162bd2baf54dfdd4a5309ead112335d1900361c3debe2e02fc39492385e2246c15a7c310ad9ec89b5d7318dfd548f0a6bca8ebdffb340f1aa03f6a2bbbe34411b0e351b97400880bde4437a60df505493f4ce81bd5ae82fd69c25317dbe1746988fa8a49fb70603920c6f5115f6beac52760d74e51a0596dd98a8c7692ddbdccf2ecfc188c6f2526667923b3d1960f85a3576965ce27fb2debae846d3c243218e19c67a0e7852b260f1e0180b4434c74dd538a447f5efa606eeac7fda7656e0ac03095c251745d4283b62f28bd72760f5fe4458db5913a4c936c9fe130b59c5c10d35d7a868ba74e14f52daca51f110bdc3bb67936674477cb7545", @ANYRES32=0x0], &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000280)={r6, @in6={{0xa, 0x4e21, 0x0, @loopback}}, 0xa95, 0x0, 0x2000, 0x5}, &(0x7f0000000380)=0x98) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000040)={r6, 0x2a, "20cedc6505891e15e123b5c02a6658811b5e029dfb466c7dec0919eb76de0c71799eae6f46898200f391"}, &(0x7f0000000080)=0x32) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="390000001300090069000007a2e407edab0080581000000046058107a277001419000a0010000000000003f5000000000000ef38bf461e59d7", 0x39}], 0x1) [ 623.975380][T11840] usb 1-1: new high-speed USB device number 71 using dummy_hcd 16:04:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000000)={0x73, 0x3, 0x9}) bind$alg(r2, &(0x7f00000001c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha1\x00'}, 0x58) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0xbe, 0x4) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept$alg(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)}, 0x4}], 0x1d1, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) [ 624.091118][T21006] bridge0: port 3(team0) entered blocking state [ 624.098209][T21006] bridge0: port 3(team0) entered disabled state [ 624.106541][T21006] device team0 entered promiscuous mode [ 624.112232][T21006] device team_slave_0 entered promiscuous mode [ 624.118800][T21006] device team_slave_1 entered promiscuous mode 16:04:37 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x38}, 0x0) r6 = dup2(r0, r1) r7 = syz_open_dev$dri(0x0, 0x0, 0x0) r8 = dup2(r7, r7) ioctl$VHOST_RESET_OWNER(r8, 0xaf02, 0x0) dup2(r6, r8) [ 624.192970][T21011] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 624.202629][T21011] bridge0: port 3(team0) entered disabled state [ 624.232331][T12046] usb 3-1: config 0 has an invalid interface number: 224 but max is 0 16:04:37 executing program 3: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="110100007c6b416c31df788175df89ede7ede5ef19e3ad20012009335e8a00000001ff01240001000000000904b300020cc147000905"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001880)={0xac, &(0x7f0000001280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000540)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x60000, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80040000}, 0xc, &(0x7f0000000340)={&(0x7f0000000580)={0x198, r3, 0x2, 0x401, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x54, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfe12}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf75}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9b}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4a3afb51}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff0000}]}, @TIPC_NLA_BEARER={0x84, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xfffffffc, @local, 0x5}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x400}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x9, @mcast2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA={0xac, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xcd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfa3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) prctl$PR_CAPBSET_READ(0x17, 0x14) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r5, r4) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup2(r11, r10) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r12, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r13}}}, @rights={{0x14, 0x1, 0x1, [r9]}}], 0x38}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0xa}) fcntl$getownex(r8, 0x10, &(0x7f0000000200)={0x0, 0x0}) ptrace$getregs(0xc, r14, 0x3, &(0x7f0000000240)=""/76) sendmsg$netlink(r6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r7}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x38}, 0x0) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000040)=0x3, 0x4) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0xac, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) [ 624.240804][T12046] usb 3-1: config 0 has no interface number 0 [ 624.247232][T12046] usb 3-1: New USB device found, idVendor=17e9, idProduct=8226, bcdDevice=81.18 [ 624.256656][T12046] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.267082][T21011] team0: Cannot enslave team device to itself [ 624.282803][T11876] usb 5-1: device descriptor read/64, error -71 [ 624.310413][T12046] usb 3-1: config 0 descriptor?? [ 624.364156][T11840] usb 1-1: config 0 has an invalid interface number: 135 but max is 0 [ 624.372560][T11840] usb 1-1: config 0 has no interface number 0 [ 624.378760][T11840] usb 1-1: config 0 interface 135 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 624.389625][T11840] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 624.401101][T11840] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has invalid maxpacket 1646, setting to 1024 [ 624.412551][T11840] usb 1-1: config 0 interface 135 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 624.425826][T11840] usb 1-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=65.14 [ 624.435056][T11840] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.454529][T11840] usb 1-1: config 0 descriptor?? [ 624.503171][T11840] iowarrior 1-1:0.135: IOWarrior product=0x1501, serial= interface=135 now attached to iowarrior0 [ 624.562212][T11876] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 624.612613][T12046] udlfb 3-1:0.224: vendor descriptor not available (-71) [ 624.622507][T11874] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 624.632798][T12046] usb 3-1: Read EDID byte 0 failed: -71 [ 624.656500][T12046] usb 3-1: Read EDID byte 0 failed: -71 [ 624.682707][T12046] usb 3-1: Read EDID byte 0 failed: -71 [ 624.688566][T12046] usb 3-1: Unable to get valid EDID from device/display [ 624.701322][T11950] usb 1-1: USB disconnect, device number 71 [ 624.714129][T11950] iowarrior 1-1:0.135: I/O-Warror #0 now disconnected [ 624.746284][T12046] usb 3-1: submit urb error: -2 [ 624.754988][T12046] udlfb: probe of 3-1:0.224 failed with error -2 [ 624.812151][T11876] usb 5-1: Using ep0 maxpacket: 8 [ 624.812352][T12046] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 624.826073][T12046] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 624.853152][T12046] [drm:udl_init] *ERROR* Selecting channel failed [ 624.860701][T12046] [drm:udl_submit_urb] *ERROR* usb_submit_urb error fffffffe [ 624.882293][T12046] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 624.891035][T12046] [drm] Cannot find any crtc or sizes [ 624.896609][T12046] [drm:udl_submit_urb] *ERROR* usb_submit_urb error fffffffe [ 624.906674][T21011] bridge0: port 3(team0) entered blocking state [ 624.909262][T12046] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.224 on minor 4 [ 624.913278][T21011] bridge0: port 3(team0) entered disabled state [ 624.920725][T12046] [drm] Initialized udl on minor 4 [ 624.932458][T11874] usb 4-1: device descriptor read/64, error 18 [ 624.939230][T12046] usb 3-1: USB disconnect, device number 25 [ 624.942228][T11876] usb 5-1: config 0 has an invalid interface number: 72 but max is 0 [ 624.953493][T11876] usb 5-1: config 0 has no interface number 0 [ 624.959691][T11876] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice=9f.a6 [ 624.968930][T11876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.980501][T11876] usb 5-1: config 0 descriptor?? [ 625.027946][T11876] input: USB Touchscreen 14c8:0003 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.72/input/input21 [ 625.055223][T11876] usbtouchscreen 5-1:0.72: usbtouch_probe - usb_submit_urb failed with result: -8 [ 625.155007][T11876] usbtouchscreen: probe of 5-1:0.72 failed with error -8 [ 625.227172][T11840] usb 5-1: USB disconnect, device number 54 [ 625.322721][T11874] usb 4-1: device descriptor read/64, error 18 [ 625.462059][T12046] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 625.592202][T11874] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 625.862141][T11874] usb 4-1: device descriptor read/64, error 18 [ 625.862382][T12046] usb 3-1: config 0 has an invalid interface number: 224 but max is 0 [ 625.876718][T12046] usb 3-1: config 0 has no interface number 0 [ 625.883129][T12046] usb 3-1: New USB device found, idVendor=17e9, idProduct=8226, bcdDevice=81.18 [ 625.892314][T12046] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.902408][T12046] usb 3-1: config 0 descriptor?? [ 626.202368][T12046] udlfb 3-1:0.224: vendor descriptor not available (-71) [ 626.222412][T12046] usb 3-1: Read EDID byte 0 failed: -71 [ 626.242510][T12046] usb 3-1: Read EDID byte 0 failed: -71 [ 626.265746][T12046] usb 3-1: Read EDID byte 0 failed: -71 [ 626.269758][T11874] usb 4-1: device descriptor read/64, error 18 [ 626.271511][T12046] usb 3-1: Unable to get valid EDID from device/display [ 626.316806][T12046] usb 3-1: submit urb error: -2 [ 626.325910][T12046] udlfb: probe of 3-1:0.224 failed with error -2 [ 626.392442][T12046] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 626.392459][T11874] usb usb4-port1: attempt power cycle [ 626.401132][T12046] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 626.432189][T12046] [drm:udl_init] *ERROR* Selecting channel failed [ 626.439629][T12046] [drm:udl_submit_urb] *ERROR* usb_submit_urb error fffffffe [ 626.463316][T12046] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 626.472095][T12046] [drm] Cannot find any crtc or sizes [ 626.477569][T12046] [drm:udl_submit_urb] *ERROR* usb_submit_urb error fffffffe [ 626.490531][T12046] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.224 on minor 5 [ 626.498459][T12046] [drm] Initialized udl on minor 5 [ 626.508146][T12046] usb 3-1: USB disconnect, device number 26 16:04:39 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x80c, r0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0xfffd, 0x0, 0x0, 0x6c, 0x0, @remote={0xac, 0x70}, @dev}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x5, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @empty}}}}}}, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) 16:04:39 executing program 1: semop(0x0, &(0x7f0000000080)=[{0x0, 0xffffffff}], 0x1) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000040)) 16:04:39 executing program 5: r0 = epoll_create1(0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1}) 16:04:39 executing program 0: syz_usb_connect(0x0, 0xbc, &(0x7f0000002c40)={{0x12, 0x1, 0x0, 0x1c, 0x0, 0xf5, 0x40, 0x7c0, 0x1501, 0x6514, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x87, 0x0, 0x1, 0x3, 0x1, 0x12, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "81bb6e86a9"}]}}]}}]}}]}}, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f0000000200), 0x0) 16:04:39 executing program 4: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xc50ea21d) syz_genetlink_get_family_id$tipc2(0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x10, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = socket(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040), 0x4) r1 = socket(0x22, 0x2, 0x4) bind$isdn(r1, &(0x7f0000000140), 0x6) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000000100), 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000700), 0x0) 16:04:39 executing program 1: creat(0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x4100, 0x0) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000980)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xffffffffd00679d2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002580)=[{{&(0x7f0000000000)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0}}], 0x1, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000009c0)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd0\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7\x95\xaeV\x0f\x9e\xed\x13\xc6H\v\xb7\xd0g!`\x18\x0f\x99\xadD-\xc8{\xbc\xb2\xb9Y\xe2P\x9b\xec\x1e_\xb4\x01\xf1\x1e\xa8\xf8\xdf?#p-\xbd3\"L\xe5\x7f\nC\x00}\x0eb\xbc\xa4}\x93\x9a\t\xf4\xfa\xbew D\x00\xb0Z\xc0\x1a\xf9\x924\a\x1c4\xfa\xe4\xe2\x8e\xe8\x19\x00\x05\xb7\xd51)\b\xf2#[-\xbf\x7f\x10\x14vy\x86\x85\xa4W\r\xe8i\x95\xc9\xe6\xf8\a\xd8\xe2\xdf\xc8\x97\xa2\b{b\xca\x95u:\v\x97\b\r@g\x80\x8d_\x18y\xd1\x8d\xc1)U`\xb9\xe2\xd7\x88\xc2\xaf\xdc\xc1\xda\xcc\xca\x9a\v\xact8Z\x1c\x06\x1b\xdf\xb5\xc1\"\x05,Yw\vP\xcc\xfa\xf9\x9f<\xbd\x1c\x1a\xcb*\x06\xb7\xcd\x7f\xba\xadr\xbb/\"2p\xf8\b\x1e\x04\xac*\x88\xb0\xa7\xc6\xb4M\x97n\xdck\xd1\\\x9f\x9d\x1a4 Y\xac\xcb\xf9f\xcf>qd\vn:\x12\xc0\xdca\xfd\x8d\x9dL\x92\x17\x8fe\xd1\xaa$\x12\x02R\x96t?\x9a\x1a') pread64(r1, &(0x7f0000000340)=""/39, 0x3a9, 0x0) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, 0x0) 16:04:39 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) clone(0x822102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 16:04:39 executing program 4: r0 = socket$inet6(0xa, 0x80000000000003, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={'bridge0\x00\x00z\x00\x00\x00\xff\xff\xfd', &(0x7f0000000100)=@ethtool_ringparam={0xe}}) 16:04:39 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x0, 0x3}, {}]}]}}, &(0x7f0000001980)=""/223, 0x36, 0xdf, 0x1}, 0x20) 16:04:40 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) getitimer(0x1, &(0x7f00000001c0)) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB="2f0716c230c459af06000000570300003f0000b2d600"], &(0x7f00000007c0)='./file0\x00', 0x0, 0x149000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000340)='trusted.overlay.upper\x00', &(0x7f0000000400)={0x0, 0xfb, 0x9d, 0x6, 0x9, "8e96908b0cc13e262a15e0eb3d9b8c2e", "7fbe44c700aecf3bad68d1a4d29bbe8b781c957795ef63631bae3026b3f131e3b7304eaaab64e9a5ac246ee3346e318f96bfb9edfcb072fc56bf97aa967e8b710069e28edc65273f461f131d3b7d8e70114ad70fde93547fbd8b8482031f5e2540e6c9d7cc6613dae4f3603940885b1fc49082e4d83d01737542fd1da7d66e98db8d09c1da4003fb"}, 0x9d, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0xa, &(0x7f00000025c0)=0x204, 0x4) bind$inet(r2, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x2f, &(0x7f0000000140)=0xfffffffffffffffb, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x100) write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 16:04:40 executing program 1: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6c, 0x0, @remote={0xac, 0x70}, @dev}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @empty}}}}}}, 0x0) [ 626.922624][T11840] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 627.120069][T11874] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 627.312316][T11840] usb 1-1: config 0 has an invalid interface number: 135 but max is 0 [ 627.320771][T11840] usb 1-1: config 0 has no interface number 0 [ 627.327090][T11840] usb 1-1: config 0 interface 135 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 627.337856][T11840] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 627.349311][T11840] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has invalid maxpacket 1646, setting to 1024 16:04:40 executing program 3: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)}], 0x1}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='/\x02roup.stap\x00', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086607, 0x20000001) socketpair(0x0, 0x0, 0x0, 0x0) 16:04:40 executing program 5: creat(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x492492492492565, 0x0) chdir(&(0x7f0000000200)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = socket$inet6(0xa, 0x3, 0x3) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="0000000000000012000c00010076227468000000e1170002de1300010028b60000d95be302000000ab660fc83ea8734f11337879eb8ab6323fd451f3666725e3a1f36cd63b69afdae1fbb1e8c4", @ANYRES32=0x0, @ANYBLOB="00000100"], 0x5}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x45c, 0x24, 0x507, 0x0, 0x0, {0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x430, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x25, 0x3}}, @TCA_CBQ_RATE={0x10, 0x5, {0x22, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x45c}}, 0x0) r10 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r10, 0x7fffff, 0x0) ioctl$EXT4_IOC_SETFLAGS(r10, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r10, &(0x7f0000000300)=ANY=[@ANYBLOB='P'], 0x1) fallocate(r10, 0x3, 0x0, 0x8020003) 16:04:40 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) seccomp(0x1, 0x0, &(0x7f00000005c0)={0x2, &(0x7f0000000040)=[{0x5}, {0x6, 0x0, 0x0, 0x50000}]}) 16:04:40 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x201fff, 0x0, 0x12, r0, 0x0) [ 627.360639][T11840] usb 1-1: config 0 interface 135 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 627.373937][T11840] usb 1-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=65.14 [ 627.383140][T11840] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.393166][T11840] usb 1-1: config 0 descriptor?? [ 627.404002][T11874] usb 4-1: device descriptor read/64, error 18 [ 627.448783][T11840] iowarrior 1-1:0.135: IOWarrior product=0x1501, serial= interface=135 now attached to iowarrior0 [ 627.474816][T21085] devpts: called with bogus options [ 627.647340][T11876] usb 1-1: USB disconnect, device number 72 [ 627.671579][T11876] iowarrior 1-1:0.135: I/O-Warror #0 now disconnected 16:04:41 executing program 0: syz_usb_connect(0x0, 0xbc, &(0x7f0000002c40)={{0x12, 0x1, 0x0, 0x1c, 0x0, 0xf5, 0x40, 0x7c0, 0x1501, 0x6514, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x87, 0x0, 0x1, 0x3, 0x1, 0x12, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "81bb6e86a9"}]}}]}}]}}]}}, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f0000000200)=[{0x0}], 0x1) 16:04:41 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='/group.sta\x9f\xd4t\x00+\x96FR\bR\t\x12\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0W\xdfuE\xfe\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6J\x81W!\xf0\\\xa1O\x9f\x93\x19C\xceQCV\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1fM\xeba_\xa9\xcd\x10\xcd\x0e~\xc6\xed\xb6\x82\xf6\xee\x9aK\xdd\x86\xf8\x0f\x15Y-\xb8A1\x1bb\xff\xf0\xd2M\xf7)\xaa\x8a\x18\xb9_\x83>\xeb\xfc\xc18^\x1d\xb3Y\xdc#\xde\xdb\x89\x90L\x99o\x02\xb6\x98e\xc6b\xce\xb7\x99k3&\xaf\v\xc6\x80\xff\xdb\xb7\x0e\xb4K\xf8\x17\xba\xf8\xee\fe\xed]\x93\x13\xbc\xf5\xe2<\xa2\xaf\x83\xa3\xaabc\x95\x00\t:\xcc\xe1\t]\x84\x90\x17l\xd3\xa7M\xdb\x02J\x90\xe8\xe8\xb3\xc9\xf6\xea\xb2\xdeI\xe4\x0f\xd4\xca(\xcd\xfa\xb2\xb8@\xca\x17u\x02Rb\xad\xd0\xf7\x9bz#\xb8\x1d\x88\xf6?3,\x89\xb1-p\x8a\r\xdb\xd6,\xa4\x01y\x1bc\xb7\x19\xcey\xb5\xae\xc4\xe3\xc4\xe9=\x1e\x8c\xec\xfe\x05b\x7f`Y k\xc4\xa8 \xc3\x9b\v\xbbE\x8c\xb8\xe6\x8a\xa0s\b\xcb\xbb\xfa\xde\xf0\n`\x8az<\f\xf1\xbe\x85\xd1Wk\x17\xbc1q\x8b\x93Y|\x9e\xe2\xc9Ms/A\x98\xf2\x88\n\x92?7\xb1\xe0\xee\xe8yo\xb7\xb2p\xc5O~\x87\x17F\b\xb5\xd6\xdc\xe4u:$>\xd1\xaf\x1a\xcb\x18\x8a\x0e$\xbd\x94N\xc84}_\x06\x11\xd2\xdd7\xe0\b\x0f\xd0\xb0WZ\xfc\xb1\xc3\tS\x13\a6\xc0\xbc\vG\xe4p\x1b\xee\x89_=\xb8\x12\xddpk\x860\x03\xfd\xde\x0f\x9c\xc2\xe5.\xfe\xaf\x8f\xe2\x16\x8c\xdbS\xe6\xc26\xde\xf4I\x9f\x003P\xb5\x9fg\x82!\xf2\x82 \xc1Os\xd7C\\\xad\xb3n}t\xba|\x10\x05,rk\xd1\t|\x1e\x00\x9e\xfa\"\x85\xdd\xb7O\a\xfc\x14\xa8\x00\x1f6M\xb00\xbd\xb7\xd6\xa8\xffe\xb2\xcb\'', 0x2761, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)={&(0x7f0000000000)='./file1\x00'}, 0x10) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 16:04:41 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xfffffde3) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f00000001c0)) 16:04:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000000)=0x2) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000780)={"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"}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:04:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x2d) 16:04:41 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="eabe9f303b222957eecbc624877c825255f910c28f5e87a64820546a1ebed56adb3b91e7f1ffd7e4ab56ad8e39808e0b61a0", @ANYRESHEX, @ANYPTR64, @ANYRESHEX=0x0, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb82ee45101ed000029a741efca44f937d0492482ba837296d961244e2e0c734057548c402cc43b3897cc275fd87f333c960d2bc40dd887fc8dc4872bf5b65c87e940b30eecd4f9ad4c079521dfdaf3d8fef515583873ddd56ce424602b", @ANYRESHEX], 0x0, 0xe4}, 0x20) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 16:04:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) lstat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="ba4300b00bee660f3a172e0010000f32652e0f0866b83c4a00000f23c80f21f866350c0030000f23f83e0b450eb804010f00d00f01f60f3800210f01cf", 0x3d}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 628.242345][T21110] ptrace attach of "/root/syz-executor.4"[21103] was attempted by "/root/syz-executor.4"[21110] 16:04:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x3b) 16:04:41 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) fallocate(r3, 0x0, 0x0, 0x110001) fallocate(r2, 0x0, 0x0, 0x110001) 16:04:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0xfffffffffffffe5d, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x607, 0x0, 0x0, {0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 16:04:41 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x17, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) 16:04:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x4a) [ 628.572484][T11876] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 628.932255][T11876] usb 1-1: config 0 has an invalid interface number: 135 but max is 0 [ 628.940720][T11876] usb 1-1: config 0 has no interface number 0 [ 628.947054][T11876] usb 1-1: config 0 interface 135 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 628.958244][T11876] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 628.969707][T11876] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has invalid maxpacket 1646, setting to 1024 [ 628.981578][T11876] usb 1-1: config 0 interface 135 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 628.994882][T11876] usb 1-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=65.14 [ 629.004056][T11876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.013542][T11876] usb 1-1: config 0 descriptor?? [ 629.059016][T11876] iowarrior 1-1:0.135: IOWarrior product=0x1501, serial= interface=135 now attached to iowarrior0 [ 629.256380][T11840] usb 1-1: USB disconnect, device number 73 [ 629.273934][T11840] iowarrior 1-1:0.135: I/O-Warror #0 now disconnected 16:04:42 executing program 0: syz_usb_connect(0x0, 0xbc, &(0x7f0000002c40)={{0x12, 0x1, 0x0, 0x1c, 0x0, 0xf5, 0x40, 0x7c0, 0x1501, 0x6514, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x87, 0x0, 0x1, 0x3, 0x1, 0x12, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "81bb6e86a9"}]}}]}}]}}]}}, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f0000000200)=[{0x0}], 0x1) 16:04:42 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="85000000050000001c000000000000009500000000000000a701bcb0aa02baa38b79bba97f94462861b97053ed6290f0d7fe75dcdb8314b5e77a9224da35a7cc8019726689531f545e2e5ea99fde5795c4c0259159757490e6f9dde2c0199056b6e1697d2713b891b3850e1586e5c21973153deffe986aba84fa9e08a8af95306b14e14cb5d8e2d8fe8e25d3ede1dfab7c0ab2343e3615f65e137d67fe1db130fa0aeb925ccf5abb6fe7c227d830b93a5401a5b44b80ae989d4771384d"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r0, 0x0, 0xf, 0x0, &(0x7f0000000000)="7076fcfb758ef7028318d10d75bcee", 0x0, 0x0, 0x0, 0x42, 0xd, &(0x7f0000000200)="13c7b8d5625f2487a1676f0f84d2b69d9fed561723c7a3050731f2a140d392c1e6542c014428c9fb85956a8e0b5fc04d28fa60e329d49e8a0239c816d4f60cf2c3bc", &(0x7f0000000180)="54f58cede0b5952b7cfb115efe"}, 0x40) 16:04:42 executing program 3: r0 = getpid() sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001640)={{{@in=@multicast2, @in=@dev}}, {{@in6=@mcast2}, 0x0, @in6=@empty}}, &(0x7f0000000340)=0xe8) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) move_pages(r0, 0x0, 0x0, &(0x7f0000001780)=[0x0], &(0x7f00000017c0)=[0x0, 0x0, 0x0], 0x70836120d08557f1) r1 = syz_open_procfs(0x0, 0x0) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, 0x0) perf_event_open(&(0x7f00000018c0)={0x8455316328a7be30, 0x70, 0x7, 0x5e, 0x0, 0x3, 0x0, 0x1000, 0x84420, 0xa, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x0, 0x24ef238d}, 0x10000, 0x1ff, 0x2, 0x7, 0x200, 0x0, 0x7}, r0, 0x10, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000300), 0x12) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) 16:04:42 executing program 4: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) getitimer(0x1, &(0x7f00000001c0)) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB="2f0716c230c459af06000000570300003f0000b2d600"], &(0x7f00000007c0)='./file0\x00', 0x0, 0x149000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000340)='trusted.overlay.upper\x00', &(0x7f0000000400)={0x0, 0xfb, 0x9d, 0x6, 0x9, "8e96908b0cc13e262a15e0eb3d9b8c2e", "7fbe44c700aecf3bad68d1a4d29bbe8b781c957795ef63631bae3026b3f131e3b7304eaaab64e9a5ac246ee3346e318f96bfb9edfcb072fc56bf97aa967e8b710069e28edc65273f461f131d3b7d8e70114ad70fde93547fbd8b8482031f5e2540e6c9d7cc6613dae4f3603940885b1fc49082e4d83d01737542fd1da7d66e98db8d09c1da4003fb"}, 0x9d, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30}, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000025c0)=0x204, 0x4) bind$inet(r2, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x2f, &(0x7f0000000140)=0xfffffffffffffffb, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 16:04:42 executing program 5: mkdir(&(0x7f00000002c0)='./control\x00', 0x0) r0 = inotify_init() r1 = epoll_create(0x80001) epoll_wait(r1, &(0x7f0000000240)=[{}], 0x1, 0xf5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)) inotify_add_watch(r0, &(0x7f0000000000)='./control\x00', 0x70) open(&(0x7f0000000040)='./control\x00', 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f00000001c0)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000004d40)='loginuid\x00') write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000040)={0x30, 0x4, 0x0, {0x0, 0x0, 0x8, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x30) write$P9_RREAD(r3, &(0x7f0000000000)={0x30, 0x75, 0x0, {0x25, "988aaaa75871904290fcc3a3e0f7a0e002b872bff4fc847c45cd0f7297cb3b99d7f88b8933"}}, 0x30) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000280)=0x40) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0xa4000011}) 16:04:42 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 16:04:42 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) seccomp(0x1, 0x0, &(0x7f00000005c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) prctl$PR_SET_NAME(0xf, 0x0) 16:04:43 executing program 2: 16:04:43 executing program 5: [ 630.122380][T11840] usb 1-1: new high-speed USB device number 74 using dummy_hcd 16:04:43 executing program 1: 16:04:43 executing program 2: 16:04:43 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) clone(0x822102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 630.504927][T11840] usb 1-1: config 0 has an invalid interface number: 135 but max is 0 [ 630.513411][T11840] usb 1-1: config 0 has no interface number 0 [ 630.519593][T11840] usb 1-1: config 0 interface 135 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 630.530891][T11840] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 630.542381][T11840] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has invalid maxpacket 1646, setting to 1024 [ 630.553738][T11840] usb 1-1: config 0 interface 135 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 630.567094][T11840] usb 1-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=65.14 [ 630.576277][T11840] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.590288][T11840] usb 1-1: config 0 descriptor?? [ 630.647378][T11840] iowarrior 1-1:0.135: IOWarrior product=0x1501, serial= interface=135 now attached to iowarrior0 [ 630.835595][T11876] usb 1-1: USB disconnect, device number 74 [ 630.853634][T11876] iowarrior 1-1:0.135: I/O-Warror #0 now disconnected 16:04:44 executing program 0: syz_usb_connect(0x0, 0xbc, &(0x7f0000002c40)={{0x12, 0x1, 0x0, 0x1c, 0x0, 0xf5, 0x40, 0x7c0, 0x1501, 0x6514, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x87, 0x0, 0x1, 0x3, 0x1, 0x12, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "81bb6e86a9"}]}}]}}]}}]}}, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f0000000200)=[{0x0}], 0x1) 16:04:44 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x4, 0x0) sched_yield() syz_open_dev$evdev(&(0x7f000000dfee)='/dev/input/event#\x00', 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) 16:04:44 executing program 2: 16:04:44 executing program 3: 16:04:44 executing program 1: 16:04:44 executing program 4: 16:04:44 executing program 4: 16:04:44 executing program 1: 16:04:44 executing program 3: 16:04:44 executing program 2: 16:04:44 executing program 4: 16:04:44 executing program 3: [ 631.722853][T11876] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 632.092231][T11876] usb 1-1: config 0 has an invalid interface number: 135 but max is 0 [ 632.100552][T11876] usb 1-1: config 0 has no interface number 0 [ 632.106873][T11876] usb 1-1: config 0 interface 135 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 632.117577][T11876] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 632.129299][T11876] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has invalid maxpacket 1646, setting to 1024 [ 632.140668][T11876] usb 1-1: config 0 interface 135 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 632.153861][T11876] usb 1-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=65.14 [ 632.163035][T11876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.172395][T11876] usb 1-1: config 0 descriptor?? [ 632.221531][T11876] iowarrior 1-1:0.135: IOWarrior product=0x1501, serial= interface=135 now attached to iowarrior0 [ 632.416645][T11840] usb 1-1: USB disconnect, device number 75 [ 632.434081][T11840] iowarrior 1-1:0.135: I/O-Warror #0 now disconnected 16:04:46 executing program 0: syz_usb_connect(0x0, 0xbc, &(0x7f0000002c40)={{0x12, 0x1, 0x0, 0x1c, 0x0, 0xf5, 0x40, 0x7c0, 0x1501, 0x6514, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x87, 0x0, 0x1, 0x3, 0x1, 0x12, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "81bb6e86a9"}]}}]}}]}}]}}, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000100)}], 0x1) 16:04:46 executing program 1: 16:04:46 executing program 2: 16:04:46 executing program 5: 16:04:46 executing program 4: 16:04:46 executing program 3: 16:04:46 executing program 1: 16:04:46 executing program 5: 16:04:46 executing program 4: 16:04:46 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() rt_sigsuspend(&(0x7f0000000000)={0x5}, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x18) ptrace$cont(0x18, r0, 0x0, 0x3) 16:04:46 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x216, 0x210007fd, &(0x7f0000000380)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='veno\x00', 0xde4c) shutdown(r0, 0x0) 16:04:46 executing program 5: [ 633.312228][T11876] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 633.672307][T11876] usb 1-1: config 0 has an invalid interface number: 135 but max is 0 [ 633.681156][T11876] usb 1-1: config 0 has no interface number 0 [ 633.687480][T11876] usb 1-1: config 0 interface 135 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 633.698666][T11876] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 633.710100][T11876] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has invalid maxpacket 1646, setting to 1024 [ 633.721555][T11876] usb 1-1: config 0 interface 135 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 633.734745][T11876] usb 1-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=65.14 [ 633.743933][T11876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.753250][T11876] usb 1-1: config 0 descriptor?? [ 633.797863][T11876] iowarrior 1-1:0.135: IOWarrior product=0x1501, serial= interface=135 now attached to iowarrior0 [ 633.996030][T11840] usb 1-1: USB disconnect, device number 76 [ 634.015281][T11840] iowarrior 1-1:0.135: I/O-Warror #0 now disconnected 16:04:47 executing program 0: syz_usb_connect(0x0, 0xbc, &(0x7f0000002c40)={{0x12, 0x1, 0x0, 0x1c, 0x0, 0xf5, 0x40, 0x7c0, 0x1501, 0x6514, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x87, 0x0, 0x1, 0x3, 0x1, 0x12, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "81bb6e86a9"}]}}]}}]}}]}}, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000100)}], 0x1) 16:04:47 executing program 4: 16:04:47 executing program 5: 16:04:47 executing program 1: 16:04:47 executing program 3: 16:04:47 executing program 2: 16:04:47 executing program 1: 16:04:47 executing program 2: 16:04:47 executing program 3: 16:04:47 executing program 4: 16:04:47 executing program 5: 16:04:47 executing program 2: [ 634.911261][T11840] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 635.282162][T11840] usb 1-1: config 0 has an invalid interface number: 135 but max is 0 [ 635.290471][T11840] usb 1-1: config 0 has no interface number 0 [ 635.296767][T11840] usb 1-1: config 0 interface 135 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 635.307479][T11840] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 635.318898][T11840] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has invalid maxpacket 1646, setting to 1024 [ 635.330214][T11840] usb 1-1: config 0 interface 135 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 635.343363][T11840] usb 1-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=65.14 [ 635.352556][T11840] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.361698][T11840] usb 1-1: config 0 descriptor?? [ 635.411515][T11840] iowarrior 1-1:0.135: IOWarrior product=0x1501, serial= interface=135 now attached to iowarrior0 [ 635.606145][T11840] usb 1-1: USB disconnect, device number 77 [ 635.623957][T11840] iowarrior 1-1:0.135: I/O-Warror #0 now disconnected 16:04:49 executing program 0: syz_usb_connect(0x0, 0xbc, &(0x7f0000002c40)={{0x12, 0x1, 0x0, 0x1c, 0x0, 0xf5, 0x40, 0x7c0, 0x1501, 0x6514, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x87, 0x0, 0x1, 0x3, 0x1, 0x12, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "81bb6e86a9"}]}}]}}]}}]}}, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000100)}], 0x1) 16:04:49 executing program 3: 16:04:49 executing program 1: 16:04:49 executing program 5: 16:04:49 executing program 4: 16:04:49 executing program 2: 16:04:49 executing program 5: 16:04:49 executing program 3: 16:04:49 executing program 2: 16:04:49 executing program 1: 16:04:49 executing program 4: 16:04:49 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000440)="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", 0xfb}], 0x1}, 0x0) [ 636.530052][T21306] netlink: 215 bytes leftover after parsing attributes in process `syz-executor.5'. [ 636.540245][T11876] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 636.922139][T11876] usb 1-1: config 0 has an invalid interface number: 135 but max is 0 [ 636.930378][T11876] usb 1-1: config 0 has no interface number 0 [ 636.936733][T11876] usb 1-1: config 0 interface 135 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 636.947433][T11876] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 636.958879][T11876] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has invalid maxpacket 1646, setting to 1024 [ 636.970267][T11876] usb 1-1: config 0 interface 135 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 636.983509][T11876] usb 1-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=65.14 [ 636.992657][T11876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.001724][T11876] usb 1-1: config 0 descriptor?? [ 637.048665][T11876] iowarrior 1-1:0.135: IOWarrior product=0x1501, serial= interface=135 now attached to iowarrior0 [ 637.246186][T11876] usb 1-1: USB disconnect, device number 78 [ 637.264175][T11876] iowarrior 1-1:0.135: I/O-Warror #0 now disconnected 16:04:50 executing program 0: syz_usb_connect(0x0, 0xbc, &(0x7f0000002c40)={{0x12, 0x1, 0x0, 0x1c, 0x0, 0xf5, 0x40, 0x7c0, 0x1501, 0x6514, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x87, 0x0, 0x1, 0x3, 0x1, 0x12, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "81bb6e86a9"}]}}]}}]}}]}}, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000100)="20b3ce0c3b0cf57286d3df0d17d2d07793e47b9e0211c06bc18fd4e3c90e70328de766e5b4d61feca6e6f030cc", 0x2d}], 0x1) 16:04:50 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000015c0)={0x58, 0x0, &(0x7f0000000540)=[@decrefs, @free_buffer, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000005c0)="b5"}) 16:04:50 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000100)=0xc) ioctl$GIO_CMAP(r4, 0x4b70, &(0x7f0000000040)) ioctl$TCFLSH(r1, 0x540b, 0x8) getsockopt$inet_buf(r0, 0x0, 0x21, 0x0, &(0x7f0000000000)=0x1d8) 16:04:50 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x20) r1 = open(&(0x7f0000000300)='./file0\x00', 0x84000, 0x42) creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x4100, 0x0) r3 = epoll_create1(0x0) fcntl$lock(r3, 0x7, &(0x7f0000000000)={0x1}) fcntl$lock(r3, 0x7, &(0x7f00000000c0)) sendfile(r3, r2, 0x0, 0x6) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000980)=0x41b) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r4, &(0x7f0000002580)=[{{&(0x7f0000000000)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0}}], 0x1, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x4100, 0x0) sendfile(r5, r6, 0x0, 0x8000fffffffe) perf_event_open(&(0x7f0000000e00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64a, 0x7, @perf_bp={&(0x7f0000000680), 0xcaee4116c74b4a11}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) r7 = epoll_create1(0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) epoll_create1(0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40108c00}, 0xc, &(0x7f0000000600)={&(0x7f0000000800)=ANY=[@ANYRESDEC=r7, @ANYRESDEC], 0x2}, 0x1, 0x0, 0x0, 0x40000}, 0x4044051) syz_open_procfs(0x0, &(0x7f0000000700)='ne\x01\x00\x00\x00ix\x00') setsockopt$inet6_int(r1, 0x29, 0x9, 0x0, 0x123) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000440)={0x2}) connect(0xffffffffffffffff, &(0x7f0000000740)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3}}, 0x80) shutdown(0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000009c0)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd0\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7\x95\xaeV\x0f\x9e\xed\x13\xc6H\v\xb7\xd0g!`\x18\x0f\x99\xadD-\xc8{\xbc\xb2\xb9Y\xe2P\x9b\xec\x1e_\xb4\x01\xf1\x1e\xa8\xf8\xdf?#p-\xbd3\"L\xe5\x7f\nC\x00}\x0eb\xbc\xa4}\x93\x9a\t\xf4\xfa\xbew D\x00\xb0Z\xc0\x1a\xf9\x924\a\x1c4\xfa\xe4\xe2\x8e\xe8\x19\x00\x05\xb7\xd51)\b\xf2#[-\xbf\x7f\x10\x14vy\x86\x85\xa4W\r\xe8i\x95\xc9\xe6\xf8\a\xd8\xe2\xdf\xc8\x97\xa2\b{b\xca\x95u:\v\x97\b\r@g\x80\x8d_\x18y\xd1\x8d\xc1)U`\xb9\xe2\xd7\x88\xc2\xaf\xdc\xc1\xda\xcc\xca\x9a\v\xact8Z\x1c\x06\x1b\xdf\xb5\xc1\"\x05,Yw\vP\xcc\xfa\xf9\x9f<\xbd\x1c\x1a\xcb*\x06\xb7\xcd\x7f\xba\xadr\xbb/\"2p\xf8\b\x1e\x04\xac*\x88\xb0\xa7\xc6\xb4M\x97n\xdck\xd1\\\x9f\x9d\x1a4 Y\xac\xcb\xf9f\xcf>qd\vn:\x12\xc0\xdca\xfd\x8d\x9dL\x92\x17\x8fe\xd1\xaa$\x12\x02R\x96t?\x9a\x1a') pread64(r8, &(0x7f0000000340)=""/39, 0x3a9, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_genetlink_get_family_id$ipvs(0x0) socket$inet6(0xa, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x40040) socket$inet6(0xa, 0x0, 0x0) 16:04:50 executing program 4: pipe(&(0x7f0000000a00)={0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000100)=0xc) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r6, r5) r7 = clone3(&(0x7f0000000200)={0x1000, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000180), 0x29, 0x0, &(0x7f0000000a40)=""/4096, 0x1000, &(0x7f00000001c0)=""/31}, 0x40) lstat(&(0x7f0000003f00)='./file0\x00', &(0x7f0000003f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000240)={0x7, 0x3f, 0x2}) setresgid(0x0, 0x0, r8) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r7, r4, r8}}}, @rights={{0x10}}], 0x30}, 0x2008020) fcntl$notify(r3, 0x402, 0x20) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup2(r11, r10) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r12, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r13}}}, @rights={{0x14, 0x1, 0x1, [r9]}}], 0x38}, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r9, 0x10e, 0x8, &(0x7f0000000280)=0x7fff, 0x4) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xe43, 0x0) 16:04:50 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f0000000040), &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 16:04:50 executing program 2: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) r3 = fcntl$dupfd(r0, 0x605, r1) ioctl$PPPIOCGFLAGS(r3, 0x8004745a, &(0x7f0000000000)) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000000c0)={0x0, 0x0, 0x30b, 0x0, [], [{0x0, 0x0, 0x280040000000000}, {0xffffffff}]}) 16:04:51 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x40000000084) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}, 0x1c) syz_genetlink_get_family_id$fou(&(0x7f0000000000)='fou\x00') write$binfmt_misc(r2, &(0x7f0000000100)={'syz1'}, 0x4) 16:04:51 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-monitor\x00', 0x40, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2001080}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x800, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x50) syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x33821}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup(r4) syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x7, 0x10042) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x401f0000, 0x0, 0x0, 0x3ff}, 0x0, &(0x7f00000001c0)={0x1ff, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 16:04:51 executing program 4: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000dfa000)=@routing={0x0, 0x2, 0x2, 0x101, 0x0, [@mcast2]}, 0x18) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x38}, 0x0) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffb, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000140)="1b44ff2f9e855ad51240228df03742412fad91186a6d4144ce8efac105e704e386c49a9d8060636446421e33440a52a5e64ca54a7218843ce65978ba14575217969695ca7d3b367968309511685d92f530171a65741e295c1c53246d3d16a519dbf7446306362b515f7e8c2adaa03d12183d3d5522e02341916c2a40f388a310a9ab0ba98649998cbb5722fcc616566b3c89a7f16d644120dc97b4214e35b5d9322b08b561ffd21a94674cea5cc9fdb610a759ad43ced5a9337e8a9dde22f69a03dfa17cac8c97710a0633fe6de4", 0xce, 0x10, &(0x7f00000000c0)={0xa, 0x4e22, 0x7, @mcast1, 0x20}, 0x1c) [ 638.132197][T11840] usb 1-1: new high-speed USB device number 79 using dummy_hcd 16:04:51 executing program 2: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) r3 = fcntl$dupfd(r0, 0x605, r1) ioctl$PPPIOCGFLAGS(r3, 0x8004745a, &(0x7f0000000000)) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000000c0)={0x0, 0x0, 0x30b, 0x0, [], [{0x0, 0x0, 0x280040000000000}, {0xffffffff}]}) 16:04:51 executing program 5: syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb8, 0x1d, 0x2b, 0x8, 0x1b80, 0xd700, 0x7360, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x32, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x4, 0x2}}]}}]}}]}}, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x20, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000180)=0x5) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000080)) [ 638.522443][T11840] usb 1-1: config 0 has an invalid interface number: 135 but max is 0 [ 638.530907][T11840] usb 1-1: config 0 has no interface number 0 [ 638.538075][T11840] usb 1-1: config 0 interface 135 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 638.548829][T11840] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 638.560413][T11840] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has invalid maxpacket 1646, setting to 1024 [ 638.571826][T11840] usb 1-1: config 0 interface 135 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 638.585041][T11840] usb 1-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=65.14 [ 638.594363][T11840] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.651622][T11840] usb 1-1: config 0 descriptor?? [ 638.718776][T11840] iowarrior 1-1:0.135: IOWarrior product=0x1501, serial= interface=135 now attached to iowarrior0 [ 638.763125][T12046] usb 6-1: new low-speed USB device number 44 using dummy_hcd [ 638.903395][T11876] usb 1-1: USB disconnect, device number 79 [ 638.914703][T11876] iowarrior 1-1:0.135: I/O-Warror #0 now disconnected [ 639.135202][T12046] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 639.143531][T12046] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 639.153830][T12046] usb 6-1: config 0 has no interface number 0 [ 639.160011][T12046] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x4 is Bulk; changing to Interrupt [ 639.170457][T12046] usb 6-1: New USB device found, idVendor=1b80, idProduct=d700, bcdDevice=73.60 [ 639.179654][T12046] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.188922][T12046] usb 6-1: config 0 descriptor?? [ 639.236752][T12046] radio-si470x 6-1:0.50: could not find interrupt in endpoint [ 639.244704][T12046] radio-si470x: probe of 6-1:0.50 failed with error -5 [ 639.252151][T12046] usbhid 6-1:0.50: couldn't find an input interrupt endpoint 16:04:52 executing program 0: syz_usb_connect(0x0, 0xbc, &(0x7f0000002c40)={{0x12, 0x1, 0x0, 0x1c, 0x0, 0xf5, 0x40, 0x7c0, 0x1501, 0x6514, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x87, 0x0, 0x1, 0x3, 0x1, 0x12, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "81bb6e86a9"}]}}]}}]}}]}}, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000100)}], 0x1) 16:04:52 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x8) mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x4, 0x800000032, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r5, r4) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r7}}}, @rights={{0x14, 0x1, 0x1, [r3]}}], 0x38}, 0x0) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x400, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r8, 0xc008ae05, &(0x7f00000001c0)=""/182) getsockopt$inet6_int(r0, 0x29, 0x39, 0x0, &(0x7f0000000140)=0xffffffd2) r9 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x2, 0x200402) uname(&(0x7f0000000040)=""/53) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r13, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x14, 0x16, 0xa01, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r14 = dup2(r12, r11) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r14, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r15, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000101400000000010098fb", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00'], 0x38}, 0x0) close(r10) ioctl$SG_EMULATED_HOST(r9, 0x2203, &(0x7f0000000080)) 16:04:52 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mISDNtimer\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x2, 0x0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r4}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x38}, 0x0) r5 = io_uring_setup(0xa8b, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x1, 0x1b6}) r6 = dup2(r5, r0) ioctl$UI_SET_ABSBIT(r6, 0x80044941, 0x717000) 16:04:52 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x30}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_PMTUDISC={0x8, 0xa, 0x1}]]}}}]}, 0x38}}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r2, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r2, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0x7892}, {&(0x7f00000023c0)=""/49, 0x200023f1}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x3, &(0x7f0000004780)=""/245, 0xf5}}], 0x30, 0x0, &(0x7f0000008000)={0x0, 0x989680}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) 16:04:52 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0x526987c9) read(r0, &(0x7f0000000100)=""/250, 0xfffffd4a) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) [ 639.440978][T12046] usb 6-1: USB disconnect, device number 44 16:04:52 executing program 2: syz_usb_connect(0xbfef98d67fbf5ed, 0x1, &(0x7f0000000040)=ANY=[@ANYRESDEC=0x0], 0x0) 16:04:52 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) close(r0) r1 = inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x400003fff) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_int(r2, 0x1, 0xb, &(0x7f0000000000)=0x9, 0x4) close(r1) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x100000001, 0x10000) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r6, r5) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r7, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r8}}}, @rights={{0x14, 0x1, 0x1, [r3]}}], 0x38}, 0x0) ioctl$HIDIOCGFIELDINFO(r7, 0xc038480a, &(0x7f0000000040)={0x2, 0x3, 0x80000000, 0xffffff7f, 0x80, 0x5, 0x3, 0x0, 0x7, 0x4, 0x3ff, 0x40, 0x9, 0x46f2}) 16:04:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x276, 0x0, 0x0, 0xfffffe3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="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", 0xad6}], 0x1}, 0x0) ioctl$KVM_NMI(r2, 0xae9a) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r5, r4) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x101400, 0x0) accept$inet6(r8, 0x0, &(0x7f0000000140)) sendmsg$netlink(r6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0xfffffffffffffd48, 0x1, 0x2, {r7}}}, @rights={{0x14, 0x1, 0x1, [r3]}}], 0x38}, 0x0) ioctl$VT_GETMODE(r3, 0x5601, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:04:52 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x2000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x9, &(0x7f0000000100)=[{0x800, 0x4, 0x1, 0x7}, {0x7fff, 0xff, 0x3, 0x280}, {0x8, 0x40, 0x80, 0x50}, {0x5, 0x81, 0x1, 0x8001}, {0x7, 0x1c, 0xd4, 0x8000}, {0x7fff, 0xff, 0x9, 0xf840}, {0x3, 0x7, 0xf7, 0x1}, {0x65, 0x80, 0x3a, 0x4}, {0x5, 0x0, 0x7, 0x7fbd}]}) [ 639.832125][T11840] usb 1-1: new high-speed USB device number 80 using dummy_hcd 16:04:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r6, r5) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r7, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r8}}}, @rights={{0x14, 0x1, 0x1, [r4]}}], 0x38}, 0x0) r9 = syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x1, 0x2) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000440)='nbd\x00') r11 = epoll_create1(0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r12, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_MOD(r11, 0x3, r12, &(0x7f0000000300)) r13 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000480)='/dev/dlm-monitor\x00', 0x385280, 0x0) r14 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) r15 = epoll_create1(0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r15, 0x1, r14, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r15, 0x1, r16, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_MOD(r15, 0x3, r16, &(0x7f0000000300)) sendmsg$NBD_CMD_STATUS(r9, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x7c, r10, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, [{0x8, 0x1, r12}, {0x8, 0x1, r13}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xac}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0xc, 0x7, [{0x8, 0x1, r16}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x4044181) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x480000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r10, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xcf0}]}, 0x3c}}, 0x20008801) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r17, r3) connect(r3, &(0x7f0000000380)=@ipx={0x4, 0x34, 0x2, "880fb5fd75b3", 0xff}, 0x80) r18 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r19 = getpgrp(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r18, 0xc1105517, &(0x7f0000000240)={{0x9, 0xc, 0xffffffff, 0x8, '\x00', 0x2}, 0x3, 0x8, 0x40, r19, 0x0, 0xfffffffc, 'syz0\x00', &(0x7f00000000c0), 0x0, [], [0xb7, 0x2, 0x0, 0xc49]}) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000005e0087000000000000000000000000007cd7ba5f02e216f3422d5eacef0ee3a48d6a51d18cb8f0bc00268f22fc02a87a0b3e7f4141387de335ffe8c4ddf7505a57c2e3e36ad27f2db84e5cf380938fc83f73958c4905827fbce943853c680531ee4ef1f173351bc6db52825190d71b095f7d620ada254068a56e46829e2bf90e22", @ANYRES32=r2, @ANYBLOB="04000000000000000000000045f314fa537d275e10c18f42b50a44c23e39f55537b9547624c0ca83645535d82c59590cdeae619d38d7574346f4551a904a3263a15eb4bbd3d0f8a374c0d850e6647eb7fad547e1e501efb8488681180f1ec51c4e4f8443799d8da0d6886c5fe4ce2fb7bb8751bb64c45dea541c089b0b8b8144e9344da3c7c31f6cf091b0dcc566aca6619040a1aa4aec6241de6366b30b42fd3b6601bd20b820ae1738aeac1d89a1dd7b92d0eb9bf4d254aba24f6d9ca2f01993790ba787228716c83e70971e20d2bd04a6d119ef031c85d2069a0be5d6a4ab"], 0x3}, 0x1, 0x0, 0x0, 0x200020c4}, 0x800) 16:04:53 executing program 4: syz_extract_tcp_res(&(0x7f0000000080), 0x4, 0xbf8) syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "e30600", 0x20, 0x40000000003a, 0x43ff, @rand_addr="7c75cb47ad0e73292a4ec8119fcd69de", @mcast2, {[], @icmpv6=@ndisc_na={0x88, 0x0, 0x0, 0x0, [], @local, [{0x2, 0x1, "83d800880d83"}]}}}}}}, 0x0) [ 640.064108][T21436] ICMPv6: NA: aa:aa:aa:aa:aa:aa advertised our address fe80::aa on syz_tun! [ 640.192322][T11840] usb 1-1: config 0 has an invalid interface number: 135 but max is 0 [ 640.200719][T11840] usb 1-1: config 0 has no interface number 0 [ 640.207033][T11840] usb 1-1: config 0 interface 135 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 640.217727][T11840] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 640.229947][T11840] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has invalid maxpacket 1646, setting to 1024 [ 640.241283][T11840] usb 1-1: config 0 interface 135 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 640.254503][T11840] usb 1-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=65.14 [ 640.263743][T11840] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.272623][ T4071] usb 6-1: new low-speed USB device number 45 using dummy_hcd [ 640.281174][T11840] usb 1-1: config 0 descriptor?? [ 640.329643][T11840] iowarrior 1-1:0.135: IOWarrior product=0x1501, serial= interface=135 now attached to iowarrior0 [ 640.525885][T11840] usb 1-1: USB disconnect, device number 80 [ 640.543956][T11840] iowarrior 1-1:0.135: I/O-Warror #0 now disconnected [ 640.642259][ T4071] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 640.651104][ T4071] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 640.661616][ T4071] usb 6-1: config 0 has no interface number 0 [ 640.667876][ T4071] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x4 is Bulk; changing to Interrupt [ 640.677978][ T4071] usb 6-1: New USB device found, idVendor=1b80, idProduct=d700, bcdDevice=73.60 [ 640.687169][ T4071] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.696795][ T4071] usb 6-1: config 0 descriptor?? [ 640.747601][ T4071] radio-si470x 6-1:0.50: could not find interrupt in endpoint [ 640.755369][ T4071] radio-si470x: probe of 6-1:0.50 failed with error -5 [ 640.762684][ T4071] usbhid 6-1:0.50: couldn't find an input interrupt endpoint [ 640.961396][ T4071] usb 6-1: USB disconnect, device number 45 16:04:54 executing program 5: r0 = socket(0x8, 0xa, 0xfd) connect$can_bcm(r0, &(0x7f0000000040), 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x40080, 0x118) socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x0, 0x200) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r6, r5) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r7, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1c0000006fc4d4f8e8990000d9000166d70002000000", @ANYRES32=r8, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00'], 0x38}, 0x0) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r7, 0x111, 0x2, 0x1, 0x4) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(r0, &(0x7f0000000080)="240000001a005f0414f9f407000904000a000000000000000000000008000f0000000000", 0x24) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 16:04:54 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r5, r4) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r7}}}, @rights={{0x14, 0x1, 0x1, [r3]}}], 0x38}, 0x0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r11, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r12}}}, @rights={{0x14, 0x1, 0x1, [r8]}}], 0x38}, 0x0) syz_usb_connect(0x0, 0x7, &(0x7f00000002c0)=ANY=[@ANYRESHEX, @ANYRES64=r2, @ANYRES32=r11, @ANYRES16=r3, @ANYRES32, @ANYRES16=r2, @ANYBLOB="10bbf31c4e0d5315d28d24f0a03632a80e000000a8228026ba6d6c6e4f00ea5d7e75d2710332109357fc1b73d18027a395979a6b2f753ded9255e96263ad0200"], 0x0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = dup2(r15, r14) getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r16, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r17}}}, @rights={{0x14, 0x1, 0x1, [r13]}}], 0x38}, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r13, 0x10f, 0x83, &(0x7f0000000140), &(0x7f0000000180)=0x4) r18 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x200040, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r18, 0x6, 0xd, &(0x7f0000000200)='htcp\x00', 0x5) r19 = syz_usb_connect(0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x0) syz_usb_disconnect(r19) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r20 = syz_usb_connect(0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x0) syz_usb_disconnect(r20) 16:04:54 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={r0}) write$binfmt_aout(r1, &(0x7f0000000100)={{0x43, 0x4, 0x81, 0x397, 0x4c, 0x84, 0x1a8, 0x6000}, "07846e222f221d093545343643d894db7be020c34378fea91057308a89fa1e4ceefb59b29a9ead1032ee76db60b09413b1524bd34f00773f24335841b5f1182e237a90d72ecc", [[], [], [], [], [], [], [], []]}, 0x866) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@local, 0x4, 0x0, 0xff, 0xe, 0x3, 0x7}, &(0x7f0000000080)=0x20) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd6, 0xf4, 0x30, 0x20, 0xe20, 0x101, 0x1773, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xa9, 0x68, 0x62, 0x0, [], [{{0x9, 0x5, 0x9}}]}}]}}]}}, 0x0) 16:04:54 executing program 4: pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r4}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x38}, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xae44, 0x4) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, &(0x7f0000000000)) 16:04:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0xfffffffffffffe96) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r5, r4) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r7}}}, @rights={{0x14, 0x1, 0x1, [r3]}}], 0x38}, 0x0) getsockopt$MISDN_TIME_STAMP(r6, 0x0, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup2(r13, r11) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r14, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r15}}}, @rights={{0x14, 0x1, 0x1, [r10]}}], 0x38}, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r10, 0x4004551e, &(0x7f0000000100)=0x76d5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) ioctl$KVM_RUN(r2, 0xae80, 0x0) r16 = socket(0x12, 0x2, 0x7) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) r18 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$TIOCGPTPEER(r12, 0x5441, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r18, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r17, 0x84, 0x7d, &(0x7f0000000300)={r19, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000040)=0x100) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r16, 0x84, 0x18, &(0x7f0000000180)={r19, 0x9}, &(0x7f00000001c0)=0x8) 16:04:54 executing program 0: syz_usb_connect(0x0, 0xbc, &(0x7f0000002c40)={{0x12, 0x1, 0x0, 0x1c, 0x0, 0xf5, 0x40, 0x7c0, 0x1501, 0x6514, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x87, 0x0, 0x1, 0x3, 0x1, 0x12, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "81bb6e86a9"}]}}]}}]}}]}}, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000100)}], 0x1) 16:04:54 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0xffffffffffffc27b, 0x101000) write$cgroup_int(r2, &(0x7f0000000100)=0x2, 0x12) r3 = dup(r1) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r6, r5) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r7, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1c000000000000000100000002000000fa1b4a1ee9c737955261a8ad73bf0c008cb3a267b40103fa2a6ccf16759f2467e17c493631b0febda2afa6132c70ee3c52886cd059dbab21050ac556a2e725541dae2e1920f6aa355385e3d2d9d61c309c8156122ab519da2b22d91807a985b306d9318253ddfa369986f51380ae5fd6cf34333a2d949277d2d021eccf1c165718070f7dfefa34cfc3fb6c2f02884114ae3d07a0a104da18359a40fe21294c01a75ae4ceddfd2796f11438254947c4032adff348bbdd55f062dadb856941d881d633ed80", @ANYRES32=r8, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00'], 0x38}, 0x0) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000080)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x3}}) 16:04:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0x23, 0x847, 0x0, 0x0, {0x2804}}, 0x14}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') [ 641.668358][T21461] ALSA: seq fatal error: cannot create timer (-19) 16:04:54 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x20000, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x40, 0x0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000100)={0x100000001, 0x3957356a}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ip6_flowlabel\x00') ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) r3 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) setsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000180)=0x5, 0x4) prctl$PR_CAPBSET_DROP(0x18, 0x17) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000002c0)={0x12, 0x10, 0xfa00, {&(0x7f00000001c0), r4, r5}}, 0x18) r6 = syz_open_dev$midi(&(0x7f0000000300)='/dev/midi#\x00', 0x2, 0x88000) setsockopt$inet_tcp_TLS_RX(r6, 0x6, 0x2, &(0x7f0000000340)=@gcm_128={{0x303}, "208376f2674a2550", "63e0fa5e2b5c7c970f6372e6492883de", "2e9591b6", "8ba2c9e966e43628"}, 0x28) r7 = open(&(0x7f0000000380)='./file0\x00', 0x1, 0x81) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000004c0)={r7, &(0x7f00000003c0)="520ca713a2599ec56e3c92e533a3c2bd7a8d528fdcc2eb1cf37d20910cfc88e797ba6a63015b8d09b01f3e2383ed9b7efa54952255aee9cc61cc804171a00792b547a05c69e1a5e65cebfa5bfaca10aad9493266485449eeeb77d49564a4e953699f72dc535704f603f4568920a1abd0241c03a46d3761ba0f8ec3d8b34f1ebdbd70f1bc96f4c1a626bb28264c53e0e0a3c0f5497ae74750fd8235264b1ba8bfe7ff0d9a066a66ad2855d49480ca4a7f60a8b762e686c39c9e4ac680791114c79f799bb0be44ffc2e70bef99ec928bb206cccd19b2"}, 0x20) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500)='/dev/sequencer\x00', 0x880, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r8, 0x4068aea3, &(0x7f0000000540)={0x7b, 0x0, [0x1, 0x4, 0x7, 0x5]}) r9 = syz_open_dev$mouse(&(0x7f00000005c0)='/dev/input/mouse#\x00', 0xfffffffffffffc01, 0x40) ioctl$IOC_PR_PREEMPT_ABORT(r9, 0x401870cc, &(0x7f0000000600)={0x6, 0x0, 0x7fffffff, 0x8}) r10 = syz_open_dev$sndpcmp(&(0x7f0000000640)='/dev/snd/pcmC#D#p\x00', 0x100, 0x0) getsockopt$inet6_dccp_buf(r10, 0x21, 0x1df, &(0x7f0000000680)=""/59, &(0x7f00000006c0)=0x3b) r11 = syz_open_dev$sndpcmc(&(0x7f0000000700)='/dev/snd/pcmC#D#c\x00', 0x80000001, 0x4082) ioctl$ASHMEM_GET_PIN_STATUS(r11, 0x7709, 0x0) ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) preadv(r10, &(0x7f0000001a80)=[{&(0x7f0000000740)=""/82, 0x52}, {&(0x7f00000007c0)=""/76, 0x4c}, {&(0x7f0000000840)=""/124, 0x7c}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/250, 0xfa}, {&(0x7f00000019c0)=""/85, 0x55}, {&(0x7f0000001a40)=""/40, 0x28}], 0x7, 0x0) r12 = openat$dsp(0xffffffffffffff9c, &(0x7f0000001b00)='/dev/dsp\x00', 0xc0402, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r12, &(0x7f0000001b40)={0x28, 0x2, 0x0, {0x1, 0x2, 0x2b}}, 0x28) r13 = creat(&(0x7f0000001b80)='./file1\x00', 0x40) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000001bc0)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0xd01}}}, &(0x7f0000001c80)=0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r13, 0x84, 0x75, &(0x7f0000001cc0)={r14, 0x5}, 0x8) 16:04:54 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x4) sendmsg(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)='e', 0x1}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001840)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4) close(r0) [ 641.752695][ T4071] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 641.765364][T11840] usb 1-1: new high-speed USB device number 81 using dummy_hcd 16:04:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) shutdown(r1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x40, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000140)=0x3f, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @remote, 0x1}], 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$rfkill(0xffffffffffffffff, 0x0, 0x0) 16:04:55 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="1221000073b6f010cd0ca31053f400000001090212000100000000090400000077eacb00"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000000)={0x0, 0x0, 0x6, "0330ffffff42"}, 0x0, 0x0, 0x0, 0x0, 0x0}) userfaultfd(0x800) syz_usb_control_io(r0, 0x0, 0x0) [ 641.979113][T21483] Dead loop on virtual device ip6_vti0, fix it urgently! [ 641.992208][ T4071] usb 4-1: Using ep0 maxpacket: 32 [ 641.992556][T21483] Dead loop on virtual device ip6_vti0, fix it urgently! 16:04:55 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x2dc, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x400000, 0x69, 0x11, 0x1a001000044}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 642.114692][ T4071] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=17.73 [ 642.124135][ T4071] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.133892][T11840] usb 1-1: config 0 has an invalid interface number: 135 but max is 0 [ 642.142224][T11840] usb 1-1: config 0 has no interface number 0 [ 642.148663][T11840] usb 1-1: config 0 interface 135 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 642.159541][T11840] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 642.171268][T11840] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has invalid maxpacket 1646, setting to 1024 [ 642.182642][T11840] usb 1-1: config 0 interface 135 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 642.195823][T11840] usb 1-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=65.14 [ 642.205035][T11840] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.215968][ T4071] usb 4-1: config 0 descriptor?? [ 642.221854][T11840] usb 1-1: config 0 descriptor?? [ 642.256126][ T4071] pegasus_notetaker: probe of 4-1:0.0 failed with error -12 [ 642.286449][T11840] iowarrior 1-1:0.135: IOWarrior product=0x1501, serial= interface=135 now attached to iowarrior0 [ 642.362205][T12046] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 642.474295][T11840] usb 1-1: USB disconnect, device number 81 [ 642.480953][ T4071] usb 4-1: USB disconnect, device number 42 [ 642.494354][T11840] iowarrior 1-1:0.135: I/O-Warror #0 now disconnected [ 642.632239][T12046] usb 6-1: device descriptor read/64, error 18 [ 643.022450][T12046] usb 6-1: device descriptor read/64, error 18 16:04:56 executing program 1: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000001c0)={0x7, 0x9}, 0xc) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r1 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000480)=@name, &(0x7f00000004c0)=0x10, 0x0) r2 = dup(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x3ab) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='lp\x00', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0)=0x3ff, 0x4) syz_open_dev$vbi(0x0, 0x1, 0x2) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000140)=0x1, 0x3e9) prctl$PR_GET_THP_DISABLE(0x2a) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) pipe(&(0x7f0000000540)) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r5, r4) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r7}}}, @rights={{0x10}}], 0x30}, 0x0) ioctl$ASHMEM_GET_NAME(r6, 0x81007702, &(0x7f0000000400)=""/71) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/udplite\x00') bind$isdn_base(r8, &(0x7f0000000080)={0x22, 0x0, 0x8}, 0x6) r9 = syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x20000) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280)={0x0, 0x1}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f0000000340)={r10, 0x40}, &(0x7f0000000380)=0x8) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0xfffffc01}, 0x8) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0xffffffa6, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) [ 643.252154][T11876] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 643.292161][T12046] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 643.492188][T11876] usb 4-1: Using ep0 maxpacket: 32 [ 643.592144][T12046] usb 6-1: device descriptor read/64, error 18 [ 643.612286][T11876] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=17.73 [ 643.621486][T11876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.631248][T11876] usb 4-1: config 0 descriptor?? [ 643.675728][T11876] pegasus_notetaker: probe of 4-1:0.0 failed with error -12 [ 643.873817][T11840] usb 4-1: USB disconnect, device number 43 [ 644.002158][T12046] usb 6-1: device descriptor read/64, error 18 [ 644.122411][T12046] usb usb6-port1: attempt power cycle 16:04:57 executing program 4: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000440)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') r1 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x3c) r2 = socket$kcm(0xa, 0x80005, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r2}) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r6, r5) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r7, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r8}}}, @rights={{0x14, 0x1, 0x1, [r4]}}], 0x38}, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r3, 0xc0285629, &(0x7f0000000280)={0x0, 0x4, 0x5856d2ed, [], &(0x7f0000000200)=0x20}) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x60009290}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x8c, r9, 0x62ed07f6765d92e9, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x60}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x237}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8}, 0x48010) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') 16:04:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000005d00)={&(0x7f0000004200)=ANY=[@ANYBLOB="2842e10ccc139fd5f80000000002000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000112000c0001006970366772650000f000020014000700fe8000000000000000000000000000aa1400070000000000000000000000ffff7f0000010800090007000000080013000000000000000300110000000800020006000000000018000900000008000500ffffffff08000100", @ANYRES32=0x0, @ANYBLOB="1000070084f8dcf967e0633c21d002f3cb83a497140007000000000000000000000000000000000114000600ff01000000000000000000000000000114000700fe8000000000000000000000000000aa0800150001dc0f0008000f0005000000080013000000000008001800ff000000080011004e230000080017000100000004001200080005000400000008000a00", @ANYRES32=0x33e0], 0x128}, 0x1, 0x0, 0x0, 0x44011}, 0x0) 16:04:57 executing program 0: syz_usb_connect(0x0, 0xbc, &(0x7f0000002c40)={{0x12, 0x1, 0x0, 0x1c, 0x0, 0xf5, 0x40, 0x7c0, 0x1501, 0x6514, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x87, 0x0, 0x1, 0x3, 0x1, 0x12, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "81bb6e86a9"}]}}]}}]}}]}}, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000100)}], 0x1) 16:04:57 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x240001, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000100)) r1 = socket(0x10, 0x0, 0xfe) fdatasync(0xffffffffffffffff) pipe(&(0x7f0000000080)) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r5, r4) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r7, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000140000000000000001000000c7c86f8d7cba72a7d122dd631601000000", @ANYRES32=r3, @ANYBLOB="000008006af03a267fc07b511691cb99f528d8ab59ae2145703be3a2c33a4f2ed8eb4ce1c0d3863479ff19017eb02291438c7f248b242976ae000000100000000000"], 0x38}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0x80000000, 0xffffffff}, 0x10) write(r1, &(0x7f0000000000)="1c0000001a009b8a1ee5f4070009040081000000fe00000dffffff9e", 0x1c) 16:04:57 executing program 3: pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) close(r0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r4}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x38}, 0x0) write$tun(r0, &(0x7f00000000c0)={@val={0x0, 0x3}, @void, @ipx={0xffff, 0x4e, 0x4, 0x1, {@broadcast, @current, 0xa791}, {@current, @current, 0xe4}, "4c0cd3035039f7e5ab75899c0c8399e78e1ec8465ff6779b77ebe64ae8ebff091daebebe2e4fdaa5c6a558b6dfd9d9ae"}}, 0x52) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x40) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000080)={0x82}) sendmsg$nl_xfrm(r5, &(0x7f0000000640)={&(0x7f0000000040), 0xc, &(0x7f0000000600)={&(0x7f0000000700)=@acquire={0x178, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in=@dev, {@in=@local, @in=@remote}, {{@in=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}}}, [@tmpl={0x44, 0x5, [{{@in6=@remote, 0x0, 0x32}, 0x0, @in6}]}, @mark={0xc, 0x15, {0x0, 0xfffffffffffffffe}}]}, 0x178}}, 0x0) [ 644.467283][T21518] device lo entered promiscuous mode 16:04:57 executing program 1: openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x200, 0x0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f00000000c0)='syz0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r4}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x38}, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000040)) 16:04:57 executing program 2: r0 = syz_usb_connect(0x0, 0x409, &(0x7f00000044c0)=ANY=[@ANYBLOB="12010000c39561080304d8b85b82000000010902120001000000000904000000e94ee10063ada9dca1be32840c86b2a3fbbe57433dcd4fc0e7ecbcb5db51ccd9f3dee600303c63008a2884662898833508dddf2cb59f300020353c09beae25d9f68c0b0e7b76f77a8c31bd58da9c948eff6fefae8e3e82eb692985bb988fa5c33594b3fd32918ce6029915b2e658934e5c3e9eac3b215bd414ebe5b5334325244b28a1cbd9e75f681c95a41ccdc8c2e5b422abaaee3122992e7faa80030df5c7603340"], 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x20000, 0x0) getsockopt$inet6_dccp_buf(r1, 0x21, 0x2, &(0x7f0000000040)=""/158, &(0x7f0000000100)=0x9e) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 16:04:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000000c0), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup2(r7, r6) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r8, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="e0765972c086c9c4546a77537e4b806074a2fb7f0000001437bf34ea387b79bc6a5a274bcbe0ee83ff6e417050d0d94f5a8881678d98c9b603b9523263efee90a035195c20a8cc684c0ed7a49170a017025773b8d60200000000000000789cfe71fd0dddbb65274a31e0ffc87e9b2b2855ae723a043f6c5583f7e4ccda70020000000000000097909731ce5e5612ec00000000", @ANYRES32=r9, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00'], 0x38}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r5, 0x8934, &(0x7f0000000180)={'batadv0\x00', 0x5}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r4) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = dup2(r14, r13) getsockopt$sock_cred(r15, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r15, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r16}}}, @rights={{0x14, 0x1, 0x1, [r12]}}], 0x38}, 0x0) ioctl$SG_NEXT_CMD_LEN(r12, 0x2283, &(0x7f0000000140)=0xf7) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r11, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r17}}}, @rights={{0x14, 0x1, 0x1, [r3]}}], 0x38}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'ip6gre0\x00', 0xdd53e73532fea9f7}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={&(0x7f00000002c0)='./file0\x00'}, 0x10) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f00000001c0)={0x3, 0x2, 0x9, 0x1, 0x6}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 16:04:57 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x5a, 0xb4, 0x7e, 0x10, 0xbfd, 0x10b, 0x3bdd, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd3, 0x0, 0x1, 0x15, 0x69, 0xd7, 0x0, [], [{{0x9, 0x5, 0x82, 0x1e}}]}}]}}]}}, 0x0) socket$netlink(0x10, 0x3, 0x12) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x100000, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bcsh0\x00', 0x10) [ 644.705398][T11840] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 644.845644][T12046] usb 6-1: new high-speed USB device number 48 using dummy_hcd 16:04:58 executing program 5: syz_usb_connect(0x0, 0x53, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x6c, 0x3, 0xe0, 0x8, 0x24c6, 0xd183, 0x4f36, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa9, 0x0, 0x2, 0xff, 0x5d, 0x81, 0x0, [], [{{0x9, 0x5, 0x85}}, {{0x9, 0x5, 0x1}}]}}]}}]}}, 0x0) 16:04:58 executing program 3: seccomp(0x1, 0x0, &(0x7f0000000040)={0x20000000000000e5}) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000001380)=0x3, 0x1) 16:04:58 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x223, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040), 0x4) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = epoll_create1(0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)={0x2a0000010}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0) epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1709, 0x0, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x0, 0x0) socket$tipc(0x1e, 0x8000000005, 0x0) shutdown(0xffffffffffffffff, 0x2) dup2(r3, 0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x200000, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r6, r5) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r7, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r8}}}, @rights={{0x14, 0x1, 0x1, [r4]}}], 0x38}, 0x0) name_to_handle_at(r4, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0xef, 0x9501, "6ca8445c26052f523517a7f51d6a476b00f2689b0c4f8fb3e712d900620af1662d60f54bf203fe835cdc723fb670c83bc974a4d2afc01449fce4ce9b70b6cd5b7019c99ba0a5d533f5f0332a7b573cce1d19aad61307a48481c355c75aca1443d909e6490eccbac7e130be503b977fd2703624344419e6932b6004c672717010923760fb51c89c4b1b04bb6cf98ddcc68255a5ed8bc1caf26da3e5068142bc0792f6ee3e9e2e5cc8496be9188d3b2dea0dec4c1bcb49491fb9803966f1f22381ae3ca2ce1d923303b1fab4f94842d6b068423f32215f52bd337a66d3acc70b79c9611a69e06e1a"}, &(0x7f0000000280), 0x1c00) r9 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r10 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r10, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}}], 0x4000000000000d0, 0x0) [ 645.042094][ T4071] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 645.074714][T11876] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 645.092776][T11840] usb 1-1: config 0 has an invalid interface number: 135 but max is 0 [ 645.101113][T11840] usb 1-1: config 0 has no interface number 0 [ 645.107380][T11840] usb 1-1: config 0 interface 135 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 645.118127][T11840] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 645.129688][T11840] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has invalid maxpacket 1646, setting to 1024 [ 645.141050][T11840] usb 1-1: config 0 interface 135 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 645.154379][T11840] usb 1-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=65.14 [ 645.163512][T11840] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.172780][T12046] usb 6-1: device descriptor read/64, error 18 [ 645.208761][T11840] usb 1-1: config 0 descriptor?? 16:04:58 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x7d, &(0x7f0000000300)={r6, @in6={{0xa, 0x4e23, 0x7, @remote, 0x2}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x20]}, &(0x7f0000000040)=0x100) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000480)={r7, 0x8, 0x800, 0xffffffc0, 0x0, 0x9}, &(0x7f0000000400)=0xfffffffffffffe69) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x80}]}, 0x10) chroot(&(0x7f0000000180)='./file0\x00') pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r10, 0x1, 0x1f, &(0x7f0000000500)=""/127, &(0x7f0000000140)=0x7f) r14 = dup2(r13, r12) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000100)=0xc) get_mempolicy(&(0x7f00000001c0), &(0x7f0000000200), 0x2, &(0x7f0000ff9000/0x4000)=nil, 0x4) r15 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r16, r15) sendmsg$netlink(r14, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x18, 0x1, 0x1, [r10, r16]}}, @rights={{0x10}}], 0x28, 0x10009888}, 0x80) ioctl$TUNSETPERSIST(r11, 0x400454cb, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d11d8aad119a6040a7328aeb000000ca020000000000"], 0x16}}, 0x40) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) [ 645.278692][T11840] iowarrior 1-1:0.135: IOWarrior product=0x1501, serial= interface=135 now attached to iowarrior0 [ 645.342362][T11876] usb 2-1: Using ep0 maxpacket: 16 [ 645.402130][ T4071] usb 3-1: Using ep0 maxpacket: 8 [ 645.457850][T11840] usb 1-1: USB disconnect, device number 82 [ 645.462297][T11876] usb 2-1: config 0 has an invalid interface number: 211 but max is 0 [ 645.472379][T11876] usb 2-1: config 0 has no interface number 0 [ 645.478599][T11876] usb 2-1: config 0 interface 211 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 645.488709][T11876] usb 2-1: New USB device found, idVendor=0bfd, idProduct=010b, bcdDevice=3b.dd [ 645.497958][T11876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.511127][T11840] iowarrior 1-1:0.135: I/O-Warror #0 now disconnected [ 645.513951][T11876] usb 2-1: config 0 descriptor?? [ 645.552795][ T4071] usb 3-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=82.5b [ 645.562048][ T4071] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.572822][T11876] kvaser_usb 2-1:0.211: Cannot get usb endpoint(s) [ 645.601008][ T4071] usb 3-1: config 0 descriptor?? [ 645.742106][T12046] usb 6-1: device descriptor read/64, error -71 [ 645.776240][T11840] usb 2-1: USB disconnect, device number 33 [ 645.853042][ T4071] snd-usb-audio: probe of 3-1:0.0 failed with error -2 16:04:59 executing program 4: syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x38}, 0x0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup2(r8, r7) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r9, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r10}}}, @rights={{0x14, 0x1, 0x1, [r6]}}], 0x38}, 0x0) sendmsg$netlink(r6, &(0x7f0000000680)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbff, 0x80000000}, 0xfffffffffffffe61, 0x0, 0x1a8, 0x0, 0x0, 0x60000000}, 0x22008) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000000000000723b"]) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000180)=[@sack_perm, @window={0x3, 0x401, 0x1f}, @mss={0x2, 0x6122}, @sack_perm, @timestamp, @window={0x3, 0x6, 0x1}, @timestamp, @sack_perm, @window={0x3, 0x6, 0x5}, @timestamp], 0xa) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5, 0x3, 0x0, 0x3, 0x6, 0x0, &(0x7f0000000780)=""/4096, 0x6}) ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r13, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r13, 0xae80, 0x0) ioctl$KVM_RUN(r13, 0xae80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = dup2(r15, r14) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) ioctl$KVM_NMI(r13, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r13, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r13, 0xae80, 0x0) 16:04:59 executing program 0: syz_usb_connect(0x0, 0xbc, &(0x7f0000002c40)={{0x12, 0x1, 0x0, 0x1c, 0x0, 0xf5, 0x40, 0x7c0, 0x1501, 0x6514, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x87, 0x0, 0x1, 0x3, 0x1, 0x12, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "81bb6e86a9"}]}}]}}]}}]}}, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000100)="20b3ce0c3b0cf57286d3df0d17d2d07793e47b9e0211c0", 0x17}], 0x1) [ 646.012645][T12046] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 646.059135][T11840] usb 3-1: USB disconnect, device number 27 16:04:59 executing program 3: syz_usb_connect(0xd, 0x8c, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x4b, 0xb4, 0xe1, 0x8, 0x67b, 0x4bb, 0xb01e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x80, 0x0, 0x0, [{{0x9, 0x4, 0xc2, 0x0, 0x0, 0xb, 0x3, 0xc3, 0x0, [@generic={0x0, 0x9, "1af4159ae030cf2794e192204861a7c6c2becf0f2d6d22581bb87dc8cae5f19659af8c7efacc995a04005566ffce3e1bed3de6cfeba345aee6371858282ea32cce29b9f128d5ea62b47f84a36b79234888454933e107d61a877e9fc234cdc243b7440e3a1172140a38e19280616215b11014f51c18a727c38a9a696e4195b2be7717f0205236cf28179f17ac68c31b22f278ca30ea"}, @generic={0x0, 0x4, "1ba4e769bb9a18d18c"}]}}]}}]}}, 0x0) 16:04:59 executing program 4: set_mempolicy(0x4003, &(0x7f0000000140)=0x101, 0x2) modify_ldt$write(0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) clone(0x40108000, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000240)=""/114) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x38}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f0000000180)={0x3, 0x1, 0xf39, 'queue0\x00', 0x1}) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup2(r8, r7) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r9, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r10}}}, @rights={{0x14, 0x1, 0x1, [r6]}}], 0x38}, 0x0) fstat(r9, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000003f00)='./file0\x00', &(0x7f0000003f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, r12) setregid(r11, r12) [ 646.268297][T12046] usb 6-1: Using ep0 maxpacket: 8 [ 646.314031][T21573] IPVS: ftp: loaded support on port[0] = 21 [ 646.372696][ T4071] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 646.393748][T21574] IPVS: ftp: loaded support on port[0] = 21 [ 646.404231][T12046] usb 6-1: config 0 has an invalid interface number: 169 but max is 0 [ 646.412566][T12046] usb 6-1: config 0 has no interface number 0 [ 646.418832][T12046] usb 6-1: New USB device found, idVendor=24c6, idProduct=d183, bcdDevice=4f.36 [ 646.428047][T12046] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.442905][T12046] usb 6-1: config 0 descriptor?? 16:04:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x0, 0x5686a0a9d05573f) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000200800000000000900851fb8349656f3ddbed7860000000060027a80ef42dbe1c6471cc43c7c1d580b915c60dcc927c738cf7c6b830a9153212384e56fa8e0d7331f331b11c7a78b996aa5a2711f7f9487dfde2a888a0e5484b4d7f5b690831f12110e1e95202dcb6750dd88ea0e67030d50d3ee534a34e3a2aaee5f1de10f9b623c932762c08171196f42c1340cb0c416d3617055801d526e854c45a2575112e91f345cabc16e46777b239091e383e441df37c4e3d791d3ba59ac3ae09a4de295566cf89e0014ca6de2af4eb6fb86715c00bff5c8e43fbe", @ANYRES32=0x0, @ANYBLOB="00000000000000000c0001000000000000000000180012001000010069703665727370616e00000004000200"], 0x44}}, 0x0) [ 646.503139][T11838] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 646.582668][T11840] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 646.694492][T11874] usb 6-1: USB disconnect, device number 49 [ 646.742160][T11838] usb 4-1: Using ep0 maxpacket: 8 [ 646.752371][ T4071] usb 1-1: config 0 has an invalid interface number: 135 but max is 0 [ 646.760602][ T4071] usb 1-1: config 0 has no interface number 0 [ 646.766868][ T4071] usb 1-1: config 0 interface 135 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 646.777630][ T4071] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 646.789223][ T4071] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has invalid maxpacket 1646, setting to 1024 [ 646.800634][ T4071] usb 1-1: config 0 interface 135 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 646.814028][ T4071] usb 1-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=65.14 [ 646.823365][ T4071] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.833127][ T4071] usb 1-1: config 0 descriptor?? [ 646.863130][T11876] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 646.880123][ T4071] iowarrior 1-1:0.135: IOWarrior product=0x1501, serial= interface=135 now attached to iowarrior0 [ 646.893413][T11840] usb 2-1: Using ep0 maxpacket: 16 [ 646.922669][T11838] usb 4-1: unable to get BOS descriptor or descriptor too short [ 646.992650][T11838] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 647.000413][T11838] usb 4-1: can't read configurations, error -71 [ 647.032308][T11840] usb 2-1: config 0 has an invalid interface number: 211 but max is 0 [ 647.040631][T11840] usb 2-1: config 0 has no interface number 0 [ 647.046935][T11840] usb 2-1: config 0 interface 211 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 647.057123][T11840] usb 2-1: New USB device found, idVendor=0bfd, idProduct=010b, bcdDevice=3b.dd [ 647.070543][T11840] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.087651][ T4071] usb 1-1: USB disconnect, device number 83 [ 647.095762][T11840] usb 2-1: config 0 descriptor?? [ 647.102287][T11876] usb 3-1: Using ep0 maxpacket: 8 [ 647.114266][ T4071] iowarrior 1-1:0.135: I/O-Warror #0 now disconnected [ 647.133955][T11840] kvaser_usb 2-1:0.211: Cannot get usb endpoint(s) [ 647.222374][T11876] usb 3-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=82.5b [ 647.231531][T11876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.241681][T11876] usb 3-1: config 0 descriptor?? [ 647.336296][ T4071] usb 2-1: USB disconnect, device number 34 [ 647.482234][T11840] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 647.503123][T11876] snd-usb-audio: probe of 3-1:0.0 failed with error -71 [ 647.517172][T11876] usb 3-1: USB disconnect, device number 28 16:05:00 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000402505a1a440000000000109025c0001010000000904c6040040000000002406000105240200000d240f0100000000000000000046241a00000009058103000000000004010102020d00000905e1c465d2ec84520833ef788d82020000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f00000002c0)={0x0, 0x0, 0x3, "d6f3b3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:05:00 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x380000, @empty}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0xffffffd5, 0x0, 0xfffffffffffffe89, &(0x7f0000000940)=[{0x10, 0x110, 0xfffffffd}], 0x10}, 0x4000000) [ 647.687493][T11838] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 647.743420][T11840] usb 6-1: Using ep0 maxpacket: 8 16:05:00 executing program 0: syz_usb_connect(0x0, 0xbc, &(0x7f0000002c40)={{0x12, 0x1, 0x0, 0x1c, 0x0, 0xf5, 0x40, 0x7c0, 0x1501, 0x6514, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x87, 0x0, 0x1, 0x3, 0x1, 0x12, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "81bb6e86a9"}]}}]}}]}}]}}, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000100)=' ', 0x1}], 0x1) [ 647.862463][T11840] usb 6-1: config 0 has an invalid interface number: 169 but max is 0 [ 647.870888][T11840] usb 6-1: config 0 has no interface number 0 [ 647.877272][T11840] usb 6-1: New USB device found, idVendor=24c6, idProduct=d183, bcdDevice=4f.36 [ 647.886666][T11840] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.896328][T11840] usb 6-1: config 0 descriptor?? [ 647.943634][T11838] usb 4-1: Using ep0 maxpacket: 8 [ 648.062329][T11838] usb 4-1: unable to get BOS descriptor or descriptor too short [ 648.072105][T11876] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 648.122314][T11874] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 648.122583][T11838] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 648.137783][T11838] usb 4-1: can't read configurations, error -71 [ 648.144686][T11838] usb usb4-port1: attempt power cycle [ 648.151458][T11950] usb 6-1: USB disconnect, device number 50 16:05:01 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000008c41090ea400000000001090224000100000000090400000903030000000000"], 0x0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x38}, 0x0) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000240)={0x7, 0x100, 0x0, 0x0, 0xcf}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x6, {[@main=@item_4={0x3, 0x0, 0x0, "e95ab04b"}, @global]}}, 0x0}, 0x0) r6 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x8001, 0x301000) ioctl$SG_GET_REQUEST_TABLE(r6, 0x2286, &(0x7f00000000c0)) syz_usb_control_io(r0, 0x0, &(0x7f0000001900)={0xac, &(0x7f00000012c0)={0x0, 0x0, 0x3, "062f87"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:05:01 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000002c0)=ANY=[], 0x0) readv(r0, &(0x7f0000000600), 0x5) write$UHID_DESTROY(r0, &(0x7f0000000280), 0x33e6c623b434421b) 16:05:01 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) open(0x0, 0x141042, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) shmctl$SHM_STAT(0x0, 0xd, 0x0) shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffd000/0x3000)=nil) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) arch_prctl$ARCH_GET_CPUID(0x1011) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RSTAT(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="6b0000007d0200000064004000f800000002fffffff8000300000000000000002f6c6f6f702d636f6e74726f6c0006006d643573756d12002f646576246c6f6f702d636f6e74726f6c00070024263a75736572000000000000000000"], 0x6b) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) chdir(0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000300), 0x4) socket(0x0, 0x2, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) openat$md(0xffffffffffffff9c, &(0x7f0000000340)='/dev/md0\x00', 0x400000, 0x0) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/attr/sockcreate\x00', 0x2, 0x0) dup2(r2, r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000000140)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000280)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000001ae, 0x62, 0x0) getsockname(r3, &(0x7f00000004c0)=@can={0x1d, 0x0}, &(0x7f0000000400)=0x1ca) sendto(r1, &(0x7f0000000140)="98723b1ef2fe2fbaed23032cc69e77c704cf95f66c644a96f17000c8c2fe770c80cca658feed4de1cb9684a574733d9f6d67d6376a54396773118cdf2611e4c39ded698f2b34b8b755f9c0d58142630b2a3fd58031c98e0669b5e9e77d5cb8536c74f65e7ed047eb5e9d0d0bd9a834a45779819cb19712a3cda8af86359010f3e33ee9b7b9e7cc19bea8ba863dc418ad2f77feeb15a28046f7980d8e74d660599d17927095dcf54090705092ccf61c66cfb511e622876771db07c5090ecf516b2c7a0eebf4e60ce2af5edaa313f29b44d45621", 0xd3, 0x4, &(0x7f0000000280)=@can={0x1d, r4}, 0x80) write$binfmt_script(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x0) close(0xffffffffffffffff) 16:05:01 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/mcfilter\x00') r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) write$binfmt_elf32(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600bee50629080000000000000200060008000000ad0000003800000023000000c0ffffff0100200001000700090006000000000051e5746409000000ff7f000005000000090000007c0f000081000000c1ffffff060000000300000004000000070000000000000008000000fbffffff64000000728e584d7e38fb84485db361153c5b208a5bffefaa293fae340b070f3e0b443d9072507071268ab411aa97977c71ff476669b3189952f1ae56e3beee95df973b6bc06c6d4dd98dd0d084f70c67b1f250b4f1b2c49b0bfd50413e79815554b07feee3db15d67f937ea76a67385f77039c6dec2319a9312134ee473906a4b350aacb9732a54c1cca26b66e08199a53853441e38853562a3f80f664ce9fd06b6500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac1a05929d0859d000"/2070], 0xfffffffffffffe03) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/30, 0x1e}], 0x1, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0xddf3323d43d24692, 0x1) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f0000000100)={0x0, 0x1, 'client1\x00', 0x4, "d3bbf9459d5e4dbf", "7c01fa8fa210330407a5f1cd25da26db4ffd7acd5f0f8f806ea5306d335e29ca", 0x80000001}) preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x5e) 16:05:01 executing program 4: pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r4}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x38}, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f0000000000)=""/226, &(0x7f0000000100)=0xe2) [ 648.472734][T11876] usb 3-1: config 1 has an invalid interface number: 198 but max is 0 [ 648.481080][T11876] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 648.491277][T11876] usb 3-1: config 1 has no interface number 0 [ 648.497484][T11876] usb 3-1: config 1 interface 198 has no altsetting 0 [ 648.504460][T11876] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 648.513635][T11876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 16:05:01 executing program 1: syz_usb_connect$hid(0x5, 0x2d0, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x100000000008, 0x79, 0x1844, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x130, 0x20, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x2, 0xfd}}}}}]}}]}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f00000001c0)={0x3d5, "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"}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x9) 16:05:01 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400000, 0x0) listen(r0, 0x5) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) syz_open_dev$hiddev(&(0x7f0000000000)='/dev/usb/hiddev#\x00', 0x1000, 0x200) [ 648.562470][T11874] usb 1-1: config 0 has an invalid interface number: 135 but max is 0 [ 648.570841][T11874] usb 1-1: config 0 has no interface number 0 [ 648.577094][T11874] usb 1-1: config 0 interface 135 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 648.587857][T11874] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 648.599341][T11874] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has invalid maxpacket 1646, setting to 1024 [ 648.610692][T11874] usb 1-1: config 0 interface 135 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 648.623943][T11874] usb 1-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=65.14 [ 648.633068][T11874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.709184][T11874] usb 1-1: config 0 descriptor?? 16:05:01 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000040, 0x46d, 0xc20e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x1ff, 0x4000) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={r4, 0x15, 0x1, 0x9, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r5 = dup2(r3, r2) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x40, 0x0) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000200)={{0x2, 0x4e24, @local}, {0x6, @broadcast}, 0x4, {0x2, 0x4e23, @local}, 'bridge0\x00'}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r7}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x38}, 0x0) ioctl$TCSETA(r5, 0x5406, &(0x7f0000000300)={0x2, 0x8000, 0xf001, 0x1000, 0x4, 0x2e, 0x1, 0x3f, 0x4, 0x40}) [ 648.763005][T11874] iowarrior 1-1:0.135: IOWarrior product=0x1501, serial= interface=135 now attached to iowarrior0 [ 648.796486][T11950] usb 6-1: new high-speed USB device number 51 using dummy_hcd 16:05:01 executing program 3: r0 = syz_usb_connect(0x0, 0x24f, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0xfb, 0xb9, 0x30, 0x10, 0x424, 0x9d00, 0xb49, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x7a, 0x0, 0x0, 0x7b, 0x68, 0xd8}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000940), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net\x00') fstat(r1, &(0x7f00000022c0)) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, 0x0) [ 648.959667][T12046] usb 1-1: USB disconnect, device number 84 [ 648.975649][T12046] iowarrior 1-1:0.135: I/O-Warror #0 now disconnected [ 649.012136][T11840] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 649.052365][T11950] usb 6-1: Using ep0 maxpacket: 8 [ 649.132188][ T4071] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 649.193072][T11950] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 649.203438][T11950] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 649.217030][T11950] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 649.226207][T11950] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.236134][T11950] usb 6-1: config 0 descriptor?? [ 649.252271][T11840] usb 2-1: Using ep0 maxpacket: 8 [ 649.277086][T11950] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 649.372389][T11840] usb 2-1: unable to get BOS descriptor or descriptor too short [ 649.382307][T11838] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 649.432379][T11840] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 649.440148][T11840] usb 2-1: can't read configurations, error -71 [ 649.496978][ T4071] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 649.508219][ T4071] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 649.521168][ T4071] usb 5-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.40 [ 649.532049][ T4071] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.542125][ T4071] usb 5-1: config 0 descriptor?? [ 649.652221][T11838] usb 4-1: Using ep0 maxpacket: 16 [ 649.772358][T11838] usb 4-1: config 0 has an invalid interface number: 122 but max is 0 [ 649.780768][T11838] usb 4-1: config 0 has no interface number 0 [ 649.787285][T11838] usb 4-1: New USB device found, idVendor=0424, idProduct=9d00, bcdDevice= b.49 [ 649.796465][T11838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.806961][T11838] usb 4-1: config 0 descriptor?? [ 650.004576][ T4071] logitech 0003:046D:C20E.0010: rdesc size test failed for formula gp [ 650.014196][ T4071] logitech 0003:046D:C20E.0010: item fetching failed at offset -780736071 [ 650.023371][ T4071] logitech 0003:046D:C20E.0010: parse failed [ 650.029575][ T4071] logitech: probe of 0003:046D:C20E.0010 failed with error -22 [ 650.122206][T11840] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 650.208888][ T4071] usb 5-1: USB disconnect, device number 55 [ 650.362167][T11840] usb 2-1: Using ep0 maxpacket: 8 [ 650.482320][T11840] usb 2-1: unable to get BOS descriptor or descriptor too short [ 650.542430][T11840] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 650.550225][T11840] usb 2-1: can't read configurations, error -71 [ 650.557078][T11840] usb usb2-port1: attempt power cycle 16:05:03 executing program 2: syz_usb_connect(0x0, 0xbc, &(0x7f0000002c40)={{0x12, 0x1, 0x0, 0x1c, 0x0, 0xf5, 0x40, 0x7c0, 0x1501, 0x6514, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x87, 0x0, 0x1, 0x3, 0x1, 0x12, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "81bb6e86a9"}]}}]}}]}}]}}, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000100)=' ', 0x1}], 0x1) 16:05:03 executing program 0: syz_usb_connect(0x0, 0xbc, &(0x7f0000002c40)={{0x12, 0x1, 0x0, 0x1c, 0x0, 0xf5, 0x40, 0x7c0, 0x1501, 0x6514, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x87, 0x0, 0x1, 0x3, 0x1, 0x12, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "81bb6e86a9"}]}}]}}]}}]}}, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000100)}], 0x1) [ 650.731122][ T4071] usb 3-1: USB disconnect, device number 29 [ 650.739881][T11838] smscufx: Failed to read register index 0x00003008 [ 650.746783][T11838] smscufx: ufx_lite_reset error reading 0x3008 [ 650.746794][T11838] smscufx: error -71 resetting device [ 650.753925][T11838] smscufx: probe of 4-1:0.122 failed with error -71 [ 650.773988][T11838] usb 4-1: USB disconnect, device number 46 16:05:04 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x8000, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000080)={'mangle\x00'}, &(0x7f0000000100)=0x2d) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x57, 0x48, 0x21, 0x20, 0x17ef, 0x7203, 0xc682, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x54, 0x0, 0x0, 0x87, 0x81, 0x4e}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000001880)={0xac, &(0x7f0000001280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 650.983233][T11950] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 651.072455][T12046] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 651.223810][ T4071] usb 3-1: new high-speed USB device number 30 using dummy_hcd 16:05:04 executing program 5: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x88080, 0x0) ioctl$IMSETDEVNAME(r0, 0x80184947, &(0x7f0000000040)={0x92a, 'syz1\x00'}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000080)=@sack_info={0x0, 0x401, 0x101}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100)={r1, 0xaa}, &(0x7f0000000140)=0x8) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000240)={0x6, &(0x7f0000000180)=[{0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @local}]}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000280)) r3 = syz_open_dev$media(&(0x7f00000002c0)='/dev/media#\x00', 0x9, 0x100) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000300)) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000380)='team\x00') recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000000480)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000001540)=[{&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)}], 0x2}, 0x20003) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000001600)={@rand_addr, 0x0}, &(0x7f0000001640)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000003e40)={'bond_slave_1\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000003e80)={@loopback, @dev, 0x0}, &(0x7f0000003ec0)=0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000003f00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000003f40)=0x14) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000003f80)={0x0, @multicast2, @loopback}, &(0x7f0000003fc0)=0xc) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000004000)={0x0, @rand_addr, @initdev}, &(0x7f0000004040)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000004080)={{{@in6=@ipv4={[], [], @multicast1}, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@broadcast}}, &(0x7f0000004180)=0xe8) getsockname$packet(r3, &(0x7f00000042c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000004300)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000004ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000004b00)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000004b40)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@remote}}, &(0x7f0000004c40)=0xe8) getpeername$packet(0xffffffffffffffff, &(0x7f0000007000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000007040)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007080)={{{@in=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast2}}, &(0x7f0000007180)=0xe8) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f00000075c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20003510}, 0xc, &(0x7f0000007580)={&(0x7f00000071c0)={0x394, r4, 0x100, 0x70bd25, 0x25dfdbfd, {}, [{{0x8, 0x1, r5}, {0x3c, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x3f}}}]}}, {{0x8, 0x1, r6}, {0x44, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r7}}}]}}, {{0x8}, {0x264, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x800}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x80000001}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r13}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x10000}}, {0x8}}}]}}, {{0x8, 0x1, r16}, {0x7c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x52e}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x5e}}, {0x8, 0x6, r17}}}]}}]}, 0x394}, 0x1, 0x0, 0x0, 0x88c}, 0x9c4) r18 = syz_open_procfs(0x0, &(0x7f0000007600)='net/sctp\x00') io_uring_register$IORING_UNREGISTER_BUFFERS(r18, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000007640)='IPVS\x00') getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000076c0)={{{@in6=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@ipv4}}, &(0x7f00000077c0)=0xe8) sendmsg$nl_route(r18, &(0x7f0000007880)={&(0x7f0000007680)={0x10, 0x0, 0x0, 0x20200}, 0xc, &(0x7f0000007840)={&(0x7f0000007800)=@ipv6_newaddr={0x20, 0x14, 0x200, 0x70bd26, 0x25dfdbfc, {0xa, 0x8, 0x2b0, 0xc8, r19}, [@IFA_FLAGS={0x8, 0x8, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000078c0)) [ 651.314662][T11874] usb 6-1: USB disconnect, device number 51 [ 651.344294][T11950] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 651.355553][T11950] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 651.356043][T11840] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 651.368482][T11950] usb 5-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.40 [ 651.368556][T11950] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.425903][T11950] usb 5-1: config 0 descriptor?? [ 651.452886][T12046] usb 1-1: config 0 has an invalid interface number: 135 but max is 0 [ 651.461248][T12046] usb 1-1: config 0 has no interface number 0 [ 651.467527][T12046] usb 1-1: config 0 interface 135 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 651.478402][T12046] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 651.490077][T12046] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has invalid maxpacket 1646, setting to 1024 16:05:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = getpid() sendmsg$nl_route(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001300010000000000810000000000000019e1ced90013dca1479a352488613d9721b1620373ea716aea5ead64ed8d45eea33d70adc52fe7ed115f72009bb38a9bc1b7d802552cce4e7b773c16c22893abcf1ef6dabf01661f12968059cf972b56c6792bb6da", @ANYRES32=r1, @ANYBLOB="0000000000000000080027000000000008001300", @ANYRES32=r2], 0x30}}, 0x0) [ 651.501878][T12046] usb 1-1: config 0 interface 135 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 651.515130][T12046] usb 1-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=65.14 [ 651.524307][T12046] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.533336][T11838] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 651.585699][T12046] usb 1-1: config 0 descriptor?? [ 651.594230][T21663] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 16:05:04 executing program 5: syz_emit_ethernet(0x52, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d8652b001c0000fe8000000000000000000d0000ddffa9dd7f00000000000000000000000000aa87000000000041b0a9a20000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="582f657e295238d13a7d7819a671720c26bed2537dc80238c64e447d978c357881b684049bc8984abbdf015cd383a20c4ffcb9b8bbec2a4e3509c3b5cd68c2d1fd8aa1d3479271d4961b3fe45e95be18703a29638fdad68a75fe5c201d461e7eec82bd11155dc28338997a2840d7680400000000"], 0x0) [ 651.631376][T12046] iowarrior 1-1:0.135: IOWarrior product=0x1501, serial= interface=135 now attached to iowarrior0 [ 651.672066][T11840] usb 2-1: Using ep0 maxpacket: 32 [ 651.702642][ T4071] usb 3-1: config 0 has an invalid interface number: 135 but max is 0 [ 651.710952][ T4071] usb 3-1: config 0 has no interface number 0 [ 651.717351][ T4071] usb 3-1: config 0 interface 135 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 651.728238][ T4071] usb 3-1: config 0 interface 135 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 651.739684][ T4071] usb 3-1: config 0 interface 135 altsetting 0 endpoint 0x81 has invalid maxpacket 1646, setting to 1024 16:05:04 executing program 5: sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x6c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_BEARER={0x3c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xe}}}, {0x14}}}]}]}, 0x6c}}, 0x0) r0 = socket(0x10, 0x803, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000a00)=""/224, 0x274}], 0x1, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000000)='\'/\x00', 0x3) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000140)={0x1}, 0x1) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000180)='rw\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x38}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6, 0x100010, r4, 0x10000000) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup2(r8, r7) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r9, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r10}}}, @rights={{0x14, 0x1, 0x1, [r6]}}], 0x38}, 0x0) recvmmsg(r9, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0x3c}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x16}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) [ 651.751058][ T4071] usb 3-1: config 0 interface 135 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 651.764406][ T4071] usb 3-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=65.14 [ 651.774329][ T4071] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.776692][T11950] logitech 0003:046D:C20E.0011: rdesc size test failed for formula gp [ 651.798373][T11950] logitech 0003:046D:C20E.0011: item fetching failed at offset -969944847 [ 651.808093][T11950] logitech 0003:046D:C20E.0011: parse failed [ 651.814391][T11950] logitech: probe of 0003:046D:C20E.0011 failed with error -22 [ 651.827224][T12046] usb 1-1: USB disconnect, device number 85 [ 651.835059][T11838] usb 4-1: Using ep0 maxpacket: 16 [ 651.846380][T12046] iowarrior 1-1:0.135: I/O-Warror #0 now disconnected [ 651.863649][T11840] usb 2-1: config 0 has an invalid interface number: 84 but max is 0 [ 651.871889][T11840] usb 2-1: config 0 has no interface number 0 [ 651.878418][T11840] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=c6.82 [ 651.887614][T11840] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.901800][T11840] usb 2-1: config 0 descriptor?? 16:05:05 executing program 4: sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}], 0x1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r5, r4) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r7}}}, @rights={{0x14, 0x1, 0x1, [r3]}}], 0x38}, 0x0) ioctl$TIOCGPKT(r3, 0x80045438, &(0x7f0000000080)) close(r2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="24000000330019010000000000e0ffff03000000ffd38d9b0c000100060006"], 0x1}}, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r8, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) [ 651.936292][T11950] usb 5-1: USB disconnect, device number 56 [ 651.976021][T11838] usb 4-1: config 0 has an invalid interface number: 122 but max is 0 [ 651.984390][T11838] usb 4-1: config 0 has no interface number 0 [ 651.990592][T11838] usb 4-1: New USB device found, idVendor=0424, idProduct=9d00, bcdDevice= b.49 [ 651.999798][T11838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.026835][ T4071] usb 3-1: config 0 descriptor?? [ 652.033494][T11838] usb 4-1: config 0 descriptor?? [ 652.083733][ T4071] iowarrior 3-1:0.135: IOWarrior product=0x1501, serial= interface=135 now attached to iowarrior0 16:05:05 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x10) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="000000007410430420c3b4554442b0d48559d39f75a409fd55858be1c3b219fb63e5fd9209ea9514d168ed37fb18edc9e1c03c628c106294b6840ac66d726df95e3864ad6c9efb31fe8104315bf1067608076d75b7d80d460a74787731bd652cdf935e97e3521858a48e002ddb32317132fe9d81bff8b5d47e61201abc9a667cad01d41ba06e0cac84aba176d18036ad403412535f109049a685944bd2e93eed27da16102d709481f97918d362fb5705a7ca94d1602b89d2e736c593f99a"], 0x38}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x4) ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000080)={0x80fd}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@local, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x6c}, 0x0, @in6=@remote}}, 0xe8) sendto$inet6(r0, 0x0, 0xfffffffffffffeaf, 0x200408d4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x9}}, 0x1c) [ 652.245704][T11838] smscufx: Failed to read register index 0x00003000 [ 652.252781][T11838] smscufx: error -71 reading 0x3000 register from device [ 652.253666][T11838] smscufx: probe of 4-1:0.122 failed with error -71 [ 652.309542][ T4071] usb 3-1: USB disconnect, device number 30 [ 652.317532][T11838] usb 4-1: USB disconnect, device number 47 [ 652.326294][ T4071] iowarrior 3-1:0.135: I/O-Warror #0 now disconnected 16:05:05 executing program 0: syz_usb_connect(0x0, 0xbc, &(0x7f0000002c40)={{0x12, 0x1, 0x0, 0x1c, 0x0, 0xf5, 0x40, 0x7c0, 0x1501, 0x6514, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x87, 0x0, 0x1, 0x3, 0x1, 0x12, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "81bb6e86a9"}]}}]}}]}}]}}, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000100)}], 0x1) [ 652.382683][T11840] asix 2-1:0.84 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 652.393540][T11840] asix: probe of 2-1:0.84 failed with error -71 16:05:05 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfd, 0xb4, 0xb0, 0x8, 0x1d50, 0x60a1, 0x31c, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x83, 0x0, 0x0, 0xee, 0xc9, 0x2a}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x40, 0x9, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0xac, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 652.427558][T11840] usb 2-1: USB disconnect, device number 37 16:05:05 executing program 5: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xfff8, &(0x7f0000000080)={0x0, 0xfffffffffffffe70}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="5500000018007f5c00fe01b2a4a280930a00000000000000000008003900090035000c000600000019000500de8000000058d3dc1338d54400009b84132000000083de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x124, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x40, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, [], 0x17}}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5feef0e7}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffff9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80000001}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e24}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xae7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x400}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x200}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x810}, 0x4000) [ 652.712134][T11950] usb 1-1: new high-speed USB device number 86 using dummy_hcd 16:05:05 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000c0b7c708cf106880bf99000000010902240001000000000904359ccf7f480002ebc6cb0009058f020000000000090502120000000000"], 0x0) r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x7f, 0x80040) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x42801, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 16:05:05 executing program 4: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x70, 0x0) syz_open_dev$mice(0x0, 0x0, 0x202) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x4000, 0x0) ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f0000000180)={0x5, "72ecf1f658ac3d83a4eca9a1fd7451377c64e58f3ae1bbb648b174d79bce95cf", 0x0, 0x101, 0xffffffff, 0x4, 0x5}) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r6}}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x38}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000240), 0x4) syz_open_dev$mice(0x0, 0x0, 0x2) pselect6(0x40, &(0x7f00000000c0)={0x64, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) [ 652.862303][T11838] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 653.102372][T11950] usb 1-1: config 0 has an invalid interface number: 135 but max is 0 [ 653.110668][T11950] usb 1-1: config 0 has no interface number 0 [ 653.117091][T11950] usb 1-1: config 0 interface 135 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 653.122095][T11838] usb 4-1: Using ep0 maxpacket: 8 [ 653.127970][T11950] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 653.128059][T11950] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has invalid maxpacket 1646, setting to 1024 [ 653.156520][T11950] usb 1-1: config 0 interface 135 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 653.162267][T11840] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 653.169704][T11950] usb 1-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=65.14 [ 653.169752][T11950] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.213978][T11950] usb 1-1: config 0 descriptor?? [ 653.232455][ T4071] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 653.260503][T11950] iowarrior 1-1:0.135: IOWarrior product=0x1501, serial= interface=135 now attached to iowarrior0 [ 653.292766][T11838] usb 4-1: config 0 has an invalid interface number: 131 but max is 0 [ 653.301187][T11838] usb 4-1: config 0 has no interface number 0 [ 653.307782][T11838] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice= 3.1c [ 653.316960][T11838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.326767][T11838] usb 4-1: config 0 descriptor?? [ 653.458366][T12046] usb 1-1: USB disconnect, device number 86 [ 653.465313][T11840] usb 2-1: Using ep0 maxpacket: 32 [ 653.482487][ T4071] usb 3-1: Using ep0 maxpacket: 8 [ 653.489410][T12046] iowarrior 1-1:0.135: I/O-Warror #0 now disconnected [ 653.592675][T11840] usb 2-1: config 0 has an invalid interface number: 84 but max is 0 [ 653.601065][T11840] usb 2-1: config 0 has no interface number 0 [ 653.607395][T11840] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=c6.82 [ 653.616694][T11840] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.626430][ T4071] usb 3-1: config 0 has an invalid interface number: 53 but max is 0 [ 653.634645][ T4071] usb 3-1: config 0 has an invalid descriptor of length 235, skipping remainder of the config [ 653.645039][ T4071] usb 3-1: config 0 has no interface number 0 [ 653.651716][ T4071] usb 3-1: too many endpoints for config 0 interface 53 altsetting 156: 207, using maximum allowed: 30 [ 653.662969][ T4071] usb 3-1: config 0 interface 53 altsetting 156 has 0 endpoint descriptors, different from the interface descriptor's value: 207 [ 653.676526][ T4071] usb 3-1: config 0 interface 53 has no altsetting 0 [ 653.683399][ T4071] usb 3-1: New USB device found, idVendor=10cf, idProduct=8068, bcdDevice=99.bf [ 653.692626][ T4071] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.702344][T11840] usb 2-1: config 0 descriptor?? [ 653.708310][ T4071] usb 3-1: config 0 descriptor?? [ 653.812389][T11838] airspy 4-1:0.131: Board ID: 00 [ 653.817497][T11838] airspy 4-1:0.131: Firmware version: [ 653.962659][T11840] asix 2-1:0.84 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 653.973287][T11840] asix: probe of 2-1:0.84 failed with error -71 [ 653.994122][T11840] usb 2-1: USB disconnect, device number 38 [ 654.003147][ T4071] usb 3-1: string descriptor 0 read error: -71 16:05:07 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r6, r4) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r7, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r8}}}, @rights={{0x14, 0x1, 0x1, [r3]}}], 0x38}, 0x0) r9 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r10, r9) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup2(r13, r12) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r14, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r15}}}, @rights={{0x14, 0x1, 0x1, [r11]}}], 0x38}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmmsg(r16, &(0x7f0000000140)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000280)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000001ae, 0x62, 0x0) r17 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r18, r17) r19 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r20, r19) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r22 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r24 = dup2(r23, r22) getsockopt$sock_cred(r24, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r24, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r25}}}, @rights={{0x14, 0x1, 0x1, [r21]}}], 0x38}, 0x0) syz_usb_connect(0x1, 0x9, &(0x7f0000000180)=ANY=[@ANYPTR=&(0x7f0000000480)=ANY=[@ANYBLOB="cccccceeb5b4f38e3d96beba019c62b454711d7020a5e027aedb705cb3d8d5c12a1880c174739fb60f3cfab03fc36514bd3a7733c10be7615a8bb956d540f150a2df360fb741f3a07787528844a8f01b5e28a9dfb89e04d60c99ed1cad81de445f7f", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYRESDEC, @ANYRES16=r9, @ANYPTR, @ANYRESHEX, @ANYPTR, @ANYRESHEX=r5, @ANYPTR, @ANYRES32, @ANYRESDEC=0x0, @ANYRES32=r14], @ANYRES64=r16, @ANYPTR64=&(0x7f0000000040)=ANY=[@ANYRES32, @ANYRESOCT=r17, @ANYRESDEC=r20], @ANYPTR, @ANYRES32=r2], @ANYRES16=r25, @ANYRESHEX=r0, @ANYRESHEX, @ANYRESDEC=r1, @ANYRES16=r4, @ANYRES32, @ANYRESHEX=r2, @ANYRESHEX=r3], 0x0) 16:05:07 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0xe, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$VIDIOC_ENUMSTD(r7, 0xc0485619, &(0x7f0000000340)={0x2, 0x400, "0fc1c73a49ae10851b7149967de5da92ec25cc2abb25255e", {0x9, 0x5}, 0xa5f}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r11, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r12}}}, @rights={{0x14, 0x1, 0x1, [r8]}}], 0x38}, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r8, 0x84, 0x73, &(0x7f00000002c0)={0x0, 0x1000, 0x30, 0xffffffff, 0x401}, &(0x7f0000000300)=0x18) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000180)={r6, 0x1, 0x6, @dev={[], 0xc}}, 0x10) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2, &(0x7f0000000040)=ANY=[@ANYRESDEC=r2], &(0x7f0000003ff6)='G\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000140)=0x4) sendmsg$kcm(r5, &(0x7f0000000380)={&(0x7f0000000480)=@sco={0x1f, {0x91, 0x9, 0x0, 0x28, 0x7b, 0x40}}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000500)="978025f863165c07e8c2304a61b3d5c83f35c3b0a5e35722758c7f149bc3b950a75dda3de02e8b9724767d09d4c2fc12ec42eb2456083685614f93381e2c927386a3adbcdad01a0b3144d0ffbaee6df1d8030bc4cb52d5b1f37a37bf8b762cfebfc1fa016b1cc99c91970e78bcc9c6eb616a0d6dd0d692317d6b6b58634cb67a34ccf4f70c2045bd6efad53b051a227dd2ffd96bca8aaccf06762ad72871064e0c3944f45ca924e00117b27f7442853b2c22f804508ea4d953f6f4ec", 0xbc}, {&(0x7f00000005c0)="3bd7bbdf2b7181cf13ce948c0c876badd2695d81a44704f9d28d6193e860a563cc6f499e0d6aa8cf7eb0062edda012a44d8af76f26c64ba328e4c9e8756e9390928f92f89106dd0a1a2b9b2e2300f69ffe7f7b7fa079cc54b3246144a273ff6df78a42247217f1b80d6557a0d1ba90d3d5050f606394e2d6a5d2b5cb35769cef9f05780750651e523819db2dfc1a6ced5807bd049f01ef6a81b6bac0930686f000b43c1387260424ff01d31fabe79714c3d193bb8106c754c1375ea67451", 0xbe}, {&(0x7f0000000680)="13fe527a02e3e078b4101fa7d719c75332f0994294daa8df1765748129fd89b34fe7f2cb70b1ec3bc27f86828420d577832131c54a2066a13fcb9769e7b5162843f718ca12c23808faaa4321f02a1eb46afa02a338ccbe8e51924c24796f60df7393909415e58056d92869fe2ce3b52593a9924d1ef0c340c8468313b833feca1ab5b2954c245041a6e8038d2e3ab792c9aecbe32910dff535d7c70dbee46ce4f07c470a5a82d41f4302fcce5db117adf065e0e9c8a1398fae081782da4c49a077beb22b8d715e7ae74ca518ecc8a7eed42bd6bfeb6e11fed8fbb7a0046c2984d82db567b65df65344e6042246db4e3035", 0xf1}, {&(0x7f0000000780)="6a7e26998b81e8bb6ea0e7bc20abd09caf915e7938b5677b374e85c833fe23a882396941c847483dd46a8c4ef7dfad7313aee6d923e8652e7096ef62b75aacbe1d4663dfb5fa3f12f8b01e95387e229de114bdf7394d435333ada078925165e9a0a5f3b5746502a76ea7a552805ef10fc47d892c8927cd513f9bed33de4cff5b1fc2b487cc03ff926f3332c25ed89deff642d1c4587bc6f8563d6e2aec13b90323f0fea4389ad4f119ec758f4ea8d93c65f923ad8ac2e44e", 0xb8}, {&(0x7f0000000840)="d64171208f0e53556180d7ea5d74c17d86f68f734b91971fea96dce5b7947f9ad498e7e5797630994243d0c214ab7d5b3680cdbddc9df5883c99061fb797a36ba90057cd2e340b101ab589897721b3d3d9725aea04aa238b8bf02c52a24b4175edcc800e647e8636312e03ebdd1827ed8b413b4f88c7d572831df54362a9c1c2940bfb7fae637e309d93e37b6cb46197a39ecae2d2c2424565b3d4a626a90d74f028f4ff286436d5f556e0c295c6109fb477e4cb68cc81", 0xb7}, {&(0x7f0000000900)="930ddac035fbd74319a085e96c5da092fda9f74ec84f3c1ad1186f0c0bfd7707538583b345aab5e3909ee8105ce4108fefe5adad6d65b12204ddccc55cf9f84e7cbcc51c37a0df8a504c12082387753fd6e65ebed94a2a69d20636748faa2e89ead617402ae6113088dc913b54d7e83019f09dea9349b48a4b7c319ec772402b475df04e631024e44cb1e7ed7cebbe146114dd9c03875b25486127b1082a531db157e6283960c33f5244b3a5e4b33a9308ae2dee95e2edab7eac9cd6dc001e7ed41bd7a6c015", 0xc6}], 0x6, &(0x7f0000000ac0)=[{0xe8, 0x0, 0x8001, "469bc1c162350c5ad174849705c2470391cd1c8b824d50e8dbd1e69b9014c790ca949cf990afbac3af0eaabd5bf9e44cd9d3b29a8c4ea136c3e6ef0ed0e1444d83f2b7f08db434d0468189f72b1a8e3e2b0697c68f36b570ebb37146657e34d2dbe333052e80fdcd541d5ed343185b4ee5f70388ed7e71b9126d5e51232a6dc18a213d7c5f1090914f109d0c2725f9ab0c2977692d25f828167632897d464a72ec45eacd78d2d40d192f63f71146db58bd35c7434ea0229c6baadb003976ddc4f35ecdbe8816e011297581f8af8d4853d9c9cc"}, {0xe0, 0x1, 0xfffffffb, "a7a6c05652b29dd54bc5ce491779bf43ac886a7bd590f823cc6f1f44ee40e8c75501f6968f74f4982f80146d519e8c2eeb3a7c47f28ef097401c7587fd0d0f27751bdd032707902d71dc73ccfd393ddb563c7e9615ab5e0e35f0f4de12969b7421d2d71a0f0222532413b9e0dc33717aa307e18fee369ff132646dda650564e07b25e2c9d17a995178fbd69e88176d0e8ca8c203d7332d92b6d3c2abfd20690929fa025cdccff0baff8f61d8006c2be4606898cd3ade01497ded32e10d460476ee49e827fa8fd83a30f69f1e"}, {0xc8, 0x1, 0x25e18a46, "1da91f48a4bfb4400ae03aa51013fd1b95b92697c555ae7ea37daf19d091396886684c68566e66937e439cd27c4cff2534f396011f4ff68eb7f0df2e44d92a22aeff630717aad6f53cf4c651c296ea3eb04a8c4b30372b6525dbe2405ce2141b3e28ce657b29317396a19054b6a19f6b70933955f33761d6de1c566cba3611241707d4ab662c71382a2915c24734eb350f72b22d6e423436948e320a3c1a2cf75e38b5737b414deaa2a350516cab4b04d9f1726ac7ace30c"}, {0x10, 0x105, 0x2}, {0x1010, 0x109, 0x80, "5666e16d68591a4d5602ceb5f6681e91f0c27651e7d14e7031e45a50bec8933619c36ebcd9396092b4194f80ee8ac58eab1ba911652f36410266d95bd40308b45684d67c7d6261ff0d99380e68282382cc0f89f40a49c23317389fe1f90f2a612289792475738d501a73bcf5accaf87475169c677d134769c1e2d3a2be570018e6445211f6744ef202942b043814f2e43355e98b4ac5c20efb1ec4f39a6b563cf33d91c0217ef2c47d0a3c62e768c531a709169b9b48219bdd212d30cef44105fcdf6e2e8193ef12b4dbb3ffba0de513a30b7afdb29bf5c3442bcd230327a26c9a4064afd642a1667bc932953141e8adc8c08bd7fe81923dc7c1101a05e68139c7ae20c9f678f382711dec53095b7718d84a44f30404cd3b1f2e1dddb719bc42a5aaa35284594cf177137348875db9c59a879ed3c13d19dbb796e320fa87db3e8981ba3229d23ec2eac56ab18e0296bf87192fd49ce66c8afa0ff614dd58e223122ee88a60362d229bb006dac0fb58a74e556a876b79e97c99029ab6848504286b1535661e8a44d25fe9b1a92b74e030d104ed72599a3302330d7466a94828ef00c90f0f22101b718c9f9c730c6bfc90a57aa6dd2878ec5957fb4ed93563b4c457dcfdad9dbb97172995110d5e12ce6c28aaded136983ec508f1d07a517ca4cf5254560649e3d321286907af645f09b687d9693315516cd2d9116bc2eae8e287183853c52cf2b9f414a5dd6686bf1d925edfb5f5755ca465bb9b470115508f624ee8bcf72172460272b3bd50e7f434e83903e259c5009a99dc1ab6c49af30905ca7478103e88e9fde8aa953874c2721592563ff54a5507de182823671971eaec266986972db734c28cc8c5ed7dfbead3e5887fd05baea65f07f600c5a35431726bbc1144c0cb0b9d95e98288414a14b04415269a9655cc4739384586ac342936b4a8806bd4bb9a419c6b1bdd8ecccbf5ff89bd1a59e54332aa2c81968236cc1f1a1e9e1b50b6c806cc14f0faa32dd729dbf4447ac1e42459fafc37cf655f2bb4b07bbcd446858b405934f5088f4360d7253cdfa1cb0cf1ce3fec5da11abb9cfcf419998bb10816e9dd1674522aaf1a8a902fd4ef0d4d8e971541d6ac5bc8c51971cc0d3788646f58406f9b010ffb64336ec8e66f9217358a2d3fd7c0778960ce299eb3b89c666616630eb0e80582a0d1c5564b7692d1c5b1bef8c49a1ff6fc39c3b31f356d3ed878fc047c2cc39089c3376a5c8a9cfbf253f0a9a57c07393d8f7d89da042aa7a01e737a3f87235c19ccf90990d282daa7c334790a7d101d899e32ff47506cd517b70ca4e9d48943f3b04fe37c1d5240459451937ff93571efdd23e8141e508608dfe2b0074291dbde1a7484a509953a32620967ca7580a856433e105b630405b78443aba56244458ffdb99eed166f7a87be4ece9a9e51b73360a1354b01b1e67e7e6edc60690c174c41779bf6c2039d626ee52bf0a9b5de7471678ddc72aaa565b72c264f34be2934edc4509e44d0c72a784a10e9ec7db3cab787c4cf2f5266385ef434ef3c208040e8a893d1c90a08394028ced09ad1e709b80a191b78694bc5d9569c5f4b5a3c885a1879a8949211a393144406927d53f3d8abf4627efde2fd6407aef98c703b2277925fe2a004c4417d39293ed97a2c61e441721ace5b6cd78f6ec9b27f4082321cf471f491a574b42fdf300b024573301919d67ba9d48603d15c1680fdf41f44d565a3b870ccf7e60fd5e275aa96c34e49d786c965d5a1d8c84c8cf00cc094589a5865abf2b8d04df0bc883252966d7c44a5390ac1d109bb242a6aab286b1cac33ea5f4fa4e6f51928abf072e3a0d836665f15b64778cca42e82d52693d78d085066ab089d56cfff5fb464f6b494eadee5688025e4c95b0884ac3f197830de8bf0f367659a3c4435784b51d60af7bd7d3501411e82d120f216579d20fa49eb729ae8df0829c6f7e3da1b2d48ba141f56fa2726b031f9016ae403b045158de18661a09163f595326d2ba4df6e7116d10a4b1546187e066adba48be912445b1bfd273a8ce8aca0211d96883264d1753cbcf6cf14a661d07dedb1345c5dcf92cf376884766117a5c6daf47b0193883632aec25f40a7e3176d16598914699907b090485367584b3f7d640c41560a002949328a9a9fb518c7cf875a94a55cbb968a1ecc2721565c02169e0cb8aa63e1995bf9d01bfe7da02beed4fbd8b23304be7ff3abeb051f4c81ab2ead964c4ba63b2dd04761c10e0ca30d53420b5ac73af924e798845597945f511a565247de6b30633f2c253e681781bac3a354abbbe22143fff4d0f8032120348ed7424747d5d9bd5dda28c451b3ce2baf10016a6107e4480d1a4ac56b81f82379b4f5ec9cc3c958980e266fc1b65bcd906260931b8ff157b9b2dee60f228740ab04725c83e32c64d30841550451f865fa7433e77ebe0dfd97d57078a83973741101f53beeda2285a7e35ce6f55efaa32be1a2758e04c359a9412241e0aba759ea4f83c8eee4c56994d1ba6d36b3b7170dd3d6f3d54a835c6627fb8e315b8c7cff678aa0a8a22fc7a438a3a2cb2be205e8fb2338a75800de315e73d46e4a9811feaadd4e5cc9c70dc8cb31b46af5ed5a737b3a86590c3b94c828ac0cb3c6ddf0fe0fca3ead5ea876688cd18e17689e1a7644c0fe704987dd962a8b75e34f0d9be26f94c78e5cbb58aa5f09873f7cedc46210ad68db1e62e10dc3853062a782cd8b6374f71ef6f1c32e759b6faa34dc00a726f40f65cca254498b758b0afefb9046dcb3369d134d6e8cbbf3fc69e143795603a19357cdce9effbbe74a7fca49db4016a17ba292de63f8bffc21a9a23ade5814b13b517bbba9e74874bfdb8a9167cfcfc111e7a5d5cda4be873ac0e71683fe7639950c49ffc390cf5ea31ad6d4d4ae95063ac54b874052363ba2f002d9792d34c3e7703b72662f28af04ba70f1bcf964fcb6c1de8aafa0909e1bb786b8ae6b87be47e8647a58551c328affaa725267b5d1448782556e1e62c862247b96644b93b527fa44e9c64290ae28ea197f3c272eef24df0aa480adb22809160e3ee196bb21c7cb4ddbae03956429d3c1271c72f95df80f174b32286e84943d05b5d61096be3c32181bd85bb2cb32040986f657fa6dd27a9530e2806fcadea38cb9be349a876f19be564c635db3f71e8915d150984ae868308b2c78278038fd4df6f8ec4181038287dbeb7e428567a2a2c6b4924e014efe1ad454b80db83676375822ca2f63dca0d8fc8f7f83a5965d4827c28771d2bd7939aed3cbd22562f5123ccf49e17d84f9d3491f16c3aee4db6476ea7b226fb1c292c119498c0fa463b4141d9e9bda8bbb853734f1c3d27fc65fe0a2feee50ac2cadcd0e291089693eb7c180253da9a78f0bdebc961af1fabeb0f795ccd6345dc9290c8dffe5337953cd1e68374a67967ce0e8d5df21869754ae203c8c740a7e91935ba3793549cf1ec11b9a97ad7fb6044bab135bd57b375a1af6b4e5dbd46c9adb8e84652d40e29ba224fc3b17f9de1b0172c70c0ce4ad2eb0279b2ec86116cbd41700ac6de5f2740c4e78e2fe012606cb1199effe58e2e0801b815c6039a0f9744b09611ab12f9c7fa26edb875d661ba16e1de02e99c23571c79efe7e6600efee47894a73800f77a0c17ec52804298a48d7ad8fb31ca42d3eee7ce6ea5c2017d83741de13e558861642cfff2d5dc02d7e3ca862be4ceb2ff41ce3ed5facc1309152dcf379fd9266dce2de1837845df62b715edd87b3a340138c70162b786ef2164c31f2d1bde1fc972924ca8fbea4983b903cb6aeeaedea458918cd34012874079089667e3d3d1d0c5c8cc44abcf3e20bebb1c0acbf49799114835069f107385abaca7624389fb2f17f41479b02ceb083a2d01413562afc1bdf4b2a2a3cd8e8c08220793515fabc6d92be574f902c64a6831a951096b9b49b28c1713ff6113d52fe3a07749295e796562c181a9d6cb8154da7bb2d4db5392276f9684959d7fc4b83ee8caa0d3d4fee30fb3986ed7fbf463baae7fe6b9f998d72121610106d59157450d510ec1af22336dabd67eddfa7f2c4b583637b87fa4ccbd51d017b5cda01d2f4b61af5c2228717e612503c4d9a2d20d25f99105bdb8e9f694feaf4fe96a4ff3d3002eaa8b67ce3d55193b071413b3562f4a0b598467382a547394180375a55dac8c5524da2fe6328b4a7c0bdadab3b814c38fd039dfdaf5a7a15f7e8a0af1a14c14916fd013b1239c0f9108012161750e4671ef650aa874b177cf9ccf8bd10a1b6488daaf71b84179691c1b8b9d0966242ffcc6aa9dda91e3262ce21c0c04afd50dfe0b57acf36c06ef1f6fb5ce865590f83abedb0de4a3c07ed8737474799b3d4fc10e9585e1eb111612775d86f128ffb70583bee778a5ec49a9db853d647e717ccf0e0abe7055410183617386bae644f2ef2cd9a0da5923bf707e754f2fc25cf359317079dbaa65c7a6897fe481eb2234fdd2a33ea26156479512b3ce1b66b46e0a887fb9c0c649253147f466e528ef04ca717e6a4f9c9c0adb3c749787c1476d9f93caf884282d2a5fa6efe7402b89914b08142bfe150886169f14e00872efb4acb64e07fdcc792ff72ee14120df89b75ed57118dab2865386703975e470921a1491b8e79ce51dad521920889f9c750a03677f08133514c98b935c0495afce07f3dea7606696e69ee55b02dab710aaa0f295a478e52862960f82f5617b2dc7e48225ede2f1f92d80abb38bbe918aec62b270c0438a949dc4d3a0f355b908bc4116b15a88035e1ae54c7025fd7f1ddf8ae85a47bd4a97694072a746937a5b6d8e1c3da63f139bdadd863c0fca19ab8531debcc3a7d9723efb55164e28137ab5d308d2d1864e55f9c52f81172778c9d69b27f41156daf2374a3c16d94bbbf289edc67993b1d7fb731ae8d5bb90d2e0077f161f4887a5d60834e02d570d169b8d28fd6d30959a6f4a1c4af031e6ed3e7c70ba5a6f27fe92bb286fd0993134f3efb861da4d3f463fdbc15aaa93fcdc13caad73a8f8f111f168a1b5659ec5e64c18ca2edd87553aae8f90d5567e1fbcba634de83dae82560e48361d6f66047bf3354c00d2a9559c813803ae10b456d6797449c3f7209657a370fd1d6b4f5cc8bcef653d51f27884f40da9d06f4e0ccbdd28b917b15f2529f67447c7587c2a9d441bcd8630074b29418678a03875dcf90b53984ce73b8ae2d41aa3410ab0796546eb46306432a592fa985172b2ad4f511321cb56b7ba4a2c2a9fa390a4ce7b95fa46a5a922a291ac2c03babbafad943200e5691a901a6e1afbaae3895e14eb533fe350a0968914320b9daebe5001d8f838c08b0ba0abd306e0b6df2f0ebe5d4da1ac77093a143ffe47c7fc7054477e5a23f8ba29d0449ccbd24ab6fddf422bbe13716a313e917d194f1bb858a55cdef16fdd53d24309857a3334962fea367692ac6f0ff43645ac4edf3e4f64fea086e3f5ba842171eb841822e4ce83d786a8d7788388db8ceecd8b6550d3063df3eee93db6e2ccbc6a15bd99cd894d3c63e3ac89e52c97bf11b5cc109559a2ca23334b47e51e633ab8fc739be7960b95a9e10ab0efd5ce3aca2d840054b666ccb951f441b9adb6f0a7cd4a20bf7c02660856481d64388ca14fbd98471fec23b6a23d9965752efff0efed29156c8661f23317efaf8f0196c0df3e09e5d9312f99283e86d861b20d743e62967106f2c50c782553ae1bc96ddd26ea3900a5d66036362727244cc47b1a80ef322581f40349a00370d411cf2"}, {0xa8, 0x109, 0x8, "0150bc582978979c637532173fbd5afa2636a8e98dac102e893e4c45f8f8661c123b50f2d296a635e444f0a079e1ffe2fe58ac3be1c6e6eb131c3e3e43f6917c452cca2160731d47e00bee41706389503da2af207e5c0540194b43d2a92dfbb5c209e0fc7cd6a364177c41446a2c918deaf367083f5e10c80457dbb9f85a6cffc705a7efab3dcfec121d104fd6221b619720ee3a6f70"}, {0x48, 0x105, 0x93, "0c67bf9dbd679b41c9ed734afe13f71a5330b6f074c192ebf9e1cced7cf2c134347cbe8d24bb20224992a3bd0029d85722e92164029d15"}, {0x28, 0x0, 0xffffff5e, "8275314d8b4468b2eb1cc216dc9e5f71da"}], 0x13c8}, 0x2402c050) write(r1, &(0x7f0000000080)="f489178af96dd77215c496d4066b8badfbe71a31dd6db8a017f8f1eb4a272fe8d8caf556fe32f61bde8dfd1b1f199e40a37fde4f2f4046e59f274ccdfd20ff97ba4226641363a7a95655ba208b3b3d82d11b40a093a5eaedf544b17f7690c6f2fb4288567328", 0x66) [ 654.022460][T11838] airspy 4-1:0.131: usb_control_msg() failed -71 request 11 16:05:07 executing program 0: syz_usb_connect(0x0, 0xbc, &(0x7f0000002c40)={{0x12, 0x1, 0x0, 0x1c, 0x0, 0xf5, 0x40, 0x7c0, 0x1501, 0x6514, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x87, 0x0, 0x1, 0x3, 0x1, 0x12, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "81bb6e86a9"}]}}]}}]}}]}}, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000100)}], 0x1) [ 654.065102][T11838] airspy 4-1:0.131: Registered as swradio16 [ 654.071099][T11838] airspy 4-1:0.131: SDR API is still slightly experimental and functionality changes may follow [ 654.103856][T21712] netlink: 'syz-executor.4': attribute type 14 has an invalid length. [ 654.123084][ T4071] vmk80xx 3-1:0.53: driver 'vmk80xx' failed to auto-configure device. [ 654.174022][ T4071] usb 3-1: USB disconnect, device number 31 [ 654.204285][T11838] usb 4-1: USB disconnect, device number 48 16:05:07 executing program 4: r0 = syz_usb_connect(0x0, 0x39698b10df654220, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xbf, 0x3a, 0xfe, 0xff, 0x675, 0x200, 0x463b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x1c0, 0x0, [{{0x9, 0x4, 0x25, 0x0, 0x0, 0x28, 0x5, 0x6f}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x38}, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(r1, 0x8250aea6, &(0x7f0000000040)=""/44) [ 654.464454][T11950] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 654.602186][T11840] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 654.722445][T11838] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 654.784492][T11874] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 654.844076][T11840] usb 5-1: Invalid ep0 maxpacket: 512 [ 654.872442][T11950] usb 1-1: config 0 has an invalid interface number: 135 but max is 0 [ 654.880846][T11950] usb 1-1: config 0 has no interface number 0 [ 654.887121][T11950] usb 1-1: config 0 interface 135 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 654.897932][T11950] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 654.909375][T11950] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has invalid maxpacket 1646, setting to 1024 [ 654.920771][T11950] usb 1-1: config 0 interface 135 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 654.933966][T11950] usb 1-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=65.14 [ 654.934014][T11950] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.958607][T11950] usb 1-1: config 0 descriptor?? [ 654.972194][T11838] usb 3-1: Using ep0 maxpacket: 8 [ 655.017890][T11950] iowarrior 1-1:0.135: IOWarrior product=0x1501, serial= interface=135 now attached to iowarrior0 [ 655.024376][T11840] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 655.072085][T11874] usb 4-1: Using ep0 maxpacket: 8 [ 655.094876][T11838] usb 3-1: config 0 has an invalid interface number: 53 but max is 0 [ 655.103392][T11838] usb 3-1: config 0 has an invalid descriptor of length 235, skipping remainder of the config [ 655.113859][T11838] usb 3-1: config 0 has no interface number 0 [ 655.120061][T11838] usb 3-1: too many endpoints for config 0 interface 53 altsetting 156: 207, using maximum allowed: 30 [ 655.131284][T11838] usb 3-1: config 0 interface 53 altsetting 156 has 0 endpoint descriptors, different from the interface descriptor's value: 207 [ 655.145723][T11838] usb 3-1: config 0 interface 53 has no altsetting 0 [ 655.153140][T11838] usb 3-1: New USB device found, idVendor=10cf, idProduct=8068, bcdDevice=99.bf [ 655.162490][T11838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.174571][T11838] usb 3-1: config 0 descriptor?? 16:05:08 executing program 5: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'veth0_to_hsr\x00', {0x2, 0x4e20, @rand_addr=0x8}}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x0, 0x0) getsockopt$inet6_tcp_buf(r3, 0x6, 0xd, &(0x7f0000000340)=""/104, &(0x7f0000000140)=0x68) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x126}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$inet6_dccp(0xa, 0x6, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x126}}, 0x0) r6 = open(&(0x7f0000000240)='./file0\x00', 0x208000, 0x8) ioctl$USBDEVFS_RELEASEINTERFACE(r6, 0x80045510, &(0x7f00000003c0)=0x8001) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r7}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x6c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x4c, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x3c, 0x2, [@gre_common_policy=[@IFLA_GRE_ENCAP_TYPE={0x8}], @IFLA_GRE_REMOTE={0x14, 0x7, @empty}, @IFLA_GRE_LOCAL={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @gre_common_policy=[@IFLA_GRE_LINK={0x8}]]}}}]}, 0x6c}}, 0x0) [ 655.215764][T11874] usb 4-1: config 0 has an invalid interface number: 131 but max is 0 [ 655.224160][T11874] usb 4-1: config 0 has no interface number 0 [ 655.224265][T11874] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice= 3.1c [ 655.239421][T11874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.249409][ T4071] usb 1-1: USB disconnect, device number 87 [ 655.255581][ C1] iowarrior 1-1:0.135: iowarrior_callback - usb_submit_urb failed with result -19 [ 655.272380][ T4071] iowarrior 1-1:0.135: I/O-Warror #0 now disconnected [ 655.293184][T11840] usb 5-1: Invalid ep0 maxpacket: 512 [ 655.303775][T11840] usb usb5-port1: attempt power cycle [ 655.309652][T11874] usb 4-1: config 0 descriptor?? [ 655.351892][T21726] netlink: 'syz-executor.5': attribute type 14 has an invalid length. [ 655.367599][T21726] netlink: 'syz-executor.5': attribute type 14 has an invalid length. [ 655.392448][T21727] netlink: 'syz-executor.5': attribute type 14 has an invalid length. 16:05:08 executing program 5: getcwd(&(0x7f00000000c0)=""/122, 0x7a) set_mempolicy(0x0, &(0x7f0000000140)=0x101, 0x2) r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x141d, 0x40) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080)=0xdfce, 0x87) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x38}, 0x0) ioctl$VIDIOC_DQEVENT(r4, 0x80885659, &(0x7f0000000180)={0x0, @src_change}) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x80) socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) [ 655.454480][T11838] usb 3-1: string descriptor 0 read error: -71 [ 655.487091][T11838] vmk80xx 3-1:0.53: driver 'vmk80xx' failed to auto-configure device. 16:05:08 executing program 3: mmap(&(0x7f0000000000/0x7f2000)=nil, 0x7f2000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mlock2(&(0x7f00003f5000/0xf000)=nil, 0xf000, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x0) mmap(&(0x7f0000e4f000/0x4000)=nil, 0x4000, 0x3, 0x31, 0xffffffffffffffff, 0x4b) [ 655.516716][T11838] usb 3-1: USB disconnect, device number 32 [ 655.536533][T21733] IPVS: ftp: loaded support on port[0] = 21 [ 655.604001][T11874] airspy 4-1:0.131: usb_control_msg() failed -71 request 09 [ 655.611435][T11874] airspy 4-1:0.131: Could not detect board [ 655.617504][T11874] airspy: probe of 4-1:0.131 failed with error -71 16:05:08 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0xfe135fe367794ea5, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=0x0, &(0x7f0000000100)=0x4) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r1, 0x7ff}, &(0x7f0000000180)=0x8) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x30, 0x3c, 0x0, @remote={0xfe, 0x80, [], 0xffffffff0a000000}, @mcast2, {[@dstopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @loopback}, @jumbo]}], @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "24a589", 0x0, '~9\f'}}}}}}}, 0x0) [ 655.694605][T11874] usb 4-1: USB disconnect, device number 49 [ 655.779555][T21735] IPVS: ftp: loaded support on port[0] = 21 16:05:08 executing program 3: syz_usb_connect(0x0, 0x5d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd, 0x8e, 0xb7, 0x8, 0x13d3, 0x3275, 0xc97e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd9, 0x0, 0x0, 0x4d, 0x56, 0xc4}}]}}]}}, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x10000, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000080)={0x101, 0xb, "82ea4abac3f3d30092b39a"}) ioctl$UI_DEV_CREATE(r0, 0x5501) 16:05:09 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6(0xa, 0x802, 0x0) dup3(r0, r1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendto$inet6(r1, &(0x7f0000000600)="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", 0x57b, 0x8005, 0x0, 0x0) 16:05:09 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}}) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) fcntl$setlease(r1, 0x400, 0x3) 16:05:09 executing program 0 (fault-call:2 fault-nth:0): syz_usb_connect(0x0, 0xbc, &(0x7f0000002c40)={{0x12, 0x1, 0x0, 0x1c, 0x0, 0xf5, 0x40, 0x7c0, 0x1501, 0x6514, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x87, 0x0, 0x1, 0x3, 0x1, 0x12, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "81bb6e86a9"}]}}]}}]}}]}}, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000100)=' ', 0x1}], 0x1) [ 656.022637][T11840] usb 5-1: new high-speed USB device number 59 using dummy_hcd 16:05:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, 0x0, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x0, 0x482082) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000001180)={0x1, 0x200, 0x3, 0x9, 0x100}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f3, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)='ip6tnl0\x00') getpid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x8c0}, 0x400c000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x20, r3, 0x415, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x102}, 0xc, &(0x7f0000001080)={&(0x7f00000012c0)={0x278, r3, 0x12, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x84, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x455f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}]}, @TIPC_NLA_LINK={0xa4, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff0000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}]}, @TIPC_NLA_LINK={0x80, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xc4da}]}, @TIPC_NLA_BEARER={0x20, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc0}]}, @TIPC_NLA_LINK={0x78, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}]}, 0x278}, 0x1, 0x0, 0x0, 0xc80dd349b3e435f3}, 0x40000) r4 = socket$inet6(0xa, 0x6, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0}}], 0x4000000000000d0, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x202101, 0x0) [ 656.262057][T11840] usb 5-1: Invalid ep0 maxpacket: 512 [ 656.262589][T11874] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 656.344294][T11950] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 656.352195][T11876] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 656.412764][T11840] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 656.522295][T11874] usb 4-1: Using ep0 maxpacket: 8 16:05:09 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x10001, 0x800) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000040)) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="0180c20000000180c20626d2dc954500001cffff000906ac6b00009478e0000001"], 0x0) [ 656.622060][T11876] usb 6-1: Using ep0 maxpacket: 16 16:05:09 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x1e, 0x1c, 0x10, 0x1631, 0x6200, 0xab49, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xe0, 0x0, 0x0, 0xc0, 0x51, 0xd}}]}}]}}, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x5, 0x10200) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000080)) [ 656.654239][T11874] usb 4-1: config 0 has an invalid interface number: 217 but max is 0 [ 656.662832][T11874] usb 4-1: config 0 has no interface number 0 [ 656.669049][T11874] usb 4-1: New USB device found, idVendor=13d3, idProduct=3275, bcdDevice=c9.7e [ 656.678342][T11874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.684405][T11840] usb 5-1: device descriptor read/64, error 18 [ 656.747553][T11874] usb 4-1: config 0 descriptor?? [ 656.764419][T11950] usb 1-1: config 0 has an invalid interface number: 135 but max is 0 [ 656.772749][T11950] usb 1-1: config 0 has no interface number 0 [ 656.772837][T11950] usb 1-1: config 0 interface 135 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 656.772913][T11950] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 656.773007][T11950] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has invalid maxpacket 1646, setting to 1024 [ 656.789872][T11950] usb 1-1: config 0 interface 135 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 656.812600][T11950] usb 1-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=65.14 [ 656.834722][T11950] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.924288][T11876] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 656.935500][T11876] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 656.945503][T11876] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 656.957967][T11950] usb 1-1: config 0 descriptor?? [ 657.020106][T11950] iowarrior 1-1:0.135: IOWarrior product=0x1501, serial= interface=135 now attached to iowarrior0 [ 657.094126][T11874] dvb-usb: found a 'AZUREWAVE DVB-S/S2 USB2.0 (AZ6027)' in cold state, will try to load a firmware [ 657.102234][T11840] usb 5-1: device descriptor read/64, error 18 [ 657.105645][T11874] usb 4-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 657.120309][T11874] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 657.135566][T11874] dvb_usb_az6027: probe of 4-1:0.217 failed with error -2 [ 657.144116][T11838] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 657.182329][T11876] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 657.191518][T11876] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.199740][T11876] usb 6-1: Product: syz [ 657.204163][T11876] usb 6-1: Manufacturer: syz [ 657.208844][T11876] usb 6-1: SerialNumber: syz [ 657.220335][T11950] usb 1-1: USB disconnect, device number 88 [ 657.225688][T11840] usb usb5-port1: unable to enumerate USB device [ 657.227258][T11874] usb 4-1: USB disconnect, device number 50 [ 657.244004][T11950] iowarrior 1-1:0.135: I/O-Warror #0 now disconnected [ 657.383903][T11838] usb 3-1: Using ep0 maxpacket: 16 16:05:10 executing program 4: pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r4}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x38}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000af00)={{{@in=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@dev}}, &(0x7f000000b000)=0xe8) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f000000b040)={r5, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xfff8, &(0x7f0000000080)={0x0, 0xfffffffffffffe70}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="5500000018007f5c00fe01b2a4a280930a00000000000000000008003900090035000c000600000019000500de8000000058d3dc1338d54400009b84132000000083de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) r6 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0x30a, 0x0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup2(r9, r8) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup2(r13, r12) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r14, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r15}}}, @rights={{0x14, 0x1, 0x1, [r11]}}], 0x38}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r11, &(0x7f0000000480)="84ee86c4d2a504f7c32c5f3f403995f11c9de2736d8e6a81a2d82afdb66944c6373c087f15520fa886fffce6b965e879d4e7be1676cf9ad1c8f06c70773a73fab0addab19d3a654dd71b8d22907709642ca59616aa0db16899ec8ead2c4c3a93dbe4c45061c33222cd30c189e1a43c49f6606fe994bfbd380a17ddd1fa4b0b191973eb62212129364d6b9cd4d8827460ebbaa2930bd8ce312b3a6b49f489433e4f9a5863a4ba8a4af8dbae", &(0x7f0000000a40)=""/4096, 0x6}, 0x20) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r16, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB='\t\x00\x00\x00'], 0x38}, 0x0) ptrace$setregs(0xf, r16, 0xffffffffffffffff, &(0x7f00000001c0)="9599151129433754f4713a96a59c2eacfdc6301797fad15499507942c654df750f3c105349abdbee2a69da6bf348688c96950f36ef442926fab856574d09eec67654ce7ee104d41897bf862252906217a26fd58fd09851b3497fd04a0302ccdbea65c4fda1e7630f67807f48970cec2d66ba049895f15cff6f5fdf4741cf1bfbfd344e679f947bd2a8eb0510282a49e61b00212e8c0490342e2bc7632f1d11ce8e4c69d6663c2956eec0a625f9cde83a951bb9a440a7f20153e821de322c24bcab7ad21059ee66e3b5f496d1c35b7147163f353bba5401eb268c890c4c69659ed6") [ 657.503918][T11838] usb 3-1: config 0 has an invalid interface number: 224 but max is 0 [ 657.512638][T11838] usb 3-1: config 0 has no interface number 0 [ 657.518840][T11838] usb 3-1: New USB device found, idVendor=1631, idProduct=6200, bcdDevice=ab.49 [ 657.528063][T11838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.563018][T11876] cdc_ncm 6-1:1.0: bind() failure [ 657.567046][T11838] usb 3-1: config 0 descriptor?? [ 657.573640][T11876] cdc_ncm 6-1:1.1: bind() failure [ 657.609488][T11876] usb 6-1: USB disconnect, device number 52 16:05:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x10080, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r2) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000300)={0x4000, 0xb000}) writev(r0, &(0x7f0000000300), 0x1f0) r4 = socket(0x0, 0x2, 0x0) sendmmsg$alg(r4, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="8b85e1c9b8307fe608040313ee85f2cb65563076e9438eabfe1ec951431ecaf87d3516ec4852292eb40104618aae97cb5b6f7e6fde596a917d0ba29f23a3e3849dcd59a647b51d3cfa32b2ab9820e248d50559055cf192c2403110887f654e01a24033e9eba0e314a88011b900f04bebadb509", 0xffffffffffffff2f}, {&(0x7f0000000100)="4ddbba55abc459c90f778ce7da37795b528838bd71545036cae003abb38ddb6834f4f8a1469fdfb593efaa78d362f5d50018161cfd97e1ea1b0708ed00", 0x3d}, {&(0x7f0000000180)="003481a7874f43772d41491c7876e9f8ae5e9546500de47a8ddc117a518e1a84cf9b9093420af8e3228040390f523d2b89994640264fe9e31738af14b97344ec93645dd9c43ac944c30b44d05e4e2efcb199784bf1e968a3f4813ac07ce2da50c2fa0fce17ac5bb4cdf3ea99dcc40ba4b8f15af9eaedb482f1b181ebe7420bd7c418cfbc19e1a4e69e1f14175d8b71cdf1b97ffdf976298e5ac4689ff82cade17ce031ec022cf7ff96b514c17a46cbff524c50fc3bffde94721e3e7a501291ea558d3c6cca17290cce3c77124cbd974bf6740628f8c3bf383199eee3b0366ca98a8399c3d91490", 0xe7}, {&(0x7f0000000280)="dce5ce812da445b816abf96e43498055a5b7b347ed303556a93436", 0x1b}], 0x4, &(0x7f0000000300), 0x28b}], 0x1, 0x0) 16:05:10 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000040)="3a1dc4c858780dd4f2b88b60ff16c9f137c9acf18636990f503dd88b5beb20d7da0ad8072452f8048ef1bc67cb49a71c7a0672b91e0c3a2e37e633faa1221acbe77c5b1c0d06d39ae37cae984a9f7b9b693b2b00c3bdaaffbdcde39a3d1df7cd08a9810bf63cff0c26d525b6e6c63a72c143084dfdbd54357c5ab75e6ce9ca659751cb13", 0x84}, {&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000000140)="e777d2c2d85877a93466fb881c3388b245951f9a4bfdc73146d045836a3f2d5020f87b1092c8633d9c3c10cd82c200cc03fb5c873cbfdc92743b32859a0368d2f2", 0x41}, {&(0x7f00000001c0)="8b4857e146c4d54db10d9cb36f5d441a8e5b3860201cc76a4e837621af48dd0930c8124411df91617a6f602d34869076b29746451236214243d0", 0x3a}, {&(0x7f0000001240)="1ba66d3141b0f90f8f92c7b3daf1de6fdbc8c9b008ef74d642c4644c690664c6ff4cab62982885f5aabbecc2cdc032aad7592ed94e38d03f95b3e4646646e1c12d2966d43c6e91137541daac3ee75129ecb4531c2c3c20839fb25e6aee", 0x5d}, {&(0x7f00000012c0)="d61e667ba05c0f7bbf0a5c5e2b497655eea40f39ba375562f24f9d90d76fc05c7d43ef2027af9b47c34e4662520dbee8b9acbc9b58412e356f1238dd25512af87e17f378181d886558a503e2601c4b3a23e48e5fc14cdedacc239a10e14c9019e0a760cb39bc1d3040115a3e7f9747", 0x6f}, {&(0x7f0000001340)="b8d03a602bd67b7fd6b7de0fbda9cd13b73850e408066ec77b7cb3967c4fa8daacd92935c7a705e7c65482936730a7ece2b1085eea6815073a8594dabb8fd221656425a93a1bfcc2fb422c0820ba3c16744e", 0x52}], 0x7, &(0x7f0000001440)=[@ip_retopts={{0x84, 0x0, 0x7, {[@cipso={0x86, 0x19, 0xffffffff, [{0x2, 0xc, "94833ec5c1a0d74258b6"}, {0x0, 0x2}, {0x0, 0x5, "cf37a8"}]}, @generic={0x7, 0x2}, @ssrr={0x89, 0x7, 0x80, [@multicast2]}, @noop, @cipso={0x86, 0x27, 0x3, [{0x2, 0xa, "d42fd8cae599bdb0"}, {0x5, 0xc, "30e577885f8a246174ec"}, {0x1, 0x2}, {0x0, 0x9, "8ba38823598149"}]}, @end, @generic={0x89, 0x12, "f5b5182bf39e20d70199402a61118f94"}, @ra={0x94, 0x6, 0x2}, @noop, @timestamp={0x44, 0x10, 0x1, 0x0, 0x7, [{[], 0x3}, {[@local], 0x4}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xc09}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7f}}, @ip_retopts={{0xb4, 0x0, 0x7, {[@timestamp={0x44, 0x18, 0x4, 0x1, 0x2, [{[@rand_addr], 0x400}, {[@dev={0xac, 0x14, 0x14, 0x15}], 0x7}, {[], 0x8}]}, @ra={0x94, 0x6}, @timestamp={0x44, 0x3c, 0x57, 0x1, 0x5, [{[], 0x2}, {[], 0x2}, {[@initdev={0xac, 0x1e, 0x0, 0x0}]}, {[@rand_addr=0x3]}, {[@local], 0x8001}, {[@rand_addr=0xf4], 0x81}, {}, {[], 0x8cb7}, {[@broadcast], 0xffff3152}]}, @cipso={0x86, 0x39, 0x1f, [{0x0, 0x2}, {0x7, 0x5, "3d09c5"}, {0x2, 0xd, "96196a81f7fab1963fc98a"}, {0x2, 0xf, "2de652537a5a9ee48c0f9bc9bc"}, {0x5, 0x10, "1bebf3a6132b4e3022efe51c7401"}]}, @ssrr={0x89, 0xf, 0x0, [@empty, @dev={0xac, 0x14, 0x14, 0x1c}, @multicast2]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}], 0x188}, 0x4000) syz_usb_connect(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x208e9ce6b4f47ffb, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000100)=' ', 0x1}], 0x1) [ 657.832715][T11838] asix 3-1:0.224 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 657.843303][T11838] asix: probe of 3-1:0.224 failed with error -71 16:05:10 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x134, &(0x7f0000000080)={0x0, 0x41}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a800000000000000000000039000900350002000000000019000500fe800010000000dc1338d54400009b84132000000083de448daa7227c43ab8220000060cec4fab91d4", 0x55}]}, 0x0) r0 = socket(0x10, 0x200080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x100000000000028c, &(0x7f0000000100)}], 0x492492492492805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r6}}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x38}, 0x0) r7 = openat(r5, &(0x7f0000000000)='./file0\x00', 0x40000, 0x14) openat$cgroup(r7, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) [ 657.880419][T11838] usb 3-1: USB disconnect, device number 33 [ 657.894126][T11950] usb 4-1: new high-speed USB device number 51 using dummy_hcd 16:05:11 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xaf, 0x6b, 0x8c, 0x8, 0x4a5, 0x3035, 0xc336, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x3c, 0x0, 0x0, 0xbc, 0xc5, 0x34}}]}}]}}, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x80100, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, [], @bt={0xfff, 0x7fffffff, 0xffff, 0xaf, 0x7, 0x57, 0x4, 0x6b1a134783af1f64}}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) [ 658.152129][T11950] usb 4-1: Using ep0 maxpacket: 8 [ 658.282311][T11950] usb 4-1: config 0 has an invalid interface number: 217 but max is 0 [ 658.290714][T11950] usb 4-1: config 0 has no interface number 0 [ 658.292125][T11840] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 658.297025][T11950] usb 4-1: New USB device found, idVendor=13d3, idProduct=3275, bcdDevice=c9.7e [ 658.313648][T11950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.322509][T11876] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 658.336480][T11950] usb 4-1: config 0 descriptor?? [ 658.542286][T11840] usb 5-1: Using ep0 maxpacket: 8 [ 658.592447][T11950] dvb-usb: found a 'AZUREWAVE DVB-S/S2 USB2.0 (AZ6027)' in cold state, will try to load a firmware [ 658.602200][T11838] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 658.603966][T11950] usb 4-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 658.619860][T11950] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 658.635188][T11950] dvb_usb_az6027: probe of 4-1:0.217 failed with error -2 [ 658.645183][T11876] usb 6-1: Using ep0 maxpacket: 16 [ 658.662388][T11840] usb 5-1: config 0 has an invalid interface number: 60 but max is 0 [ 658.670686][T11840] usb 5-1: config 0 has no interface number 0 [ 658.677121][T11840] usb 5-1: New USB device found, idVendor=04a5, idProduct=3035, bcdDevice=c3.36 [ 658.686316][T11840] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.717704][T11950] usb 4-1: USB disconnect, device number 51 [ 658.737501][T11840] usb 5-1: config 0 descriptor?? [ 658.786487][T11840] gspca_main: benq-2.14.0 probing 04a5:3035 [ 658.842086][T11838] usb 3-1: Using ep0 maxpacket: 16 [ 658.862758][T11876] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 658.873860][T11876] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 658.883793][T11876] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 658.962714][T11838] usb 3-1: config 0 has an invalid interface number: 224 but max is 0 [ 658.971081][T11838] usb 3-1: config 0 has no interface number 0 [ 658.977597][T11838] usb 3-1: New USB device found, idVendor=1631, idProduct=6200, bcdDevice=ab.49 [ 658.986826][T11838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.999064][T21792] QAT: Invalid ioctl 16:05:12 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x1) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYRES64=r0], 0x8) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) dup(0xffffffffffffffff) [ 659.015707][T11950] usb 5-1: USB disconnect, device number 61 [ 659.088665][T11838] usb 3-1: config 0 descriptor?? [ 659.182416][T11876] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 659.191685][T11876] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.199869][T11876] usb 6-1: Product: syz [ 659.273313][T11876] usb 6-1: can't set config #1, error -71 [ 659.293419][T11876] usb 6-1: USB disconnect, device number 53 16:05:12 executing program 0: pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r4}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x38}, 0x0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup2(r7, r6) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r8, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r9}}}, @rights={{0x14, 0x1, 0x1, [r5]}}], 0x38}, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r10, 0x84, 0x7d, &(0x7f0000000300)={r12, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000040)=0x100) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={r12, @in6={{0xa, 0x4e22, 0x5, @remote, 0x6}}, 0x3, 0xff, 0x81, 0x8, 0x1c79d288f9fabb97}, &(0x7f0000000040)=0x98) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000200)={r13, @in={{0x2, 0x4e22, @empty}}}, &(0x7f00000000c0)=0x84) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000000)) syz_usb_connect(0x0, 0xbc, &(0x7f0000002c40)={{0x12, 0x1, 0x0, 0x1c, 0x0, 0xf5, 0x40, 0x7c0, 0x1501, 0x6514, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x87, 0x0, 0x1, 0x3, 0x1, 0x12, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "81bb6e86a9"}]}}]}}]}}]}}, 0x0) r14 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r14, &(0x7f0000000200), 0x0) [ 659.352553][T11838] asix 3-1:0.224 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 659.363199][T11838] asix: probe of 3-1:0.224 failed with error -71 16:05:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = eventfd(0x0) getresuid(&(0x7f0000000100), &(0x7f0000000200)=0x0, &(0x7f0000000240)) r7 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x27) r8 = socket(0xa, 0x3, 0x6) connect$bt_rfcomm(r8, &(0x7f0000000000)={0x1f, {0xfe, 0x0, 0x1000, 0x80000001, 0x6, 0x5}, 0x8}, 0xa) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x6}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f0000000480)=0xe8) r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r10, 0x84, 0x6d, &(0x7f0000000900)=ANY=[@ANYBLOB="ab000000a6d23fa0c9cb488b619002d1d896e5ffb3b62ccfa516aec8038d482cd2aa0b6ac0d684fba227e9983be9f367da66938eddee11b161213cdf2bd00a8ae552bc17ec5e976fa67846060aa7629aed35eb9bb9e096cc3825df10acb8c0dff4569bb0f686a3856eb778df7afa4a3112676e9547e0d65bee83afa0b4f46a0b10af299da7efdcc6c573074de84403de7902a06096d7483194ad47775d355b9800000008008b0500"/193], &(0x7f0000000540)=0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8) setuid(r12) r13 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r13, 0x84, 0x6d, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000540)=0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r13, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8) setuid(r14) r15 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r15, 0x84, 0x6d, &(0x7f0000000b40)=ANY=[@ANYBLOB="ab000000a6d23fa0c9cb488b6190f2d1d89677354590dde5ffb3b62ccfa516aec8038d48d684fba227e9983be9f367da66938eddee11b1613f0d5ff3b2213cdf2bd00a8ae552bc17ec5e976fa67846060aa7629aed35eb9bb9e096cc3825df10acb8c0dff4569bb0f6a15cab46fa86a3856eb778df7afa4a3112676e9547e0d65bee83afa0b4f46a0b10af299da7efdcc6c573074de84403de7902a07096d7483194ad47775d355bd65460a5a52aa9cc384c962b12062cf85884362f08008b07"], &(0x7f0000000540)=0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r15, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8) setuid(r16) r17 = request_key(0x0, &(0x7f0000001300)={'syz', 0x2}, &(0x7f0000001340)='em0cpusetmime_type\x00', 0xfffffffffffffff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) keyctl$chown(0x4, r17, 0x0, r18) r19 = request_key(0x0, &(0x7f0000001300)={'syz', 0x2}, &(0x7f0000001340)='em0cpusetmime_type\x00', 0xfffffffffffffff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) keyctl$chown(0x4, r19, 0x0, r20) r21 = request_key(0x0, &(0x7f0000001300)={'syz', 0x2}, &(0x7f0000001340)='em0cpusetmime_type\x00', 0xfffffffffffffff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) keyctl$chown(0x4, r21, 0x0, r22) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r7, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000c00)=ANY=[@ANYBLOB="02000000010002000000000002000400", @ANYRES32=r9, @ANYBLOB="02000200", @ANYRES32=r11, @ANYBLOB="02000100bb86b4c5600d592e64b86edda53135e0f392e4c9ca69b61556778ccf29c4990d1893fd049001c62278a88220d8bb3ef088a2bbfd6fdd3bbbaa8e7ff1e7d747037c523caba1237cfd937b81d9ae40c8e42df69a9ad815e799bd07b8468681a262136f0b4027e75c77b74f2bc0ad4402225b8f934741a657b08fa3e58bffe4394310ebab08c71788455eb3b79d61d24d289378388103fdaa96ee42a18df1027aa5865c0b", @ANYRES32=r12, @ANYBLOB="02a7d7a66a04eb000000000000000000000000132d3b4cc62e38bef3eac8995c76daecf158731466ca7c61d07a4a9faa762ed652da9e9561d7057335828a95ed776a822fc2a157ae8df6fd862fe744d251b1e7ff9e064b7804572dac18aeef4c81dff4e3071b30ff6b4684eec569646897087de0bcd215466d5400e9e1591b1cd0d3", @ANYRES32=r6, @ANYBLOB, @ANYRES32=r14, @ANYBLOB="02000200", @ANYRES32=r16, @ANYBLOB="02000500", @ANYRES32=r6, @ANYBLOB="040002000000000008000100", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=r18, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r20, @ANYBLOB="08000400", @ANYRES32=r22, @ANYBLOB="08000300", @ANYRES32=r23, @ANYRES32, @ANYBLOB="0800d8b8", @ANYRES32, @ANYBLOB="10000200000000002000d6f800000000"], 0x1c, 0x2) lstat(&(0x7f0000003f00)='./file0\x00', &(0x7f0000003f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, r24) lstat(&(0x7f0000003f00)='./file0\x00', &(0x7f0000003f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, r25) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000003f00)='./file0\x00', &(0x7f0000003f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, r27) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {0x1, 0x1}, [{0x2, 0x1, r9}], {0x4, 0x6}, [{0x8, 0x2, r24}, {0x8, 0x0, r25}, {0x8, 0x3baca9aa23a7ee40, r26}, {0x8, 0x0, r27}], {0x10, 0x4}, {0x20, 0x2}}, 0x4c, 0x2) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r28 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000002c0)={r5}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={r28}) dup2(r0, r1) 16:05:12 executing program 3: bind$alg(0xffffffffffffffff, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) mremap(&(0x7f00002be000/0x3000)=nil, 0x3000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) munmap(&(0x7f000050f000/0x1000)=nil, 0x1000) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1c000002000000000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014b100000200004000000073a7ffff", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x38}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x7d, &(0x7f0000000300)={r7, @in={{0x2, 0x4e22, @empty}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000]}, &(0x7f0000000040)=0xed) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r7, 0xffffff00}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000002c0)=@assoc_id=r8, &(0x7f0000000300)=0x4) prctl$PR_SET_TSC(0x1a, 0x1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x1f}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r9, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000, &(0x7f0000e68000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) r10 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000411000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="660f6bb302000f0766b85ef549d70f23d80f21f86635400000900f23f80f01cb66b9fa03000066b80080000066ba000000000f300f2380660fc4470004660fe34a0b6766c7442400924000006766c7442402020000006766c744240600000000670f0114240f7915", 0x68}], 0x1, 0x40, &(0x7f00000001c0)=[@dstype3={0x7, 0x4}], 0x1) dup2(r9, r9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r13, &(0x7f00000000c0)={0xa, 0x2}, 0x1c) listen(r13, 0x0) sendto$inet6(r12, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr="00000000000000000000ffff00"}, 0x1c) [ 659.463010][T11838] usb 3-1: USB disconnect, device number 34 [ 659.588373][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. 16:05:12 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r0, 0x0) r2 = socket(0x15, 0x80005, 0x0) sched_getparam(0xffffffffffffffff, &(0x7f00000000c0)) getsockopt(r2, 0x114, 0x2715, 0x0, &(0x7f000033bffc)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$VIDIOC_DQEVENT(r5, 0x80885659, &(0x7f0000000380)) recvmmsg(r6, &(0x7f0000000140)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000280)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000001ae, 0x62, 0x0) r7 = dup3(r3, r6, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r7, 0x40086409, &(0x7f0000000080)={r8}) 16:05:12 executing program 5: r0 = socket$inet6(0xa, 0x802, 0x73) sendmmsg$inet6(r0, &(0x7f0000002f40), 0x0, 0x240180c3) [ 659.672300][T11950] usb 1-1: new high-speed USB device number 89 using dummy_hcd 16:05:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) fcntl$addseals(r2, 0x409, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_emit_ethernet(0x2, &(0x7f0000000240)=ANY=[@ANYPTR64=&(0x7f0000000040)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16, @ANYRESOCT=r0, @ANYBLOB="2ebe4ab376c04cbdf4f1cc37ed33e0631064c4d62eb495b108eb8d30cab68bd13a92ed3fd5fddfcf4fafaab0f5e0e9620b8993a4b1b61e7bad03d4ec66adc79eea3937498b8cfba403486aefbe41c7cde3a623162e58e3bf091c8fc99503879c0229850cba2cf1728ca1a2834dd328ee92c379657814c310ec4a2d35edecab7a6ec6bce197de1f1702f1cb0518c199568fe44c6994d30b1b17d8258ced884bc346dbe9515b07c684b61ea0d791007a5145a6f1266c24db90ee4fce681fded089161b2bb095420f2d93fd02d1cdb1cfb58e5daae4d4db0b753734e3c7ce4b899df393e3a09697a5dad2ee19fec2b3e1104f", @ANYRESHEX], @ANYBLOB="67a361339578d2bfcbf15f894b03673c6b23f73b16f5b70d1e09ad6516213b6b730f3affd02ad1a1fc80392e6d886a2c6cc3502a7424d1e4bf1b8f55ea5cf6a95c845d5f0043800bc2155d2377513268fff4b76db7102a193e80f0ed2eee1f4d3308cbc34ace0fd2", @ANYRES32=0x0, @ANYRES16, @ANYRES32], @ANYRESHEX=0x0], 0x0) [ 659.802343][T11874] usb 5-1: new high-speed USB device number 62 using dummy_hcd 16:05:12 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) r1 = syz_open_dev$vbi(&(0x7f0000000200)='/dev/vbi#\x00', 0x1, 0x2) bind$alg(r1, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5001cdd8b55", 0x10) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x759a}], 0x30}], 0x1, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x1, 0x800) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f00000002c0)={0x1}, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f00000001c0)={'veth1_to_team\x00', 0xfffffff9}) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0xffc99a3b00000000, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x39ce}, {&(0x7f0000000680)=""/120, 0xf}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) 16:05:12 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x10000, 0x0) write$P9_RSTAT(r0, &(0x7f00000000c0)={0x6d, 0x7d, 0x2, {0x0, 0x66, 0x40, 0xffffffe0, {0x20, 0x2}, 0x80000000, 0x10001, 0xca, 0x7fffffff, 0x20, ',keyring{*\\keyring,proc.security', 0x9, '/dev/dsp\x00', 0x0, '', 0xa, 'syzkaller\x00'}}, 0x6d) accept4$alg(r0, 0x0, 0x0, 0x80800) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x2, &(0x7f0000000180)=@raw=[@call={0x85, 0x0, 0x0, 0x58}, @exit], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0xcf, &(0x7f00000001c0)=""/207, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 16:05:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001780)=@newlink={0x4c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, @ip6erspan={{0x10, 0x1, 'ip6erspan\x00'}, {0x18, 0x2, [@gre_common_policy=[@IFLA_GRE_ERSPAN_VER={0x8, 0x16, 0x2}, @IFLA_GRE_TTL={0x8, 0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]]}}}]}, 0x4c}}, 0x0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x38}, 0x0) setsockopt$inet_dccp_buf(r4, 0x21, 0xc, &(0x7f0000000000)="1dbd28d89efd4c37301358db6705f6883665f771185d2537123a432c3b166af1d646eb0bb561b4248be70d48c5e1a3100209b50a61aa59c7801839f2e0bf89760d63a9e3ed4792d8b4451d0e491031e8258e14864554e20c130319ee3a07a2d040d3c45b4107dbe36748ac1e", 0x6c) 16:05:13 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) ioctl(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0xfb) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e21}, 0x10) socket$inet(0x2, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) accept$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x7fff, 0x80000001}, 0x14) shutdown(r0, 0x1) [ 660.010108][T21838] netlink: 'syz-executor.1': attribute type 22 has an invalid length. [ 660.070897][T21838] netlink: 'syz-executor.1': attribute type 22 has an invalid length. [ 660.123430][T11874] usb 5-1: Using ep0 maxpacket: 8 [ 660.144642][T11950] usb 1-1: config 0 has an invalid interface number: 135 but max is 0 [ 660.152995][T11950] usb 1-1: config 0 has no interface number 0 [ 660.159192][T11950] usb 1-1: config 0 interface 135 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 660.170222][T11950] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 660.181675][T11950] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has invalid maxpacket 1646, setting to 1024 [ 660.193040][T11950] usb 1-1: config 0 interface 135 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 660.206631][T11950] usb 1-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=65.14 [ 660.215814][T11950] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.226233][T11950] usb 1-1: config 0 descriptor?? [ 660.268831][T11950] iowarrior 1-1:0.135: IOWarrior product=0x1501, serial= interface=135 now attached to iowarrior0 [ 660.304054][T11874] usb 5-1: config 0 has an invalid interface number: 60 but max is 0 [ 660.312437][T11874] usb 5-1: config 0 has no interface number 0 [ 660.318642][T11874] usb 5-1: New USB device found, idVendor=04a5, idProduct=3035, bcdDevice=c3.36 [ 660.327907][T11874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.339725][T11874] usb 5-1: config 0 descriptor?? [ 660.397283][T11874] gspca_main: benq-2.14.0 probing 04a5:3035 [ 660.473837][T11874] usb 1-1: USB disconnect, device number 89 [ 660.485291][T11874] iowarrior 1-1:0.135: I/O-Warror #0 now disconnected [ 660.593754][T21859] QAT: Invalid ioctl [ 660.599585][T11950] usb 5-1: USB disconnect, device number 62 16:05:14 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x38}, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000600)={0x3ff, {{0xa, 0x4e23, 0x9, @local, 0x8001}}, 0x0, 0x7, [{{0xa, 0x4e22, 0x9, @ipv4={[], [], @empty}, 0x9}}, {{0xa, 0x4e21, 0x101, @ipv4={[], [], @empty}, 0x6}}, {{0xa, 0x4e20, 0x8000, @mcast1, 0x6}}, {{0xa, 0x4e21, 0xc5a, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xbd6}}, {{0xa, 0x4e20, 0x7, @mcast1, 0x9}}, {{0xa, 0x4e21, 0xe82, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}}, {{0xa, 0x4e22, 0x5, @local, 0x2}}]}, 0x410) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@mcast2, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[]}}, 0x800) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmmsg$alg(r0, &(0x7f00000000c0)=[{0x0, 0xff00, 0x0, 0x0, &(0x7f0000002780)=[@assoc={0x18, 0x29}], 0xf}], 0x3bb, 0x0) 16:05:14 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'ip\x8ei0\x00\x00@\x00', 0xc205}) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000cd0014000000000000000100000001000000544beaff7b54adad62f34543afcf12ae77071a94c59a134fd7c93ae9b94b9ae00c59053874103706843e93643a0ea2", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x38}, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040)=0x4c, 0x4) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0xfffffffffffffcc7, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x8955, &(0x7f0000000000)=0x2) dup3(r6, r0, 0x0) 16:05:14 executing program 0: syz_usb_connect(0x0, 0xbc, &(0x7f0000002c40)={{0x12, 0x1, 0x0, 0x1c, 0x0, 0xf5, 0x40, 0x7c0, 0x1501, 0x6514, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x87, 0x0, 0x1, 0x3, 0x1, 0x12, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "81bb6e86a9"}]}}]}}]}}]}}, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x660000, 0x0) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040), &(0x7f0000000080)=0x4) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 16:05:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4000001000008912, &(0x7f0000000040)="11dca5055e0bcfe47bf070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x10000000, &(0x7f0000000000)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0xc], [], @empty}}]}, 0x28}}, 0x0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup2(r7, r6) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r8, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r9}}}, @rights={{0x14, 0x1, 0x1, [r5]}}], 0x38}, 0x0) ioctl$BLKBSZGET(r8, 0x80081270, &(0x7f0000000480)) r10 = dup2(r4, r3) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r11, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="d839fecf"], 0x38}, 0x0) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = dup2(r15, r14) getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r16, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r17}}}, @rights={{0x14, 0x1, 0x1, [r13]}}], 0x38}, 0x0) ioctl$SG_SCSI_RESET(r13, 0x2284, 0x0) r18 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r18, 0x84, 0x1d, &(0x7f0000000400)=ANY=[@ANYBLOB="3ade9ff8b39b22da16a3d98863b13f74c1dc26e0a7f030f5cd3400000000001e868000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r12, 0x84, 0x7d, &(0x7f0000000300)={r19, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000040)=0x100) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={r19, 0x68, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e23, 0x2, @mcast1, 0x8001}, @in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e20, 0x3f, @rand_addr="4d3bddba4d7892be6989290e5282aa48", 0x9}, @in={0x2, 0x4e22, @local}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r10, 0x84, 0x70, &(0x7f00000001c0)={r20, @in={{0x2, 0x4e23, @multicast1}}, [0x6, 0x1000, 0x7fffffff, 0x8, 0x8, 0x7, 0x2, 0xfffffffffffffff8, 0x3, 0x7, 0x100, 0x5, 0xe58a, 0x0, 0x584]}, &(0x7f00000002c0)=0x100) 16:05:14 executing program 3: pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r4}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x38}, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205649, &(0x7f00000000c0)={0x9d0000, 0x8, 0xcbd, [], &(0x7f0000000080)={0x990a79, 0x1f, [], @p_u8}}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0xf30, 0x111, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000140)=@string={0x2}}, {0x0, 0x0}]}) 16:05:14 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0xa0000, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x2b, 0x0, 0x5) 16:05:14 executing program 1: socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x3, 0x0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r6}}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x38}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x900}, 0x40) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000015008105e00f80ecdb4cb92e0a68022c14000000160001008e7948f328995a017c7b58510602000001ff", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 16:05:14 executing program 2: r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)) syz_usb_connect(0x0, 0xf2, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe2, 0x9a, 0x74, 0x8, 0x4fc, 0x235, 0xe2d8, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x19, 0x0, 0x2, 0xed, 0xa2, 0x7a, 0x0, [], [{{0x9, 0x5, 0xb, 0x2}}, {{0x9, 0x5, 0x8a, 0x2}}]}}]}}]}}, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5, 0xa2000) [ 661.570420][T21875] netlink: 'syz-executor.4': attribute type 23 has an invalid length. 16:05:14 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xfd, 0xb4, 0xb0, 0x8, 0x1d50, 0x60a1, 0x31c, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x83, 0x0, 0x0, 0xee, 0xc9, 0x2a}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x40, 0x9, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0xac, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0xac, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x38}, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8093983041975e1e}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r6, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x72d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0xac, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 661.617085][T21875] netlink: 'syz-executor.4': attribute type 23 has an invalid length. 16:05:14 executing program 1: getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000040), &(0x7f0000000100)=0x8) r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="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", 0x141, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) ioctl$sock_inet_SIOCGIFNETMASK(r5, 0x891b, &(0x7f0000000ec0)={'ip6_vti0\x00', {0x2, 0x4e24, @remote}}) sendmsg$netlink(r11, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r12}}}, @rights={{0x14, 0x1, 0x1, [r8]}}], 0x38}, 0x0) ioctl$UI_SET_MSCBIT(r11, 0x40045568, 0x3d) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0xe, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) sendmmsg$inet(r2, &(0x7f0000000dc0)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, &(0x7f0000000400)=[{&(0x7f00000002c0)="00c859a048925a76707e7499130416eb615b1a65e7941b8380c8fd475d6edd8b5fd73a34a042a03c14bd355de3dadc1f1810f4fb959010396bbd062b5cbf22cfb9a0a8be215f25650e4120b22106c1da012ba3574a38355bc45e1be737c2af6ec2bdfcdb8d75ae39daa27a92ca1220f435f10d7ad610e095d230f92d7251f5d43e8f951cb711a3287d3b9e39b68dda70e7a0fa7840a1471ba917cefe6c036a6f821860f5", 0xa4}, {&(0x7f0000000140)="1083c8754692a2baee8f1828c3708b4cff424e44243d56eb5866326ab98fa0e38980626369561861aac25f6c8553eee43f5e43d06c11793627e8c6", 0x3b}, {&(0x7f00000004c0)="3e2da746086117e4761326c0c265a5554a20b085bbcb2a41d441b6fc17b3f59c9af8edbb0f16def78c5c6ddf16b5867e33c165af01300e540f40fd9d3598c9e9d4fd2ad13f1ed6b82d9eecdaf9c2955ba7d1be4bbc6fbd5d80595735ec73e2469c9ec028e4f94cf69d16e370e76d4dee52c8b7ddc984e2b905ffa98adee292b468c5b96e49ff361bb63af20bb2e2c1425a4cd87f2a5837cfd5bf648affda0f41650521e38e92a38409eca0cdcfe4131f8aa2427640a71c58b735c735878065fb1633b615a48e053af08b46120f7cb3918495c961a4dcebd1ab47c474157be7b56c564c54ac19b755ad3ca1e2a9dd89d80ad42c0a", 0xf4}, {&(0x7f0000000780)="2a75d2eb597bd4708d67ab25313ed0f188a965a3004932b330368991a8657a6fe59b5080ff1ab382721fcee054e1f2aef49bb2bad688677f1c8d4bc7a195a8ae786db2e866ab7b818f61e08349a6bddcfe151fc1194f63b74193b558ce3f0332dee97dcba6dd405649ee80a6e1f8d5fb9425a7fbfbb505fd9d145b5ecec816220b894117abca87b5df49c83835526298e7d0f16104a543c926d0eb45816b905ca4f94199ca46e68304e3976096b5873c12acf4d7747efb70a0519e71dee9baee62a6d9a540758d057244f0b18496f2c923199236f3d9decb9e3172f815318bc6c8e95e4d030f", 0xe6}], 0x4, &(0x7f0000000880)=[@ip_ttl={{0x14, 0x0, 0x2, 0x10001}}, @ip_ttl={{0x14, 0x0, 0x2, 0x95}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffff}}], 0x90}}, {{&(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000a40)=[{&(0x7f0000000940)="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", 0xff}], 0x1, &(0x7f0000000a80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3f}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3ff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}], 0x48}}, {{&(0x7f0000000b00)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10, &(0x7f0000000d00)=[{&(0x7f0000000b40)="650b73bd48515bdd4180d6c3c9ca1a01f42b211f17eb297599c571f01c43bd361b99d27c970b9b78bbd93d51baa7fa8e8000e361db9f3d83fa720e58418df5b46f4af3e8545a17b28290b32c7a2ec62fe35da2ac16931f7b61505dcca9e2e068c924f81ef7435fccc7e8e6defa55afc1547bc9fc88d22031070e8cf9d3e32531ab7c83dbf101070a6466ffdfc9e5fe56", 0x90}, {&(0x7f0000000c00)="8f6bfa413acd9035141463a2c520733220dda1607cbf84c7c2589f91631ea96b4bd1710da1bf9ca5b0e769d510fcd5aff2220124b27194cba877013222556f95ce72fd54046e9a2cc3d71afe2a0fee424085d7e8ffeddfc0f520d857219e3da0cb8592ce608cce3c3ae2423d11674fa283e7dd056e58d5198185650829928e87c297d45aa65ebcb14f895e6596344693cbacba5f2e5b5451c5e4315592ba70d6d2b9d4008e90a4959e91e0f067d48d5a000ce7b2dc0ddb0c3636669bb4d480788ded845ff6a69c7df46f724ec646af88a7aa1559f993d69730fc7852540a07ea", 0xe0}], 0x2, &(0x7f0000000d40)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @dev={0xac, 0x14, 0x14, 0xa}, @broadcast}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffffff12}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x80}}], 0x3, 0xc000081) r13 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r14 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000e80)={'batadv0\x00', 0x400}) keyctl$dh_compute(0x17, &(0x7f0000000100)={r13, r14, r1}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'crct10dif\x00\x00\x00 \x00\x00\x00+\xcc\xff%\xd2cTH,\x00'}}) 16:05:14 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x5, 0x4000) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000100)=0xffffffe0, 0x4) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r0, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) fcntl$setsig(r0, 0xa, 0x20) sendto(r0, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) [ 661.802277][T11950] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 661.808500][T21896] netlink: 'syz-executor.1': attribute type 14 has an invalid length. [ 661.824518][T11874] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 661.832987][T11838] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 661.854704][T21896] netlink: 'syz-executor.1': attribute type 14 has an invalid length. [ 661.863527][T21900] netlink: 'syz-executor.1': attribute type 14 has an invalid length. 16:05:14 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f00003dd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000000000/0x600000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000009000/0x3000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000000000/0x4000)=nil, 0x0, 0x2a1}, 0x68) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup2(r7, r6) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) ioctl$CAPI_REGISTER(0xffffffffffffffff, 0x400c4301, &(0x7f00000002c0)={0xa6, 0x0, 0x40}) sendmsg$netlink(r8, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r9}}}, @rights={{0x14, 0x1, 0x1, [r5]}}], 0x38}, 0x0) ioctl$IMGETCOUNT(r5, 0x80044943, &(0x7f0000000280)) sendmsg$netlink(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r4}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x38}, 0x0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup2(r12, r11) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r13, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r14, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000014000000000000000100000001000000", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00'], 0x38}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x6, 0x118, 0xfa00, {{0x401, 0x8, "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", 0xfa, 0x7f, 0x3f, 0x7, 0x80, 0x5, 0x0, 0x1}, r15}}, 0x120) r16 = socket(0x10, 0x2, 0x0) r17 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') sendfile(r16, r17, 0x0, 0x80000002) 16:05:15 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x140, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xf2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x60000000) [ 662.013218][ T4071] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 662.031182][T21910] IPVS: ftp: loaded support on port[0] = 21 [ 662.072294][T11874] usb 4-1: Using ep0 maxpacket: 8 [ 662.085605][T11838] usb 3-1: Using ep0 maxpacket: 8 16:05:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r3 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup2(r7, r6) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) creat(&(0x7f0000000240)='./file0\x00', 0x100) sendmsg$netlink(r8, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r9}}}, @rights={{0x14, 0x1, 0x1, [r5]}}], 0x38}, 0x0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup2(r12, r11) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000001c0)=0xb11a2eadf197955) sendmsg$netlink(r13, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="c16301195faa163b291b844bb11c00000100000002000000", @ANYRES32=r14, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00'], 0x38}, 0x0) r15 = fcntl$dupfd(r8, 0x0, r10) dup2(r4, r15) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="2e0443ffef33d0b7f96a5d20f87194df218cd7abeacb", @ANYRESOCT=r1, @ANYPTR, @ANYRESOCT=r2, @ANYRES32, @ANYRES16=r1, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRES32=r3]], 0x7}}, 0x0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r19 = dup2(r18, r17) getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r19, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00+\x00'/16, @ANYRES32=r20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00'], 0x38}, 0x0) ioctl$TIOCMGET(r19, 0x5415, &(0x7f0000000200)) [ 662.184270][T11950] usb 1-1: config 0 has an invalid interface number: 135 but max is 0 [ 662.192615][T11950] usb 1-1: config 0 has no interface number 0 [ 662.198797][T11950] usb 1-1: config 0 interface 135 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 662.202397][T11838] usb 3-1: config 0 has an invalid interface number: 25 but max is 0 [ 662.209718][T11950] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 662.217696][T11838] usb 3-1: config 0 has no interface number 0 [ 662.229057][T11950] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has invalid maxpacket 1646, setting to 1024 [ 662.235207][T11838] usb 3-1: config 0 interface 25 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 662.246422][T11950] usb 1-1: config 0 interface 135 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 662.256181][T11838] usb 3-1: config 0 interface 25 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 662.269246][T11950] usb 1-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=65.14 [ 662.269311][T11950] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.279203][T11838] usb 3-1: New USB device found, idVendor=04fc, idProduct=0235, bcdDevice=e2.d8 [ 662.279277][T11838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.289918][T11874] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 662.318599][T11950] usb 1-1: config 0 descriptor?? [ 662.327066][T11838] usb 3-1: config 0 descriptor?? [ 662.352410][ T4071] usb 6-1: Using ep0 maxpacket: 8 [ 662.364395][T11874] usb 4-1: language id specifier not provided by device, defaulting to English [ 662.376056][T11838] spcp8x5 3-1:0.25: SPCP8x5 converter detected [ 662.396648][T11838] usb 3-1: SPCP8x5 converter now attached to ttyUSB0 [ 662.400710][T11950] iowarrior 1-1:0.135: IOWarrior product=0x1501, serial= interface=135 now attached to iowarrior0 [ 662.474648][ T4071] usb 6-1: config 0 has an invalid interface number: 131 but max is 0 [ 662.483063][ T4071] usb 6-1: config 0 has no interface number 0 [ 662.489353][ T4071] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice= 3.1c [ 662.498642][ T4071] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.511481][ T4071] usb 6-1: config 0 descriptor?? [ 662.573047][T11950] usb 1-1: USB disconnect, device number 90 [ 662.591416][T11950] iowarrior 1-1:0.135: I/O-Warror #0 now disconnected [ 662.634530][T11838] usb 3-1: USB disconnect, device number 35 [ 662.652960][T11838] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 662.663755][T11838] spcp8x5 3-1:0.25: device disconnected [ 662.762465][T11874] usb 4-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.40 [ 662.771692][T11874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.780214][T11874] usb 4-1: Product: syz [ 662.784477][T11874] usb 4-1: SerialNumber: syz [ 662.992213][ T4071] airspy 6-1:0.131: Board ID: 00 [ 662.997330][ T4071] airspy 6-1:0.131: Firmware version: [ 663.073017][T11874] usbhid 4-1:1.0: can't add hid device: -22 [ 663.079283][T11874] usbhid: probe of 4-1:1.0 failed with error -22 [ 663.116025][T11874] usb 4-1: USB disconnect, device number 52 [ 663.402165][T11838] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 663.402214][T11950] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 663.762397][T11950] usb 1-1: config 0 has an invalid interface number: 135 but max is 0 [ 663.770737][T11950] usb 1-1: config 0 has no interface number 0 [ 663.777603][T11950] usb 1-1: config 0 interface 135 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 663.788385][T11950] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 663.799814][T11950] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has invalid maxpacket 1646, setting to 1024 [ 663.802204][T12046] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 663.811204][T11950] usb 1-1: config 0 interface 135 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 663.831833][T11950] usb 1-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=65.14 [ 663.840992][T11950] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.850358][T11950] usb 1-1: config 0 descriptor?? [ 663.862713][ T4071] airspy 6-1:0.131: usb_control_msg() failed -71 request 0f [ 663.871420][ T4071] airspy 6-1:0.131: Registered as swradio16 [ 663.878181][ T4071] airspy 6-1:0.131: SDR API is still slightly experimental and functionality changes may follow [ 663.891858][ T4071] usb 6-1: USB disconnect, device number 54 [ 663.905723][T11950] iowarrior 1-1:0.135: IOWarrior product=0x1501, serial= interface=135 now attached to iowarrior0 [ 664.096295][T11950] usb 1-1: USB disconnect, device number 91 [ 664.115526][T11950] iowarrior 1-1:0.135: I/O-Warror #0 now disconnected 16:05:17 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200}) accept$alg(0xffffffffffffffff, 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) socket$inet(0x10, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) geteuid() r4 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x1, 0x2) ioctl$TIOCMBIS(r4, 0x5416, &(0x7f0000000180)=0x5) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r5, 0xc0406618, &(0x7f0000000100)={{0x0, 0x0, @descriptor="b6529405cc75725e"}}) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 16:05:17 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000140)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000280)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000001ae, 0x62, 0x0) r2 = fcntl$dupfd(r0, 0x6d5d0e56066ec430, r0) r3 = getpgid(0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) r5 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/exec\x00', 0x2, 0x0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup2(r8, r7) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r9, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r10}}}, @rights={{0x14, 0x1, 0x1, [r6]}}], 0x38}, 0x0) kcmp(r3, r4, 0x3, r5, r9) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_connect$cdc_ecm(0x5, 0x4d, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) 16:05:17 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x5, 0x40, 0xfa00, {{0xa, 0x4e20, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}}}, 0x48) 16:05:17 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000061c6d2082f07002206ef0000000109022400010000000009045500025d08030009058f020000000000090502120200000000"], 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x2, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) [ 664.512001][T12046] usb 4-1: device not accepting address 53, error -71 16:05:17 executing program 4: r0 = socket(0x10, 0x0, 0xff) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") sendmsg$nl_route(r0, &(0x7f0000504000)={0x0, 0x0, &(0x7f0000812ff0)={&(0x7f000047c000)=ANY=[@ANYBLOB="3400000010000900"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000c00010000000068f71d0000"], 0x34}}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r2) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f00000000c0)=0x101, &(0x7f0000000100)=0x4) accept4$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x1c, 0x80000) 16:05:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f00000007c0)={0x1c4, 0x0, 0x308, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x5c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x0, 0x2, [@TIPC_NLA_PROP_TOL={0x0, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x0, 0x4, 0x6d6}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0xfffffffa}, @TIPC_NLA_PROP_WIN={0x0, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x1c}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xff6a, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0xa0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x0, 0x2, [@TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1a}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0xfffffffffffffc77, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}]}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x609}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x93}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe091}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_NODE={0x3c}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x8}, 0x1) r2 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r2, &(0x7f0000000380)={0x0, 0xfffffffffffffd67, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000200007041dfffd946f6105000200000a1f000003002808000800180004000300280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 664.623248][T11950] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 664.719183][T21948] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 664.836909][T21948] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 664.872182][T11838] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 664.882650][T12046] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 664.896655][T11950] usb 6-1: Using ep0 maxpacket: 8 [ 665.022238][T11950] usb 6-1: config 0 has an invalid interface number: 131 but max is 0 [ 665.030539][T11950] usb 6-1: config 0 has no interface number 0 [ 665.036891][T11950] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice= 3.1c [ 665.046023][T11950] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.055667][T11950] usb 6-1: config 0 descriptor?? [ 665.122127][T12046] usb 4-1: Using ep0 maxpacket: 8 [ 665.142222][T11838] usb 2-1: device descriptor read/64, error 18 [ 665.252501][T12046] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 665.260808][T12046] usb 4-1: config 0 has no interface number 0 [ 665.268029][T12046] usb 4-1: config 0 interface 85 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 665.278533][T12046] usb 4-1: config 0 interface 85 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 2 [ 665.288429][T12046] usb 4-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice=ef.06 [ 665.297656][T12046] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.307107][T12046] usb 4-1: config 0 descriptor?? [ 665.352256][T11950] airspy 6-1:0.131: Board ID: 00 [ 665.357398][T11950] airspy 6-1:0.131: Firmware version: [ 665.375236][T12046] usb 4-1: NFC: Reader power on cmd error -71 [ 665.381456][T12046] pn533_usb 4-1:0.85: NFC: Couldn't poweron the reader (error -71) [ 665.390249][T12046] pn533_usb: probe of 4-1:0.85 failed with error -71 16:05:18 executing program 5: 16:05:18 executing program 0: syz_usb_connect(0x0, 0xbc, &(0x7f0000002c40)={{0x12, 0x1, 0x0, 0x1c, 0x0, 0xf5, 0x40, 0x7c0, 0x1501, 0x6514, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x87, 0x0, 0x1, 0x3, 0x1, 0x12, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "81bb6e86a9"}]}}]}}]}}]}}, 0x0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r5, r4) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r7}}}, @rights={{0x14, 0x1, 0x1, [r3]}}], 0x38}, 0x0) r8 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r9, r8) r10 = syz_open_dev$sndtimer(&(0x7f0000000380)='/dev/snd/timer\x00', 0x0, 0x100) r11 = clone3(&(0x7f0000000600)={0x6a24c14c2853c6b3, &(0x7f0000000400), &(0x7f0000000480), &(0x7f00000004c0), 0x32, 0x0, &(0x7f0000000500)=""/22, 0x16, &(0x7f0000000540)=""/135}, 0x40) lstat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r14, r13) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r18 = dup2(r17, r16) getsockopt$sock_cred(r18, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r18, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r19}}}, @rights={{0x381a8da15a12de6c, 0x1, 0x1, [r15]}}], 0x38}, 0x0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r21 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r23 = dup2(r22, r21) getsockopt$sock_cred(r23, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r23, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r24}}}, @rights={{0x14, 0x1, 0x1, [r20]}}], 0x38}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmmsg(r25, &(0x7f0000000140)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000280)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000001ae, 0x62, 0x0) r26 = syz_open_dev$mouse(&(0x7f0000000700)='/dev/input/mouse#\x00', 0xa035, 0x50400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmmsg(r27, &(0x7f0000000140)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000280)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000001ae, 0x62, 0x0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r29 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r31 = dup2(r30, r29) getsockopt$sock_cred(r31, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r31, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r32}}}, @rights={{0x14, 0x1, 0x1, [r28]}}], 0x38}, 0x0) r33 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r33, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r34 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vcs\x00', 0x400, 0x0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r36 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r38 = dup2(r37, r36) getsockopt$sock_cred(r38, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r38, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r39}}}, @rights={{0x14, 0x1, 0x1, [r35]}}], 0x38}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000240)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000001c0)=[{&(0x7f00000002c0)="8a3b96727298815c55972f9b3c87a644bbc8c867c0197d64517449b68c6b3cdbec3d1bd15d1cea0b6007d9fc7c0161e17a3f126d9340fb134f1de9f3d6e976a9b13dfa9f17a0a68146984ddc93deeb08ed023a3c5cf4f7fb201cead04f14a9a7492fc1ffa41f434ba2e1a9c4ea4ceb788fc0c98e6f887901a6332de6e2defb9bfeb8a230c1950421e1db93", 0x8b}, {&(0x7f00000000c0)}], 0x2, &(0x7f0000000780)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r0, r6, r8, r10]}}, @cred={{0x1c, 0x1, 0x2, {r11, 0xee01, r12}}}, @rights={{0x34, 0x1, 0x1, [r14, r15, r20, r25, r1, r26, r27, r31, r33]}}, @rights={{0x20, 0x1, 0x1, [r34, r2, r0, r35]}}], 0xa0, 0x8000}], 0x1, 0x4000010) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r41 = dup2(r40, r2) getsockopt$sock_cred(r41, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r41, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r42}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x38}, 0x0) r43 = openat$cgroup_ro(r1, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) ioctl$EVIOCGBITKEY(r43, 0x80404521, &(0x7f0000000040)=""/98) syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000140)="9f3100e57eb36f3bb3db630dd964000800000063f4779b86ee00f16e8c81041700070fd73300c2809d1d58bc2c339583a44878fcdb3d3321f3cc3bec1a2d4d7822d857c0e72fc9fc3e23cde07524", 0xfffffffffffffd6e}], 0x1) 16:05:18 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401, 0x70bd27}, 0x14}, 0x1, 0x0, 0x0, 0xbb7b87f2e9fe8168}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newae={0x54, 0x1e, 0x701, 0x0, 0x0, {{}, @in6=@mcast1}, [@mark={0xc}, @replay_thresh={0x8}]}, 0x54}, 0x8}, 0x0) 16:05:18 executing program 2: prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00\x00\x00\x00\x00\x00\x00l\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x7, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000002000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000003000000000000000000697036677265300000000000000000007465616d30000000000000000000000076657468305f746f5f626f6e6400000076657468305f746f5f626f6e64000000aaaaaaaaaa00006e0000000024ffffffffff0000000000000000f0000000f0000000200100006c696d697400000000000000000000000000000000000000000000000000000020000000000000000000002002000000000000000000000000000000000000000000000000000000636c75737465720000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000041554449540000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0100000011000000000000000000766c616e3000000000000000000000006c6f000000000000000000000000000044fc736530000000000000000000000062726964676530000000000000000000ffffffffffff000000000000aaaaaaaaaa0000000000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800"/592]}, 0x2c8) [ 665.402478][T11950] airspy 6-1:0.131: usb_control_msg() failed -71 request 11 [ 665.412646][T11950] airspy 6-1:0.131: Registered as swradio16 [ 665.421039][T11950] airspy 6-1:0.131: SDR API is still slightly experimental and functionality changes may follow [ 665.504228][T21965] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 665.525081][T11950] usb 6-1: USB disconnect, device number 55 [ 665.537744][T21968] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 16:05:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="6c000000100005072dbd70000000000000000000ca662f7129ff517648b83b9922c1ad4e26dfb375a4f8c857ba0357835d05ca72c672ed9feac97e2610062b2125ea81ba023899d1621f165d13f4307aecf9e432cc2e935926741cc872943edc4d2fe65a1c018d852b81aa7222da0bcef0adcb30c80dae14b9e989f7fa8caecdda515f3dac9754f233f0c02881b058010ed4a8e065f943bf1a54811483bb5f067a5a350113d4d956e7d2011481a005a8", @ANYRES32, @ANYBLOB="00000000000000004c0012000c00010062726964676500003c0002000c002e000400000008001b000800000008002b000300000008001b0007000000080007000500000008001d0014378f1f080001000d000000258538497ef6175e"], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x84800) inotify_add_watch(r1, &(0x7f0000000240)='./file0\x00', 0x84000010) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000200)=0xa46d, 0x4) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r6}}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x38}, 0x0) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000000280)) 16:05:18 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x101900, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x20008, 0x4) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x20, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x6, {[@main, @global=@item_4={0x3, 0x1, 0x5, "8c3544b0"}]}}, 0x0}, 0x0) [ 665.564252][T12046] usb 4-1: USB disconnect, device number 54 [ 665.622319][T11838] usb 2-1: device descriptor read/64, error 18 [ 665.631209][T21960] xt_cluster: cannot load conntrack support for proto=7 16:05:18 executing program 2: unshare(0x8000000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getpeername$netlink(r0, &(0x7f00000000c0), &(0x7f0000000200)=0xffffffffffffff8c) [ 665.691489][T21975] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.5'. [ 665.718530][T21975] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.5'. [ 665.802217][T11874] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 665.892573][T11838] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 665.972019][T11876] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 666.162372][T11874] usb 1-1: config 0 has an invalid interface number: 135 but max is 0 [ 666.171074][T11874] usb 1-1: config 0 has no interface number 0 [ 666.177946][T11874] usb 1-1: config 0 interface 135 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 666.188729][T11874] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 666.192121][T11838] usb 2-1: device descriptor read/64, error 18 [ 666.200292][T11874] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has invalid maxpacket 1646, setting to 1024 [ 666.200382][T11874] usb 1-1: config 0 interface 135 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 666.231071][T11874] usb 1-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=65.14 [ 666.240229][T11874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.250038][T11874] usb 1-1: config 0 descriptor?? [ 666.292383][T11876] usb 5-1: Using ep0 maxpacket: 8 [ 666.303723][T11874] iowarrior 1-1:0.135: IOWarrior product=0x1501, serial= interface=135 now attached to iowarrior0 [ 666.392128][T11950] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 666.412472][T11876] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 666.423574][T11876] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 666.436662][T11876] usb 5-1: New USB device found, idVendor=056a, idProduct=0020, bcdDevice= 0.40 [ 666.445796][T11876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.456448][T11876] usb 5-1: config 0 descriptor?? [ 666.515379][T12046] usb 1-1: USB disconnect, device number 92 [ 666.544275][T12046] iowarrior 1-1:0.135: I/O-Warror #0 now disconnected [ 666.592087][T11838] usb 2-1: device descriptor read/64, error 18 [ 666.652210][T11950] usb 4-1: Using ep0 maxpacket: 8 [ 666.712265][T11838] usb usb2-port1: attempt power cycle [ 666.772286][T11950] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 666.780501][T11950] usb 4-1: config 0 has no interface number 0 [ 666.786803][T11950] usb 4-1: config 0 interface 85 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 666.797228][T11950] usb 4-1: config 0 interface 85 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 2 [ 666.807160][T11950] usb 4-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice=ef.06 [ 666.816306][T11950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.825994][T11950] usb 4-1: config 0 descriptor?? [ 666.882420][T11950] usb 4-1: NFC: Reader power on cmd error -71 [ 666.888751][T11950] pn533_usb 4-1:0.85: NFC: Couldn't poweron the reader (error -71) [ 666.897056][T11950] pn533_usb: probe of 4-1:0.85 failed with error -71 [ 666.946874][T11876] wacom 0003:056A:0020.0012: unknown main item tag 0x0 [ 666.954615][T11876] wacom 0003:056A:0020.0012: Unknown device_type for 'HID 056a:0020'. Assuming pen. [ 666.966270][T11876] input: Wacom Intuos 4x5 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0020.0012/input/input24 [ 666.986932][T11876] wacom 0003:056A:0020.0012: hidraw0: USB HID v0.00 Device [HID 056a:0020] on usb-dummy_hcd.4-1/input0 [ 667.068254][T11876] usb 4-1: USB disconnect, device number 55 [ 667.145445][ T4071] usb 5-1: USB disconnect, device number 63 [ 667.302177][T12046] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 667.422128][T11838] usb 2-1: new high-speed USB device number 41 using dummy_hcd 16:05:20 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x505580) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x0, 0x31, 0x8, 0x3, 0x1000, 0x20, &(0x7f00000001c0)="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"}) unshare(0x2a000400) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r6}}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x38}, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0x4, 0x50000, 0x4, 0xffffff7f, 0x7ff, 0x7fff, 0xa7d, 0x1000, 0x9, 0x200], 0xa, 0x3, 0x3, 0x80000000, 0x80000000, 0x1f, {0x2, 0x0, 0x2, 0x401, 0x0, 0x3ff, 0x20, 0x0, 0x7, 0x5, 0x9, 0x3, 0x7ff, 0x4, "5d0748da5b00a49797e53bbd98cb053e3f1e7535b2b7091c945dcf1b86eab666"}}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185502, 0x0) 16:05:20 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0x2, 0x0, 0x0, @ipv4={[], [], @remote}}}, 0x0, 0xffff}, 0x98) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r6}}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x38}, 0x0) bind$pptp(r2, &(0x7f0000000040)={0x18, 0x2, {0x0, @broadcast}}, 0x1e) 16:05:20 executing program 2: r0 = syz_usb_connect(0x0, 0x1de, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xe9, 0x9a, 0x46, 0x40, 0x55f, 0xc420, 0xe390, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x30, 0x0, 0x0, 0x82, 0x1f, 0x25}}]}}]}}, 0x0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x38}, 0x0) write$9p(r4, &(0x7f0000000140)="df83a5b8765d60f62d9ffd04d09022eae5cd639aedb468ba908e3c89394d61bb13a4a88b5e5defbe543339bdac76d701be1f10628ffa3f4dde72169766198d75b0608de10de4e1f62baa989349d24025373b78654e7899e2ba550a8898fbf125bcc6b9e9d47e6a087b11", 0x6a) syz_usb_ep_write(r0, 0x3ff, 0x0, 0x0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) msgctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000a40)=""/4096) r7 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup2(r8, r7) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r9, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r10}}}, @rights={{0x14, 0x1, 0x1, [r6]}}], 0x38}, 0x0) r11 = syz_open_procfs(r10, &(0x7f0000000000)='loginuid\x00') ioctl$PERF_EVENT_IOC_PERIOD(r11, 0x40082404, &(0x7f0000000040)=0x7) 16:05:20 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x40000, 0x0) ioctl$TIOCSSERIAL(r2, 0x541f, &(0x7f00000003c0)={0x1000, 0xe7, 0x0, 0xfffffe01, 0x80, 0x7, 0x8, 0x1c, 0x0, 0x0, 0x7, 0x6, 0x1aa, 0x1, &(0x7f0000000300)=""/182, 0x0, 0x6, 0x8}) r3 = socket(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'netdevsim0\x00'}) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) ioctl$TCSETXW(r0, 0x5435, &(0x7f00000001c0)={0x9, 0x8000, [0x2, 0x800, 0x101, 0x47fe, 0x5], 0x6a}) sendfile(r3, r0, 0x0, 0x8010) r4 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x3, 0x2) r5 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x1000000000, 0x6b6a7f1eb0d25636) r6 = memfd_create(&(0x7f0000000200)='selfvmnet1\x00', 0x1) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup2(r9, r8) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r11, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="00000000af4841ac2e"], 0x38}, 0x0) sendfile(r6, r10, &(0x7f0000000240), 0xdcd) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000140)='ppp0\x00', 0x0, r0) ioctl$HIDIOCGCOLLECTIONINDEX(r4, 0x40184810, &(0x7f0000000040)={0x1, 0x100, 0x6, 0x4, 0xff, 0xfffffe00}) [ 667.696272][T12046] usb 1-1: config 0 has an invalid interface number: 135 but max is 0 [ 667.704970][T12046] usb 1-1: config 0 has no interface number 0 [ 667.711271][T12046] usb 1-1: config 0 interface 135 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 667.722036][T12046] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 667.722126][T12046] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has invalid maxpacket 1646, setting to 1024 [ 667.744776][T12046] usb 1-1: config 0 interface 135 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 667.744852][T12046] usb 1-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=65.14 [ 667.767523][T12046] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.768318][T11838] usb 2-1: device descriptor read/64, error 18 [ 667.801048][T12046] usb 1-1: config 0 descriptor?? 16:05:20 executing program 1: unshare(0x40600) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x15, 0x10, 0x3}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f00000003c0)=@raw=[@map={0x18, 0x0, 0x1, 0x0, r0}, @map={0x18, 0x0, 0x1, 0x0, r0}], &(0x7f0000000080)='\x00\x00\x00\x00\x00\x00\x00\xeb\xff\xff(1\x18\xc7\xc1\xde\xdc(,J\\\xc4hM=\xf4\x04\xd0\xe9\'rT\x8dm\x1a?\x1a\b\x93\x82\xbf\xfe\x83\xcb4tX{$\x9f\xbfHY\x1e;\xd0\xcf\xdb&\x12G\xfd\xd7\xe71\xd8K\x9b\xc9\x04C\xf5$\xd0\x93k\x12u\x9eMM\x03\x00\x00\x00\xc8\x83\x16\x9c2)\xaa\x9fh\xa4\xd2\x0f\x98.\x06t^\xc0\xcd\x95\x81*\xece1\x9e*3\xfa\xb5=\xd2\x1e-\xd3]}\xa7\xbfDZn\xd4\x82\x19\xfb\x1bjE\xc3D\xd8\xd56G\xd9\xc3\x90\xf5\xb9\xdc\x98\xb8\x8f=\xdf\xf0,e\x1dl\xe0\xc5\x80\a\xb1\xad\xbf\xc5\x88!j\xce\x00\x00\x00\x00\x00\x00', 0x2, 0x90, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x38}, 0x0) setsockopt$inet_dccp_buf(r1, 0x21, 0x0, &(0x7f0000000000)="ffe5", 0x2) [ 667.876671][T12046] iowarrior 1-1:0.135: IOWarrior product=0x1501, serial= interface=135 now attached to iowarrior0 16:05:21 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x5, 0x40, 0x200d, 0x20000000000001, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) close(r3) [ 667.925427][T11876] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 667.945915][ T4071] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 668.100920][T11950] usb 1-1: USB disconnect, device number 93 [ 668.117274][T11950] iowarrior 1-1:0.135: I/O-Warror #0 now disconnected [ 668.202518][ T4071] usb 5-1: Using ep0 maxpacket: 8 [ 668.292260][T11876] usb 3-1: config 0 has an invalid interface number: 48 but max is 0 [ 668.300521][T11876] usb 3-1: config 0 has no interface number 0 [ 668.306863][T11876] usb 3-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=e3.90 [ 668.316048][T11876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.326320][T11876] usb 3-1: config 0 descriptor?? [ 668.332995][ T4071] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 668.344100][ T4071] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 668.357088][ T4071] usb 5-1: New USB device found, idVendor=056a, idProduct=0020, bcdDevice= 0.40 [ 668.366231][ T4071] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.366562][T11876] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 668.382503][ T4071] usb 5-1: config 0 descriptor?? 16:05:21 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000000008, 0x738, 0x1705, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)=[&(0x7f0000000100)='/dev/sequencer\x00'], &(0x7f0000000300)=[&(0x7f00000001c0)='/dev/sequencer\x00', &(0x7f0000000200)='/security\x00', &(0x7f0000000240)='/dev/sequencer\x00', &(0x7f0000000280)='/dev/sequencer\x00', &(0x7f00000002c0)='\x1bvmnet0-losystem)(GPLvmnet1md5sumnodevself\x00']) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x7, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}]}) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f0000000140)={0x0, 0x0, 0x22, {0x22, 0x0, "7e07806b2fef929de3f2f6839c2670121f485dd7d1b330d5a36b831934db0197"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 16:05:21 executing program 0: syz_usb_connect(0x0, 0xbc, &(0x7f0000002c40)={{0x12, 0x1, 0x0, 0x1c, 0x0, 0xf5, 0x40, 0x7c0, 0x1501, 0x6514, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x87, 0x0, 0x1, 0x3, 0x1, 0x12, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "81bb6e86a9"}]}}]}}]}}]}}, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = add_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="3514bfaa8f867388c2b763b448e75002e055288d2301cb2b01805b82b9734a1f9a954ca2905d582f968262df6cfa5cd3feee923c4c88be9631ab4e16ef00", 0x3e, 0xfffffffffffffffc) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r5, r4) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r7, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r3, @ANYBLOB="568700210000f90a7824720900"], 0x38}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000240)={0xff, {{0xa, 0x4e24, 0x5, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x5}}}, 0x88) keyctl$reject(0x13, r1, 0x1, 0x2, r2) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000100)=' ', 0x1}], 0x1) 16:05:21 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0) r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0xc) syz_open_procfs(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) syz_open_procfs(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bind$inet(r3, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 16:05:21 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r1, &(0x7f0000057fa0)=[{{}, 0xc}, {}], 0x30) clone(0x800081ff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000240)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r5, 0x200, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2fa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000480)={0xb, 0x10, 0xfa00, {&(0x7f0000000980), r4, 0x80000000}}, 0x18) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4, 0xfa00, {r4}}, 0xc) [ 668.572993][T11876] gspca_sunplus: reg_w_riv err -71 [ 668.578681][T11876] sunplus: probe of 3-1:0.48 failed with error -71 [ 668.605128][T11876] usb 3-1: USB disconnect, device number 37 16:05:21 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) prctl$PR_GET_SECUREBITS(0x1b) listen(r1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000200)=0x78, 0x4) sendto$inet(r0, 0x0, 0xc6f0e847b454e4ed, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e22, @empty}, 0x10) 16:05:21 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0x80045530, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "2bfde7a400"}) 16:05:21 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000140)='trusted.overlay.nlink\x00', &(0x7f0000000180)={'U+', 0x1}, 0x28, 0x1) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm_plock\x00', 0x24000, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x5, @mcast1, 0x9}, 0x1c) r3 = fcntl$getown(r1, 0x9) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0xffffffffffffffff}, 0x0) r5 = fcntl$dupfd(r4, 0x406, r4) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r5, 0xc0a85322, &(0x7f00000001c0)) write$FUSE_WRITE(r5, &(0x7f0000000100)={0x18, 0x0, 0x1, {0xfffffffeffffffff}}, 0x18) move_pages(r3, 0x1, &(0x7f0000000080)=[&(0x7f0000ffb000/0x4000)=nil], &(0x7f00000000c0)=[0x5], &(0x7f0000000280), 0x0) connect(r4, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f0000000280), 0x4) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 16:05:21 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0x80045530, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "2bfde7a400"}) [ 668.762571][ T4071] usbhid 5-1:0.0: can't add hid device: -71 [ 668.768913][ T4071] usbhid: probe of 5-1:0.0 failed with error -71 [ 668.786396][ T4071] usb 5-1: USB disconnect, device number 64 [ 668.797573][T12046] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 668.814234][T11840] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 669.052354][T12046] usb 6-1: Using ep0 maxpacket: 8 [ 669.192680][T12046] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 669.203865][T12046] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 669.216931][T12046] usb 6-1: New USB device found, idVendor=0738, idProduct=1705, bcdDevice= 0.00 [ 669.226069][T12046] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.234946][T11840] usb 1-1: config 0 has an invalid interface number: 135 but max is 0 [ 669.243338][T11840] usb 1-1: config 0 has no interface number 0 [ 669.249465][T11840] usb 1-1: config 0 interface 135 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 669.260250][T11840] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 669.271665][T11840] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has invalid maxpacket 1646, setting to 1024 [ 669.283029][T11840] usb 1-1: config 0 interface 135 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 669.296176][T11840] usb 1-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=65.14 [ 669.305310][T11840] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.315065][T12046] usb 6-1: config 0 descriptor?? [ 669.321150][T11840] usb 1-1: config 0 descriptor?? [ 669.377115][T11876] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 669.385852][T11840] iowarrior 1-1:0.135: IOWarrior product=0x1501, serial= interface=135 now attached to iowarrior0 [ 669.565135][T22031] encrypted_key: insufficient parameters specified [ 669.577849][T11840] usb 1-1: USB disconnect, device number 94 [ 669.594338][T11840] iowarrior 1-1:0.135: I/O-Warror #0 now disconnected [ 669.752307][T11876] usb 3-1: config 0 has an invalid interface number: 48 but max is 0 [ 669.760597][T11876] usb 3-1: config 0 has no interface number 0 [ 669.766906][T11876] usb 3-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=e3.90 [ 669.776781][T11876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.786326][T11876] usb 3-1: config 0 descriptor?? [ 669.794937][T12046] saitek 0003:0738:1705.0013: unknown main item tag 0x2 [ 669.802169][T12046] saitek 0003:0738:1705.0013: item fetching failed at offset -1070591646 [ 669.810868][T12046] saitek 0003:0738:1705.0013: parse failed [ 669.817963][T12046] saitek: probe of 0003:0738:1705.0013 failed with error -22 [ 669.836796][T11876] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 670.017609][T12046] usb 6-1: USB disconnect, device number 56 [ 670.052431][T11876] gspca_sunplus: reg_w_riv err -71 [ 670.057831][T11876] sunplus: probe of 3-1:0.48 failed with error -71 [ 670.067151][T11876] usb 3-1: USB disconnect, device number 38 [ 670.362128][T11950] usb 1-1: new high-speed USB device number 95 using dummy_hcd 16:05:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0x1, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000140)="66b8b9000f00d0c7442400b7fe0000c744240250260000c7442406000000000f011c240f78ba0000c0fe660f3834860a000000c4c275ac7c2c003e3e0f79970c00000066baf80cb8caae098cefb8000000000f23d00f21f835300000040f23f8ecc6f84c0f32f30fc736", 0x47}], 0x1, 0x0, 0x0, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2) r5 = getegid() ioctl$TUNSETGROUP(r4, 0x400454ce, r5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="280000000200"], 0x6) ioctl$KVM_RUN(r3, 0xae80, 0x0) 16:05:23 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) r2 = dup3(0xffffffffffffffff, r0, 0x12ae2a9aaa196f3) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000000)={0x0, 0xfc1, 0x1, 0x8001, 0x17, 0x4, 0x7, 0x3, 0x41321593, 0x66, 0x101, 0x1}) 16:05:23 executing program 1: syz_usb_connect(0x5, 0x1ac6, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x37, 0xd, 0xb7, 0x10, 0x13d3, 0x3423, 0xcc2c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1ab4, 0x3, 0x81, 0x5, 0x0, 0x0, [{{0x9, 0x4, 0x27, 0x1f, 0x6, 0x46, 0x77, 0x61, 0x3f, [@hid_hid={0x9, 0x21, 0x7f, 0x5, 0x1, {0x22, 0xff7}}, @generic={0x1002, 0xa, "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"}], [{{0x9, 0x5, 0x5, 0x0, 0x138, 0x5, 0x18, 0x5, [@generic={0x38, 0x11, "b8c70617d12ebd8a3bb11f8156f1e3c7996dd03d7e60d960887c4dab7832a9c6be3348d7b38af2f39becb02b9e1203ee60eb7ceb2ad0"}]}}, {{0x9, 0x5, 0x9, 0x7, 0x1a3, 0x7f, 0x4}}, {{0x9, 0x5, 0x5, 0x11, 0x8c, 0x0, 0x7, 0x21, [@generic={0xa7, 0x2f, "8208a8ebdd3ed4c08418a71160c4035120669650673bb3a304ce8fe8185664393e7bef721133fddfddcdc85e2a5df8a267ca2df675cd2bb9ebe12bc04fa8f0ffa4e193bff8354c247e727315cd4e261f278e2c8d06e0a6ab0bc7cc858c5824968a75f59f37e81fb4df2fc676d2e761c37d737f136221894666fbc0297ab97e2bc27ea2abd5c7bb29560a03695b527242c759c45bc4cc9b2a7b204d09ef5ea19ddd5d4882b2"}]}}, {{0x9, 0x5, 0x80, 0xc, 0x35a, 0xfe, 0x6, 0x2c, [@generic={0x87, 0x0, "22e90a32963f6717daf5a5f11bc9d29ef9b16b964d79cf1632f91b1e7c2578db0c19e4c76fe69a782760b2fae7c5a6a93f4b6b27e30d4a35264741c09270d631b2a68d3fa71f0d035ebc08452238b12d61193eaa6abadfcd556bb7d6d51db45b14338e4e0b99998a91831e7969113b4c8f1e7adbf425caaaa1e192850bd820d742c651c55e"}, @generic={0xed, 0x30, "834f9f6f664f1bf007ad13f650f73b12822d5462c81965180bd5ac857b2c7b94f08fb8d2ac11367d519b320dbd2f563fe1074271189723d92dcc172e3331a1fa7fcee763b583230f303107ff3a13ebc12edb863132be514f52196bd980d5ccccbeb8ce30e85a80a6009a466bc3034798d1feb2acc866cb0781d2f7a57ca0ca8482e41d695f8271867f41b799c0a1b3d93af27d5c90ec4c57477817e2192159069a684f48dbddd302882fcda6b7126e3f62915d8a3069fa07050fa8901fff523b412084eeae1d7843fc6a88ebb8d20d992d4e9d3e039eaa958985230b9dc0ed2ab885a8c1ba06ccc9e780ae"}]}}, {{0x9, 0x5, 0x9, 0x8, 0x271, 0x3f, 0x7f, 0x3e}}, {{0x9, 0x5, 0xd, 0x10, 0x1c3, 0xff, 0x2, 0xff, [@generic={0xee, 0x4, "b17414dc6373c7695dc7a811810031af3371bc79b69826026453b2a415104c1d0e83dd124f9d3611aeab45dbb747bb34abc7bd3446ef89018a8d5f04934290a02ff465ceffb963bbcfb229ff07c24cb830d88be56db2569ab3cfd3abcdeede368fab26dc35e2430e52c43cc101e229511efa6e4a95d9f92f7c46500e27a1ab4b72b27fc60e23f48f9b3587dd561fe19c3a1a86cb4ba8baa881c236b1fada4aa6a7d7b84f0e82638163e05ec4286300ec97ef6e34f70f599c5505b8de69503061b5db9ecd3bb082f9d5c33b1cd71abb4538902b04ff120aee4424e879fc9dc4e3470c0a037618be3e38e6a8b4"}, @generic={0x101, 0xc, "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"}]}}]}}, {{0x9, 0x4, 0x31, 0x1, 0x9, 0x39, 0x1f, 0x8f, 0x80, [@hid_hid={0x9, 0x21, 0x8, 0xff, 0x1, {0x22, 0x224}}, @usb_cdc={{0xa, 0x24, 0x6, 0x0, 0x0, "3d209c8630"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x7fff, 0x9, 0xff6a}}], [{{0x9, 0x5, 0x9, 0x10, 0x3a0, 0x3f, 0x0, 0x80, [@generic={0x4f, 0x4, "e80f0facd8601e8e56e703493722108a6a12bf382e8d41b2fd393c2ed8808985de77b9e4c4c9251ed3437897ee8e416745ab111523411292ad27afcf600f55a75f5d809fd0989a32df2a643812"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x36d, 0x24, 0x3, 0x40, [@generic={0x6f, 0x5, "ff57eaced19f749fa38206858560241d112cbc59bdc44bfa195e38c5879a6104b160fc6dd6dbc4b83c5d44f571fe05c3c88a4bb593d06361048b56cf1ca5e29043dc83485da41342e53193de8acd1382454d506cf3a4bf1a72496bd9f5f2a3448603525deb06b979eb3e003ca4"}, @generic={0xbd, 0x8, "3fd4f15164fd4e110a664a1eed0e7d3c34bd2fc524ac19e2069a03ef0241e458f9708404be75f7a713a316768b7cc750ef1795580e8991502de48a1bb132f10e1804ea3f29ae5b1eb1ea8d333d4263963f1b8470da3cd5e69f4ce1c90ed9501752ae4a362b8669044aca5ac0cde1fb7bbacdcb9ade371be68093e7b9ddcb6254998d0a2886389fc6f7f6805302992d6312e40a56a7f3707db5748483f1dca3a86b7fe4474ff495245166d00150de5fe220662dab4db7da5974dc6c"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x3ed, 0x4, 0x3e, 0xb9, [@generic={0x6e, 0x23, "8dbfd8fcf1c35e22e9cb597be6595d69e9b9298e8567fbc0548730b524f8c14494469b18debb1f759c496ff090f3ae133833017412f7db4d5ba024cd96c5272b75a0a1f9d8951a0d0b357b92cf8f12f18a9ee568bb0079beaf70d131176dfdd311a169fbad412a3101e58662"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x39d, 0x8a, 0x81, 0x7}}, {{0x9, 0x5, 0x9, 0x20, 0x131, 0x1, 0x80, 0x7, [@generic={0x4d, 0x21, "36565da2453534d8c2618699a633ef3556932fb4a85e493c83afe670d2e97991c14aca66beca565e3b70e96f555ad999ca5cadcf53d52b44ab3a667c17f5f850ac9742972123ceb7a9f5a4"}]}}, {{0x9, 0x5, 0x80, 0x8, 0x2d9, 0x3f, 0x1, 0x0, [@generic={0x98, 0x24, "65602bb3fdb2cc252722fd840d1f9150acae1e817a279f3e0c36d53f5614b749d2b60a1d338c33025763d9a970c3f10ded7d55348055a15487c23356788df14254c1b9f3aaee710ed63a4eb10aa431243a81337b95fe34976d1a04dd51ef2e848c72d38d26a95174ad223e87b87768692c43fcb59106a2a9495a03d06583617eeea167fadf9e6450768bdbae0451d979241a3c13f4e7"}]}}, {{0x9, 0x5, 0xf, 0x1, 0x79, 0x5, 0x2, 0x2}}, {{0x9, 0x5, 0x1, 0x0, 0x111, 0x8, 0x20, 0x7, [@generic={0x3c, 0x67, "a1006ace80bc626723347c847cca5d185e5220e3b9a7f3225d93dfeda9cc6e9040505adc4f905b9bcd4e7718b64d00f11cd590b97e2583482e0c"}, @generic={0x2, 0xf}]}}, {{0x9, 0x5, 0xc, 0x12, 0x25f, 0x7, 0x35, 0xde, [@generic={0x13, 0x43, "5264407c67bf2f2d4a76e839d44db3285a"}]}}]}}, {{0x9, 0x4, 0x33, 0x79, 0x9, 0x27, 0x57, 0x7d, 0xc8, [@usb_cdc={{0x8, 0x24, 0x6, 0x0, 0x0, "60176b"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x0, 0x9, 0x1}, [@obex={0x5, 0x24, 0x15, 0x3}]}, @hid_hid={0x9, 0x21, 0xfff, 0x0, 0x1, {0x22, 0xa90}}], [{{0x9, 0x5, 0x2, 0x10, 0x35b, 0xda, 0x0, 0xee, [@generic={0xd6, 0x2, "908f619259331fbf6962e4b1c71fc95170f8949982281baca4a7e362f44fb3d7a9209ceb4a77724a809903c85cfe26472a0aad07aba26686e07888de94cd43f842c96cd2519f4851ffd702e941ab46b218e9450def2b15723339d52d4f1fe57b7a98dfa5db8604f8d30868484766c63880d7d6027fc04700ccb7031c8d0289f669befeda71f76444fbfb615b8351c89b36f78684f3bc614cce4b137ebe7619685ebd557bd15d8b6121346bb2c51a608d3fdf385b0b06dcbfa6b70c25689181938707eecbe03c2d13b72ae40ec30282bb8ba3da53"}]}}, {{0x9, 0x5, 0xd, 0x8, 0x16e, 0x4, 0x1, 0xff}}, {{0x9, 0x5, 0x3, 0x1e, 0xc1, 0x5, 0x1, 0x2}}, {{0x9, 0x5, 0x0, 0x0, 0x3da, 0x80, 0x3, 0x3}}, {{0x9, 0x5, 0x6, 0x2, 0xd8, 0xfa, 0x9f, 0x6, [@generic={0x4f, 0x11, "cfa9628cb2f51114b5f70688dbb32693db5c144e43d0b96a8df4a5cbf9787cfff43f925040b876a9a07fc9a9d678e09a83d9e7a5821c79e70836fc39aa5d947bab2d130f066188c36636d6388f"}, @generic={0xc7, 0x23, "3e36f01c0e4e9073e1ffbd90e52bf29ed257211f1566c337f3630a81d9d938780913471ceec1560e195dc89256d2893d1770e02f915487dda759b63cbf0f99b7cf69c967b7e17265ba327a52613ff2416e9985890f3a529c9760032695bff291006adfbdebe1dfd8850cccd2502f03ce2f8c6b5cf796734fe2374f3a3dced1258ab7ff40c0de83d60043eeb8787dac423b0536bb7a7ea32b640ada8edc9b9b4bb9ddcd9a49f456e0461c3aeee4fe36e08911b2a1ab84e1646a85c610bf1929fc907a52103b"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x181, 0x81, 0x76, 0x1}}, {{0x9, 0x5, 0x6, 0x1, 0x389, 0x80, 0x3f, 0x3f, [@generic={0x13, 0x22, "ec19af61e23a9cb8be0aeac611b772f267"}]}}, {{0x9, 0x5, 0x8, 0x8, 0x3e9, 0x80, 0x8, 0x89}}, {{0x9, 0x5, 0x3, 0x4, 0x13c, 0x80, 0x81, 0x81}}]}}]}}]}}, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x3c, 0x81, 0x57, 0x40, 0x1b80, 0xe755, 0x1e97, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x61, 0x0, 0x1, 0x1b, 0xd5, 0xc6, 0x0, [], [{{0x7, 0x5, 0x83, 0xe0d5d1e99ce80e0d}}]}}]}}]}}, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000001ec0)='/dev/dlm_plock\x00', 0x400, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000001f00)={0x4}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000fc0)={0xac, &(0x7f0000000080)={0x0, 0x0, 0x1, "9c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000001c00)={0x24, &(0x7f0000000000)={0x0, 0x22, 0x32, {0x32, 0x21, "1a7dce6fab67696b90ecf21165c26c24fdf981a28067b60accc96eb0e17a59f1ff27f30324106aa8661e2006ab8574b7"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4}}, &(0x7f0000001b80)={0x0, 0x22, 0x17, {[@global=@item_012={0x1, 0x1, 0x0, "d4"}, @global=@item_4={0x3, 0x1, 0x5, "7c03b7f4"}, @global=@item_012={0x0, 0x1, 0x6}, @main=@item_4={0x3, 0x0, 0xa, "d4ab6f29"}, @global=@item_012={0x1, 0x1, 0x5, "96"}, @main=@item_4={0x3, 0x0, 0x8, "d6bc4150"}, @local=@item_012={0x2, 0x2, 0xa, "1d86"}]}}, &(0x7f0000001bc0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x5, 0x1, {0x22, 0x11f}}}}, &(0x7f0000001e80)={0x2c, &(0x7f0000001c40)={0x60, 0x13, 0x77, "091aaeeceb9f3d3a0e3f9f6315d51c58122f5d45167c85500d6403838121004370a3e3a39b197da5585981891a026968a2173e7c3f6bbcaeb8cdf9250778316bf5ee788ebbf2bf5866567e5588096dd6b6301b1b389f437d8935dc247d510e16f6c0ff6f5ceaff7057a7753de41932595ebdfe59f4247d"}, &(0x7f0000001cc0)={0x0, 0xa, 0x1}, &(0x7f0000001d00)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000001d40)={0x20, 0x1, 0xeb, "82d391d995965267da98802974089fd0c4b3485a9214e24abdb2df1ded0dffe5bccbd3b71ffec05fa5d326af1513884aaffdc517df1cfaa6f059d3098f7b3394d7073f0ca5c719029fcd5e275de6b3d57cd72109fdc8e7ce4e7cb4e38f7cd2a2443efc62bf90ce5fc7709458cb0ecf57a624127923f708496cd3e12519dce003fdb5beb584c46173db1a7707d336d23a5d6d38a178662a87c70f3ba73395bbdca735df0e0507271d945c0b131424ca38dcabfdbe84a889ec22c7b9b9ae8460896c7f982f2cec99f11d15dfe724fd133b4cd1304dea1c2e928e42c249c4c8ebf78d8371f6d82bd230a88488"}, &(0x7f0000001e40)={0x20, 0x3, 0x1, 0x7}}) 16:05:23 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x7d, &(0x7f0000000300)={r4, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000040)=0x100) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={r4, 0x6}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000000c0)={r5, 0xff}, &(0x7f0000000200)=0x8) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r0, 0xfffffffffffffffd) syz_emit_ethernet(0x4e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60d8652b00180600fe80000000e4060000000d00000000aafe8000000000000000000000000000aa00004e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600200009078000003030000"], 0x0) syz_emit_ethernet(0xc0, &(0x7f0000000100)={@local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) [ 670.736481][T11950] usb 1-1: config 0 has an invalid interface number: 135 but max is 0 [ 670.744893][T11950] usb 1-1: config 0 has no interface number 0 [ 670.751106][T11950] usb 1-1: config 0 interface 135 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 670.761846][T11950] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 670.773288][T11950] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has invalid maxpacket 1646, setting to 1024 [ 670.784638][T11950] usb 1-1: config 0 interface 135 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 670.797787][T11950] usb 1-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=65.14 [ 670.797892][T12046] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 670.806898][T11950] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.814721][T11950] usb 1-1: config 0 descriptor?? [ 670.871830][T11950] iowarrior 1-1:0.135: IOWarrior product=0x1501, serial= interface=135 now attached to iowarrior0 [ 670.962441][T11876] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 671.052152][T12046] usb 6-1: Using ep0 maxpacket: 8 [ 671.063677][T22083] encrypted_key: insufficient parameters specified [ 671.074103][T11950] usb 1-1: USB disconnect, device number 95 [ 671.084113][T11950] iowarrior 1-1:0.135: I/O-Warror #0 now disconnected [ 671.172234][T12046] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 671.183506][T12046] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 671.196472][T12046] usb 6-1: New USB device found, idVendor=0738, idProduct=1705, bcdDevice= 0.00 [ 671.205668][T12046] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.216712][T12046] usb 6-1: config 0 descriptor?? [ 671.242204][T11876] usb 2-1: Using ep0 maxpacket: 16 [ 671.412099][T11876] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 671.421193][T11876] usb 2-1: can't read configurations, error -22 16:05:24 executing program 0: syz_usb_connect(0x0, 0xbc, &(0x7f0000002c40)=ANY=[@ANYBLOB="120100001c00f540c007011514650000000109022200010000000009048700010301120000c07e000000000000efaa81bb6e86a9"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000100)=' ', 0x1}], 0x1) memfd_create(&(0x7f0000000000)='bdev-\'\x00', 0x2) 16:05:24 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000fa8fe4)={0xa, 0x3}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r6, r5) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r7, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r4, @ANYBLOB='\x00\x00wV'], 0x38}, 0x0) ioctl$TCXONC(r7, 0x540a, 0x11e6) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x3, 0x2, @loopback}, 0x1c) 16:05:24 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022400010000000009040000ff0300000009210000000122220009058103f101000000845e5659511ccf4cb8023dddc1b091d2f85d0743e315871f8b1dfab0441a2dc4b6289e6c34105c4906acdca3c7ffd111bb6198d0f4b9777d1ca5400cfede72ea5e3cec2092789589bd09a388c5b61686432ee3d1961088b86d893b0ed3d270ab2b2db387d4a25d7deaa91a5bed88f7dfd661a9"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000440)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "a313"}, @local=@item_4={0x3, 0x2, 0x0, "ec92853e"}, @global=@item_4={0x3, 0x1, 0x0, "7fe52845"}, @local=@item_4={0x3, 0x2, 0x0, "8c0a56e4"}, @main=@item_4={0x3, 0x0, 0x0, "80e3bfad"}, @main=@item_4={0x3, 0x0, 0x0, "77ddb60f"}, @local, @local=@item_4={0x3, 0x2, 0x0, '\x00\r\x00'}]}}, 0x0}, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000040)="b3") pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x38}, 0x0) write$uinput_user_dev(r1, &(0x7f0000000480)={'syz1\x00', {0x4, 0x4, 0x4, 0xfff7}, 0x27, [0xe42b, 0x8, 0x9, 0x6, 0x9, 0x5, 0x3, 0x40, 0x1, 0x4000000, 0x2, 0x80000000, 0x51ff, 0xff, 0x3, 0xda21, 0x6, 0x1, 0x0, 0x1, 0x4, 0xdb0, 0xab6, 0x5, 0x1, 0x0, 0x1, 0x0, 0x8, 0xff, 0xff, 0x0, 0x5, 0x9, 0x8, 0x3, 0x100, 0x40, 0x8000, 0xa5, 0xe49, 0x3, 0x1, 0x6e5c, 0xffffffff, 0x9, 0x5, 0x2, 0x5, 0xffff4108, 0x6, 0x0, 0x1, 0x0, 0x1cd, 0x3ff, 0x5, 0x0, 0xffffffff, 0x3, 0x401, 0x0, 0x4, 0x4], [0x8, 0x4, 0xac, 0x8, 0x1, 0x80, 0x6c73, 0x55d, 0x2, 0x4, 0x3, 0x0, 0x5, 0x2, 0x1, 0x40, 0x4, 0x1, 0x5, 0x690, 0x9, 0x7, 0x9, 0x5, 0x2, 0x800, 0x5, 0x1, 0x80000001, 0x8, 0x7fffffff, 0x1, 0x3, 0x1, 0x80000000, 0x1, 0x0, 0x200, 0x101, 0x2, 0xbfe2, 0x8, 0xc9, 0x4, 0xdf3c, 0x3, 0x3, 0x2, 0x8000, 0xfffffffa, 0x80000000, 0x844c, 0x86, 0x0, 0x170, 0xef37, 0x3ff, 0xd0c, 0x100, 0xf54, 0x20, 0x3ff, 0x3, 0x2], [0x1, 0x8, 0x1, 0x1f, 0x10000, 0xfffff088, 0x80000000, 0x1000, 0x1, 0x800, 0x2c7, 0x9, 0x27, 0xffff, 0x1ff, 0x7, 0x8, 0x73, 0x9, 0x2ec, 0x5d, 0x5, 0x6, 0xc00000, 0x1, 0x5, 0x7d51, 0x1, 0x5, 0xd9, 0x7d, 0xff, 0x0, 0x9, 0x0, 0x9, 0x1, 0xfffffeff, 0x800100, 0x101, 0x7fffffff, 0x8, 0x6, 0x3, 0x9, 0x7, 0x5, 0x6, 0x8000, 0xff, 0x5, 0x8001, 0x8, 0xf893, 0x80000001, 0xe059, 0x1, 0x6, 0x7, 0x200, 0xcfc, 0x1a76, 0xff, 0x1], [0x7fff, 0x6, 0x0, 0x9, 0xfffffff7, 0x25d7e3d2, 0x3f4, 0x10001, 0x0, 0x5, 0xe356, 0xfffffffe, 0x10000, 0x7, 0x6, 0x800, 0x7f, 0x443, 0x6, 0x2, 0x2, 0x85, 0x2, 0xef, 0x9, 0x40, 0x1ff, 0x14ed, 0x1, 0x1b44, 0x3, 0x2, 0x8, 0x3ff, 0x101, 0x7ff, 0x1, 0x1f, 0x800, 0x76bc, 0x7ff, 0x2, 0x1, 0x7ff, 0xfff, 0x0, 0x7, 0x1, 0x3931c270, 0x10000, 0x8001, 0x8, 0x1, 0xe2, 0x401, 0x7, 0x8000, 0x7f, 0x400, 0x1e4d, 0x6e, 0x3, 0x3]}, 0x45c) 16:05:24 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100008b33ea08eb0302002d4a0000000109021b0001000000000904ba00017277550007058100000000000048007e97488ff10962537a3cb94ea887474a1bb3e5d35dbb36c8a2da33b524e5920056d517026459f36ccfac38a80cb7c861dab12e311b36b40abb3df51e700c6d8067500aeacdef398aa06b14014a474b795352d88478f1f0"], 0x0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r4}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x38}, 0x0) ioctl$PPPIOCSMRRU(r3, 0x4004743b, &(0x7f0000000040)=0x4) r5 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xea, 0x0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup2(r8, r7) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r9, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r10}}}, @rights={{0x14, 0x1, 0x1, [r6]}}], 0x38}, 0x0) getsockopt$inet_buf(r9, 0x0, 0x26, &(0x7f00000000c0)=""/64, &(0x7f0000000140)=0x40) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x0, "f019fc8240ebae4a481118b83e441e0fd752efd57fe546aedba5d82cc184a3fe"}) 16:05:24 executing program 5: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000380)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, &(0x7f0000000440)=[{&(0x7f00000003c0)="f7", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x186, &(0x7f00000009c0)=[@ip_pktinfo={{0x1c, 0x84, 0x6, {0x0, @empty, @local}}}], 0x20}}], 0x2, 0x440000c4) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x4, 0x800) ioctl$CAPI_GET_FLAGS(r1, 0x80044323, &(0x7f0000000040)) [ 671.574174][T12046] usbhid 6-1:0.0: can't add hid device: -71 [ 671.580373][T12046] usbhid: probe of 6-1:0.0 failed with error -71 [ 671.582200][T11876] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 671.630047][T12046] usb 6-1: USB disconnect, device number 57 16:05:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$VIDIOC_S_FBUF(r4, 0x4030560b, &(0x7f0000000080)={0x10, 0x1, &(0x7f0000000040)="657645cc55cdc6873fc96ac863e4cb4da39d50b290429a65dab510f4afcc513b8f6c3386c91f81c645", {0x8, 0x8b73, 0x20a0a138, 0x3, 0x80000001, 0x101, 0x12, 0x4}}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000480)={0x1, 0x0, @pic={0x0, 0x9, 0x0, 0x0, 0xfc}}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 671.814880][T22103] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 671.852862][T11876] usb 2-1: Using ep0 maxpacket: 16 16:05:24 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b1c, 0x1b34, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) r0 = syz_usb_connect(0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="1201000004b2000001090212f14650dfd10ed3ab4c0593fee3fb10000000"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect(0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x0) getresuid(&(0x7f0000000100), &(0x7f0000000200)=0x0, &(0x7f0000000240)) r4 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x27) r5 = socket(0xa, 0x3, 0x6) connect$bt_rfcomm(r5, &(0x7f0000000000)={0x1f, {0xfe, 0x0, 0x1000, 0x80000001, 0x6, 0x5}, 0x8}, 0xa) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x6}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f0000000480)=0xe8) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000000900)=ANY=[@ANYBLOB="ab000000a6d23fa0c9cb488b619002d1d896e5ffb3b62ccfa516aec8038d482cd2aa0b6ac0d684fba227e9983be9f367da66938eddee11b161213cdf2bd00a8ae552bc17ec5e976fa67846060aa7629aed35eb9bb9e096cc3825df10acb8c0dff4569bb0f686a3856eb778df7afa4a3112676e9547e0d65bee83afa0b4f46a0b10af299da7efdcc6c573074de84403de7902a06096d7483194ad47775d355b9800000008008b0500"/193], &(0x7f0000000540)=0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8) setuid(r9) r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r10, 0x84, 0x6d, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000540)=0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8) setuid(r11) r12 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r12, 0x84, 0x6d, &(0x7f0000000b40)=ANY=[@ANYBLOB="ab000000a6d23fa0c9cb488b6190f2d1d89677354590dde5ffb3b62ccfa516aec8038d48d684fba227e9983be9f367da66938eddee11b1613f0d5ff3b2213cdf2bd00a8ae552bc17ec5e976fa67846060aa7629aed35eb9bb9e096cc3825df10acb8c0dff4569bb0f6a15cab46fa86a3856eb778df7afa4a3112676e9547e0d65bee83afa0b4f46a0b10af299da7efdcc6c573074de84403de7902a07096d7483194ad47775d355bd65460a5a52aa9cc384c962b12062cf85884362f08008b07"], &(0x7f0000000540)=0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8) setuid(r13) r14 = request_key(0x0, &(0x7f0000001300)={'syz', 0x2}, &(0x7f0000001340)='em0cpusetmime_type\x00', 0xfffffffffffffff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) keyctl$chown(0x4, r14, 0x0, r15) r16 = request_key(0x0, &(0x7f0000001300)={'syz', 0x2}, &(0x7f0000001340)='em0cpusetmime_type\x00', 0xfffffffffffffff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) keyctl$chown(0x4, r16, 0x0, r17) r18 = request_key(0x0, &(0x7f0000001300)={'syz', 0x2}, &(0x7f0000001340)='em0cpusetmime_type\x00', 0xfffffffffffffff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) keyctl$chown(0x4, r18, 0x0, r19) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r4, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000a00)=ANY=[@ANYBLOB="02000000010002000000000002000400", @ANYRES32=r6, @ANYBLOB="02000200", @ANYRES32=r8, @ANYBLOB="02000100bb86b4c5600d592e64b86edda53135e0f392e4c9ca69b61556778ccf29c4990d1893fd049001c62278a88220d8bb3ef088a2bbfd6fdd3bbbaa8e7ff1e7d747037c523caba1237cfd937b81d9ae40c8e42df69a9ad815e799bd07b8468681a262136f0b4027e75c77b74f2bc0ad4402225b8f934741a657b08fa3e58bffe4394310ebab08c71788455eb3b79d61d24d289378388103fdaa96ee42a18df1027aa5865c0b", @ANYRES32=r9, @ANYBLOB="02000400", @ANYRES32=r3, @ANYBLOB, @ANYRES32=r11, @ANYBLOB="02000200", @ANYRES32=r13, @ANYBLOB="02000500", @ANYRES32=r3, @ANYBLOB="040002000000000008000100", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=r15, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r17, @ANYBLOB="08000400", @ANYRES32=r19, @ANYBLOB="08000300", @ANYRES32=r20, @ANYRES32, @ANYBLOB="0800d8b8", @ANYRES32, @ANYBLOB="10000200000000002000d6f800000000"], 0x1c, 0x2) getresuid(&(0x7f0000000100), &(0x7f0000000200)=0x0, &(0x7f0000000240)) r22 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x27) r23 = socket(0xa, 0x3, 0x6) connect$bt_rfcomm(r23, &(0x7f0000000000)={0x1f, {0xfe, 0x0, 0x1000, 0x80000001, 0x6, 0x5}, 0x8}, 0xa) bind$inet6(r23, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x6}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r23, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f0000000480)=0xe8) r25 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r25, 0x84, 0x6d, &(0x7f0000000900)=ANY=[@ANYBLOB="ab000000a6d23fa0c9cb488b619002d1d896e5ffb3b62ccfa516aec8038d482cd2aa0b6ac0d684fba227e9983be9f367da66938eddee11b161213cdf2bd00a8ae552bc17ec5e976fa67846060aa7629aed35eb9bb9e096cc3825df10acb8c0dff4569bb0f686a3856eb778df7afa4a3112676e9547e0d65bee83afa0b4f46a0b10af299da7efdcc6c573074de84403de7902a06096d7483194ad47775d355b9800000008008b0500"/193], &(0x7f0000000540)=0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r25, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8) setuid(r27) r28 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r28, 0x84, 0x6d, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000540)=0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r28, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8) setuid(r29) r30 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r30, 0x84, 0x6d, &(0x7f0000000b40)=ANY=[@ANYBLOB="ab000000a6d23fa0c9cb488b6190f2d1d89677354590dde5ffb3b62ccfa516aec8038d48d684fba227e9983be9f367da66938eddee11b1613f0d5ff3b2213cdf2bd00a8ae552bc17ec5e976fa67846060aa7629aed35eb9bb9e096cc3825df10acb8c0dff4569bb0f6a15cab46fa86a3856eb778df7afa4a3112676e9547e0d65bee83afa0b4f46a0b10af299da7efdcc6c573074de84403de7902a07096d7483194ad47775d355bd65460a5a52aa9cc384c962b12062cf85884362f08008b07"], &(0x7f0000000540)=0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r30, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8) setuid(r31) r32 = request_key(0x0, &(0x7f0000001300)={'syz', 0x2}, &(0x7f0000001340)='em0cpusetmime_type\x00', 0xfffffffffffffff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) keyctl$chown(0x4, r32, 0x0, r33) r34 = request_key(0x0, &(0x7f0000001300)={'syz', 0x2}, &(0x7f0000001340)='em0cpusetmime_type\x00', 0xfffffffffffffff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) keyctl$chown(0x4, r34, 0x0, r35) r36 = request_key(0x0, &(0x7f0000001300)={'syz', 0x2}, &(0x7f0000001340)='em0cpusetmime_type\x00', 0xfffffffffffffff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) keyctl$chown(0x4, r36, 0x0, r37) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r22, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000a00)=ANY=[@ANYBLOB="02000000010002000000000002000400", @ANYRES32=r24, @ANYBLOB="02000200", @ANYRES32=r26, @ANYBLOB="02000100bb86b4c5600d592e64b86edda53135e0f392e4c9ca69b61556778ccf29c4990d1893fd049001c62278a88220d8bb3ef088a2bbfd6fdd3bbbaa8e7ff1e7d747037c523caba1237cfd937b81d9ae40c8e42df69a9ad815e799bd07b8468681a262136f0b4027e75c77b74f2bc0ad4402225b8f934741a657b08fa3e58bffe4394310ebab08c71788455eb3b79d61d24d289378388103fdaa96ee42a18df1027aa5865c0b", @ANYRES32=r27, @ANYBLOB="02000400", @ANYRES32=r21, @ANYBLOB, @ANYRES32=r29, @ANYBLOB="02000200", @ANYRES32=r31, @ANYBLOB="02000500", @ANYRES32=r21, @ANYBLOB="040002000000000008000100", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=r33, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r35, @ANYBLOB="08000400", @ANYRES32=r37, @ANYBLOB="08000300", @ANYRES32=r38, @ANYRES32, @ANYBLOB="0800d8b8", @ANYRES32, @ANYBLOB="10000200000000002000d6f800000000"], 0x1c, 0x2) getresuid(&(0x7f0000000100), &(0x7f0000000200)=0x0, &(0x7f0000000240)) r40 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x27) r41 = socket(0xa, 0x3, 0x6) connect$bt_rfcomm(r41, &(0x7f0000000000)={0x1f, {0xfe, 0x0, 0x1000, 0x80000001, 0x6, 0x5}, 0x8}, 0xa) bind$inet6(r41, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x6}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r41, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f0000000480)=0xe8) r43 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r43, 0x84, 0x6d, &(0x7f0000000900)=ANY=[@ANYBLOB="ab000000a6d23fa0c9cb488b619002d1d896e5ffb3b62ccfa516aec8038d482cd2aa0b6ac0d684fba227e9983be9f367da66938eddee11b161213cdf2bd00a8ae552bc17ec5e976fa67846060aa7629aed35eb9bb9e096cc3825df10acb8c0dff4569bb0f686a3856eb778df7afa4a3112676e9547e0d65bee83afa0b4f46a0b10af299da7efdcc6c573074de84403de7902a06096d7483194ad47775d355b9800000008008b0500"/193], &(0x7f0000000540)=0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r43, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8) setuid(r45) r46 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r46, 0x84, 0x6d, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000540)=0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r46, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8) setuid(r47) r48 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r48, 0x84, 0x6d, &(0x7f0000000b40)=ANY=[@ANYBLOB="ab000000a6d23fa0c9cb488b6190f2d1d89677354590dde5ffb3b62ccfa516aec8038d48d684fba227e9983be9f367da66938eddee11b1613f0d5ff3b2213cdf2bd00a8ae552bc17ec5e976fa67846060aa7629aed35eb9bb9e096cc3825df10acb8c0dff4569bb0f6a15cab46fa86a3856eb778df7afa4a3112676e9547e0d65bee83afa0b4f46a0b10af299da7efdcc6c573074de84403de7902a07096d7483194ad47775d355bd65460a5a52aa9cc384c962b12062cf85884362f08008b07"], &(0x7f0000000540)=0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r48, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8) setuid(r49) r50 = request_key(0x0, &(0x7f0000001300)={'syz', 0x2}, &(0x7f0000001340)='em0cpusetmime_type\x00', 0xfffffffffffffff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) keyctl$chown(0x4, r50, 0x0, r51) r52 = request_key(0x0, &(0x7f0000001300)={'syz', 0x2}, &(0x7f0000001340)='em0cpusetmime_type\x00', 0xfffffffffffffff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) keyctl$chown(0x4, r52, 0x0, r53) r54 = request_key(0x0, &(0x7f0000001300)={'syz', 0x2}, &(0x7f0000001340)='em0cpusetmime_type\x00', 0xfffffffffffffff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) keyctl$chown(0x4, r54, 0x0, r55) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r40, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000a00)=ANY=[@ANYBLOB="02000000010002000000000002000400", @ANYRES32=r42, @ANYBLOB="02000200", @ANYRES32=r44, @ANYBLOB="02000100bb86b4c5600d592e64b86edda53135e0f392e4c9ca69b61556778ccf29c4990d1893fd049001c62278a88220d8bb3ef088a2bbfd6fdd3bbbaa8e7ff1e7d747037c523caba1237cfd937b81d9ae40c8e42df69a9ad815e799bd07b8468681a262136f0b4027e75c77b74f2bc0ad4402225b8f934741a657b08fa3e58bffe4394310ebab08c71788455eb3b79d61d24d289378388103fdaa96ee42a18df1027aa5865c0b", @ANYRES32=r45, @ANYBLOB="02000400", @ANYRES32=r39, @ANYBLOB, @ANYRES32=r47, @ANYBLOB="02000200", @ANYRES32=r49, @ANYBLOB="02000500", @ANYRES32=r39, @ANYBLOB="040002000000000008000100", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=r51, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r53, @ANYBLOB="08000400", @ANYRES32=r55, @ANYBLOB="08000300", @ANYRES32=r56, @ANYRES32, @ANYBLOB="0800d8b8", @ANYRES32, @ANYBLOB="10000200000000002000d6f800000000"], 0x1c, 0x2) setresuid(r6, r29, r44) syz_usb_disconnect(r2) [ 671.872981][T11874] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 671.880975][T11950] usb 5-1: new high-speed USB device number 65 using dummy_hcd 16:05:25 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6(0xa, 0x4, 0x6) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) mmap(&(0x7f0000948000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 671.982550][ T4071] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 672.015485][T11876] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 672.023603][T11876] usb 2-1: can't read configurations, error -22 [ 672.032379][T11876] usb usb2-port1: attempt power cycle [ 672.112172][T11874] usb 3-1: Using ep0 maxpacket: 8 [ 672.212407][ T5] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 672.232444][T11874] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 672.240854][T11874] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 672.251307][T11874] usb 3-1: config 0 has no interface number 0 [ 672.257873][T11874] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=4a.2d [ 672.267067][T11874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.276561][T11950] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 672.287907][T11950] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 672.298966][T11950] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 672.312091][T11950] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 672.321212][T11950] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.331524][T11874] usb 3-1: config 0 descriptor?? [ 672.338535][T11950] usb 5-1: config 0 descriptor?? [ 672.372511][ T4071] usb 1-1: config 0 has an invalid interface number: 135 but max is 0 [ 672.379119][T11874] Registered IR keymap rc-hauppauge [ 672.380789][ T4071] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 672.387734][T11874] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.186/rc/rc0 [ 672.396564][ T4071] usb 1-1: config 0 has no interface number 0 [ 672.396659][ T4071] usb 1-1: config 0 interface 135 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 672.396737][ T4071] usb 1-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=65.14 [ 672.408465][T11874] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.186/rc/rc0/input27 [ 672.413173][ T4071] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.472861][ T4071] usb 1-1: config 0 descriptor?? [ 672.527960][ T4071] iowarrior 1-1:0.135: no interrupt-in endpoint found [ 672.536858][ T4071] usbhid 1-1:0.135: couldn't find an input interrupt endpoint [ 672.595821][T12046] usb 3-1: USB disconnect, device number 39 [ 672.603203][ T5] usb 4-1: device descriptor read/64, error -32 [ 672.729393][ T4071] usb 1-1: USB disconnect, device number 96 [ 672.822496][T11876] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 672.844565][T11950] keytouch 0003:0926:3333.0014: fixing up Keytouch IEC report descriptor [ 672.869109][T11950] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0014/input/input28 [ 672.961295][T11950] keytouch 0003:0926:3333.0014: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 673.003939][ T5] usb 4-1: device descriptor read/64, error 18 [ 673.105287][T11876] usb 2-1: device descriptor read/64, error 18 [ 673.249833][T12046] usb 5-1: USB disconnect, device number 65 [ 673.272223][ T5] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 673.384396][T11950] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 673.502156][ T4071] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 673.504112][T11876] usb 2-1: device descriptor read/64, error 18 [ 673.552248][ T5] usb 4-1: device descriptor read/64, error 18 [ 673.632170][T11950] usb 3-1: Using ep0 maxpacket: 8 16:05:26 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x30d4, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x16}, 0x10) prctl$PR_GET_FP_MODE(0x2e) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002206000000021e633496b63629"], 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 16:05:26 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r6}}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x38}, 0x0) sendto$inet(r2, &(0x7f0000000100)="692f8e6384088512cfaa2cc686cf", 0xe, 0x80, &(0x7f00000001c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) close(r0) [ 673.792913][T11950] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 673.801218][T11950] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 673.811454][T11950] usb 3-1: config 0 has no interface number 0 [ 673.817733][T11950] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=4a.2d [ 673.826920][T11950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.850769][T11950] usb 3-1: config 0 descriptor?? [ 673.862715][ T4071] usb 1-1: config 0 has an invalid interface number: 135 but max is 0 [ 673.871119][ T4071] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 673.881387][ T4071] usb 1-1: config 0 has no interface number 0 [ 673.887645][ T4071] usb 1-1: config 0 interface 135 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 673.900855][ T4071] usb 1-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=65.14 [ 673.909286][T11950] Registered IR keymap rc-hauppauge [ 673.909987][ T4071] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.917212][T11950] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.186/rc/rc0 [ 673.936145][T11950] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.186/rc/rc0/input29 16:05:27 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x6f, 0xa, 0xe5, 0x40, 0x8fd, 0x2, 0x4443, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x47, 0x0, 0x0, 0xb5, 0x5a, 0xb7}}]}}]}}, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x199a00, 0x0) ioctl$KDSETMODE(r0, 0x4b3a, 0x800) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r5, r4) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r7}}}, @rights={{0x14, 0x1, 0x1, [r3]}}], 0x38}, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r6, 0xc0205649, &(0x7f0000000280)={0x9a0000, 0x40, 0x75, [], &(0x7f0000000240)={0x990a5f, 0x9, [], @string=&(0x7f0000000200)=0x3}}) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000080)=@get={0x1, &(0x7f0000000100)=""/245, 0x480b}) [ 673.969363][ T4071] usb 1-1: config 0 descriptor?? [ 674.013362][ T5] usb 4-1: device descriptor read/64, error 18 [ 674.019470][ T4071] iowarrior 1-1:0.135: no interrupt-in endpoint found [ 674.028292][ T4071] usbhid 1-1:0.135: couldn't find an input interrupt endpoint [ 674.072465][T12046] usb 5-1: new high-speed USB device number 66 using dummy_hcd 16:05:27 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x3, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6(0xa, 0x1000000000002, 0x0) timer_create(0x5, &(0x7f0000000240)={0x0, 0x1, 0x5, @thr={&(0x7f0000000140)="fc5370f549d33ca7342822", &(0x7f0000000180)="5f4a4a416217b38604466dc480812ec6948aae8977819ba88a005e59aaaecf230206b85e4b537ac40c718641082f227508dea0b0b7b2b237ad184d06458ffc72b958cd3cf6b67f01c47129c450aadb8e0eda84c3b1466f5a8c531acd901e80fa411d51adfb178c2920d947beb08ec52e266f4869c3cb0f2e22fccc09eb35042a344b82d86221b8311168fa73d482e3630654dcc626178d6e3a65c7d80cb10b8c749193d5f069a6"}}, &(0x7f0000000280)=0x0) timer_settime(r7, 0x3, &(0x7f00000002c0)={{}, {0x77359400}}, &(0x7f0000000300)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup2(r8, r6) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r9, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000000000000113020002000000", @ANYRES32=r10, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00'], 0x38}, 0x0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup2(r13, r12) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r14, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r15}}}, @rights={{0x14, 0x1, 0x1, [r11]}}], 0x38}, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r14, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x8000}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000000c0)={r16, 0x3f}, 0x8) close(r0) close(r1) [ 674.122628][T11876] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 674.146626][ T5] usb usb4-port1: attempt power cycle [ 674.159073][T11950] usb 3-1: USB disconnect, device number 40 [ 674.217455][ T4071] usb 1-1: USB disconnect, device number 97 [ 674.352290][T11874] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 674.382189][T11876] usb 2-1: Using ep0 maxpacket: 8 [ 674.432629][T12046] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 674.443805][T12046] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 674.454847][T12046] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 674.467893][T12046] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 674.477095][T12046] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.486848][T12046] usb 5-1: config 0 descriptor?? [ 674.502358][T11876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 674.513538][T11876] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 674.526891][T11876] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.40 [ 674.536022][T11876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.552994][T11876] usb 2-1: config 0 descriptor?? 16:05:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x4, 0x6, 0x401}) syz_usb_connect(0x0, 0xbc, &(0x7f0000002c40)={{0x12, 0x1, 0x0, 0x1c, 0x0, 0xf5, 0x40, 0x7c0, 0x1501, 0x6514, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x87, 0x0, 0x1, 0x3, 0x1, 0x12, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "81bb6e86a9"}]}}]}}]}}]}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000140), &(0x7f0000000180)=0x40) r1 = open(&(0x7f0000000080)='./file0\x00', 0x800, 0x84) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000100)=' ', 0x1}], 0x1) 16:05:27 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x241002, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r1 = socket$kcm(0xa, 0x2, 0x73) r2 = shmget(0x0, 0x3000, 0x318, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_RMID(r2, 0x0) shmat(r2, &(0x7f0000ffd000/0x3000)=nil, 0xf000) sendmmsg(r1, &(0x7f0000000080)=[{{&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2}, 0x80, 0x0}}], 0x8, 0x0) [ 674.712894][T11874] usb 6-1: config 0 has an invalid interface number: 71 but max is 0 [ 674.712960][T11874] usb 6-1: config 0 has no interface number 0 [ 674.727436][T11874] usb 6-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=44.43 [ 674.736638][T11874] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.750300][T11874] usb 6-1: config 0 descriptor?? 16:05:27 executing program 2: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x7c, 0xe3, 0xad, 0x20, 0x2001, 0x3309, 0x8a5e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb3, 0x0, 0x2, 0xc, 0xc1, 0x47, 0x0, [], [{{0x9, 0x5, 0x8d}}, {{0x9, 0x5, 0xf}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001880)={0xac, &(0x7f0000001280)={0x0, 0x0, 0x3, "7f81b9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, &(0x7f0000000040)={0x40, 0x22, 0x1c, {0x56, 0x2e, "b76a09b132de1e65cd21ec742ab3a41406259debeeeb10bc23b002ad45739d832e9136e53de9c84aa9a647e014cfb909b3111828523637aa7e816bc79bdf73dd69b10199d5fa97adcc8d78cdce42a497d6b8b73b"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x400a}}, &(0x7f0000000580)={0x0, 0x22, 0x5, {[@global=@item_012={0x2, 0x1, 0x9, "d4c8"}, @local=@item_012={0x0, 0x2, 0x2, 'z\x00'}, @main=@item_012={0x0, 0x0, 0xd}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7f, 0x0, 0x1, {0x22, 0x27}}}}, &(0x7f0000000440)={0x2c, &(0x7f00000001c0)={0x40, 0x21, 0xfd, "ac751ce1f381e47a1483d5ee658a3b72a2fa628b140a213512069883449914b167b610e152eceb1ae74d9473b929e1bc43015dfef0fbe0d9ffa0b711685ce0367c8102619fb16c46369fc090b0eb4a48df535f2d15f0a9406c25bf32847b9b19f924241d470d46d26c35a0a5a8beb00f36f42d0d9dc15b6490f3bff41840b9b486f96d83d6d5202d10b81865bf8e9bad2e4cc39adf0703d6cdb00758d648ce5a07f32bbd2d11270c2ac94ee12cdbb6b9860c14765c5775f9026756e44311b4e3b13abede76a29fe1a640bfc61689f55d9b618de274b49123faf444f483f5cfd9d9d21c1f0ab0bc7350aca3acc6163275753efe38318dfff38c610d667d"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xa9}, &(0x7f0000000340)={0x0, 0x8, 0x1}, &(0x7f0000001780)=ANY=[@ANYBLOB="201e05ce060141000000f51702a76125c4812ad9fe6bad5f5085c790754132f44aaa2c98563f0ca2dd9f957924d40f31a204c91b3f7f7fbaced642b96726754e96a0911dea569343b422d8ba82ebca6e02d9ef86859c6345c7"], &(0x7f0000000400)={0x20, 0x3, 0x1, 0x1f}}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000140)={0x14, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000380)={0x44, &(0x7f0000000600)={0x20, 0xa, 0x1000, "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"}, &(0x7f00000001c0)={0x0, 0xa, 0x1}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x2, 0x9, 0x400, 0x7, 0x2, 0x0, 0x5, 0x8001, 0x201, 0x1, 0x8003, 0x3}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x1f}, &(0x7f00000002c0)={0x20, 0x83, 0x2}, &(0x7f0000000540)={0x20, 0x87, 0x2, 0xffff}, &(0x7f0000000340)={0x20, 0x89, 0x2, 0x1}}) 16:05:27 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000700)=0x3, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r5, r4) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r7}}}, @rights={{0x14, 0x1, 0x1, [r3]}}], 0x38}, 0x0) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000100)) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000000)={'veth1_to_hsr\x00', {0x2, 0x4e21, @broadcast}}) [ 674.862224][ T5] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 674.871160][T12046] usbhid 5-1:0.0: can't add hid device: -71 [ 674.877495][T12046] usbhid: probe of 5-1:0.0 failed with error -71 16:05:28 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x29, {0x29, 0x0, "0c53a260297be7000000000000a409c93cedee42366ad97c0865b6b300007cbb8151a96db4141a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) [ 674.907148][T12046] usb 5-1: USB disconnect, device number 66 [ 674.992079][ T4071] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 675.013452][T11950] usb 6-1: USB disconnect, device number 58 [ 675.035308][T11876] arvo 0003:1E7D:30D4.0015: unknown main item tag 0x0 [ 675.043090][T11876] arvo 0003:1E7D:30D4.0015: item fetching failed at offset -1084808306 [ 675.051846][T11876] arvo 0003:1E7D:30D4.0015: parse failed [ 675.057740][T11876] arvo: probe of 0003:1E7D:30D4.0015 failed with error -22 [ 675.132206][ T5] usb 4-1: device descriptor read/64, error 18 [ 675.212251][T11874] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 675.236820][T11950] usb 2-1: USB disconnect, device number 45 [ 675.392295][T12046] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 675.400242][ T4071] usb 1-1: config 0 has an invalid interface number: 135 but max is 0 [ 675.408618][ T4071] usb 1-1: config 0 has no interface number 0 [ 675.414910][ T4071] usb 1-1: config 0 interface 135 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 675.425640][ T4071] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 16:05:28 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x0, 0x2) r3 = syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x2, 0x880040) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r3, 0x800455d1, &(0x7f0000000200)) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f00000000c0)={0x140000000, 0x98603dca1abadfc1, "d33f61c54044547174d99c06bad0ea043885df380080632dd77ce202103037b6", 0x7f, 0x5, 0x0, 0x7, 0x0, 0xfffffc00, 0x7fff, 0x9, [0xffffffff, 0x3, 0xfffffe01, 0x40]}) dup2(r1, r0) readahead(r0, 0x80000001, 0x7) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x14, 0x68, 0x105}, 0x2b0}}, 0x0) [ 675.437137][ T4071] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has invalid maxpacket 1646, setting to 1024 [ 675.448494][ T4071] usb 1-1: config 0 interface 135 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 675.448564][ T4071] usb 1-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=65.14 [ 675.462270][T11874] usb 3-1: Using ep0 maxpacket: 32 [ 675.471016][ T4071] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.486303][ T4071] usb 1-1: config 0 descriptor?? [ 675.546653][ T4071] iowarrior 1-1:0.135: IOWarrior product=0x1501, serial= interface=135 now attached to iowarrior0 [ 675.555090][ T5] usb 4-1: device descriptor read/64, error 18 16:05:28 executing program 3: syz_usb_connect(0x0, 0x3b, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0) r0 = syz_usb_connect(0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x0) syz_usb_disconnect(r0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x38}, 0x0) ptrace$setsig(0x4203, r5, 0x0, &(0x7f0000000000)={0x3f, 0xffffffff, 0x2}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r6 = syz_usb_connect(0x0, 0x0, &(0x7f0000000b00)=ANY=[], 0x0) syz_usb_disconnect(r6) [ 675.592470][T11874] usb 3-1: config 0 has an invalid interface number: 179 but max is 0 [ 675.600907][T11874] usb 3-1: config 0 has no interface number 0 [ 675.607313][T11874] usb 3-1: New USB device found, idVendor=2001, idProduct=3309, bcdDevice=8a.5e [ 675.616588][T11874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.639401][T11874] usb 3-1: config 0 descriptor?? [ 675.712145][T12046] usb 5-1: Using ep0 maxpacket: 8 [ 675.738381][ T4071] usb 1-1: USB disconnect, device number 98 [ 675.754389][ T4071] iowarrior 1-1:0.135: I/O-Warror #0 now disconnected [ 675.812793][T11840] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 675.852436][T12046] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 675.863620][T12046] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 675.876593][T12046] usb 5-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00 [ 675.886889][T12046] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.897130][T12046] usb 5-1: config 0 descriptor?? [ 675.902320][T11874] rtl8192cu: Chip version 0x0 [ 676.013048][T11950] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 676.052478][ T5] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 676.222301][T11840] usb 6-1: config 0 has an invalid interface number: 71 but max is 0 [ 676.230617][T11840] usb 6-1: config 0 has no interface number 0 [ 676.237077][T11840] usb 6-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=44.43 [ 676.246200][T11840] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.252193][T11950] usb 2-1: Using ep0 maxpacket: 8 [ 676.258263][T11840] usb 6-1: config 0 descriptor?? [ 676.292433][ T5] usb 4-1: Using ep0 maxpacket: 16 [ 676.333246][T11874] rtl_usb: rx_max_size 15360, rx_urb_num 8, in_ep 1 [ 676.341334][T11874] rtl8192cu: Loading firmware rtlwifi/rtl8192cufw_TMSC.bin [ 676.377540][T11876] usb 3-1: Direct firmware load for rtlwifi/rtl8192cufw_TMSC.bin failed with error -2 [ 676.387875][T11876] usb 3-1: Direct firmware load for rtlwifi/rtl8192cufw.bin failed with error -2 [ 676.397223][T12046] hid (null): unknown global tag 0xe [ 676.402729][T11876] rtlwifi: Loading alternative firmware rtlwifi/rtl8192cufw.bin [ 676.410389][T11876] rtlwifi: Selected firmware is not available [ 676.417512][T11950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 676.428751][T11950] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 676.441820][T11950] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.40 [ 676.451006][T11950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.460300][ T5] usb 4-1: config 0 has an invalid interface number: 101 but max is 0 [ 676.468805][ T5] usb 4-1: config 0 has an invalid descriptor of length 184, skipping remainder of the config [ 676.479298][ T5] usb 4-1: config 0 has no interface number 0 [ 676.485609][ T5] usb 4-1: config 0 interface 101 altsetting 0 endpoint 0x8C has an invalid bInterval 255, changing to 11 [ 676.497177][ T5] usb 4-1: config 0 interface 101 altsetting 0 endpoint 0x8C has invalid maxpacket 1792, setting to 1024 [ 676.509924][T11950] usb 2-1: config 0 descriptor?? [ 676.520683][T11876] usb 6-1: USB disconnect, device number 59 [ 676.541164][T11874] usb 3-1: USB disconnect, device number 41 [ 676.573400][ T4071] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 676.582834][ T5] usb 4-1: config 0 has an invalid interface number: 101 but max is 0 [ 676.591166][ T5] usb 4-1: config 0 has an invalid descriptor of length 184, skipping remainder of the config [ 676.601899][ T5] usb 4-1: config 0 has no interface number 0 [ 676.608189][ T5] usb 4-1: config 0 interface 101 altsetting 0 endpoint 0x8C has an invalid bInterval 255, changing to 11 [ 676.619701][ T5] usb 4-1: config 0 interface 101 altsetting 0 endpoint 0x8C has invalid maxpacket 1792, setting to 1024 [ 676.656827][T12046] usb 5-1: string descriptor 0 read error: -71 [ 676.685307][T12046] uclogic 0003:5543:3031.0016: failed retrieving string descriptor #200: -71 [ 676.694553][T12046] uclogic 0003:5543:3031.0016: failed retrieving pen parameters: -71 [ 676.702882][T12046] uclogic 0003:5543:3031.0016: failed probing pen v2 parameters: -71 [ 676.703723][ T5] usb 4-1: config 0 has an invalid interface number: 101 but max is 0 [ 676.711383][T12046] uclogic 0003:5543:3031.0016: failed probing parameters: -71 [ 676.711582][T12046] uclogic: probe of 0003:5543:3031.0016 failed with error -71 [ 676.735897][ T5] usb 4-1: config 0 has an invalid descriptor of length 184, skipping remainder of the config [ 676.746810][ T5] usb 4-1: config 0 has no interface number 0 16:05:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) r5 = dup3(r4, r1, 0x100000) ioctl$TIOCOUTQ(r5, 0x5411, &(0x7f0000000100)) r6 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_EXT_MASK={0x8, 0x1d, 0x9}]}, 0x30}}, 0x0) [ 676.753107][ T5] usb 4-1: config 0 interface 101 altsetting 0 endpoint 0x8C has an invalid bInterval 255, changing to 11 [ 676.764610][ T5] usb 4-1: config 0 interface 101 altsetting 0 endpoint 0x8C has invalid maxpacket 1792, setting to 1024 [ 676.795915][T12046] usb 5-1: USB disconnect, device number 67 16:05:29 executing program 0: syz_usb_connect(0x0, 0xbc, &(0x7f0000002c40)={{0x12, 0x1, 0x0, 0x1c, 0x0, 0xf5, 0x40, 0x7c0, 0x1501, 0x6514, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x87, 0x0, 0x1, 0x3, 0x1, 0x12, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "81bb6e86a9"}]}}]}}]}}]}}, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f0000000200), 0x0) [ 676.872981][T11950] usbhid 2-1:0.0: can't add hid device: -71 [ 676.879613][T11950] usbhid: probe of 2-1:0.0 failed with error -71 [ 676.903037][T22197] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 676.941358][T11950] usb 2-1: USB disconnect, device number 46 [ 677.004568][ T5] usb 4-1: config 0 has an invalid interface number: 101 but max is 0 [ 677.013724][ T5] usb 4-1: config 0 has an invalid descriptor of length 184, skipping remainder of the config [ 677.024191][ T5] usb 4-1: config 0 has no interface number 0 [ 677.030421][ T5] usb 4-1: config 0 interface 101 altsetting 0 endpoint 0x8C has an invalid bInterval 255, changing to 11 [ 677.042144][ T5] usb 4-1: config 0 interface 101 altsetting 0 endpoint 0x8C has invalid maxpacket 1792, setting to 1024 16:05:30 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x38}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000180)={r0}) getresuid(&(0x7f00000001c0), &(0x7f0000000200)=0x0, &(0x7f0000000240)) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000daff0)={&(0x7f0000000280)=@newae={0x37c, 0x1e, 0x0, 0x70bd29, 0x25dfdbfc, {{@in=@remote, 0x4d3, 0x2, 0xff}, @in6=@rand_addr="bb70e675b8f3d7f1d7ec681ef755400f", 0x400, 0x3503}, [@replay_val={0x10, 0xa, {0x70bd2c, 0x70bd25, 0x2}}, @algo_crypt={0x13c, 0x2, {{'lrw-serpent-sse2\x00'}, 0x790, "8ccc7b6858738629b71238a15fbc911263a19d9db3b971116b62fe204761e02d0eb99c432f097d92553df369a6fcad3cff4ff1387b0b3944400b8a5d176a3930188e4e78f9c57c6bd4338b2f2b7f80b1fd0477fa1246fe5fdfd6ee993dd0eb92c73abfe4dcfb5c152cfd09d3661c094de03bf613406ea027d4123ad8fa890cc711478cc273ab89327f32ec78b6061c1fb674e5cebd8421b43f18c2160bd003a5fb5592ffad52d9a90d52e216278f4b79b9c96e851ab453539b064d3a0767f709ccba273f9fde8c1ffedd50ad094d59ab7d9c99455f47a2ffd11d2966b329632bf4c77aaf979438e47ea6495a068e117541d9"}}, @migrate={0xb4, 0x11, [{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2, 0x0, 0x2, 0x0, 0x3503, 0x8, 0x2}, {@in6=@dev={0xfe, 0x80, [], 0x11}, @in6=@dev={0xfe, 0x80, [], 0x28}, 0x6c, 0x2, 0x0, 0x0, 0x680aba16ee01232b, 0xa}, {@in=@loopback, @in6=@rand_addr="6275d69d82546b1ed0a50c59b7b23bbb", 0x0, 0x4, 0x0, 0x3500, 0x8, 0x8}, {@in6=@rand_addr="4cee2a9611aa38937d750bbf681ab78f", @in=@multicast1, 0x36, 0x4, 0x0, 0x0, 0xa, 0x2}]}, @user_kmaddress={0x2c, 0x13, {@in=@loopback, @in=@rand_addr=0x6}}, @lastused={0xc, 0xf, 0x6}, @proto={0xfffffffffffffda8, 0x19, 0xff}, @proto={0x8, 0x19, 0x6c}, @ipv4_hthresh={0x8, 0x3, {0x0, 0x11}}, @sa={0xe4, 0x6, {{@in6=@loopback, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4e20, 0x0, 0x4e21, 0x101, 0xa, 0xa0, 0x80, 0xff, 0x0, r7}, {@in=@broadcast, 0x4d6, 0xff}, @in=@loopback, {0x1, 0x3, 0x401, 0x2, 0x4, 0xb5, 0xffff, 0x2}, {0x7ff, 0x1, 0x6, 0x80008000}, {0x6, 0x61, 0x7}, 0x70bd2a, 0x3501, 0x2, 0x0, 0x84, 0x4}}, @ipv6_hthresh={0x8, 0x4, {0x74, 0x1d}}]}, 0x37c}}, 0x0) 16:05:30 executing program 5: syz_usb_connect(0x0, 0x164, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x19, 0x6d, 0xf0, 0x8, 0x1199, 0x900a, 0x8434, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x42, 0x83, 0x95, 0x0, [], [{{0x9, 0x5, 0x4}}, {{0x9, 0x5, 0x2}}]}}]}}]}}, 0x0) [ 677.162301][ T5] usb 4-1: config 0 has an invalid interface number: 101 but max is 0 [ 677.171435][ T5] usb 4-1: config 0 has an invalid descriptor of length 184, skipping remainder of the config [ 677.182382][ T5] usb 4-1: config 0 has no interface number 0 [ 677.188723][ T5] usb 4-1: config 0 interface 101 altsetting 0 endpoint 0x8C has an invalid bInterval 255, changing to 11 [ 677.200275][ T5] usb 4-1: config 0 interface 101 altsetting 0 endpoint 0x8C has invalid maxpacket 1792, setting to 1024 [ 677.211725][ T5] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=a5.c1 [ 677.221246][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 16:05:30 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r0, &(0x7f00000001c0)={0x1, {&(0x7f00000002c0)=""/207, 0x30, 0x0, 0x0, 0x402}}, 0x68) write$vnet(r0, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/24, 0x18, 0x0, 0x0, 0x2}}, 0x68) write$vnet(r0, &(0x7f000046df98)={0x1, {&(0x7f0000000080)=""/28, 0x34d, &(0x7f0000e9afb7)=""/73, 0x0, 0x3}}, 0x68) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x5013041a7cb931b4, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f00000000c0)={0xfffff325, 0x8, 0x0, 0x7}, 0x10) [ 677.300958][ T5] usb 4-1: config 0 descriptor?? [ 677.349852][ T5] yurex 4-1:0.101: USB YUREX device now attached to Yurex #0 [ 677.362213][ C0] yurex 4-1:0.101: yurex_interrupt - unknown status received: -71 [ 677.382073][ C0] yurex 4-1:0.101: yurex_interrupt - unknown status received: -71 [ 677.402058][ C0] yurex 4-1:0.101: yurex_interrupt - unknown status received: -71 [ 677.402193][ T4071] usb 1-1: device descriptor read/64, error -71 [ 677.422097][ C0] yurex 4-1:0.101: yurex_interrupt - unknown status received: -71 [ 677.442085][ C0] yurex 4-1:0.101: yurex_interrupt - unknown status received: -71 [ 677.462084][ C0] yurex 4-1:0.101: yurex_interrupt - unknown status received: -71 [ 677.482068][ C0] yurex 4-1:0.101: yurex_interrupt - unknown status received: -71 [ 677.491007][T11874] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 677.502075][ C0] yurex 4-1:0.101: yurex_interrupt - unknown status received: -71 [ 677.522065][ C0] yurex 4-1:0.101: yurex_interrupt - unknown status received: -71 [ 677.523930][T12046] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 677.542168][ C0] yurex 4-1:0.101: yurex_interrupt - unknown status received: -71 [ 677.551174][T11876] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 677.562082][ C0] yurex 4-1:0.101: yurex_interrupt - unknown status received: -71 16:05:30 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmmsg(r5, &(0x7f0000000140)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000280)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000001ae, 0x62, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r5, &(0x7f00000006c0)={0x60000000}) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f00000004c0)="e021940cd9c1c91874647f8bb9eb07f3c147e0a54eeada50b1c6a1dec204b7b69a889721914c853935ecf6e4e9ced19a6ab27850a131310311a5ec0678ea09da2206049f6a99c577ebdd8cce9e5abab4ada03f6ba1a6ffed639b2709768b39628a00fd3ca909e565cbefefd2412c3323667dbae0f21e3d2fa1ea703de7dfed64417a13de7b3cc3148c17faab83e45dbf6dd61e7b7f13d11396fbec4d34f9af81951fe8964a") r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000700)='/dev/zero\x00', 0x20200, 0x0) sendmsg$inet(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000b80)="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", 0x1000}], 0x1, &(0x7f00000007c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0xd1ee}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x48}, 0x40) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f00000002c0)=0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000008c0)={{{@in6=@dev, @in6=@local}}, {{@in6=@mcast1}, 0x0, @in6=@initdev}}, &(0x7f00000001c0)=0xe8) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x0, 0x8969, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x0, 0x200000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_NMI(r7, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x1df6ba1359fadf2e, 0x0) setsockopt$netlink_NETLINK_RX_RING(r8, 0x10e, 0x6, &(0x7f0000000640)={0x0, 0x3dc, 0x6, 0x401}, 0x10) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r7, 0xae80, 0x0) [ 677.582060][ C0] yurex 4-1:0.101: yurex_interrupt - unknown status received: -71 [ 677.602056][ C0] yurex 4-1:0.101: yurex_interrupt - unknown status received: -71 [ 677.622063][ C0] yurex 4-1:0.101: yurex_interrupt - unknown status received: -71 [ 677.642052][ C0] yurex 4-1:0.101: yurex_interrupt - unknown status received: -71 [ 677.662078][ C0] yurex 4-1:0.101: yurex_interrupt - unknown status received: -71 [ 677.682077][ C0] yurex 4-1:0.101: yurex_interrupt - unknown status received: -71 [ 677.702192][ C0] yurex 4-1:0.101: yurex_interrupt - unknown status received: -71 [ 677.722060][ C0] yurex 4-1:0.101: yurex_interrupt - unknown status received: -71 [ 677.732437][T11874] usb 3-1: Using ep0 maxpacket: 32 [ 677.742090][ C0] yurex 4-1:0.101: yurex_interrupt - unknown status received: -71 [ 677.762150][ C0] yurex 4-1:0.101: yurex_interrupt - unknown status received: -71 [ 677.782068][ C0] yurex 4-1:0.101: yurex_interrupt - unknown status received: -71 [ 677.792555][T11876] usb 6-1: Using ep0 maxpacket: 8 [ 677.802074][ C0] yurex 4-1:0.101: yurex_interrupt - unknown status received: -71 [ 677.802903][T12046] usb 5-1: Using ep0 maxpacket: 8 [ 677.822073][ C0] yurex 4-1:0.101: yurex_interrupt - unknown status received: -71 [ 677.842063][ C0] yurex 4-1:0.101: yurex_interrupt - unknown status received: -71 [ 677.853473][T11874] usb 3-1: config 0 has an invalid interface number: 179 but max is 0 16:05:30 executing program 1: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r4}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x38}, 0x0) syz_emit_ethernet(0x0, &(0x7f0000000040)=ANY=[], 0x0) [ 677.861749][T11874] usb 3-1: config 0 has no interface number 0 [ 677.868202][T11874] usb 3-1: New USB device found, idVendor=2001, idProduct=3309, bcdDevice=8a.5e [ 677.877514][T11874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.886848][ C0] yurex 4-1:0.101: yurex_interrupt - unknown status received: -71 [ 677.902066][ C0] yurex 4-1:0.101: yurex_interrupt - unknown status received: -71 [ 677.902807][ T4071] usb 1-1: config 0 has an invalid interface number: 135 but max is 0 [ 677.918434][ T4071] usb 1-1: config 0 has no interface number 0 [ 677.924596][ C0] yurex 4-1:0.101: yurex_interrupt - unknown status received: -71 [ 677.924737][ T4071] usb 1-1: config 0 interface 135 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 677.943188][ C0] yurex 4-1:0.101: yurex_interrupt - unknown status received: -71 [ 677.943245][ T4071] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 677.943363][ T4071] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has invalid maxpacket 1646, setting to 1024 [ 677.962720][ T4071] usb 1-1: config 0 interface 135 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 677.974025][ C0] yurex 4-1:0.101: yurex_interrupt - unknown status received: -71 [ 677.987227][ T4071] usb 1-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=65.14 [ 678.004176][ C0] yurex 4-1:0.101: yurex_interrupt - unknown status received: -71 [ 678.004196][ T4071] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.020117][ C0] yurex 4-1:0.101: yurex_interrupt - unknown status received: -71 [ 678.032045][T11840] usb 4-1: USB disconnect, device number 59 [ 678.046778][T11840] yurex 4-1:0.101: USB YUREX #0 now disconnected [ 678.056759][T11874] usb 3-1: config 0 descriptor?? 16:05:31 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bff42010b1134200d9fd0000000147ab7d5ffbb47d611e56c109021200010004000009040400"], 0x0) [ 678.093285][T12046] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 678.104326][T12046] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 678.104760][T11874] usb 3-1: can't set config #0, error -71 [ 678.117310][T12046] usb 5-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00 [ 678.117383][T12046] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.162508][T11876] usb 6-1: New USB device found, idVendor=1199, idProduct=900a, bcdDevice=84.34 [ 678.171689][T11876] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.180215][T11876] usb 6-1: Product: syz [ 678.184530][T11876] usb 6-1: Manufacturer: syz [ 678.189129][T12046] usb 5-1: config 0 descriptor?? [ 678.189236][T11876] usb 6-1: SerialNumber: syz [ 678.206442][ T4071] usb 1-1: config 0 descriptor?? [ 678.232438][T11874] usb 3-1: USB disconnect, device number 42 [ 678.270271][ T4071] iowarrior 1-1:0.135: IOWarrior product=0x1501, serial= interface=135 now attached to iowarrior0 [ 678.286671][T11876] usb 6-1: config 0 descriptor?? [ 678.302771][T12046] usb 5-1: can't set config #0, error -71 16:05:31 executing program 4: pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r4}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x38}, 0x0) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x80800, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e20, @rand_addr=0x5}}}, &(0x7f0000000340)=0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f0000000480)={r6, @in6={{0xa, 0x4e24, 0x10001, @remote, 0x8}}, 0x7, 0x9, 0x682a, 0x8000, 0x8}, &(0x7f0000000380)=0x98) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup2(r9, r8) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r11}}}, @rights={{0x14, 0x1, 0x1, [r7]}}], 0x38}, 0x0) getresuid(&(0x7f0000000100), &(0x7f0000000200)=0x0, &(0x7f0000000240)) r13 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x27) r14 = socket(0xa, 0x3, 0x6) connect$bt_rfcomm(r14, &(0x7f0000000000)={0x1f, {0xfe, 0x0, 0x1000, 0x80000001, 0x6, 0x5}, 0x8}, 0xa) bind$inet6(r14, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x6}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r14, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f0000000480)=0xe8) r16 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r16, 0x84, 0x6d, &(0x7f0000000900)=ANY=[@ANYBLOB="ab000000a6d23fa0c9cb488b619002d1d896e5ffb3b62ccfa516aec8038d482cd2aa0b6ac0d684fba227e9983be9f367da66938eddee11b161213cdf2bd00a8ae552bc17ec5e976fa67846060aa7629aed35eb9bb9e096cc3825df10acb8c0dff4569bb0f686a3856eb778df7afa4a3112676e9547e0d65bee83afa0b4f46a0b10af299da7efdcc6c573074de84403de7902a06096d7483194ad47775d355b9800000008008b0500"/193], &(0x7f0000000540)=0x1) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r18 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = dup2(r19, r18) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r20, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r21}}}, @rights={{0x14, 0x1, 0x1, [r17]}}], 0x38}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000c00)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8) setuid(r23) r24 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r24, 0x84, 0x6d, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000540)=0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r24, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8) setuid(r25) r26 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r26, 0x84, 0x6d, &(0x7f0000000b40)=ANY=[@ANYBLOB="ab000000a6d23fa0c9cb488b6190f2d1d89677354590dde5ffb3b62ccfa516aec8038d48d684fba227e9983be9f367da66938eddee11b1613f0d5ff3b2213cdf2bd00a8ae552bc17ec5e976fa67846060aa7629aed35eb9bb9e096cc3825df10acb8c0dff4569bb0f6a15cab46fa86a3856eb778df7afa4a3112676e9547e0d65bee83afa0b4f46a0b10af299da7efdcc6c573074de84403de7902a07096d7483194ad47775d355bd65460a5a52aa9cc384c962b12062cf85884362f08008b07"], &(0x7f0000000540)=0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r26, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8) setuid(r27) r28 = request_key(0x0, &(0x7f0000001300)={'syz', 0x2}, &(0x7f0000001340)='em0cpusetmime_type\x00', 0xfffffffffffffff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) keyctl$chown(0x4, r28, 0x0, r29) r30 = request_key(0x0, &(0x7f0000001300)={'syz', 0x2}, &(0x7f0000001340)='em0cpusetmime_type\x00', 0xfffffffffffffff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) keyctl$chown(0x4, r30, 0x0, r31) r32 = request_key(0x0, &(0x7f0000001300)={'syz', 0x2}, &(0x7f0000001340)='em0cpusetmime_type\x00', 0xfffffffffffffff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) keyctl$chown(0x4, r32, 0x0, r33) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r13, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000a00)=ANY=[@ANYBLOB="02000000010002000000000002000400", @ANYRES32=r15, @ANYBLOB="02000200", @ANYRES32=r22, @ANYBLOB="02000100bb86b4c5600d592e64b86edda53135e0f392e4c9ca69b61556778ccf29c4990d1893fd049001c62278a88220d8bb3ef088a2bbfd6fdd3bbbaa8e7ff1e7d747037c523caba1237cfd937b81d9ae40c8e42df69a9ad815e799bd07b8468681a262136f0b4027e75c77b74f2bc0ad4402225b8f934741a657b08fa3e58bffe4394310ebab08c71788455eb3b79d61d24d289378388103fdaa96ee42a18df1027aa5865c0b", @ANYRES32=r23, @ANYBLOB="02000400", @ANYRES32=r12, @ANYBLOB, @ANYRES32=r25, @ANYBLOB="02000200", @ANYRES32=r27, @ANYBLOB="02000500", @ANYRES32=r12, @ANYBLOB="040002000000000008000100", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=r29, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r31, @ANYBLOB="08000400", @ANYRES32=r33, @ANYBLOB="08000300", @ANYRES32=r34, @ANYRES32, @ANYBLOB="0800d8b8", @ANYRES32, @ANYBLOB="10000200000000002000d6f800000000"], 0x1c, 0x2) lstat(&(0x7f0000003f00)='./file0\x00', &(0x7f0000003f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, r35) write$FUSE_CREATE_OPEN(r10, &(0x7f0000000600)={0xa0, 0xfffffffffffffffe, 0x8, {{0x3, 0x3, 0x7fff, 0x4, 0x1, 0x80000000, {0x5, 0x5, 0x7fd8, 0x1, 0x5, 0x0, 0x80000001, 0x80000000, 0x7, 0xc000000, 0xfffffbff, r22, r35, 0x2, 0x9adcfd57}}, {0x0, 0x18}}}, 0xa0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r0, 0xc0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=0x80000000, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x7, 0x4}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x13, 0x5, 0xfffffffe}, &(0x7f00000000c0)=0x47555ede, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x40}}, 0x10) r36 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000005c0)={0x1, 0x0, [{0x5000, 0x7a, &(0x7f0000000540)=""/122}]}) ioctl(r36, 0x1000008912, &(0x7f0000000400)="11dca50d5c0bcfe47bf070") [ 678.332095][T12046] usb 5-1: USB disconnect, device number 68 16:05:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000080)) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="307251a7a2f8fd00000010000108000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800100000000000"], 0x30}}, 0x0) [ 678.456141][ T4071] usb 1-1: USB disconnect, device number 99 [ 678.484674][ T4071] iowarrior 1-1:0.135: I/O-Warror #0 now disconnected [ 678.545849][T11840] usb 6-1: USB disconnect, device number 60 16:05:31 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003700)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000000240)={0xa, 0x4e21, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="24000000000000002900000032000000ff020000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00'], 0x28}}], 0x2, 0x0) [ 678.602392][T11874] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 678.842444][T11838] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 678.842487][T11874] usb 3-1: Using ep0 maxpacket: 16 [ 679.002297][T11874] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 679.010027][T11874] usb 3-1: can't read configurations, error -61 [ 679.112142][T11838] usb 4-1: Using ep0 maxpacket: 16 [ 679.174069][T11874] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 679.232427][T11838] usb 4-1: config 0 has an invalid interface number: 101 but max is 0 [ 679.240939][T11838] usb 4-1: config 0 has an invalid descriptor of length 184, skipping remainder of the config [ 679.251589][T11838] usb 4-1: config 0 has no interface number 0 [ 679.252309][T11876] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 679.257938][T11838] usb 4-1: config 0 interface 101 altsetting 0 endpoint 0x8C has an invalid bInterval 255, changing to 11 [ 679.277050][T11838] usb 4-1: config 0 interface 101 altsetting 0 endpoint 0x8C has invalid maxpacket 1792, setting to 1024 [ 679.332216][ T5] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 679.362440][T11838] usb 4-1: config 0 has an invalid interface number: 101 but max is 0 [ 679.370917][T11838] usb 4-1: config 0 has an invalid descriptor of length 184, skipping remainder of the config [ 679.381410][T11838] usb 4-1: config 0 has no interface number 0 [ 679.387639][T11838] usb 4-1: config 0 interface 101 altsetting 0 endpoint 0x8C has an invalid bInterval 255, changing to 11 [ 679.399151][T11838] usb 4-1: config 0 interface 101 altsetting 0 endpoint 0x8C has invalid maxpacket 1792, setting to 1024 [ 679.432119][T11874] usb 3-1: Using ep0 maxpacket: 16 [ 679.482648][T11838] usb 4-1: config 0 has an invalid interface number: 101 but max is 0 [ 679.491345][T11838] usb 4-1: config 0 has an invalid descriptor of length 184, skipping remainder of the config [ 679.501773][T11838] usb 4-1: config 0 has no interface number 0 [ 679.508137][T11838] usb 4-1: config 0 interface 101 altsetting 0 endpoint 0x8C has an invalid bInterval 255, changing to 11 [ 679.519678][T11838] usb 4-1: config 0 interface 101 altsetting 0 endpoint 0x8C has invalid maxpacket 1792, setting to 1024 16:05:32 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000001380)={0x194, 0x0, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x54, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6eecd264}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffff127}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA={0x18, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_MEDIA={0xbc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6b42}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7e4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xec}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x38, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/fuse\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f0000000240), 0x1000) read$FUSE(r1, 0x0, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000001240)=ANY=[@ANYBLOB="10000000000000000200000000000000c8b197160066306ea09376b7a3d2950fbc5c8780966e554747f41da000d32f2ac7e9fa450b8d3047d17b38855a6a50e79c79a9bbb09ad2e64f737d3d8732bc13b75482aa7f9eae0b627d8bb8c538ae55894181f8511c58ad1809176ab765c9307c183348ba0b9d4d663b2734ffffb0d2e4a148e4abddc5c1eefe1be13d224c7c5dcc9e0557a50e2e804b27b8e6cd55682598e3c5deeb4708f0a8d4b8e9d22bef0b44295bbdcaad665278e164fc8c589576635026ea3b2cc2bd0c1e50355be161a23ea73b7aa87eb43eb6b38cb9de03da78ad7a2986ce71c6a8cb1bfe00000000000000005b3e4633f0499e6953944fe3aba1a2853b1c42b4ed70c7f38cb04f7eb2dabce0c530"], 0x10) setxattr$system_posix_acl(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) 16:05:32 executing program 1: syz_usb_connect(0x0, 0x3b3, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006c03e008c62483d1364f000000010902240001000000050904a90002ff5d81000905850b08000000006be6dd1a3d4780100905010300000000004791597898fde1ef62d4f34fd6d5cbe75c93f1ce8d0bb5561e6faef1b50250a3e6a2383d038f07184e79e7cf17c508492c6acf767ac8ab9fc1c74b2b029c5261a2727d321320c720b638eed36c56983d2372068c3d997cc73003c168"], 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='veno\x00', 0x5) [ 679.582453][ T5] usb 6-1: Using ep0 maxpacket: 8 [ 679.607735][T11838] usb 4-1: unable to read config index 3 descriptor/start: -71 [ 679.615589][T11838] usb 4-1: can't read configurations, error -71 [ 679.622932][T11874] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 679.630773][T11874] usb 3-1: can't read configurations, error -61 [ 679.640672][T11874] usb usb3-port1: attempt power cycle [ 679.662395][T11876] usb 1-1: config 0 has an invalid interface number: 135 but max is 0 [ 679.670942][T11876] usb 1-1: config 0 has no interface number 0 [ 679.677607][T11876] usb 1-1: config 0 interface 135 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 679.688441][T11876] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 679.699990][T11876] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has invalid maxpacket 1646, setting to 1024 [ 679.711385][T11876] usb 1-1: config 0 interface 135 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 679.725358][T11876] usb 1-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=65.14 [ 679.734562][T11876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.744678][T11876] usb 1-1: config 0 descriptor?? [ 679.800542][T11876] iowarrior 1-1:0.135: IOWarrior product=0x1501, serial= interface=135 now attached to iowarrior0 [ 679.892164][T11950] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 679.962299][ T5] usb 6-1: New USB device found, idVendor=1199, idProduct=900a, bcdDevice=84.34 [ 679.971584][ T5] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.979844][ T5] usb 6-1: Product: syz [ 679.984397][ T5] usb 6-1: Manufacturer: syz [ 679.989249][ T5] usb 6-1: SerialNumber: syz [ 679.998344][ T5] usb 6-1: config 0 descriptor?? 16:05:33 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x203, 0xffffffffffffffff) inotify_add_watch(r0, &(0x7f0000000000)='./file1\x00', 0x22) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="2b7069647320412c5ec7b5d90762f8ba9fe8ee7e083311af7cb115b708409b4e3fa972722ab7c89206bb6f6aee370fb8e7572bcd829a59c0e4e9af796410d43ec8818253da7122bef0ac16f5563dca276a75e6c87304b63b98dab37664c98904cb9639bf4b91d78f4ce4a35762ba803bb0aa07717d5c3e909d253ce3ef52e452ed9e0518d43a170ea8f70daf282682ea5e5a29ae1266f169f0dcd24a3d11c633af74dd3ac2ac46fd62ad075e989e5ab6f14a1d6e8f0d35ea51e18be5672af0b7f39f7497bd"], 0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$cgroup_subtree(r2, &(0x7f00000000c0)={[{0x2d, 'pids'}]}, 0x6) [ 680.047850][T11840] usb 1-1: USB disconnect, device number 100 [ 680.059467][T11840] iowarrior 1-1:0.135: I/O-Warror #0 now disconnected 16:05:33 executing program 0: syz_usb_connect(0x0, 0xbc, &(0x7f0000002c40)={{0x12, 0x1, 0x0, 0x1c, 0x0, 0xf5, 0x40, 0x7c0, 0x1501, 0x6514, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x87, 0x0, 0x1, 0x3, 0x1, 0x12, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "81bb6e86a9"}]}}]}}]}}]}}, 0x0) pipe(&(0x7f0000000a00)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000100)=0xc) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r5, r4) r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x400, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000340)={0x0}, &(0x7f00000002c0)=0x8) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup2(r11, r10) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r12, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r13}}}, @rights={{0x14, 0x1, 0x1, [r9]}}], 0x38}, 0x0) r14 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r9, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0xfffffffffffffd33, r14, 0x2, 0x70bd2c, 0x25dfdbfb}, 0xfffffffffffffe7c}, 0x1, 0x0, 0x0, 0x20000005}, 0x8880) sendmsg$netlink(r6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r3, @ANYBLOB="0400000c1b7d9618fc997e5683e6d6189275dee1e9a611af4c0c8d"], 0x38}, 0x0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r18 = dup2(r17, r16) getsockopt$sock_cred(r18, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xf1) sendmsg$netlink(r18, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r19, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r15, @ANYBLOB='\x00\b\x00\x00'], 0x38}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmmsg(r20, &(0x7f0000000140)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000280)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000001ae, 0x62, 0x0) r21 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r22, r21) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r24 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r26 = dup2(r25, r24) getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r26, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1c000000000000000100000002000088ff7f000000", @ANYRES32=r27, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r23, @ANYBLOB='\x00\x00\x00\x00'], 0x38}, 0x0) stat(&(0x7f0000000380)='./file0\x00', &(0x7f0000000500)) sendmsg$netlink(r18, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1dd, &(0x7f0000000400), 0x1f}, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x4) r28 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r28, &(0x7f0000000200)=[{&(0x7f0000000100)=' ', 0x1}], 0x1) [ 680.143054][T11950] usb 2-1: Using ep0 maxpacket: 8 16:05:33 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x900, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000080)=@usbdevfs_connect={0x8001}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x5, 0x2, 0x952f97cdb03a5f3c, 0xc}, 0x12) 16:05:33 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x6, &(0x7f0000000040)=[{0x7f, 0x40, 0x7, 0x8}, {0x1, 0x0, 0x8}, {0x3, 0x8, 0x1f, 0x1}, {0x0, 0x7ec3, 0x0, 0x3}, {0x0, 0x6, 0x0, 0x9}, {0xfffc, 0x1, 0x8}]}, 0x1a3) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30}, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x198, 0x8000) ioctl$TCXONC(r1, 0x540a, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x30, 0x0, 0x3, 0x0, 0x3, 0xe3, 0x4000000}, 0x46f7d29b382bcb09) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) sched_setattr(0x0, 0x0, 0x0) pivot_root(&(0x7f0000000000)='./bus\x00', 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x83, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x8000000000000003, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, &(0x7f00000002c0)=""/129) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r5 = socket$caif_seqpacket(0x25, 0x5, 0x4) splice(r4, &(0x7f0000000140)=0x5, r5, &(0x7f0000000180), 0x0, 0x1) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x83, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @remote, @remote, 0x0, 0x29, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 680.199610][ T4071] usb 6-1: USB disconnect, device number 61 [ 680.262763][T11950] usb 2-1: config 0 has an invalid interface number: 169 but max is 0 [ 680.271399][T11950] usb 2-1: config 0 has an invalid descriptor of length 107, skipping remainder of the config [ 680.282043][T11950] usb 2-1: config 0 has no interface number 0 [ 680.288239][T11950] usb 2-1: config 0 interface 169 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 680.299452][T11950] usb 2-1: config 0 interface 169 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 680.312671][T11950] usb 2-1: New USB device found, idVendor=24c6, idProduct=d183, bcdDevice=4f.36 [ 680.321896][T11950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.423962][T11874] usb 3-1: new high-speed USB device number 45 using dummy_hcd 16:05:33 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="8c2fb08f70aca1f2e24e7dc4636db1607852800ad7239bfbb123065f680fcd8bd0da6e13b662424ccd67943bc81a1d56defee801abbb295542689614ad3cf075062ecc8fff703998f05b4a75cd21c51a0cdf5c1d22ec6c88b2f328c35d2284ce37375165fc7b892d9211b9f2b8d60d65de6a11b376b8379dea0e24d9d54997f9b0c35fdbb691b6a85b1dd235877eaf2c6b56cdebc12feefdd198891969cc07ec80aa29bcc95a7fa0866e97a784c0ac21edab15d06cfb51b0f47e5f4404", 0xbd}, {&(0x7f0000000340)="4520d8c1ee8e08b9ee293229", 0xc}], 0x2}}], 0x1, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mixer\x00', 0x1bb402, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000300)) recvmmsg(r0, &(0x7f0000006840)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/62, 0x3e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000a40)=""/38, 0x26}, {&(0x7f0000000a80)=""/108, 0x6c}], 0x2}}], 0x2, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='yeah\x00', 0x5) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000380)={@dev={0xfe, 0x80, [], 0x16}, 0x6, 0x1, 0x1, 0x4, 0x80, 0x800}, &(0x7f00000003c0)=0x20) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0) r2 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x81, 0x14400) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r2, 0xc008551b, &(0x7f0000000240)=ANY=[@ANYBLOB="56f8763106000000"]) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_dev$midi(&(0x7f0000000400)='/dev/midi#\x00', 0x1ff, 0x402100) setsockopt$inet_int(r5, 0x0, 0xa, &(0x7f0000000440)=0x8, 0x4) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup2(r8, r7) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r9, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r10}}}, @rights={{0x14, 0x1, 0x1, [r6]}}], 0x38}, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r9, 0x29, 0xcd, &(0x7f0000000500)={{0xa, 0x4e21, 0xd7, @empty, 0x4}, {0xa, 0x4e20, 0x8, @ipv4={[], [], @broadcast}, 0x846c}, 0x2, [0x4, 0x4, 0x6, 0x1, 0x2, 0x10000, 0x2, 0x7]}, 0x5c) dup2(r4, r3) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000040)={0x5, 0x0, 0x5, 0x6}, 0x8) [ 680.467200][T11950] usb 2-1: config 0 descriptor?? [ 680.552545][T11840] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 680.672640][T11874] usb 3-1: Using ep0 maxpacket: 16 [ 680.724407][T11950] usb 2-1: USB disconnect, device number 47 [ 680.832581][T11874] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 680.840764][T11874] usb 3-1: can't read configurations, error -61 [ 680.944244][T11840] usb 1-1: config 0 has an invalid interface number: 135 but max is 0 [ 680.953082][T11840] usb 1-1: config 0 has no interface number 0 [ 680.959282][T11840] usb 1-1: config 0 interface 135 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 680.970144][T11840] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 680.981671][T11840] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has invalid maxpacket 1646, setting to 1024 [ 680.993205][T11840] usb 1-1: config 0 interface 135 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 681.006456][T11840] usb 1-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=65.14 [ 681.012090][T11874] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 681.015706][T11840] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.083236][T11840] usb 1-1: config 0 descriptor?? 16:05:34 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0xa, 0xb6) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r5, r4) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r7}}}, @rights={{0x14, 0x1, 0x1, [r3]}}], 0x38}, 0x0) sendfile(0xffffffffffffffff, r3, &(0x7f00000000c0), 0x8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup2(r8, r2) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup2(r12, r11) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r13, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r14}}}, @rights={{0x14, 0x1, 0x1, [r10]}}], 0x38}, 0x0) setsockopt$inet6_tcp_TLS_RX(r13, 0x6, 0x2, &(0x7f0000000180)=@gcm_128={{0x303}, "b7331b4db097479c", "6962eb7b73dbcc0315ab1bb980a04ab3", "1d0291da", "3fc69f5f9180128f"}, 0x28) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r18 = dup2(r17, r16) getsockopt$sock_cred(r18, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r18, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r19}}}, @rights={{0x14, 0x1, 0x1, [r15]}}], 0x38}, 0x0) ioctl$EVIOCGNAME(r15, 0x80404506, &(0x7f0000000140)=""/62) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r9, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES32=r20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x38}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0xffffff6a, &(0x7f0000000040)={&(0x7f0000000c40)=ANY=[], 0x24}}, 0x0) [ 681.147226][T11840] iowarrior 1-1:0.135: IOWarrior product=0x1501, serial= interface=135 now attached to iowarrior0 16:05:34 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) pipe(&(0x7f0000000a00)={0xffffffffffffffff}) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r6, r5) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000100)=0xc) lstat(&(0x7f0000003f00)='./file0\x00', &(0x7f0000003f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, r8) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup2(r11, r10) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r12, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r13, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r9, @ANYBLOB="00d0b3e4"], 0x38}, 0x0) getresuid(&(0x7f0000000100), &(0x7f0000000200)=0x0, &(0x7f0000000240)) r15 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x27) r16 = socket(0xa, 0x3, 0x6) connect$bt_rfcomm(r16, &(0x7f0000000000)={0x1f, {0xfe, 0x0, 0x1000, 0x80000001, 0x6, 0x5}, 0x8}, 0xa) bind$inet6(r16, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x6}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r16, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f0000000480)=0xe8) r18 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r18, 0x84, 0x6d, &(0x7f0000000900)=ANY=[@ANYBLOB="ab000000a6d23fa0c9cb488b619002d1d896e5ffb3b62ccfa516aec8038d482cd2aa0b6ac0d684fba227e9983be9f367da66938eddee11b161213cdf2bd00a8ae552bc17ec5e976fa67846060aa7629aed35eb9bb9e096cc3825df10acb8c0dff4569bb0f686a3856eb778df7afa4a3112676e9547e0d65bee83afa0b4f46a0b10af299da7efdcc6c573074de84403de7902a06096d7483194ad47775d355b9800000008008b0500"/193], &(0x7f0000000540)=0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r18, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x2, 0x400082) r20 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r21, r20) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000005c0)=0x375) setuid(r22) r23 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r23, 0x84, 0x6d, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000540)=0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r23, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8) setuid(r24) r25 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r25, 0x84, 0x6d, &(0x7f0000000b40)=ANY=[@ANYBLOB="ab000000a6d23fa0c9cb488b6190f2d1d89677354590dde5ffb3b62ccfa516aec8038d48d684fba227e9983be9f367da66938eddee11b1613f0d5ff3b2213cdf2bd00a8ae552bc17ec5e976fa67846060aa7629aed35eb9bb9e096cc3825df10acb8c0dff4569bb0f6a15cab46fa86a3856eb778df7afa4a3112676e9547e0d65bee83afa0b4f46a0b10af299da7efdcc6c573074de84403de7902a07096d7483194ad47775d355bd65460a5a52aa9cc384c962b12062cf85884362f08008b07"], &(0x7f0000000540)=0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r25, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8) setuid(r26) r27 = request_key(0x0, &(0x7f0000001300)={'syz', 0x2}, &(0x7f0000001340)='em0cpusetmime_type\x00', 0xfffffffffffffff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) keyctl$chown(0x4, r27, 0x0, r28) r29 = request_key(0x0, &(0x7f0000001300)={'syz', 0x2}, &(0x7f0000001340)='em0cpusetmime_type\x00', 0xfffffffffffffff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) keyctl$chown(0x4, r29, 0x0, r30) r31 = request_key(0x0, &(0x7f0000001300)={'syz', 0x2}, &(0x7f0000001340)='em0cpusetmime_type\x00', 0xfffffffffffffff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) keyctl$chown(0x4, r31, 0x0, r32) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r15, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000a00)=ANY=[@ANYBLOB="02000000010002000000000002000400", @ANYRES32=r17, @ANYBLOB="02000200", @ANYRES32=r19, @ANYBLOB="02000100bb86b4c5600d592e64b86edda53135e0f392e4c9ca69b61556778ccf29c4990d1893fd049001c62278a88220d8bb3ef088a2bbfd6fdd3bbbaa8e7ff1e7d747037c523caba1237cfd937b81d9ae40c8e42df69a9ad815e799bd07b8468681a262136f0b4027e75c77b74f2bc0ad4402225b8f934741a657b08fa3e58bffe4394310ebab08c71788455eb3b79d61d24d289378388103fdaa96ee42a18df1027aa5865c0b", @ANYRES32=r22, @ANYBLOB="02000400", @ANYRES32=r14, @ANYBLOB, @ANYRES32=r24, @ANYBLOB="02000200", @ANYRES32=r26, @ANYBLOB="02000500", @ANYRES32=r14, @ANYBLOB="040002000000000008000100", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=r28, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r30, @ANYBLOB="08000400", @ANYRES32=r32, @ANYBLOB="08000300", @ANYRES32=r33, @ANYRES32, @ANYBLOB="0800d8b8", @ANYRES32, @ANYBLOB="10000200000000002000d6f800000000"], 0x1c, 0x2) lstat(&(0x7f0000003f00)='./file0\x00', &(0x7f0000003f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, r34) sendmsg$netlink(r7, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x0, 0x1, 0x1, [r1, r2, r6, r7, r4, r0]}}, @cred={{0x0, 0x1, 0x2, {r13, r26, r34}}}], 0x30}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000600)={0x2, 0x0, [{0x0, 0x8dd, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x3}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 681.385791][T11840] usb 1-1: USB disconnect, device number 101 [ 681.392269][ C1] iowarrior 1-1:0.135: iowarrior_callback - usb_submit_urb failed with result -19 [ 681.425605][T11840] iowarrior 1-1:0.135: I/O-Warror #0 now disconnected [ 681.502133][T11950] usb 2-1: new high-speed USB device number 48 using dummy_hcd 16:05:34 executing program 2: pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r4}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x38}, 0x0) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r6, r5) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r7, 0x84, 0x7d, &(0x7f0000000300)={r9, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000040)=0x100) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={r9, 0x83c12600}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000001c0)={r10, 0x80000000, 0x30}, &(0x7f0000000300)=0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmmsg(r11, &(0x7f0000000140)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000280)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000001ae, 0x62, 0x0) syz_usb_connect$printer(0x0, 0x0, &(0x7f0000000300)=ANY=[], &(0x7f0000000140)=ANY=[]) 16:05:34 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x2) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x38}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup2(r9, r8) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r11}}}, @rights={{0x14, 0x1, 0x1, [r7]}}], 0x38}, 0x0) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r13, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r12, 0x84, 0x7d, &(0x7f0000000300)={r14, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000040)=0x100) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r10, 0x84, 0x75, &(0x7f0000000080)={r14, 0x7fff}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000100)={r15, 0x3, 0x20}, &(0x7f0000000140)=0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000540)=@nl, 0x80, 0x0}}], 0x2, 0x0) [ 681.694282][T11874] usb 3-1: device not accepting address 46, error -71 [ 681.704167][T11874] usb usb3-port1: unable to enumerate USB device 16:05:34 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x5, 0x202040) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000080)=ANY=[@ANYBLOB="fdffff9eaf44ff", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x7d, &(0x7f0000000300)={r3, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000040)=0x100) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYBLOB="5a000000ce0c5088ffbad11acdfb4a47e8ceb0492221c4d3855dd223153dcb21213c280900c6fc1e02beeb020cea7f429730016b7f40a746374d5fea198f7886c1aa8d8591782d7cad2e52354ef9016949b736b82bc6b9ec65cf45d9ee8f5454bc6100000000000000094c64261b1b3ea2e16c4c670515da02c02d68eac8d58da8da7573"], &(0x7f00000000c0)=0x62) modify_ldt$read_default(0x2, &(0x7f0000000140)=""/78, 0x4e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup2(r8, r7) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r9, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r10}}}, @rights={{0x14, 0x1, 0x1, [r6]}}], 0xffffff71}, 0x0) ioctl$HIDIOCINITREPORT(r6, 0x4805, 0x0) r11 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000100)='security.capability\x00', 0x0, 0x0, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) pwrite64(r12, &(0x7f00000001c0)="20a63ed9", 0x4, 0x0) move_pages(0x0, 0xd4, &(0x7f0000000000), &(0x7f000026bfec), &(0x7f0000002000), 0x0) [ 681.742111][T11950] usb 2-1: Using ep0 maxpacket: 8 [ 681.865653][T11950] usb 2-1: config 0 has an invalid interface number: 169 but max is 0 [ 681.874384][T11950] usb 2-1: config 0 has an invalid descriptor of length 107, skipping remainder of the config [ 681.885111][T11950] usb 2-1: config 0 has no interface number 0 [ 681.891457][T11950] usb 2-1: config 0 interface 169 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 681.902816][T11950] usb 2-1: config 0 interface 169 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 681.915955][T11950] usb 2-1: New USB device found, idVendor=24c6, idProduct=d183, bcdDevice=4f.36 [ 681.925206][T11950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 16:05:35 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@deltclass={0x3c, 0x29, 0x0, 0x70bd2d, 0x25dfdbff, {0x0, r3, {0x7, 0x6}, {0xfff1, 0x7ff6}, {0xfff3, 0xc}}, [@tclass_kind_options=@c_dsmark={{0x6, 0x1, 'dsmark\x00'}, {0xc, 0x2, @TCA_DSMARK_MASK={0x8, 0x4, 0x2}}}]}, 0x3c}}, 0x0) [ 682.020419][T11950] usb 2-1: config 0 descriptor?? [ 682.267066][T11838] usb 2-1: USB disconnect, device number 48 [ 682.275079][T11840] usb 1-1: new high-speed USB device number 102 using dummy_hcd 16:05:35 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) creat(&(0x7f0000000240)='./file0\x00', 0x0) socket$packet(0x11, 0x3, 0x300) syz_open_procfs(0x0, &(0x7f0000000200)='mountstats\x00') socket$nl_route(0x10, 0x3, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$inet(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='mountstats\x00') socket$inet(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$inet(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x1) socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000012000/0x3000)=nil, 0x3000, 0x1, 0x10, r1, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)) socket(0x11, 0x1, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'bridge_slave_0\x00', &(0x7f00000001c0)=ANY=[@ANYRES16=r4]}) r5 = dup2(r2, r4) dup3(r5, r3, 0x0) [ 682.682281][T11840] usb 1-1: config 0 has an invalid interface number: 135 but max is 0 [ 682.690816][T11840] usb 1-1: config 0 has no interface number 0 [ 682.697860][T11840] usb 1-1: config 0 interface 135 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 682.709199][T11840] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 682.720874][T11840] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has invalid maxpacket 1646, setting to 1024 [ 682.732389][T11840] usb 1-1: config 0 interface 135 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 682.745606][T11840] usb 1-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=65.14 [ 682.754927][T11840] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.897074][T11840] usb 1-1: config 0 descriptor?? [ 682.947969][T11840] iowarrior 1-1:0.135: IOWarrior product=0x1501, serial= interface=135 now attached to iowarrior0 16:05:36 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) r3 = socket$inet(0x2, 0x3, 0x29) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000001440)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup2(r9, r8) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r11}}}, @rights={{0x14, 0x1, 0x1, [r7]}}], 0x38}, 0x0) r12 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r12, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") ioctl$LOOP_SET_FD(r10, 0x4c00, r12) dup3(r6, r5, 0x0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = dup2(r15, r14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmmsg(r17, &(0x7f0000000140)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000280)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x400000000000523, 0x62, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r17, 0x0, 0x480, &(0x7f00000000c0), &(0x7f0000000140)=0x40) getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r16, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000", @ANYRES32=r18, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00'], 0x38}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400201) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 16:05:36 executing program 0: syz_usb_connect(0x0, 0xbc, &(0x7f0000002c40)={{0x12, 0x1, 0x0, 0x1c, 0x0, 0xf5, 0x40, 0x7c0, 0x1501, 0x6514, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x87, 0x0, 0x1, 0x3, 0x1, 0x12, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "81bb6e86a9"}]}}]}}]}}]}}, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000100)=' ', 0x1}], 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\x00') 16:05:36 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0) ioctl$VIDIOC_S_FBUF(0xffffffffffffffff, 0x4030560b, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)="0a8a99e441513ba1b0727741ae4c194c01a4c90353aa55986230d1c4dd6dce2ceece71c23a701673a3e90f2332fbf123d0ead72179fe197cab9f63def9ffb2ccca13882b975e02a9f0eccc1c7ac1823f53899a3e79bc4f9bca4135d34e3d231ecc"}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = request_key(&(0x7f0000000040)='rxrpc_s\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)='/dev/kvm\x00', 0xfffffffffffffffb) getresuid(&(0x7f0000000100), &(0x7f0000000200)=0x0, &(0x7f0000000240)) r5 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x27) r6 = socket(0xa, 0x3, 0x6) connect$bt_rfcomm(r6, &(0x7f0000000000)={0x1f, {0xfe, 0x0, 0x1000, 0x80000001, 0x6, 0x5}, 0x8}, 0xa) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x6}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f0000000480)=0xe8) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r8, 0x84, 0x6d, &(0x7f0000000900)=ANY=[@ANYBLOB="ab000000a6d23fa0c9cb488b619002d1d896e5ffb3b62ccfa516aec8038d482cd2aa0b6ac0d684fba227e9983be9f367da66938eddee11b161213cdf2bd00a8ae552bc17ec5e976fa67846060aa7629aed35eb9bb9e096cc3825df10acb8c0dff4569bb0f686a3856eb778df7afa4a3112676e9547e0d65bee83afa0b4f46a0b10af299da7efdcc6c573074de84403de7902a06096d7483194ad47775d355b9800000008008b0500"/193], &(0x7f0000000540)=0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8) setuid(r10) r11 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r11, 0x84, 0x6d, &(0x7f00000006c0)=ANY=[@ANYBLOB="ab000000a6d23fa0c9cb488bfdee3eb191726190f2d1d896773545328b79d2b3b62ccfa516aec8038d48d684fba227e9983be9f367da66938eddee11b1613f0d5ff3b2213c782bd00a8ae552bc17ec5e976fa67846060aa7629aed35eb9bb9e096cc3825df10acb8c0dff4569bb0f6f309ab46fa86a3856eb778df7afa4a3112676e9547e0d65bee83afa0b4f46a0b10af299da7efdcc6c573074de84403de7902a07096d7483194ad47775d355bd65460a5a52aa9cc384c962b12062cf85884362f08008907665c6716449a30c81bd56a349d36094f2add75bf53000100000000000000678a50a09ff13589016438d0c5f0044462e676a23850b5c862e289843fe3bb7d0fb8bcdcd9c07ccacbf83de79626720dae5ec76e30837a2c9dea5637c2ad6439cd6bf51986860a677896248acef0867cfdedb1f0f8e592c6105aef57c1c073c23507bd28cfcd47a74cafba3762f6b6c1c6ee238a2bfe44d0b9e8ef5a7998b7317c4b9dd2f9a20b0031abf74f7d16d6907e95b2addeda2f736ccb52ea2a1d243ce205c3a88af23045c0614b21cbf1b3cf4ece451658e9785da902db6baa4895a67e96c8eacc5e8fcf8de57aa3c70518f31e0d89b0a35a336c2e68e7846f8330302b729eceffdf18b98e510a6c236daeef51b4ea88a6326060d504db45d42ac1881dd10ff951cfd04d7ae550ccce2eaa0f62e03aa8b38c5e"], &(0x7f0000000540)=0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8) setuid(r12) r13 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r13, 0x84, 0x6d, &(0x7f0000000b40)=ANY=[@ANYBLOB="ab000000a6d23fa0c9cb488b6190f2d1d89677354590dde5ffb3b62ccfa516aec8038d48d684fba227e9983be9f367da66938eddee11b1613f0d5ff3b2213cdf2bd00a8ae552bc17ec5e976fa67846060aa7629aed35eb9bb9e096cc3825df10acb8c0dff4569bb0f6a15cab46fa86a3856eb778df7afa4a3112676e9547e0d65bee83afa0b4f46a0b10af299da7efdcc6c573074de84403de7902a07096d7483194ad47775d355bd65460a5a52aa9cc384c962b12062cf85884362f08008b07"], &(0x7f0000000540)=0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r13, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8) setuid(r14) r15 = request_key(0x0, &(0x7f0000001300)={'syz', 0x2}, &(0x7f0000001340)='em0cpusetmime_type\x00', 0xfffffffffffffff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) keyctl$chown(0x4, r15, 0x0, r16) r17 = request_key(0x0, &(0x7f0000001300)={'syz', 0x2}, &(0x7f0000001340)='em0cpusetmime_type\x00', 0xfffffffffffffff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) keyctl$chown(0x4, r17, 0x0, r18) r19 = request_key(0x0, &(0x7f0000001300)={'syz', 0x2}, &(0x7f0000001340)='em0cpusetmime_type\x00', 0xfffffffffffffff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) keyctl$chown(0x4, r19, 0x0, r20) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r5, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000a00)=ANY=[@ANYBLOB="02000000010002000000000002000400", @ANYRES32=r7, @ANYBLOB="02000200", @ANYRES32=r9, @ANYBLOB="02000100bb86b4c5600d592e64b86edda53135e0f392e4c9ca69b61556778ccf29c4990d1893fd049001c62278a88220d8bb3ef088a2bbfd6fdd3bbbaa8e7ff1e7d747037c523caba1237cfd937b81d9ae40c8e42df69a9ad815e799bd07b8468681a262136f0b4027e75c77b74f2bc0ad4402225b8f934741a657b08fa3e58bffe4394310ebab08c71788455eb3b79d61d24d289378388103fdaa96ee42a18df1027aa5865c0b", @ANYRES32=r10, @ANYBLOB="02000400", @ANYRES32=r4, @ANYBLOB, @ANYRES32=r12, @ANYBLOB="02000200", @ANYRES32=r14, @ANYBLOB="02000500", @ANYRES32=r4, @ANYBLOB="040002000000000008000100", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=r16, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r18, @ANYBLOB="08000400", @ANYRES32=r20, @ANYBLOB="08000300", @ANYRES32=r21, @ANYRES32, @ANYBLOB="0800d8b8", @ANYRES32, @ANYBLOB="10000200000000002000d6f800000000"], 0x1c, 0x2) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r23 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r25 = dup2(r24, r23) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r25, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r26}}}, @rights={{0x14, 0x1, 0x1, [r22]}}], 0x38}, 0x0) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) keyctl$chown(0x4, r3, r7, r27) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0xf9, 0x0, 0x0, 0xfffffffffffffe5d) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) 16:05:36 executing program 1: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000280)=ANY=[@ANYBLOB='\n\x00\x00\x00', @ANYPTR, @ANYBLOB="10000000", @ANYPTR=&(0x7f00000001c0)=ANY=[]]) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r4}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x38}, 0x0) setsockopt$packet_buf(r0, 0x107, 0x5, &(0x7f00000002c0)="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", 0x1000) 16:05:36 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="380100001a00010300000000000000000046028822554b913d00000000000000ac1514bb00000000000000000000000000000000000000000000000000000002", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f0000010000000000000000000000000000000033000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000008000000000000000480001007368613100"/240], 0x138}}, 0x0) [ 683.217836][T11840] usb 1-1: USB disconnect, device number 102 [ 683.238825][T11840] iowarrior 1-1:0.135: I/O-Warror #0 now disconnected 16:05:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="2400000023002908000000000000000004000000100011002e67ff66908f1a39797065000ea5ef624393cd803cd42c51f53d40297062caaee8f723ba92f9e7ae37dcddc6c1d857e3185007014e731256b692e5fd0bf6bae62efd4b7ab54b6ab0db09"], 0x24}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000003f00)={&(0x7f00000037c0)={0x14, r2, 0x1}, 0x14}}, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000040)=0xe8) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x1, 0x0) getresuid(&(0x7f0000000100), &(0x7f0000000200)=0x0, &(0x7f0000000240)) r9 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x27) r10 = socket(0xa, 0x3, 0x6) connect$bt_rfcomm(r10, &(0x7f0000000000)={0x1f, {0xfe, 0x0, 0x1000, 0x80000001, 0x6, 0x5}, 0x8}, 0xa) bind$inet6(r10, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x6}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f0000000480)=0xe8) r12 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r12, 0x84, 0x6d, &(0x7f0000000900)=ANY=[@ANYBLOB="ab000000a6d23fa0c9cb488b619002d1d896e5ffb3b62ccfa516aec8038d482cd2aa0b6ac0d684fba227e9983be9f367da66938eddee11b161213cdf2bd00a8ae552bc17ec5e976fa67846060aa7629aed35eb9bb9e096cc3825df10acb8c0dff4569bb0f686a3856eb778df7afa4a3112676e9547e0d65bee83afa0b4f46a0b10af299da7efdcc6c573074de84403de7902a06096d7483194ad47775d355b9800000008008b0500"/193], &(0x7f0000000540)=0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8) setuid(r14) r15 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r15, 0x84, 0x6d, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000540)=0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r15, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8) setuid(r16) r17 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r17, 0x84, 0x6d, &(0x7f0000000b40)=ANY=[@ANYBLOB="ab000000a6d23fa0c9cb488b6190f2d1d89677354590dde5ffb3b62ccfa516aec8038d48d684fba227e9983be9f367da66938eddee11b1613f0d5ff3b2213cdf2bd00a8ae552bc17ec5e976fa67846060aa7629aed35eb9bb9e096cc3825df10acb8c0dff4569bb0f6a15cab46fa86a3856eb778df7afa4a3112676e9547e0d65bee83afa0b4f46a0b10af299da7efdcc6c573074de84403de7902a07096d7483194ad47775d355bd65460a5a52aa9cc384c962b12062cf85884362f08008b07"], &(0x7f0000000540)=0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8) setuid(r18) r19 = request_key(0x0, &(0x7f0000001300)={'syz', 0x2}, &(0x7f0000001340)='em0cpusetmime_type\x00', 0xfffffffffffffff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) keyctl$chown(0x4, r19, 0x0, r20) r21 = request_key(0x0, &(0x7f0000001300)={'syz', 0x2}, &(0x7f0000001340)='em0cpusetmime_type\x00', 0xfffffffffffffff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) keyctl$chown(0x4, r21, 0x0, r22) r23 = request_key(0x0, &(0x7f0000001300)={'syz', 0x2}, &(0x7f0000001340)='em0cpusetmime_type\x00', 0xfffffffffffffff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) keyctl$chown(0x4, r23, 0x0, r24) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r9, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000a00)=ANY=[@ANYBLOB="02000000010002000000000002000400", @ANYRES32=r11, @ANYBLOB="02000200", @ANYRES32=r13, @ANYBLOB="02000100bb86b4c5600d592e64b86edda53135e0f392e4c9ca69b61556778ccf29c4990d1893fd049001c62278a88220d8bb3ef088a2bbfd6fdd3bbbaa8e7ff1e7d747037c523caba1237cfd937b81d9ae40c8e42df69a9ad815e799bd07b8468681a262136f0b4027e75c77b74f2bc0ad4402225b8f934741a657b08fa3e58bffe4394310ebab08c71788455eb3b79d61d24d289378388103fdaa96ee42a18df1027aa5865c0b", @ANYRES32=r14, @ANYBLOB="02000400", @ANYRES32=r8, @ANYBLOB, @ANYRES32=r16, @ANYBLOB="02000200", @ANYRES32=r18, @ANYBLOB="02000500", @ANYRES32=r8, @ANYBLOB="040002000000000008000100", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=r20, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r22, @ANYBLOB="08000400", @ANYRES32=r24, @ANYBLOB="08000300", @ANYRES32=r25, @ANYRES32, @ANYBLOB="0800d8b8", @ANYRES32, @ANYBLOB="10000200000000002000d6f800000000"], 0x1c, 0x2) lstat(&(0x7f0000003f00)='./file0\x00', &(0x7f0000003f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, r26) write$P9_RSTATu(r7, &(0x7f0000000480)={0x7c, 0x7d, 0x1, {{0x0, 0x5a, 0x3, 0x8, {0x4, 0x0, 0x5}, 0x6a220000, 0xa8, 0x0, 0x44116783, 0x0, '', 0x7, 'selinux', 0x10, 'pfifo_head_drop\x00', 0x10, 'pfifo_head_drop\x00'}, 0xd, 'ppp1+vboxnet0', r8, r26, r4}}, 0x7c) r27 = socket$netlink(0x10, 0x3, 0x0) r28 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r28, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r28, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r27, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r29}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r29, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r29, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0xe, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) r30 = socket$nl_route(0x10, 0x3, 0x0) r31 = socket$nl_route(0x10, 0x3, 0x0) r32 = socket$netlink(0x10, 0x3, 0x0) r33 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r33, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r32, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r31, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="4000000024000800000000000000060003000000000000", @ANYRES32, @ANYBLOB="00000000ffffffff0000000014000100706669666f5f686561645f64726f70000800020000000000"], 0x40}}, 0x0) sendmsg$nl_route_sched(r30, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0xe, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x14420000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r2, @ANYBLOB="100027bd7000fcdbdf250300000008000100", @ANYRES32=r3, @ANYBLOB="3c00020038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004004000000008000100", @ANYRES32=r29, @ANYBLOB="400002003c00010024000100757365725f6c696e6b7570000000000000000000000000000000000000000000a6344f4aa0bac42d0400040008000600", @ANYRES32=0x0], 0xa0}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) 16:05:36 executing program 2: seccomp(0x1, 0x0, &(0x7f00000005c0)={0x3, &(0x7f0000000040)=[{}, {0x35, 0x4}, {0x6, 0x0, 0x0, 0x7}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0xe, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x50, r4}) 16:05:36 executing program 4: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700090400810000001f000000000000000800040005000000", 0xfc9b) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) [ 683.515111][T22352] netlink: 'syz-executor.5': attribute type 14 has an invalid length. [ 683.536116][T11950] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 683.551189][T22352] netlink: 'syz-executor.5': attribute type 14 has an invalid length. 16:05:36 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) pipe2(&(0x7f0000000300), 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000180)={0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'sh\x00', 0x0, 0x0, 0x15}, 0x2c) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000004c0)={0x0, &(0x7f0000000540)=""/235}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) fcntl$getownex(r0, 0x10, &(0x7f0000000340)) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f0000000640)=@v1={0x0, @aes128, 0x4, "0bb2554663f9852e"}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000480)={0x238, r4, 0x200}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_NMI(r3, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 683.563012][T22357] netlink: 'syz-executor.2': attribute type 14 has an invalid length. 16:05:36 executing program 4: syz_emit_ethernet(0x67, &(0x7f0000000080)={@random="6d9a55198641", @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x4, 0x355, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @broadcast}, @gre={{0x0, 0x0, 0x1, 0x0, 0xb, 0xffffffffffffffff, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [], '8'}, {}, {0x0, 0x21}, {0x8, 0x22eb, 0x0, {{}, 0x2, 0xffffffff}}}}}}}, 0x0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x1, 0x0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r6}}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x38}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmmsg(r7, &(0x7f0000000140)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000280)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000001ae, 0x62, 0x0) r8 = dup2(r7, r1) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r8, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r9}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x38}, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r0, 0x4010ae94, &(0x7f0000000000)={0x7, 0x7}) [ 683.622524][T22357] netlink: 'syz-executor.2': attribute type 14 has an invalid length. [ 683.643800][T22352] netlink: 'syz-executor.5': attribute type 14 has an invalid length. [ 683.682923][T11840] usb 1-1: new high-speed USB device number 103 using dummy_hcd 16:05:36 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000040)='./file0\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x8000fffffffe) connect$unix(r1, &(0x7f0000000400)=@abs, 0x6e) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000240)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r4, &(0x7f0000000480)={0xb, 0x10, 0xfa00, {&(0x7f0000000980), 0xffffffffffffffff, 0x80000000}}, 0x18) r5 = socket$tipc(0x1e, 0x6fa25d019db5b15, 0x0) fdatasync(r5) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {&(0x7f00000000c0), 0x2, {0xa, 0x4e23, 0x2, @mcast2, 0x2}}}, 0x38) 16:05:36 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r2) socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, 0xffffffffffffffff) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6(0xa, 0x1000000000002, 0x0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r11, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r12}}}, @rights={{0x14, 0x1, 0x1, [r8]}}], 0x38}, 0x0) r13 = accept4$inet(r11, 0x0, &(0x7f0000000140), 0x800) getsockopt$IPT_SO_GET_ENTRIES(r13, 0x0, 0x41, &(0x7f00000001c0)={'security\x00', 0x2, "c8f8"}, &(0x7f0000000200)=0x26) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = dup2(r14, r7) getsockopt$sock_cred(r15, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r15, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r16}}}, @rights={{0x14, 0x1, 0x1, [r6]}}], 0x38}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYRESOCT=r2, @ANYRES16, @ANYRES64=r4, @ANYRESHEX, @ANYPTR64, @ANYRES64, @ANYPTR=&(0x7f0000000040)=ANY=[@ANYPTR64, @ANYRES32=r15, @ANYRESHEX=0x0], @ANYRES64], @ANYRES16, @ANYPTR64=&(0x7f0000000480)=ANY=[@ANYRES32=r0], @ANYBLOB="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"], 0x4}}, 0x184bc887c16346d6) [ 683.798765][T11950] usb 2-1: Using ep0 maxpacket: 8 16:05:36 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x4080, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000080)=0xffffffffffffff93, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast2, 0x2}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r2, 0x0, 0xa808) [ 683.962884][T11950] usb 2-1: unable to get BOS descriptor or descriptor too short [ 684.042726][T11950] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 684.062857][T11840] usb 1-1: config 0 has an invalid interface number: 135 but max is 0 [ 684.071146][T11840] usb 1-1: config 0 has no interface number 0 [ 684.077428][T11840] usb 1-1: config 0 interface 135 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 684.088234][T11840] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 684.100307][T11840] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has invalid maxpacket 1646, setting to 1024 [ 684.111848][T11840] usb 1-1: config 0 interface 135 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 684.125071][T11840] usb 1-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=65.14 [ 684.134267][T11840] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.189377][T11840] usb 1-1: config 0 descriptor?? [ 684.224509][T11950] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 684.234258][T11950] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.242557][T11950] usb 2-1: Product: syz [ 684.246843][T11950] usb 2-1: Manufacturer: syz [ 684.251538][T11950] usb 2-1: SerialNumber: syz [ 684.267677][T11840] iowarrior 1-1:0.135: IOWarrior product=0x1501, serial= interface=135 now attached to iowarrior0 [ 684.463560][T11950] usb 1-1: USB disconnect, device number 103 [ 684.474126][T11950] iowarrior 1-1:0.135: I/O-Warror #0 now disconnected [ 684.508705][T11874] usb 2-1: USB disconnect, device number 49 [ 685.242214][T11874] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 685.282311][T11950] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 685.532774][T11950] usb 2-1: Using ep0 maxpacket: 8 [ 685.612376][T11874] usb 1-1: config 0 has an invalid interface number: 135 but max is 0 [ 685.620648][T11874] usb 1-1: config 0 has no interface number 0 [ 685.626946][T11874] usb 1-1: config 0 interface 135 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 685.637701][T11874] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 685.649134][T11874] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has invalid maxpacket 1646, setting to 1024 [ 685.660610][T11874] usb 1-1: config 0 interface 135 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 685.673838][T11874] usb 1-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=65.14 [ 685.683158][T11874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.693209][T11874] usb 1-1: config 0 descriptor?? [ 685.749958][T11874] iowarrior 1-1:0.135: IOWarrior product=0x1501, serial= interface=135 now attached to iowarrior0 [ 685.784099][T11950] usb 2-1: unable to get BOS descriptor or descriptor too short [ 685.872328][T11950] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 685.945201][T11874] usb 1-1: USB disconnect, device number 104 [ 685.964166][T11874] iowarrior 1-1:0.135: I/O-Warror #0 now disconnected [ 686.062339][T11950] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 686.071726][T11950] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.079899][T11950] usb 2-1: Product: syz [ 686.084445][T11950] usb 2-1: Manufacturer: syz [ 686.089248][T11950] usb 2-1: SerialNumber: syz 16:05:39 executing program 0: syz_usb_connect(0x0, 0xbc, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001c00f54075c0070115146500000001090222000100000000090487000103011200090500000000000000070581bb6e86a9"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000040)=0xfffffffffffffff9) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000100)=' ', 0x1}], 0x1) 16:05:39 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/231}) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x1, 0x20) ioctl$TIOCLINUX4(r1, 0x541c, &(0x7f0000000200)) r2 = syz_open_pts(0xffffffffffffffff, 0x800) write$binfmt_elf32(r2, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x1, 0x7, 0x1, 0x0, 0x2, 0x0, 0x7ff, 0x2fb, 0x38, 0x1cd, 0x8, 0x3, 0x20, 0x2, 0x40, 0x25, 0x43}, [{0x6, 0x4, 0x9, 0x7, 0x2, 0x5, 0x200, 0x8001}], "cfd487bfa281e7f3f5322a44bbbf657e5b04a21d667cf1a46827579c65f863b54bd71eddaf14a25989589afba95b7387860c4058cd92531f9821257366e43ff705674382a06165e9be20523481bf678669b3d89a5e2491ad9eb9136e43", [[], [], []]}, 0x3b5) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000600)={0x4}, 0x4) r3 = accept4(r0, 0x0, &(0x7f0000000c00), 0x80000) bind$vsock_stream(r3, &(0x7f0000000c40)={0x28, 0x0, 0x2711, @reserved}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000c80)={0xffffffff, 0x10000, 0x8, 0x8, 0xfffffffa}, 0x14) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000d00)={0x0, {0x2, 0x4e20, @multicast2}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e24, @rand_addr=0x5}, 0xe8, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000cc0)='ip6tnl0\x00', 0x1, 0x7fff, 0x8001}) syz_open_dev$sndtimer(&(0x7f0000000d80)='/dev/snd/timer\x00', 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp\x00', 0x41, 0x0) ioctl$TCSETA(r4, 0x5406, &(0x7f0000000e00)={0x9, 0x6, 0x8001, 0x1, 0x3, 0x5, 0x1, 0x6, 0x5b, 0x70}) prctl$PR_SET_DUMPABLE(0x4, 0x1) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000e40)='/dev/hwrng\x00', 0x400800, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000fc0)={0x2, 0x0, [{0x0, 0xcf, &(0x7f0000000e80)=""/207}, {0x6000, 0x12, &(0x7f0000000f80)=""/18}]}) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001040)='/dev/mixer\x00', 0x80000, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r6, 0x40206417, &(0x7f0000001080)={0x4, 0x10001, 0x0, 0xbf, 0x4, 0x5}) ioctl$LOOP_SET_FD(r0, 0x4c00, r4) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f00000010c0)={0x73, @remote, 0x4e21, 0x2, 'nq\x00', 0x4, 0x7fffffff, 0x7c}, 0x2c) ioctl$KVM_GET_API_VERSION(r5, 0xae00, 0x0) r7 = syz_open_dev$sndpcmp(&(0x7f0000001100)='/dev/snd/pcmC#D#p\x00', 0xbe, 0x10000) ioctl$HIDIOCSFEATURE(r7, 0xc0404806, &(0x7f0000001140)="eee6aea341b54893b902d297464af96a555f628f8a4f2848d9da9ac6356af15163f988312f9ce3c80749a439ae55322178b04bb96e04405b4fe258c7f8eb16af46cc90375cce39ddd194dd194db40dff04ad27d02e853820bba4ef541246a9b0fe5a18156c2b623685a5dc0a3ebe22efd18aae578746a3c7e0d795612f097056d2d7fa3a0950270ff86e8fc09d482b1657a639196233d779edec6dfab284fc03e864b1594caef104dd91f9b57086bcb7a1799500b8ff7e964e30c63e7370c4b2312774755040d31613b49586c333761a2acc82447fb6f9cd59810947befeaa") prctl$PR_GET_TIMERSLACK(0x1e) r8 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001240)='/dev/qat_adf_ctl\x00', 0x121002, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) write$P9_RLOPEN(r9, &(0x7f0000001280)={0x18, 0xd, 0x1, {{0x20, 0x0, 0x7}, 0x2}}, 0x18) 16:05:39 executing program 5: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newtfilter={0x74, 0x2c, 0x701, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x3}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x44, 0x2, [@TCA_TCINDEX_POLICE={0x40, 0x6, @TCA_POLICE_TBF={0xbd}}]}}]}, 0x74}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0) 16:05:39 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x25, &(0x7f0000000000)=0xb5e, 0x4) listen(r0, 0x400000100000001) setsockopt$sock_int(r0, 0x1, 0x3f, &(0x7f0000000080)=0x7ff, 0x4) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef}, 0xb) recvmmsg(r1, &(0x7f0000004300), 0x3a4, 0x0, 0x0) 16:05:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890c, &(0x7f0000000000)) ioctl(r1, 0x40, &(0x7f0000000580)="4b53028e43f83adda21bb846dc9be91dec000e1ed2b9d71f3e9615f839eafd55ff65c7566c48a2e65a0ef05b54c50bc0267f6c8235db500bb4aadfc364d18029ca0c30a32e53ccbffef3") ioctl$TCSETXF(0xffffffffffffffff, 0x5434, 0x0) add_key$user(&(0x7f0000000740)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000004c0)="004dde0301b3d8a52150dbf7f3649aa4a133b1b47392870e2defc66e389f1912e8d05566b4faa7040cc60d103d385210cae9cc0804628a83533410d5996991644a3fe726a1063c39e41d570890b0d9256e0b19698ef7213a67bcfc7af200080000f071991224ad9524b280b9fa224a833ea0cc3c5a51d5d20acd5aa3a5926c8079170000000000000000000000000054db45165107b9c877a83a6bfaf6f33a59150445c45cc59c3a967d69bd8ecb5724a39784673c37c977e61cc6b3e20cd4f9", 0xc0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)="947d98374aa3dd2effa1e0c694f4514ab42de553082ffc424161352738fedb445f311e962f873e7423377212cf1241ac28a77b021c5e68d5a059b892d35d91c577cb0a1a6bd9d2b30c154b206ca75b49d8eaad2e25f1fb3447cd5c39ab75918368dbfb0cf944373d6ade04095bf69356a463e8cd7b0309095a1bf3e0a79ed99a96fb1b37fcda41294100dbd99e1f90bd69936259404516b2e11e2a11d9b57cf0ab511e312bf0c2733a4d4860cf", 0xad, 0xfffffffffffffffc) add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000002c0)={'syz'}, &(0x7f00000004c0)="004dde0301b3d8a52150dbf7f3649aa4a133b1b47392870e2defc66e389f1912e8d05566b4faa7040cc60d103d385210cae9cc0804628a83533410d5996991644a3fe726a1063c39e41d570890b0d9256e0b19698ef7213a67bcfc7af200080000f071991224ad9524b280b9fa224a833ea0cc3c5a51d5d20acd5aa3a5926c8079170000000000000000000000000054db45165107b9c877a83a6bfaf6f33a59150445c45cc59c3a967d69bd8ecb5724a39784673c37c977e61cc6b3e20cd4", 0xbf, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r3 = fcntl$dupfd(r2, 0x0, r2) write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x10f) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b06cb2f80becef466538000013240007050000ab", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000800010008667363000000000400020004000000"], 0x38}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) r14 = syz_open_dev$dmmidi(&(0x7f0000000300)='/dev/dmmidi#\x00', 0x9, 0x40100) sendmsg$NBD_CMD_DISCONNECT(r14, &(0x7f0000000340)={0x0, 0xd, &(0x7f0000000180)={0x0, 0xfffffebe}}, 0x4004004) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r15}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r15, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x8, 0x1, 'hfsc\x00'}, {0x4}}]}, 0x38}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) 16:05:39 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xc0, 0xbb, 0x9b, 0x40, 0x20b7, 0x1540, 0xef8f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x6a, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x21, 0x1, 0x1f}}) syz_usb_control_io(r0, 0x0, &(0x7f0000002400)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000023c0)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x40, 0x21, 0x1, 0x7}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x40, 0x21, 0x1}}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0}) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000280)) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x184800) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f00000000c0)=""/216) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f00000001c0)={0x3}) [ 686.303361][T11874] usb 2-1: USB disconnect, device number 50 [ 686.372162][ C0] sd 0:0:1:0: [sg0] tag#4713 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 686.381791][ C0] sd 0:0:1:0: [sg0] tag#4713 CDB: Test Unit Ready [ 686.388722][ C0] sd 0:0:1:0: [sg0] tag#4713 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 686.398567][ C0] sd 0:0:1:0: [sg0] tag#4713 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 686.408323][ C0] sd 0:0:1:0: [sg0] tag#4713 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 686.418356][ C0] sd 0:0:1:0: [sg0] tag#4713 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 686.418411][ C0] sd 0:0:1:0: [sg0] tag#4713 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 686.418463][ C0] sd 0:0:1:0: [sg0] tag#4713 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 686.418512][ C0] sd 0:0:1:0: [sg0] tag#4713 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 686.418564][ C0] sd 0:0:1:0: [sg0] tag#4713 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 686.418616][ C0] sd 0:0:1:0: [sg0] tag#4713 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 686.418672][ C0] sd 0:0:1:0: [sg0] tag#4713 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 686.418762][ C0] sd 0:0:1:0: [sg0] tag#4713 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 686.438371][ C0] sd 0:0:1:0: [sg0] tag#4713 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 686.457994][ C0] sd 0:0:1:0: [sg0] tag#4713 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 686.477453][ C0] sd 0:0:1:0: [sg0] tag#4713 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 686.496878][T22408] QAT: Invalid ioctl [ 686.497315][ C0] sd 0:0:1:0: [sg0] tag#4713 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 686.524367][T22409] device veth26 entered promiscuous mode [ 686.569634][T22408] QAT: Invalid ioctl 16:05:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r5, r4) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r7}}}, @rights={{0x14, 0x1, 0x1, [r3]}}], 0x38}, 0x0) r8 = socket(0x10, 0x3, 0x0) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r9, 0x401, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}]}, 0x2c}}, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r9, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80000000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4002}, 0x40c800c) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000fc0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 686.842405][T11840] usb 1-1: new high-speed USB device number 105 using dummy_hcd 16:05:39 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x25, &(0x7f0000000000)=0xb5e, 0x4) listen(r0, 0x400000100000001) setsockopt$sock_int(r0, 0x1, 0x3f, &(0x7f0000000080)=0x7ff, 0x4) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef}, 0xb) recvmmsg(r1, &(0x7f0000004300), 0x3a4, 0x0, 0x0) 16:05:39 executing program 5: syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000018b7c540c215430065d20000000109021b000100000000090400000145e54f00090584033e330fae63e7238511c5373cf1000000"], 0x0) pipe(&(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r4}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x38}, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r6, 0x401, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}]}, 0x2c}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x4c, r6, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xff}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4000800) io_setup(0x7ff, &(0x7f00000001c0)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=""/246) [ 686.943741][T22424] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 686.980721][T22416] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 687.026226][T22433] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 687.047251][T22407] sg_write: process 1349 (syz-executor.4) changed security contexts after opening file descriptor, this is not allowed. 16:05:40 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000240)=0x20, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @broadcast}}, 0x0, 0x9, 0x0, "aa6950035b33888ba3eb46d88e503df9a1c959e9e2b850dcdbd5f8fb26481763bdac293876227e0a878412fa992319abb7d66505e9f98678fbeb414805ca67e571afbf557724881f34e1c6ff0ea7bd1e"}, 0xd8) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r2, 0x10d, 0xf0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000014000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000859d8e4b189e05803fa8453d68fe0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000066764b3531c057e0000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000f100"/537], 0x219) shutdown(r1, 0x1) [ 687.135914][T11840] usb 1-1: no configurations [ 687.139590][T22407] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 687.140711][T11840] usb 1-1: can't read configurations, error -22 16:05:40 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000a80)=ANY=[@ANYBLOB="03"], 0x1, 0x0) msgrcv(r1, &(0x7f00000001c0)={0x0, ""/113}, 0x79, 0x3, 0x405a556a350f348f) msgsnd(r1, &(0x7f0000000080)=ANY=[@ANYPTR64=&(0x7f0000000000)=ANY=[]], 0x1, 0x0) getresuid(&(0x7f0000000100), &(0x7f0000000200)=0x0, &(0x7f0000000240)) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x27) r4 = socket(0xa, 0x3, 0x6) connect$bt_rfcomm(r4, &(0x7f0000000000)={0x1f, {0xfe, 0x0, 0x1000, 0x80000001, 0x6, 0x5}, 0x8}, 0xa) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x6}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f0000000480)=0xe8) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000000900)=ANY=[@ANYBLOB="ab000000a6d23fa0c9cb488b619002d1d896e5ffb3b62ccfa516aec8038d482cd2aa0b6ac0d684fba227e9983be9f367da66938eddee11b161213cdf2bd00a8ae552bc17ec5e976fa67846060aa7629aed35eb9bb9e096cc3825df10acb8c0dff4569bb0f686a3856eb778df7afa4a3112676e9547e0d65bee83afa0b4f46a0b10af299da7efdcc6c573074de84403de7902a06096d7483194ad47775d355b9800000008008b0500"/193], &(0x7f0000000540)=0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8) setuid(r8) r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r9, 0x84, 0x6d, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000540)=0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8) setuid(r10) r11 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r11, 0x84, 0x6d, &(0x7f0000000b40)=ANY=[@ANYBLOB="ab000000a6d23fa0c9cb488b6190f2d1d89677354590dde5ffb3b62ccfa516aec8038d48d684fba227e9983be9f367da66938eddee11b1613f0d5ff3b2213cdf2bd00a8ae552bc17ec5e976fa67846060aa7629aed35eb9bb9e096cc3825df10acb8c0dff4569bb0f6a15cab46fa86a3856eb778df7afa4a3112676e9547e0d65bee83afa0b4f46a0b10af299da7efdcc6c573074de84403de7902a07096d7483194ad47775d355bd65460a5a52aa9cc384c962b12062cf85884362f08008b07"], &(0x7f0000000540)=0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8) setuid(r12) r13 = request_key(0x0, &(0x7f0000001300)={'syz', 0x2}, &(0x7f0000001340)='em0cpusetmime_type\x00', 0xfffffffffffffff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) keyctl$chown(0x4, r13, 0x0, r14) r15 = request_key(0x0, &(0x7f0000001300)={'syz', 0x2}, &(0x7f0000001340)='em0cpusetmime_type\x00', 0xfffffffffffffff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) keyctl$chown(0x4, r15, 0x0, r16) r17 = request_key(0x0, &(0x7f0000001300)={'syz', 0x2}, &(0x7f0000001340)='em0cpusetmime_type\x00', 0xfffffffffffffff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) keyctl$chown(0x4, r17, 0x0, r18) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r3, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000a00)=ANY=[@ANYBLOB="02000000010002000000000002000400", @ANYRES32=r5, @ANYBLOB="02000200", @ANYRES32=r7, @ANYBLOB="02000100bb86b4c5600d592e64b86edda53135e0f392e4c9ca69b61556778ccf29c4990d1893fd049001c62278a88220d8bb3ef088a2bbfd6fdd3bbbaa8e7ff1e7d747037c523caba1237cfd937b81d9ae40c8e42df69a9ad815e799bd07b8468681a262136f0b4027e75c77b74f2bc0ad4402225b8f934741a657b08fa3e58bffe4394310ebab08c71788455eb3b79d61d24d289378388103fdaa96ee42a18df1027aa5865c0b", @ANYRES32=r8, @ANYBLOB="02000400", @ANYRES32=r2, @ANYBLOB, @ANYRES32=r10, @ANYBLOB="02000200", @ANYRES32=r12, @ANYBLOB="02000500", @ANYRES32=r2, @ANYBLOB="040002000000000008000100", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=r14, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r16, @ANYBLOB="08000400", @ANYRES32=r18, @ANYBLOB="08000300", @ANYRES32=r19, @ANYRES32, @ANYBLOB="0800d8b8", @ANYRES32, @ANYBLOB="10000200000000002000d6f800000000"], 0x1c, 0x2) lstat(&(0x7f0000003f00)='./file0\x00', &(0x7f0000003f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, r20) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r22 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r24 = dup2(r23, r22) getsockopt$sock_cred(r24, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r24, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r25}}}, @rights={{0x14, 0x1, 0x1, [r21]}}], 0x38}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r21, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@ipv4={[], [], @initdev}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@local}}, &(0x7f0000000000)=0xe8) r27 = getgid() pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r29 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r31 = dup2(r30, r29) getsockopt$sock_cred(r31, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r31, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r32}}}, @rights={{0x14, 0x1, 0x1, [r28]}}], 0x38}, 0x0) r33 = getpid() msgctl$IPC_SET(r1, 0x1, &(0x7f00000001c0)={{0xfff, r10, r20, r26, r27, 0xe4, 0x100}, 0x1f, 0x100000001, 0x400000000000000, 0x9dc7, 0x401, 0x1, r32, r33}) sendmsg$kcm(r0, &(0x7f0000000080), 0x20000000) 16:05:40 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000080)=[{0x5, 0x10, 0x3, 0x1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) socket$inet6(0xa, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) sendto$inet(r0, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) [ 687.232598][T11950] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 687.325061][T11874] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 687.382327][T11840] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 687.592492][T11950] usb 6-1: New USB device found, idVendor=15c2, idProduct=0043, bcdDevice=d2.65 [ 687.601727][T11950] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.611519][T11950] usb 6-1: config 0 descriptor?? [ 687.668219][T11950] input: iMON Panel, Knob and Mouse(15c2:0043) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input30 [ 687.672765][T11840] usb 1-1: no configurations [ 687.684841][T11840] usb 1-1: can't read configurations, error -22 [ 687.694054][T11840] usb usb1-port1: attempt power cycle [ 687.712471][T11874] usb 2-1: config 0 has an invalid interface number: 106 but max is 0 [ 687.720788][T11874] usb 2-1: config 0 has no interface number 0 [ 687.727012][T11874] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 687.736170][T11874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.746638][T11874] usb 2-1: config 0 descriptor?? [ 687.772514][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 687.778892][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 687.872742][T11950] imon:send_packet: packet tx failed (-71) [ 687.892198][T11950] imon 6-1:0.0: panel buttons/knobs setup failed [ 687.898840][T11950] Registered IR keymap rc-imon-pad [ 687.922756][T11950] imon:send_packet: packet tx failed (-71) [ 687.943547][T11950] imon 6-1:0.0: remote input dev register failed [ 687.950291][T11950] imon 6-1:0.0: imon_init_intf0: rc device setup failed [ 688.113891][T11950] imon 6-1:0.0: unable to initialize intf0, err 0 [ 688.120416][T11950] imon:imon_probe: failed to initialize context! [ 688.127291][T11950] imon 6-1:0.0: unable to register, err -19 [ 688.141529][T11950] usb 6-1: USB disconnect, device number 62 [ 688.412354][T11840] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 688.642096][T11950] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 688.712279][T11840] usb 1-1: no configurations [ 688.717242][T11840] usb 1-1: can't read configurations, error -22 [ 688.872233][T11840] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 688.912181][T11874] usb 2-1: ATUSB: AT86RF212 version 0 [ 689.002257][T11950] usb 6-1: New USB device found, idVendor=15c2, idProduct=0043, bcdDevice=d2.65 [ 689.002330][T11950] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.021122][T11950] usb 6-1: config 0 descriptor?? [ 689.068490][T11950] input: iMON Panel, Knob and Mouse(15c2:0043) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input32 [ 689.134654][T11874] usb 2-1: Firmware: major: 176, minor: 42, hardware type: UNKNOWN (87) [ 689.143743][T11874] usb 2-1: failed to fetch extended address, random address set [ 689.151551][T11874] usb 2-1: atusb_probe: initialization failed, error = -524 [ 689.159190][T11874] atusb: probe of 2-1:0.106 failed with error -524 [ 689.194567][T11840] usb 1-1: no configurations [ 689.199309][T11840] usb 1-1: can't read configurations, error -22 [ 689.217502][T11840] usb usb1-port1: unable to enumerate USB device [ 689.288486][T11950] imon:send_packet: packet tx failed (-71) [ 689.318274][T11950] imon 6-1:0.0: panel buttons/knobs setup failed [ 689.325083][T11950] Registered IR keymap rc-imon-pad [ 689.336565][T11840] usb 2-1: USB disconnect, device number 51 [ 689.343190][T11950] imon:send_packet: packet tx failed (-71) [ 689.362306][T11950] imon 6-1:0.0: remote input dev register failed [ 689.368861][T11950] imon 6-1:0.0: imon_init_intf0: rc device setup failed 16:05:42 executing program 0: syz_usb_connect(0x0, 0xbc, &(0x7f0000002c40)={{0x12, 0x1, 0x0, 0x1c, 0x0, 0xf5, 0x40, 0x7c0, 0x1501, 0x6514, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x87, 0x0, 0x1, 0x3, 0x1, 0x12, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "81bb6e86a9"}]}}]}}]}}]}}, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) clone(0x2800100, &(0x7f0000000000)="ff7b3e1cc98aa1ff303f3b01ffa933de5353fa99e4b8859626fb1ee143b464d5c3be06d242180251054c66e6106776bc2f38155ce696e60e66649f3f6e314c9613f1204fbec133ed88a7340a67ffb7970915252ff01d073902abecb3e8085861b04f312c09", &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000240)="d56feb225313c2df4372015a151d11715f5fb1027da6a669bb4fbc8e882a61ee35aef047cc8b67bfb3ce8655c365038c252fb4fd7127ef65ab97a030e9319313ee91e0ae102a26941103c90865af8197a6a03280fb8fddfa79bfe53bf9e84d59abe4bf9ef9522c5bec00cccb745c8d0d91e64ac8627f005a2a72f50497a901939b57b45a6422fb4f259d6c93f9be270ea0a3400049b163cb0c5ea2344244855e952425665e01b579ead2feb18f9df803b5e0d3cd8b5bf8c04bd1394ed36c5b8868917e7689511d8d91727b7be88892") writev(r0, &(0x7f0000000200)=[{&(0x7f0000000100)='a', 0x1}], 0x1) 16:05:42 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter6\x00') ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000040)=0x4) lseek(r0, 0x4, 0x0) 16:05:42 executing program 2: syz_usb_connect(0x2, 0x106, &(0x7f0000000900)={{0x12, 0x1, 0x0, 0x62, 0xf9, 0xd2, 0x8, 0x57b, 0x22, 0x8989, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x40, [{{0x9, 0x4, 0x6d, 0x0, 0x1, 0xd3, 0xa9, 0x49, 0x0, [], [{{0x7, 0x5, 0x38b, 0xffffffffffffffff, 0x392}}]}}]}}]}}, 0x0) 16:05:42 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) fcntl$getflags(0xffffffffffffffff, 0x401) getpgid(0x0) getresgid(0x0, &(0x7f00000008c0), 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) lstat(0x0, &(0x7f0000000c00)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000c80), 0x0) getpgrp(0x0) getuid() getgid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001c40)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000004}, {&(0x7f0000001a80)=@abs, 0x6e, 0x0}], 0x2, 0x20000000) getgroups(0x0, &(0x7f00000000c0)) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) lsetxattr$security_capability(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f00000000c0)=@v3={0x3000000, [{0xfff, 0x7fffffff}, {0x18, 0xe05c}], 0xee01}, 0x18, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r5, r4) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r7}}}, @rights={{0x14, 0x1, 0x1, [r3]}}], 0x38}, 0x0) sendmsg$nl_generic(r2, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x46a8a2b51a98ec22}, 0xc, &(0x7f0000000180)={&(0x7f0000001cc0)={0x13e8, 0x39, 0x300, 0x70bd26, 0x25dfdbff, {0xa}, [@generic="84924e72078a5eaf25a9c18c111027973c4e6a37ffbcd35f241f07044c6fe8e58e7cc81868a213b51b243e253674dd323f98c27ed735087ccfd22c7f0599c60ea4afe4526c716bb8e07e2d653d7c4b770343c215fa6cde991b0af0797724d59f7ac6d550a9a976936a4a5b2fe83b9062f2b31734f1f2190d523147747e861236aca12e463957a3148d50db0973cf2cccef2173a9e297221b6304bccda886f09368395483ba2a7464ee3197f85c23d50b8671b7483b46d9cb32e9624df5eae8a9482662891654a7a88828574d9682ca5bcb24ba498a3004c33ebef52317e0d1952d7c269b427e0ba6c08ed820e3b598ce3b7ee258404ec9766e603171751a1f9bd8c72eda132e8870ee3713eebf99ff7e6d8f78b219a077c5e79ad2862cd380c670627430d6a82c9c0bd4b26a01419b563c136f01397f82d8b3ab21594e99a7f108c1f45ed405d885eb6a3b1240f66f5f7030b7d153972363d5856e3ca285f9710d3d46597a97916d9556337d23a5b9cdd93dfb750ad11b004b2cc81ca9703ac965b4ee7c48f73183e31dbe43800e0e5d13bb1c6c2874b115bb53569232cfe4d08886a6b0d8a73bba841813da515a8e9fed7c6c75ad6ed325ba104424d1b3e4d1a665e7309ec4ec0062410f27a239d1ec19774aa8ae36455fad21a9434163870e4ccc33731e2c6e91578483e6f93e13bac013e15cfbf044508d4c3803ea034bc3200f2a788f83697bde762b578e3fddc798e717653472d292f4a2cddf74c404c0fa34803aa8ceec0d908b6d835b4d28dd33233c8e777a5d03ed7dc06c90478bcd13f463ffa3628aeab053fdd5e5a2b84384c462f27003ef181cfa34fca36b34f4f1bea3bf5bb246480c9611804dca1c35bf787446164ef7b68d9d5b7fec0c8a484aa15563181e8736258951ff9086a279612832c5b1517400560f9dc3dd461cb20cf80e88de932d9194e8b9940e7d47e8144b9ba11cb64057c475918aff26fa0865c3cc161e23013d6f16402d5f6116d685be99d922b7d13f31a9b68daeb4707d8d47be83ff514bd3b0882a1d136d307630bf75150b4148d29514512b6cead17cf314979c877055338125449427bf0fd135d75865be694f9b6541c4214176e825eefa702db9db1a5abb4cef64623f20d0e4b57d0b6aac922acc85ae84632ce3555a5abe7e0c82201e92c69ea3212916c64bf64ca44e6dd8f94be1c573f0053e910bb29f7521f973de4f2fe8f395a2eaa2836971bc60d2772de3df1d3e53cd908d9834a84bee42ea038a3f075dc08863c75bb9a38ee29af63be246e3a0983878ab3a558706ca8ad75f6b9122ddb94ca58de3c4c9612002f7021702245b1907ee55265ba41639ae24d6aef7f3b530b8f4d3456039d7e83a244c693832e99d9a2a7c8a743ae1d1533bb55defed369bbc118438aab4e6f8b1670626061a5cedf83eb8fcd6704ebc47fbcdeaa8efa286fb8abff95f8a440a5a960f43c64916480b91b5361c07f72aab69b1dd7468665b1363019d38a31e64ff3bc87b659031c8e94d6d9c18299c38d93de9ae4f6ba8c377e7a4683bb6ba6f51d3ae6acac988a66dec36d6766edb27b7e8b770763853b2cecdd6782217d3e8f48b68801d0f5db89963e5d604a41a8b4ce008b85062788c7baac4b0d4c220c54c46d7804bac98a54c5676bbbfb847f06d85a68ee01cc942517bfc6f9d48f80abaa2f35a9f8dc549ee41974c86842513664a039928837126363daecd9aa1ba643064b1730a77e0c1bb003e759bc451f56f714ad6bb37c37040138ca5bc39ec32455491c4fab2cb7db86e1e7c4733927a2543fceedf9a28da35e0530397778d04fd9fc0437b33eec98003ef83c676a9680c98052584f3a9785ee21773d0f629aefceb9a5b9301161bcb90f1495cbba370afd3eb50a683a39ef85f7e2c122e34dd80abd3feff7bd89395f3dab900d83d2ac48454d3af5ff148b63f210e2edc2c4577534df834987aca9bf3bbd0e950d1af034e47b46f81719cd869479a54100fc61d77ad8d67d5c6a570d1041e6f53cfa3e66ad89d1feecdc1bb12a26c076307b4c867d08754530cce81e286af0f1369f17d98f223439223683390c501be43e5f88a942ee3b667d63fb6c3d5e275e690fd4e33eff17b67386824825cf71929a6ebecaa5391ba5bd0fbe8ec4ee12cc3047709a5bf23e7d76c18234652e346a8539471275aff133bb430c88a06aea8aeb03b29d44db8363063a7bd534950bc9d5ee38c58023e586d9144a2da6c8baeb1c77deab1488948ca9dd32d50c99cfe43b354d8b5f9f26a02709bddb05c549d60eb7bd94d967beda201d31d54ec3a4344e298c0d4c81b1dc6a7fcd96b763e152507d8af2830c2619bf38d2e9d91f37408b5d1ebcbcaad44a0495aea450660c3f148e8040726fdf90f983e8c143a40d429c2207694d5a367a8953aadf1e819dae38bbf9d80d747c0a806da9b585ba9c7e2fb5d7de6180f32a04bbccb1867c9a5d8cf31d9934d7e452ef352e97b74a9a595abdd4426b43a9d130c84bf9a3d1bb0601a1470933933ad839e2277e55ceb2a24cdbe19fc005eb1ad215b59ba93d8676bbbb9df75c183828461eb6d7658a1506312e19fdb48572f16f21ea8fcc9e4140d93ce54d62fbd761cddd2572e7f29c59be40dd17b76423c134756424ccc10cf90bdd897d4a4d98d93dda67c30b4f4cc2a65e81b999011afdb6b81d70cd8b2b0ecacef30c6fa4c0fc73e06def0df46343fd403c34983c4c377b7bf1e1fe6edaf177964a4d61c7030e83f42ba6872188ef7cec894d8052678d1a22d3166cd3a18125387a5ca67850258f04b7acf0017f607280212eb780cdf3b72a2ce572944f99992ffacc49a8891a33d242513b3bbd9b49feca98620b4530cd36324ee99e3fc743891481dc3d3296bd4c7976207457fb814e37b401b8e87ba522004fd946bfe94164b570b1f43f1d41655eb1ebb511b4c64464d0d5877ea59c318ae4259cd88e16161148fccc3bf677f17a104f3e20ebbf98079a767ea194618c6bea510acecc912edb3909e5d1aa92b6a9c942f12b922252f00f2d3b71542c3a53083df5da27c658ebd6851c742128229d5205d94500ecf3847320453baa00be0e04b7b8ef7fcbcbeb40bd3cc8e614be40fe8bbe431636b511a9ec98773a1831df316bd10797973a8162a54f2c879a5bf821ea0117efbaa145b6de6844baa54cab7f00d153cfde0d72b43add9a8d2c8a03f604a9d4cae6a7dca7671de29dbfe286a2c7476ac229da4f4cf8319c4eb4b60785e2f6e0cbe95ae261dc12b7cbfa682b97f7be2280a77b2635387db368e95ee7860a65b4efaf293316f1b52e43d90e26e53e7612aea7e3dd99a8c9ea6ddabad9323ebfe6333bfa587c9c96ad6ccec3eb2de20a44329d06913b2db156db76990ab1a913bd1ba882ceab3ef4f0a3b048524306c977e74dc05a4c175563c772d311c882530c0b55e056905c081dd35312a259e0572a2e3dc240f77f07b709873620f60754129db0a8e392a4e0fe0d5b88d30dbf88b75ee3c0326bf78561a5047004ea70a893adf628e42a73c03ce34fb7ccc5ad050fd2aeadadb56baf54b89b033bb973642551100a421af0771515f91e7c0254ef9b4c5130f54e6e6a2c6681db990dd45026e7beb317cfaf6fceb66197cc64698478060463b798da2c3836c0b2051b99771ea510d899ddc606617a9306345a1a4a0f4e0f99e58ccf8acf62161b6f5210fc115cad728c4fa4fdfab7a41cf9c2d06e8739cc507c34b9df3d6ab9383a0b9249f5c570c4baa2e4163cfbfd76d8d40868fcfe705df370af7e0232190efa3e08187e4e2bb2913fd395faf008fdc747556ad112116739436c880e95c4cd22f1981142d9c6355cb776109c1895f3207200d610a3cc9bd1ed88868b80c3f552160edb2ad9b1d3cf5fa768d98def677832d04ac06a06d1ff7946e7e16515dd09d2aef215fcd63320de0a97596576a917f37252e3f11cfb5aff47b95d29c43a0cf7c0a7f5c1f172eae1d6d5a434a8610cf4dedbe7be223015bd1edbe7690269b9b675717432b75a1a85f12ee6ed837c3105ecfd46eca2938cc4ab50839e04a6fc48f3ef14f5f5ec415caab2188f54acbe26997bce4b36ecbf8481313cbf6daba2ecb9b13a6094bec24847619b27c2e4d031b9b4ca9d40a709f320a78f264ad50ce349bd48ac17b374f535cdb1db403fe438b42ac71631f95c4a09bdf3d5bad23ff5f74bae1d0c79e3c5ea09e4cd59afeb14fbec43dfd057708a78ccfc12a190a4c995cde1c9368b4710e2893a4bd9164858df86b2689a1c2fe6a50b205c60f1200a85ec56164a5d724b8154cb3487c826fa39c92053cf173aafd5b1a0d09b97af2f4784f0a49a009e0fe045c6b8b2a747cc807806d99223ded267488aa8a4bd4b7dad7279edd7066a997d4bbf2710df3f66bb855422e0650f863555e771f0cf25a46a124e56f6e4ae7d4bb0767cac70b951289f2b7636fb2abfc6c7289a5aedba8286c0537cfe4ebc6ee44ff7ae473a100c6131c73ec44c57ac748fa86bd9c7f079b8d869eb65da74cff99212123c8f3f172d590b48360d403470053fd7f6bf920524d5876498be48f147f47597f2a4a500547e857a7d88aead951774ae0593bb8d5ee1b1c4a49b0a54a0b5c8e9998a74ad3282bc62273a0be68ef4cb435ac35450615dc4ee2b3b4bf37caffb295a2838857566fe778d73a0dec38fea8ff1aab9cf1b7ca2e6891bdeb0b071da36c3bc19bff56828cd307bee26967bd69abe04bd56a7ab51b8bd5183764b40d67a002ce02bc87ddc80bfd68fa1816eb0d4f41ab1de58d1722a5601330a2d8ebb5e2b08b298074e036b4251e3f636a8ea4ab6b9687a092e612ce911ed01956afbc0fb57e2996e6e8e75bd040bcb3acba8fa07f0e0858dd5647e98eed258cb5b6d3bd80added66ffc50c8ef2af10207d2016c928c832f6425f01248769eaf688848474b4e62b70e310be415842ca2274b3d34395915ec19eef1a293fc0e61f203f3782d5d57532298ef26bae9e2afc2fdc03ce967dce6a7b2ed4159c2f31b430d01b734f0c087b287406e7778545b17085a60b8a2e3fc123740ae171398ae8b85d443feccfb5ab5f5c834df9a6578dbc848bc77885af7dd7216f58879cd0afc0b7afa0f65d9cdd6a13ebc4ed4828716bad377b302776082e9416ee321210f64c93389d2b14eba78925314190a118bbce6f46f5ca27fa1d07f29d6be051c44c0d519ce1fe75e8e20007f350b7f4445a1013a07e46d5800bd84c658c17ad7916f9f2b9d94767ac0ae1f844d3986517aeb2dd5dfafdbf47ffb546cbf12d7ffac096f9dc877289f0c221b885fc5f3720b21f22df622f376cfbd4600efd0db7270a2a130b0d53a1f28088cdb36670dc4575b78c190f835f8e4dac14e4ccd06e87bd0e4208930dad9b1775b364d155d0af36e418c6cb054420ddf29d0cc52068cd4a2718785aa09a72be469de183901edea25d5652d7eb6a2ea75d23f12e485e470d46a61e164c25b8322a394899547e1bc57b140272f546cefa92483f2710d0c4d86c94f76fb3b5aced0696119a8f00d5a0e0cc94d356ea20684a6fbe5d1041618a85f532f30f8a1d6245c523195a06e83022980f919f451d9443c8b554d43e3f95309a13cd6e62adfdd8690c3c1bb92ed7c7def6d48b25b07d8d0c5e56169292965a110866ad95b685f320991dd523a693bad1a085fffc931f334e91a7d960dc9bbdd02e3754b895db7a5a1d12f8d8f1f2b3242b0bfde93fd7f50756a248c9a7a0d2e36423dd60b67e1", @nested={0x128, 0x87, [@generic="16b30a3dd6676e7fc4b40c737cb788d7ba130c503eeb0ee5507ea9b420dfa5c1debff6c01ad60b71154862dfee194e928bd50ac58264f9fafbc734a76d95a74b4840a8023610e5ee4c896225c958687517f0dc1f76ea92fb6ac6682355e1290818de376c051017792d419f98dfe250c71a30c958fc4cdbdb80367cf1e0f11ccab88bef7f483a51daaa62ab6b8f7c24905ef3c2277a82f9d929d0cafab32780543f4e46acc91ff473e4e2cbf7b7af06c21e976c", @typed={0x8, 0x42, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @typed={0x8, 0x50, @ipv4=@broadcast}, @typed={0xc, 0x95, @u64=0x1}, @typed={0x4c, 0x1, @binary="e27dfe634b071effbe57cfd726399f411d039eaff1750685a8e30ee51d315607bb4de99c15766c125feb9bc8dcb5bf2c585fc7347236bf2d66a9aeabcb30e3c9963fdadec1c2ef"}, @typed={0x8, 0x2, @pid=r7}]}, @typed={0x8, 0x8c, @ipv4=@remote}, @typed={0x90, 0x72, @binary="388fddbb7b521872be0de8e0a40229649aae36d54d47eacdc1aced5f2c20a94418d9a5ad189d5fe7cc3092a4690405ce7488015d1f37fa17f5e2398985db06ab726d6748f86b6715919ac85ad64ac5e5ecb8fa6a2941abc06dedfd210bd531b748f6fdda1d209e8ad12a9b64b40862c5e8d5dd83fa09c102f7d032f5dfb045f188a769a3f99d630e9c53"}, @generic="3f06cdbdff0da0549c314f212758579c2be5f6ec14703d74716b872be489676c055def10ae3518534e1124784287fbea9ebb8a75c501b681be1f8366635c3e5a86d5abee7e6a6efc835384d5d756f76093d4a2896d710a6e3e8ea359f07f15eef9f86191e0cb4e8b0e240c4dff9f929ce9c2c46029bb0ee7bbf2437487070e027403ea1fe4fbf7793aa4b860654fcbbdd3780a173e61d9293229981622716f5b827e37762c9347907c972467a61da78d6d7c409c7b06c0384a41c3575a36ca14060ae41fe174318fa368a1ecd325b58183977ce93145738320d69de0eba5ea257ab621655a45ddae8074aef0c9b85d0fd0", @nested={0x28, 0x75, [@typed={0x14, 0x17, @ipv6=@rand_addr="af646ca8b0b11a252429837aeb62cd37"}, @typed={0x4, 0x3e}, @typed={0xc, 0x65, @u64}]}, @typed={0x8, 0xc, @u32=0x3f}, @generic="fc44835aa9", @generic="75a54204367ddabcb238043e2c9823eb57d464e0c69466e26d487a1fe7c924493fd24a3ff4cb15760251237197bb98ec264cf79f9d5086f76f977c8d3c9756b994840964c9b409aa0c3e53575d29a7c21f5994cbaac702b5db490c6fbbe6e3837e6b4a286cc5fe9b73404edb5c47cb44b7ff5cce1b90e33952cfc6a6b2bba2055eb68c9ef5904273fc9cf083a81526afd4b3c9b8aae7322b200793bb6dee9849ce4bd10bcebecefa0a075d7a0d6841de826e2162149e80d181c5f410fdc48874d820dc9da953385b612fa7d0d3bd414ce380fa74485fd81ac8a230bcc58049ced41a3e6a4038491efa14c4c4"]}, 0x13e8}, 0x1, 0x0, 0x0, 0x8011}, 0x1) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000240)='threaded\x00', 0x9) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x2}, 0x8) sendfile(r0, r2, 0x0, 0x80001d00c0d0) [ 689.504233][T11950] imon 6-1:0.0: unable to initialize intf0, err 0 [ 689.510723][T11950] imon:imon_probe: failed to initialize context! [ 689.517568][T11950] imon 6-1:0.0: unable to register, err -19 [ 689.550696][T11950] usb 6-1: USB disconnect, device number 63 16:05:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="0300008dbb532e9a88e76884"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r5, r4) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r7}}}, @rights={{0x14, 0x1, 0x1, [r3]}}], 0x38}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000140)="c4e2f925f30f0014660f20c035020000000f22c0c4c27d13913ec30000660fc7750ac4e25d00a1553cd0de2ef236260f300f01c8c4c2c1074c3d0d66ba410066ed", 0x41}], 0x1, 0x8, &(0x7f00000001c0)=[@vmwrite={0x8, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfff}], 0x1) [ 689.805932][T11838] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 689.873265][T11874] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 690.122142][T11840] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 690.192370][T11838] usb 3-1: config 0 has an invalid interface number: 109 but max is 0 [ 690.200631][T11838] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 690.210835][T11838] usb 3-1: config 0 has no interface number 0 [ 690.217091][T11838] usb 3-1: config 0 interface 109 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 690.228464][T11838] usb 3-1: config 0 interface 109 altsetting 0 endpoint 0x8B has invalid maxpacket 914, setting to 64 [ 690.239648][T11838] usb 3-1: New USB device found, idVendor=057b, idProduct=0022, bcdDevice=89.89 [ 690.242333][T11874] usb 1-1: config 0 has an invalid interface number: 135 but max is 0 [ 690.248852][T11838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.257072][T11874] usb 1-1: config 0 has no interface number 0 [ 690.271175][T11874] usb 1-1: config 0 interface 135 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 690.272584][T11838] usb 3-1: config 0 descriptor?? [ 690.281915][T11874] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 690.298135][T11874] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has invalid maxpacket 1646, setting to 1024 [ 690.309522][T11874] usb 1-1: config 0 interface 135 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 690.322737][T11874] usb 1-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=65.14 [ 690.324293][T11838] usb-storage 3-1:0.109: USB Mass Storage device detected [ 690.331834][T11874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.349401][T11874] usb 1-1: config 0 descriptor?? [ 690.423545][T11874] iowarrior 1-1:0.135: IOWarrior product=0x1501, serial= interface=135 now attached to iowarrior0 [ 690.512463][T11840] usb 2-1: config 0 has an invalid interface number: 106 but max is 0 [ 690.520820][T11840] usb 2-1: config 0 has no interface number 0 [ 690.527175][T11840] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 690.536358][T11840] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.546719][T11840] usb 2-1: config 0 descriptor?? [ 690.546944][T11874] usb 3-1: USB disconnect, device number 47 [ 690.624048][T11950] usb 1-1: USB disconnect, device number 109 [ 690.638953][T11950] iowarrior 1-1:0.135: I/O-Warror #0 now disconnected 16:05:43 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x14, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) 16:05:43 executing program 5: syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfd, 0xe0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x2}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 16:05:43 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x7000}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'\x00', 0x400}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x20, 0x0, 0x0, 0xfffffffffffffffb}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 16:05:43 executing program 0: syz_usb_connect(0x0, 0xbc, &(0x7f0000000480)=ANY=[@ANYBLOB="120100001c00f540c0259b921465000200014a02220001000000000904870001030112000905000000ad842532070581006e86a96219606a1d642963fe65d1d4264cb8663fe114b3d985a4c2b3d7c59f25b280bb8e5b7d16c66a45b697e8f8c73e1cb9eabf41900ab9aaefaab777dbf3e0090001000000c068c054c5271c48f00f2ca75c979872bbd2079521faee4e2b8e2e8916d3782fb3d4209f799596f57a340c10831606dc6a8ecf0a7c7c687193ea40aeae8454d4593abcf93ef543968d1e2bc8ae06620635254e1e28f1f15bf77d2f8fe811fc9894ab8f9936c483fcab3cd5a6d34acfc3c335d853579b2e15d3b5ee9fed11a2052b8c5388e4d1f9bbd808442760"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x80000, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x0, 0x1b, 0x3d, &(0x7f0000000040)="484ddc6d7b356727de0741ecaf960c80240f3c2424513e3f33d3ec", &(0x7f0000000080)=""/61, 0x7, 0x0, 0x74, 0xed, &(0x7f0000000140)="270f1748607ae595801a09b6f99ead7c578d58958c44dc4c83047cc0dd51f1cf638e33233f442cde12a66162befd3fa7c48b56a4b95f65d7bd9707043232b163b18c58b0d7c87632ab28c3194063835bdeb585e8ce72d204b73dc3d4c66bb4f75f47b9191a4dd5035eb05bdda9a26cd0992688b1", &(0x7f0000000240)="c474d90c2282ed940c12c4eedbdf4b52f0325842ed8e824846a77618b73e46002cbf3130c47b7df3a687a1e148aa9e5d930dd454f85ca8ec63029ac012ce35fbba78dc232bf557a42afa92316179140db785fb020c0283aa4a844a9caded3aa2718d2d5d560ab2fd102f5bcc35901f2eda32a5c73812d87d6cab74a329ddb074cb03e9071a09c8c1ba4b4d5d21768750e8acfbe10d68e87028797476fe58c7f0a2c4b92f669d9085bbe3bc2c9804be9073607424cc7f9e85de570bc33d8a3efbc4e727cb9152db0479a97078098cc1b7c7880cc9330d1e3591248161c79cfa1c8af48b6b361b9a79a06d4f15e5"}, 0x40) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r4) 16:05:43 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000080)="0a043bd9ca528da16f7cba4a43af718fc5bc807b52abbdec8a6ff408d2a73e4f9de3dbc3ab1aa57283bc34da732237955a28c64cf826183badbffdba15d3df8f3975a288147a3ad6aae1ff7f1816b9279f4d507027e5b74afd5f40d40394594321cd56de67c2cc5dff6994cbe44a9c4691e0f10cf560b68199f5302a0d6cb800a1") pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r6}}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x38}, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000140)={0x0, 0x7f}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000001c0)={r7, 0x7ff}, 0x8) r8 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_int(r8, 0x29, 0x48, &(0x7f0000000000)=0xfffffffffffffffc, 0x4) [ 690.912234][T11840] usb 2-1: atusb_control_msg: req 0x21 val 0x0 idx 0x1f, error -71 [ 690.920510][T11840] usb 2-1: Firmware version (0.0) predates our first public release. [ 690.928827][T11840] usb 2-1: Please update to version 0.2 or newer [ 690.935471][T11840] usb 2-1: atusb_probe: initialization failed, error = -71 [ 690.942976][T11840] atusb: probe of 2-1:0.106 failed with error -71 16:05:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000000)=0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62160554]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) ioctl(r3, 0xc0884123, &(0x7f0000000000)) 16:05:44 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) mount$fuse(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000500)='fuse\x00', 0x0, &(0x7f0000000780)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) [ 691.006318][T11840] usb 2-1: USB disconnect, device number 52 16:05:44 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) mount$fuse(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000500)='fuse\x00', 0x0, &(0x7f0000000780)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[], [{@hash='hash'}]}}) 16:05:44 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) [ 691.232152][T11950] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 691.284694][T11838] usb 6-1: new low-speed USB device number 64 using dummy_hcd [ 691.324422][ T4071] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 691.602246][T11950] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 74 [ 691.611081][T11950] usb 1-1: can't read configurations, error -22 [ 691.662214][T11838] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 is Bulk; changing to Interrupt [ 691.712494][ T4071] usb 3-1: config 0 has an invalid interface number: 109 but max is 0 [ 691.720831][ T4071] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 691.731180][ T4071] usb 3-1: config 0 has no interface number 0 [ 691.737388][ T4071] usb 3-1: config 0 interface 109 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 691.748607][ T4071] usb 3-1: config 0 interface 109 altsetting 0 endpoint 0x8B has invalid maxpacket 914, setting to 64 [ 691.759697][ T4071] usb 3-1: New USB device found, idVendor=057b, idProduct=0022, bcdDevice=89.89 [ 691.768869][ T4071] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.778463][ T4071] usb 3-1: config 0 descriptor?? [ 691.782317][T11950] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 691.824637][ T4071] usb-storage 3-1:0.109: USB Mass Storage device detected [ 691.972216][T11838] usb 6-1: string descriptor 0 read error: -22 [ 691.978828][T11838] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 691.988053][T11838] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.024546][T11874] usb 3-1: USB disconnect, device number 48 [ 692.142396][T11950] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 74 [ 692.151002][T11950] usb 1-1: can't read configurations, error -22 [ 692.159039][T11950] usb usb1-port1: attempt power cycle [ 692.236447][T11838] usb 6-1: USB disconnect, device number 64 16:05:45 executing program 2: 16:05:45 executing program 1: r0 = msgget$private(0x0, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)) 16:05:45 executing program 4: r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) ftruncate(r1, 0x8200) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) getresuid(&(0x7f0000004180), 0x0, 0x0) 16:05:45 executing program 3: [ 692.872172][T11950] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 693.002205][T11838] usb 6-1: new low-speed USB device number 65 using dummy_hcd [ 693.242268][T11950] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 74 [ 693.250975][T11950] usb 1-1: can't read configurations, error -22 [ 693.392213][T11838] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 is Bulk; changing to Interrupt [ 693.402118][T11950] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 693.672378][T11838] usb 6-1: string descriptor 0 read error: -22 [ 693.678801][T11838] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 693.688013][T11838] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.762339][T11950] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 74 [ 693.771118][T11950] usb 1-1: can't read configurations, error -22 [ 693.777881][T11950] usb usb1-port1: unable to enumerate USB device 16:05:47 executing program 1: 16:05:47 executing program 3: [ 693.943846][T11838] usb 6-1: USB disconnect, device number 65 16:05:47 executing program 5: 16:05:47 executing program 2: 16:05:47 executing program 4: 16:05:47 executing program 3: 16:05:47 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000040)=""/165) syz_usb_connect(0x0, 0xbc, &(0x7f0000002c40)={{0x12, 0x1, 0x0, 0x1c, 0x0, 0xf5, 0x40, 0x7c0, 0x1501, 0x6514, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x87, 0x0, 0x1, 0x3, 0x1, 0x12, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "81bb6e86a9"}]}}]}}]}}]}}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000100)=' ', 0x1}], 0x1) 16:05:47 executing program 1: 16:05:47 executing program 2: 16:05:47 executing program 5: 16:05:47 executing program 1: 16:05:47 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) clone(0x822102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 16:05:47 executing program 3: 16:05:47 executing program 2: 16:05:47 executing program 5: 16:05:47 executing program 4: 16:05:47 executing program 1: [ 694.432382][T11950] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 694.822270][T11950] usb 1-1: config 0 has an invalid interface number: 135 but max is 0 [ 694.830814][T11950] usb 1-1: config 0 has no interface number 0 [ 694.837159][T11950] usb 1-1: config 0 interface 135 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 694.847853][T11950] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 694.859430][T11950] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has invalid maxpacket 1646, setting to 1024 [ 694.870757][T11950] usb 1-1: config 0 interface 135 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 694.883971][T11950] usb 1-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=65.14 [ 694.893247][T11950] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.902684][T11950] usb 1-1: config 0 descriptor?? [ 694.961116][T11950] iowarrior 1-1:0.135: IOWarrior product=0x1501, serial= interface=135 now attached to iowarrior0 [ 695.155381][T11838] usb 1-1: USB disconnect, device number 114 [ 695.173651][T11838] iowarrior 1-1:0.135: I/O-Warror #0 now disconnected [ 695.942157][T11838] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 696.302318][T11838] usb 1-1: config 0 has an invalid interface number: 135 but max is 0 [ 696.310588][T11838] usb 1-1: config 0 has no interface number 0 [ 696.316809][T11838] usb 1-1: config 0 interface 135 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 696.327516][T11838] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 696.338997][T11838] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has invalid maxpacket 1646, setting to 1024 [ 696.350292][T11838] usb 1-1: config 0 interface 135 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 696.363496][T11838] usb 1-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=65.14 [ 696.372750][T11838] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.382115][T11838] usb 1-1: config 0 descriptor?? [ 696.431389][T11838] iowarrior 1-1:0.135: IOWarrior product=0x1501, serial= interface=135 now attached to iowarrior0 [ 696.624925][T11838] usb 1-1: USB disconnect, device number 115 [ 696.644234][T11838] iowarrior 1-1:0.135: I/O-Warror #0 now disconnected 16:05:50 executing program 0: syz_usb_connect(0x0, 0x34, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x1c, 0x0, 0xf5, 0x40, 0x7c0, 0x1501, 0x6514, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x87, 0x0, 0x1, 0x3, 0x1, 0x12, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "81bb6e86a9"}]}}]}}]}}]}}, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000100)=' ', 0x1}], 0x1) 16:05:50 executing program 2: 16:05:50 executing program 4: 16:05:50 executing program 5: 16:05:50 executing program 3: 16:05:50 executing program 1: 16:05:50 executing program 2: 16:05:50 executing program 3: 16:05:50 executing program 5: clock_gettime(0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() waitid(0x0, 0x0, &(0x7f0000000400), 0x0, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) socket(0x80000000000000a, 0x2, 0x0) 16:05:50 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x1c, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) 16:05:50 executing program 1: r0 = msgget(0x2, 0x0) msgsnd(r0, &(0x7f0000000100)={0x0, "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"}, 0x801, 0x0) 16:05:50 executing program 3: r0 = socket$kcm(0x2b, 0x8000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x2002, 0x0) close(r1) [ 697.452154][T11838] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 697.812241][T11838] usb 1-1: config 0 has an invalid interface number: 135 but max is 0 [ 697.820565][T11838] usb 1-1: config 0 has no interface number 0 [ 697.826852][T11838] usb 1-1: config 0 interface 135 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 697.837581][T11838] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 697.849036][T11838] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has invalid maxpacket 1646, setting to 1024 [ 697.860394][T11838] usb 1-1: config 0 interface 135 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 697.873604][T11838] usb 1-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=65.14 [ 697.882813][T11838] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.892092][T11838] usb 1-1: config 0 descriptor?? [ 697.939515][T11838] iowarrior 1-1:0.135: IOWarrior product=0x1501, serial= interface=135 now attached to iowarrior0 [ 698.135664][T11950] usb 1-1: USB disconnect, device number 116 [ 698.153585][T11950] iowarrior 1-1:0.135: I/O-Warror #0 now disconnected [ 698.922038][T11950] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 699.282183][T11950] usb 1-1: config 0 has an invalid interface number: 135 but max is 0 [ 699.290454][T11950] usb 1-1: config 0 has no interface number 0 [ 699.296771][T11950] usb 1-1: config 0 interface 135 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 699.307470][T11950] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 699.318918][T11950] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has invalid maxpacket 1646, setting to 1024 [ 699.330250][T11950] usb 1-1: config 0 interface 135 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 699.343445][T11950] usb 1-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=65.14 [ 699.352648][T11950] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.361737][T11950] usb 1-1: config 0 descriptor?? [ 699.407820][T11950] iowarrior 1-1:0.135: IOWarrior product=0x1501, serial= interface=135 now attached to iowarrior0 [ 699.605416][T11950] usb 1-1: USB disconnect, device number 117 [ 699.624810][T11950] iowarrior 1-1:0.135: I/O-Warror #0 now disconnected 16:05:53 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x6, 0x0, 0x89, 0x6, 0x6}, 0x14) write$input_event(r0, &(0x7f0000000040)={{}, 0x5, 0x2, 0x800}, 0x18) syz_usb_connect(0x0, 0xbc, &(0x7f0000002c40)={{0x12, 0x1, 0x0, 0x1c, 0x0, 0xf5, 0x40, 0x7c0, 0x1501, 0x6514, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x87, 0x0, 0x1, 0x3, 0x1, 0x12, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "81bb6e86a9"}]}}]}}]}}]}}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000100)=' ', 0x1}], 0x1) 16:05:53 executing program 4: r0 = epoll_create1(0x0) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x20401) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000080)={0xe}) write$sndseq(r1, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x4, 0x48140) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x13, r2, 0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) 16:05:53 executing program 5: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @rand_addr, 0xffffffff}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r5, r4) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r7}}}, @rights={{0x14, 0x1, 0x1, [r3]}}], 0x38}, 0x0) r8 = accept4$alg(r6, 0x0, 0x0, 0x80800) fsetxattr$trusted_overlay_upper(r8, &(0x7f0000000340)='trusted.overlay.upper\x00', &(0x7f0000000380)={0x0, 0xfb, 0x8c, 0x0, 0x20, "85034a0d18e940443c836d49f69c4f23", "2f430117e4e36efbf55dcbfccd8d28868f637eb8302ec226b6190eeaa6adc39bf336f1539ec911add8769fe2db002a120706f025fde294388bc4236643377e586f428bb1f25440ca41c26fd8ba0db7241f19b9a96543bfc989bf14f82105d7ec7d6caed9529626e99a57fe097f81282bc3c43bfc36ec26"}, 0x8c, 0x1) r9 = dup2(r2, r1) ioctl$TIOCLINUX2(r1, 0x541c, &(0x7f00000000c0)={0x2, 0xff, 0x44, 0x66, 0x40}) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) listen(r0, 0xffeffffefffffffb) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @random="192bce5e2dfb", [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@initdev, @in6=@mcast1}}, {{@in=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000000080)=0xe8) syz_emit_ethernet(0xb2, &(0x7f0000000280)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x7c, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, {[@sack={0x5, 0x22, [0x7f, 0xffffffff, 0x2325, 0x8, 0x1f, 0x3, 0x1, 0x9]}, @fastopen={0x22, 0x8, "ee1c660f8650"}, @mptcp=@synack={0x1e, 0x10, 0x9, 0x2, 0x8c, 0x6, 0x4}, @mptcp=@ack={0x1e, 0x9, 0x5, 0x4, "8209b54afb"}, @sack_perm={0x4, 0x2}, @sack={0x5, 0x12, [0xe28, 0x9, 0x0, 0x691d]}, @nop, @mss={0x2, 0x4, 0x5c0}, @fastopen={0x22, 0xa, "d175b01c540456b4"}, @nop]}}}}}}}}, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) 16:05:53 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000204000/0x2000)=nil, 0x2000) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x60e001, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x8, @empty, 0x1}, 0x1c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x38}, 0x0) dup(r3) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x1, 0x0) ioctl$UFFDIO_WAKE(r6, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 16:05:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88144, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x0, 0x0, 0x0, 0x14}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000440)=ANY=[], 0x0) r1 = shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffd000/0x2000)=nil) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) r4 = geteuid() r5 = creat(0x0, 0xc) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000140)=0x200, 0x1cb) accept4$alg(r5, 0x0, 0x0, 0x0) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000140)=0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r7, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmmsg(r8, &(0x7f0000000140)=[{{&(0x7f0000000200)=@l2, 0xfffffffffffffec3, &(0x7f0000000380)=[{&(0x7f00000003c0)=""/150, 0x96}, {&(0x7f0000000480)=""/255, 0xff}], 0x2, &(0x7f0000000280)=""/84, 0x59a}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}, 0xffffffff}], 0x0, 0x10061, 0x0) fcntl$getownex(r8, 0x10, &(0x7f0000000280)={0x0, 0x0}) shmctl$IPC_SET(r1, 0x1, &(0x7f00000001c0)={{0x6, r3, 0xee01, r4, 0xee01, 0x80}, 0x81, 0x4, 0x9, 0x20, r6, r9, 0x200}) getpgid(0x0) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffd000/0x2000)=nil) socket(0x10, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r10, 0x0) r11 = creat(0x0, 0x1) ioctl$TIOCGSID(r11, 0x5429, &(0x7f0000000140)) r12 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$getownex(r12, 0x10, &(0x7f0000000100)) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = dup2(r15, r14) getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r16, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r17}}}, @rights={{0x14, 0x1, 0x1, [r13]}}], 0x38}, 0x0) ioctl$TIOCGSID(r12, 0x5429, &(0x7f0000000640)=0x0) syz_open_procfs(r18, &(0x7f0000000800)='procid_map\x00\xfbJ\xd2\xcfo\x8aF!Kb\x8ad\xfepa_\xcb%\xfbq\x06\x05x\x9a,D\x9bi\xaa1\f\xa4\xc0\xc9qe\x12wZ\xffVJ\xa6G\x98\xbf\x8c\xa4\xe2\xc8O\x12\xe6\xa9\xd5\x037\x9c\xab\xcb\xb7W\xc2\xff\x0fv\xc1\xb5PD\xd2\xbe\xcf\xce\a\xf3\xec\x8fm\xb2\x05o1\xf9xb\x8ek\t\xad\xa9\x99Ss>\x8e\x01\x04\x9f\x8c\x02\x18t\x17\x84\x8b\x81\x8d\x8d\xfa\f$yZ\xec\xc2\xf2\xd40\xcf\x8d\x05\x03\xbdDC\x8b\xe6\x97\xa5#\x18\x9a\x05:\b\x8f\xab\vpq\xa3\xff\xd1A\x9clv\xde\xae,6\xbdOGz') r19 = socket$inet6(0xa, 0x2, 0x0) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r19, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x0, 0x20}, &(0x7f0000000100)=0x18) socket$kcm(0xa, 0x0, 0x0) keyctl$dh_compute(0x17, 0x0, &(0x7f0000000080)=""/92, 0x5c, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmmsg(r20, &(0x7f0000000140)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000280)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000001ae, 0x62, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="0000000c00010076657468000000001800020014000100"/36, @ANYPTR64=&(0x7f0000000700)=ANY=[@ANYRESDEC, @ANYRESHEX=r20, @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYRES16=0x0, @ANYBLOB="26cfd21ac933a452c0311c805e2250af2870012138b3617a4d8bafccd7acce6edd5faad5fed335732fcfd9d7deabc611ca629027b043", @ANYRES64], @ANYRESDEC=0x0, @ANYRES16=r8], @ANYBLOB="ff4a000000000000"], 0x5}, 0x1, 0x0, 0x0, 0x4}, 0x0) 16:05:53 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000000)={0x6, 0x3, 0xff}, 0xc) syz_usb_connect$hid(0x0, 0x1b9, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x20f, 0x40, 0x0, 0x0, 0x29d40bf8, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x1, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) 16:05:53 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xfffffffffffffd9b, &(0x7f00000bfff0)={&(0x7f0000000180)=ANY=[@ANYBLOB="fc000000190001000000000000000008ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004400050000000000000000000000000000000001000000003200000000000000e000000200"/180], 0xfc}}, 0x0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r5, &(0x7f0000000440)={0x0, 0x47, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x21e, 0x1, 0x2, {r6}}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x38}, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0xc0585604, &(0x7f0000000000)={0x1, 0x0, {0x0, 0x0, 0x1001, 0x2, 0x1, 0x2, 0x2}}) 16:05:53 executing program 4: r0 = socket$kcm(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000001940), 0x2df) r1 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r1, 0x88, 0x67, &(0x7f0000000040)=r1, 0xffc5bfe2056edbb5) sendmsg$kcm(r1, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [0xe803]}, 0xd}, 0x80, 0x0}, 0x0) pipe(&(0x7f0000000a00)) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000100)=0xc) lstat(&(0x7f0000003f00)='./file0\x00', &(0x7f0000003f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, r7) r8 = fcntl$getown(r4, 0x9) sendmsg$netlink(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r5, 0x0, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r6}}}], 0x40}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000240)={@mcast2, 0x0}, &(0x7f0000000280)=0x14) setsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000002c0)={r9, @multicast1, @loopback}, 0xc) recvmsg$kcm(r0, &(0x7f00000027c0)={0x0, 0x8e, &(0x7f0000000080)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1}, 0x0) r10 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x280, 0x0) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r11, 0x84, 0x7d, &(0x7f0000000300)={r13, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000040)=0x100) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r10, 0x84, 0x70, &(0x7f0000000100)={r13, @in6={{0xa, 0x4e20, 0xf483, @loopback, 0x6}}, [0xfffffffffffffff9, 0x1, 0x800, 0x80, 0x7, 0x4, 0xfffffffffffffffa, 0x0, 0x80000001, 0x1, 0x1, 0x5, 0x10001, 0x3f, 0x6]}, &(0x7f0000000200)=0x100) 16:05:53 executing program 1: fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = dup2(0xffffffffffffffff, r1) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x38}, 0x0) connect$rxrpc(r2, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x9d3, @remote}}, 0x24) unshare(0x2000400) r4 = memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) lseek(r4, 0x7ffffffffffffffe, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x121) sendfile(r4, r4, &(0x7f0000000000), 0x3) r5 = syz_usb_connect$hid(0x0, 0x1ac, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x44f, 0xb651, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002206"], 0x0}, 0x0) [ 700.452490][T11950] usb 4-1: new high-speed USB device number 62 using dummy_hcd 16:05:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6af3b660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ipv6_route\x00') ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x1, 0x0, @pic={0x0, 0x7, 0x0, 0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x200]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r5, r4) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r7}}}, @rights={{0x14, 0x1, 0x1, [r3]}}], 0x38}, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r7, 0x10, &(0x7f0000000100)={0x5}) 16:05:53 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x8, 0x6000) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x38}, 0x0) dup3(r0, r1, 0x80000) syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x8, 0x10000) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x6, 0x10602) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup2(r8, r7) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r9, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r10}}}, @rights={{0x14, 0x1, 0x1, [r6]}}], 0x38}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x7fffffff) syz_emit_ethernet(0x3e, &(0x7f0000694ffe)={@broadcast, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x8, 0x11, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) [ 700.502989][T11838] usb 1-1: new high-speed USB device number 118 using dummy_hcd 16:05:53 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x86, 0x56, 0x46, 0x10, 0x2201, 0x12c, 0x7232, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x65, 0x0, 0x2, 0x52, 0xbd, 0xf2, 0x0, [], [{{0x9, 0x5, 0x8f, 0x2}}, {{0x9, 0x5, 0x84, 0x9b5a1c4223be0c76}}]}}]}}]}}, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x122) symlinkat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00') setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, "cec38e8cf0dd1fc8", "d91dc97ee9f8103b36b1216f4c227f76b179410248ad1af222ce0eada369b351", "578d7e7a", "2a19cbbe0af5f01e"}, 0x38) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000140)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000280)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x2, 0x40000022, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x6, 0x80000000, 0x400, 0xeed, 0x7}) [ 700.722343][ T4071] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 700.822681][T11950] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 700.833941][T11950] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 700.882585][T11838] usb 1-1: config 0 has an invalid interface number: 135 but max is 0 [ 700.890850][T11838] usb 1-1: config 0 has no interface number 0 [ 700.897101][T11838] usb 1-1: config 0 interface 135 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 700.907842][T11838] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 700.919284][T11838] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has invalid maxpacket 1646, setting to 1024 [ 700.922560][T11950] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.40 [ 700.930690][T11838] usb 1-1: config 0 interface 135 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 700.939854][T11950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=248 [ 700.952908][T11838] usb 1-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=65.14 [ 700.961067][T11950] usb 4-1: SerialNumber: syz [ 700.970149][T11838] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.986176][T11838] usb 1-1: config 0 descriptor?? [ 701.016102][T11950] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input34 [ 701.032997][ T4071] usb 2-1: Using ep0 maxpacket: 16 [ 701.044416][T11838] iowarrior 1-1:0.135: IOWarrior product=0x1501, serial= interface=135 now attached to iowarrior0 [ 701.062439][T11840] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 701.164426][ T4071] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 701.176289][ T4071] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 701.189343][ T4071] usb 2-1: New USB device found, idVendor=044f, idProduct=b651, bcdDevice= 0.40 [ 701.198490][ T4071] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.208506][ T4071] usb 2-1: config 0 descriptor?? [ 701.218284][T11838] usb 4-1: USB disconnect, device number 62 [ 701.236728][T11950] usb 1-1: USB disconnect, device number 118 [ 701.258484][T11950] iowarrior 1-1:0.135: I/O-Warror #0 now disconnected [ 701.294806][T11838] appletouch 4-1:1.0: input: appletouch disconnected [ 701.332280][T11840] usb 5-1: Using ep0 maxpacket: 16 [ 701.452377][T11840] usb 5-1: config 0 has an invalid interface number: 101 but max is 0 [ 701.460872][T11840] usb 5-1: config 0 has no interface number 0 [ 701.467174][T11840] usb 5-1: config 0 interface 101 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 701.477353][T11840] usb 5-1: config 0 interface 101 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 0 [ 701.487428][T11840] usb 5-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=72.32 [ 701.496606][T11840] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.506238][T11840] usb 5-1: config 0 descriptor?? [ 701.547179][T11840] usb 5-1: probing VID:PID(2201:012C) [ 701.553809][T11840] usb 5-1: vub300 testing BULK IN EndPoint(0) 8F [ 701.560290][T11840] usb 5-1: vub300 testing BULK IN EndPoint(1) 84 [ 701.566845][T11840] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 701.574998][T11840] vub300: probe of 5-1:0.101 failed with error -22 [ 701.685216][ T4071] thrustmaster 0003:044F:B651.0017: unknown main item tag 0x0 [ 701.693034][ T4071] thrustmaster 0003:044F:B651.0017: unknown main item tag 0x0 [ 701.700708][ T4071] thrustmaster 0003:044F:B651.0017: unknown main item tag 0x0 [ 701.708464][ T4071] thrustmaster 0003:044F:B651.0017: unknown main item tag 0x0 [ 701.716186][ T4071] thrustmaster 0003:044F:B651.0017: unknown main item tag 0x0 [ 701.723884][ T4071] thrustmaster 0003:044F:B651.0017: unknown main item tag 0x0 [ 701.734308][ T4071] thrustmaster 0003:044F:B651.0017: hidraw0: USB HID v0.05 Device [HID 044f:b651] on usb-dummy_hcd.1-1/input0 [ 702.002155][T11950] usb 4-1: new high-speed USB device number 63 using dummy_hcd 16:05:55 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x1, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x454700, 0x5) ftruncate(r2, 0x10099ba) sendfile(r1, r2, 0x0, 0x1000000000000fe) r3 = socket$isdn_base(0x22, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) 16:05:55 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) r1 = semget$private(0x0, 0x207, 0x0) semop(r1, &(0x7f0000000140)=[{0x0, 0x23}], 0x1) semop(r1, &(0x7f0000000040), 0x46) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000340)) semctl$GETVAL(r1, 0x3, 0xc, &(0x7f0000000a40)=""/198) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r2) dup2(r3, 0xffffffffffffffff) sendto$inet(r0, 0x0, 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000180), 0x144, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b40)=""/4096}], 0x1}, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, &(0x7f0000000400)) setxattr$security_capability(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='security.capability\x00', &(0x7f0000000580)=@v3={0x3000000, [{0x200, 0x400}, {0x8, 0x7fff}], r4}, 0x18, 0x1) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet(r0, &(0x7f0000000140)="87c41b4b922a930de0c9e46b4558e85f0760489712204018660b741cc0bf8e991f749d505623085fa982021c265db18d33d2d4712615aa846189735292e9936ae3d6fe4ab3edf0", 0x47, 0x30f66f6baef87ef6, &(0x7f0000000240)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r6 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup2(r7, r6) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup2(r11, r10) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r12, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES32=r13, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000010000000000100000001000000", @ANYRES32=r9, @ANYBLOB="028c0000"], 0x38}, 0x0) ioctl$UI_GET_VERSION(r12, 0x8004552d, &(0x7f00000001c0)) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r8, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r14}}}, @rights={{0x14, 0x1, 0x1, [r5]}}], 0x38}, 0x0) write$P9_RSETATTR(r5, &(0x7f0000000040)={0x7, 0x1b, 0x1}, 0x7) 16:05:55 executing program 0: syz_usb_connect(0x0, 0xbc, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001c00f540c0070115140100000001090222000100000000091e220487000103011200090500000000000000070581bb6e86a9"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x44182, 0x0) writev(r0, &(0x7f0000000000), 0x0) close(0xffffffffffffffff) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup2(r7, r6) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r8, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r9}}}, @rights={{0x14, 0x1, 0x1, [r5]}}], 0x38}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0xffffffffffffffff, r5, 0x0, 0x11, &(0x7f0000000240)='/dev/dlm-control\x00', 0xffffffffffffffff}, 0x30) r11 = dup2(r4, r10) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = dup2(r15, r14) getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r19 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r21 = dup2(r20, r19) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r21, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r22}}}, @rights={{0x14, 0x1, 0x1, [r18]}}], 0x38}, 0x0) setsockopt$RDS_FREE_MR(r18, 0x114, 0x3, &(0x7f0000000200)={{0x100, 0x3f}, 0x40}, 0x10) sendmsg$netlink(r16, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r17}}}, @rights={{0x14, 0x1, 0x1, [r13]}}], 0x38}, 0x0) ioctl$VIDIOC_G_CROP(r13, 0xc014563b, &(0x7f00000001c0)={0x7, {0x774, 0x20, 0x3, 0x80000001}}) sendmsg$netlink(r11, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r12}}}, @rights={{0x14, 0x1, 0x1, [r3]}}], 0x38}, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r3, 0xc0206416, &(0x7f0000000140)={0xfff, 0x7fff, 0x8000, 0x1ff, 0x0, 0x9739}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r24 = dup2(r23, r2) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000180)) getsockopt$sock_cred(r24, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r24, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r25, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x38}, 0x0) ptrace$getsig(0x4202, r25, 0x0, &(0x7f0000000080)) 16:05:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c000100627200290020000000"], 0x3c}}, 0x0) 16:05:55 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) getcwd(&(0x7f0000000040)=""/170, 0xaa) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r1, 0xffeffffefffffffb) syz_emit_ethernet(0x56, &(0x7f0000000100)={@local, @random="192bce5e2dfb", [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x20, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x1}]}}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d8652b00200600fe8000000000000000000d00000000aafe8000000000000000000000000000aa00004e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="80000000907800000000a05246c62501617c71b1"], 0x0) [ 702.362461][T11950] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 702.373711][T11950] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 702.394415][T22683] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 702.464111][T11950] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.40 [ 702.473381][T11950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=248 [ 702.481633][T11950] usb 4-1: SerialNumber: syz [ 702.537553][T11950] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input35 [ 702.592128][ T4071] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 702.734589][T11840] usb 4-1: USB disconnect, device number 63 [ 702.814209][T11840] appletouch 4-1:1.0: input: appletouch disconnected [ 702.896511][T11950] usb 2-1: USB disconnect, device number 53 [ 702.962358][ T4071] usb 1-1: config 0 has an invalid descriptor of length 18, skipping remainder of the config [ 702.972966][ T4071] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 702.982228][ T4071] usb 1-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice= 1.14 [ 702.991300][ T4071] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.001369][ T4071] usb 1-1: config 0 descriptor?? 16:05:56 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x40000000002) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000001240)={0x0, 0xffff}) dup3(r1, r0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000001280)="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", 0x3fd}], 0x1) ioctl$KVM_PPC_GET_SMMU_INFO(0xffffffffffffffff, 0x8250aea6, &(0x7f0000000080)=""/98) r3 = dup2(r0, r2) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)=0x4) 16:05:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) move_pages(0x0, 0x5, &(0x7f0000000000)=[&(0x7f0000001000/0x4000)=nil, &(0x7f000000d000/0x2000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil], 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x84, &(0x7f0000000040), &(0x7f0000000180)=0x4) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-control\x00', 0x5800, 0x0) ioctl$EVIOCSKEYCODE(r4, 0x40084504, &(0x7f0000000240)=[0xfffffe00, 0x6]) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001440)={0x0, 0x0, 0x0, 0xbbf, 0x0, &(0x7f0000000440)="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"}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x0, 0x0, 0xffb]}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfd77e4ef05f7e1, 0x0, 0x0, 0x35a) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) 16:05:56 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000005380)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6cb, 0x81a7, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xffff, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000780)={0x0, 0x22, 0x22, {[@global=@item_4={0x3, 0x1, 0x0, "040eccf7"}, @main=@item_012={0x2, 0x0, 0x0, "7c04"}, @global=@item_4={0x3, 0x1, 0x0, "20001700"}, @main=@item_012={0x0, 0x0, 0xa}, @local=@item_4={0x3, 0x2, 0x0, "d777ed4b"}, @local=@item_4={0x3, 0x2, 0x0, "8794f101"}, @main=@item_4={0x3, 0x0, 0xc, "4aec471a"}, @main=@item_4]}}, 0x0}, 0x0) 16:05:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x223, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040), 0x4) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$tipc(0x1e, 0x8000000005, 0x0) shutdown(r1, 0x2) r2 = socket$tipc(0x1e, 0x8000000005, 0x0) shutdown(r2, 0x2) r3 = dup2(r1, 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="400000002400070500"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000000003ff14000100706669666f5f686561645f64726f70000800020000000000d550a3ca740ea9b9940c347dea8deab9fac7fadc889c6be4c69cb3342e132a5ab1187f5a14b898cf35cd216721d5af53b832865d26722f4e6503ea746526f1f23cd20a4945c0f6c82aaf060b60dd8bb09eae68f6450e35d9f3eb14aacc05ab1e0bf39f68cf4152947b4e3f4ba0a310582419d8253a4cd9143be62309af8b790e1af2"], 0x40}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0xe, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) sendmsg$can_raw(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x1d, r8}, 0x10, &(0x7f00000005c0)={&(0x7f0000000580)=@can={{0x1, 0x1, 0x0, 0x1}, 0x7, 0x0, 0x0, 0x0, "cd0fc4edcf2cb4a9"}, 0x10}, 0x1, 0x0, 0x0, 0xab8b9a9f91c86633}, 0x4000001) r9 = creat(&(0x7f00000000c0)='./file0\x00', 0x8) getsockopt$TIPC_NODE_RECVQ_DEPTH(r9, 0x10f, 0x83, &(0x7f0000000100), &(0x7f0000000180)=0x4) kexec_load(0x997, 0x4, &(0x7f0000000480)=[{&(0x7f00000001c0)="56484816871b60d100d0a301eb6209d6e257486018551e66047ed49f", 0x1c, 0x9, 0x6d2}, {&(0x7f0000000200)="ad16a1dc63414aa875e6910760961484bff7dc7f3cc40413f16393e83dfb43f63f9a6c5764b36ce1cfe812aab5d5910122ae4c1e6c512c971770d4c582aa3c5051a1cb684a1bc7e41799373f98b95bea98fd2ae431ae23bf648bb240647e178e139155fa404b30d7107bb8d8a14ce5e2f5b5527fdbfb392bb3d492d351fb4afe84fd89a110a2f133922c20f7234267a1fd88ff9006d530b6490bcb5628c866dd14ddc8606a9e90241a181abf6e065b421baab3470f12ee9784ef409a689d2fb01f82ba0b831bd2171203eb6ef8d3f7889e3dc8a1543010e52539206e86e274650c273a60fc7f0ad17bd4d2537bb1afc7ec1f41a2", 0xf4, 0x5, 0x2ea9}, {&(0x7f0000000300)="fdf154955fc2de8435e096ba6061b1fc2e48a1dceae37b39aa77b965609aad93915528dbae1c8e765ad30594d9f54a41c826640fe27d147c55929ceddce40e5a4bc58903c472edd81a26c7b001f909ab02164b9123f719b9e57895a77d513716eff085dd81f49a380963adbe9f5df7016b828eaaed", 0x75, 0x2, 0x5}, {&(0x7f0000000380)="2de00f17693da01e7b748b0fe51d080c4365ea86401a9c30cad16d1b82e7bc21122d96cf460c82aff051444b113fc203710ab235a8b7610ee7e167394a6477458f569610cc409d73aaa02ace3a78e6c5709e5e44e5785192d5d6c0c4a401fdae82c90006f022a868cc888d43eab3e546abe7cb8b388fe7410af7f4af309ae7c36190683f85384cbfbe45776e2be08017c69223479388c5c85a1039019dcda73cf585097b2fb05152112b8a88b836fdcca8adab7124c5a3aad62bd4d537dbe0ac4b9e08bb5843", 0xc6, 0x6, 0x8}], 0xe0002) r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x200000, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$IMGETCOUNT(r10, 0x80044943, &(0x7f0000000500)) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @host}, 0x10) r11 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r11, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r12 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r12, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}}], 0x4000000000000d0, 0x0) [ 703.289807][T11950] usb 1-1: USB disconnect, device number 119 16:05:56 executing program 3: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006800030800000000a9030000020000000000000008000a00575aff9fefebf9ae20ba855acbbe72f36b6744254ffe2e4173a057dcd8d2476d0479b7d4380144abbbb4bc94819c7fdd68561939066d757a3cc10ed9abb13edfc987bdd028d9a5605d1b73d76ea549e2012287087c9acc53ec20b742f701761c58485c84c75ce192b332e7c3e126dbf9d47b9f7cb2ba33e434b52f80", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x218fe53f1794f59, 0x0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x38}, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x17) [ 703.422337][T22709] netlink: 'syz-executor.5': attribute type 14 has an invalid length. [ 703.431877][T22706] netlink: 'syz-executor.5': attribute type 14 has an invalid length. 16:05:56 executing program 2: unshare(0x2000400) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r6}}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x38}, 0x0) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@initdev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6}}, &(0x7f0000000140)=0xe8) getresuid(&(0x7f0000000100), &(0x7f0000000200)=0x0, &(0x7f0000000240)) r11 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x27) r12 = socket(0xa, 0x3, 0x6) connect$bt_rfcomm(r12, &(0x7f0000000000)={0x1f, {0xfe, 0x0, 0x1000, 0x80000001, 0x6, 0x5}, 0x8}, 0xa) bind$inet6(r12, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x6}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r12, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f0000000480)=0xe8) r14 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r14, 0x84, 0x6d, &(0x7f0000000900)=ANY=[@ANYBLOB="ab000000a6d23fa0c9cb488b619002d1d896e5ffb3b62ccfa516aec8038d482cd2aa0b6ac0d684fba227e9983be9f367da66938eddee11b161213cdf2bd00a8ae552bc17ec5e976fa67846060aa7629aed35eb9bb9e096cc3825df10acb8c0dff4569bb0f686a3856eb778df7afa4a3112676e9547e0d65bee83afa0b4f46a0b10af299da7efdcc6c573074de84403de7902a06096d7483194ad47775d355b9800000008008b0500"/193], &(0x7f0000000540)=0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r14, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8) setuid(r16) r17 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r17, 0x84, 0x6d, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000540)=0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8) setuid(r18) r19 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r19, 0x84, 0x6d, &(0x7f0000000b40)=ANY=[@ANYBLOB="ab000000a6d23fa0c9cb488b6190f2d1d89677354590dde5ffb3b62ccfa516aec8038d48d684fba227e9983be9f367da66938eddee11b1613f0d5ff3b2213cdf2bd00a8ae552bc17ec5e976fa67846060aa7629aed35eb9bb9e096cc3825df10acb8c0dff4569bb0f6a15cab46fa86a3856eb778df7afa4a3112676e9547e0d65bee83afa0b4f46a0b10af299da7efdcc6c573074de84403de7902a07096d7483194ad47775d355bd65460a5a52aa9cc384c962b12062cf85884362f08008b07"], &(0x7f0000000540)=0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r19, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8) setuid(r20) r21 = request_key(0x0, &(0x7f0000001300)={'syz', 0x2}, &(0x7f0000001340)='em0cpusetmime_type\x00', 0xfffffffffffffff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) keyctl$chown(0x4, r21, 0x0, r22) r23 = request_key(0x0, &(0x7f0000001300)={'syz', 0x2}, &(0x7f0000001340)='em0cpusetmime_type\x00', 0xfffffffffffffff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) keyctl$chown(0x4, r23, 0x0, r24) r25 = request_key(0x0, &(0x7f0000001300)={'syz', 0x2}, &(0x7f0000001340)='em0cpusetmime_type\x00', 0xfffffffffffffff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) keyctl$chown(0x4, r25, 0x0, r26) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r11, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000a00)=ANY=[@ANYBLOB="02000000010002000000000002000400", @ANYRES32=r13, @ANYBLOB="02000200", @ANYRES32=r15, @ANYBLOB="02000100bb86b4c5600d592e64b86edda53135e0f392e4c9ca69b61556778ccf29c4990d1893fd049001c62278a88220d8bb3ef088a2bbfd6fdd3bbbaa8e7ff1e7d747037c523caba1237cfd937b81d9ae40c8e42df69a9ad815e799bd07b8468681a262136f0b4027e75c77b74f2bc0ad4402225b8f934741a657b08fa3e58bffe4394310ebab08c71788455eb3b79d61d24d289378388103fdaa96ee42a18df1027aa5865c0b", @ANYRES32=r16, @ANYBLOB="02000400", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r18, @ANYBLOB="02000200", @ANYRES32=r20, @ANYBLOB="02000500", @ANYRES32=r10, @ANYBLOB="040002000000000008000100", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=r22, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r24, @ANYBLOB="08000400", @ANYRES32=r26, @ANYBLOB="08000300", @ANYRES32=r27, @ANYRES32, @ANYBLOB="0800d8b8", @ANYRES32, @ANYBLOB="10000200000000002000d6f800000000"], 0x1c, 0x2) setresuid(r8, r9, r16) ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f0000000240)) r28 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r28, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r7, &(0x7f0000000480)={0xb, 0x10, 0xfa00, {&(0x7f0000000980), r29, 0x80000000}}, 0x18) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000040), r29, 0x0, 0x2, 0x4}}, 0x20) r30 = syz_open_pts(r1, 0x0) socket$rxrpc(0x21, 0x2, 0x2) dup2(r30, r0) fcntl$setstatus(r30, 0x4, 0x4000000002803) [ 703.574184][ T4071] usb 2-1: new high-speed USB device number 54 using dummy_hcd 16:05:56 executing program 4: unshare(0x40600) mkdir(&(0x7f0000000080)='./file0\x00', 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) clock_settime(0x0, &(0x7f0000000140)={0x0, 0x1c9c380}) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x80, 0x0) r1 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800080}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="6b960000", @ANYRES16=r1, @ANYBLOB="000429bd7000fddbdf250600000008000600090000000c000100080004004e20000070000300080003000000000014000600ff020000000000000000000000000001080004000600000008000300010000001400060000000000000000000000000000000000080007004e24000014000600ff0200000000000000000000000000010800010000000000080008000900000040000100080006006e71000008000800ffffffff0c00070024000000010000000800050003000000080004004e21000008000500030000000800090058000000"], 0xd8}, 0x1, 0x0, 0x0, 0x40000}, 0x1) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000400)={0x0, @initdev, @loopback}, &(0x7f0000000440)=0xc) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000013c0)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r3, 0x0, 0x0) read(r2, &(0x7f0000001380)=""/45, 0x2d) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000480)={{{@in=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@local}}, &(0x7f0000000580)=0xe8) fstat(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000280)='./file0\x00', r5, r6) sendmsg$alg(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) geteuid() write$binfmt_script(r4, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r4, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0x95c8}, {&(0x7f00000023c0)=""/49, 0x200023f1}, {&(0x7f0000003580)=""/4096, 0x2c0}], 0x3, &(0x7f0000004780)=""/245, 0xfffffffffffffd24}}], 0x30, 0x0, &(0x7f0000008000)={0x0, 0x989680}) 16:05:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x200, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1ec, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x4000) 16:05:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010001fff0000000000000000000000002e68911cf026469bbb3f28a92ac9f390efbacbd01201d305c5bc2100006151da273e02081690b2ba0335da534efc96383fc6f94e9c92ec8a671baf86a8e150fc68f3776ffce04644ecf4f80094f188b86bb390f6851c9f83280e904c7bc1b4df583df31f46e15bbdc527fa9ee2bc2886614e9cd6e51dca2844bd993fbf7869d8848f7286dc5f16b0bdce766bb261c3aeaa256fa59182e6e785ff640273fd36ebfc5ae0ebf579530945eb09f106d67515d667ab364287b4dda8a4e26837", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012001000010069703665727370616e0000000c0002000800030060000000"], 0x40}}, 0x0) [ 703.723469][T11950] usb 5-1: USB disconnect, device number 69 [ 703.790514][T22726] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 704.058204][T22709] netlink: 'syz-executor.5': attribute type 14 has an invalid length. [ 704.068030][T22701] netlink: 'syz-executor.5': attribute type 14 has an invalid length. [ 704.082282][T11874] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 704.232423][ T4071] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 704.243652][ T4071] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 704.256824][ T4071] usb 2-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 704.266005][ T4071] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.278988][ T4071] usb 2-1: config 0 descriptor?? [ 704.512295][T11874] usb 1-1: config 0 has an invalid descriptor of length 18, skipping remainder of the config [ 704.522674][T11874] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 704.531715][T11874] usb 1-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice= 1.14 [ 704.541007][T11874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.550166][T11874] usb 1-1: config 0 descriptor?? [ 704.766286][ T4071] hid-rmi 0003:06CB:81A7.0018: unknown main item tag 0x0 [ 704.773824][ T4071] hid-rmi 0003:06CB:81A7.0018: unknown main item tag 0x0 [ 704.783862][ T4071] hid-rmi 0003:06CB:81A7.0018: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.1-1/input0 [ 704.813618][T11874] usb 1-1: USB disconnect, device number 120 [ 704.966533][ T4071] usb 2-1: USB disconnect, device number 54 16:05:58 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x200000000000007) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00'}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000080)={'tea\x01\x00\x00\x00\x00\x00\x00\x000\x00', 0xb779ef21efb66f11}) 16:05:58 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x2) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x7d, &(0x7f0000000300)={r5, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000040)=0x100) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000000)={r5, 0xe}, 0x8) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f00000000c0)=0xff, 0x4) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup2(r8, r7) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r9, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r10}}}, @rights={{0x14, 0x1, 0x1, [r6]}}], 0x38}, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r9, 0x5387, &(0x7f0000000080)) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty, 0xffffffffffffffff}, 0x1c) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x0, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 16:05:58 executing program 0: ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000040)={0x9e0000, 0xffffffff, 0xffff, [], &(0x7f0000000000)={0x990a97, 0xfffffff7, [], @value=0x101}}) syz_usb_connect(0x0, 0xbc, &(0x7f0000002c40)={{0x12, 0x1, 0x0, 0x1c, 0x0, 0xf5, 0x40, 0x7c0, 0x1501, 0x6514, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x87, 0x0, 0x1, 0x3, 0x1, 0x12, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "81bb6e86a9"}]}}]}}]}}]}}, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000100)=' ', 0x1}], 0x1) socket$caif_seqpacket(0x25, 0x5, 0x1) 16:05:58 executing program 5: ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, &(0x7f0000000000)={0x3, 0x1, [0xc5d, 0x4, 0x4, 0x2a, 0x7, 0x9, 0x80, 0x4]}) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB], &(0x7f0000000400)=0x8) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r4}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x38}, 0x0) r5 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x0, 0x2) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f00000000c0)={0xd800, &(0x7f0000000040), 0x0, r5, 0x8}) mmap$perf(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x37e49e05671e9c09, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000140)={{0x0, 0xd000, 0x8, 0x3f, 0x0, 0x9, 0x3, 0x1, 0x5, 0x73, 0xed, 0x1}, {0x4000, 0x0, 0x0, 0x80, 0x0, 0x8, 0x4, 0x3, 0x0, 0x7, 0x1, 0x6}, {0x3000, 0x2, 0xb, 0x77, 0x84, 0x80, 0x4, 0x7, 0x7, 0x9, 0x3, 0x5}, {0x2, 0x1000, 0x1a, 0x8, 0x57, 0x1, 0xfb, 0x54, 0x4, 0x40, 0xfd, 0x9}, {0x4000, 0x10000, 0x0, 0x0, 0x6, 0xf1, 0x0, 0x81, 0x81, 0x74, 0x1, 0x5}, {0x4, 0x10001, 0xd, 0x5, 0x2, 0xfe, 0x1, 0x1, 0x20, 0x8, 0x2, 0x1f}, {0x3000, 0x2, 0xb, 0x9, 0x5, 0x6, 0xc, 0x7, 0xc8, 0x75, 0xb2, 0x3}, {0x4000, 0x1, 0xb, 0x8, 0x3, 0x1, 0x3f, 0x3, 0x20, 0x4d, 0x13, 0x8f}, {0x4, 0x4000}, {0x10000, 0x10000}, 0x10000, 0x0, 0xf0099ec763bb883, 0x4204, 0xe, 0x1, 0x4000, [0x401, 0x3, 0x1ff, 0xe5a]}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000002400010000001b0000000000"], 0x28}}, 0x0) r7 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r8, r7) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup2(r11, r10) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r12, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r13}}}, @rights={{0x14, 0x1, 0x1, [r9]}}], 0x38}, 0x0) r14 = fcntl$dupfd(r7, 0xe09, r9) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = socket$inet6(0xa, 0x1000000000002, 0x0) r17 = dup2(0xffffffffffffffff, r16) r18 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r19, r18) getsockopt$sock_cred(r18, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)) sendmsg$netlink(r17, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r20}}}, @rights={{0x14, 0x1, 0x1, [r15]}}], 0x38}, 0x0) ioctl$VHOST_SET_VRING_KICK(r14, 0x4008af20, &(0x7f0000000380)={0x2, r15}) r21 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x870xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x38}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x1, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200002c0], 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYRES16=r1]}, 0x7a) 16:05:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000026000/0x18000)=nil, &(0x7f00000008c0)=[@text16={0x10, &(0x7f0000000400)="1fb800008ed00f38cbfb2626660f38808505000f01cb9ac00253000f002cb816008ee866b9800000c00f326635001000000f300f72e600"}], 0x1, 0x0, 0x0, 0x34cf87279f007e0e) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000180)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) r6 = accept(r5, &(0x7f0000000240)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000100)=0x80) setsockopt$RDS_FREE_MR(r6, 0x114, 0x3, &(0x7f00000002c0)={{0x1000, 0x20}, 0x28}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup2(r9, r8) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r11}}}, @rights={{0x14, 0x1, 0x1, [r7]}}], 0x38}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rfkill\x00', 0x200000, 0x0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = dup2(r14, r13) getsockopt$sock_cred(r15, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r15, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r16}}}, @rights={{0x14, 0x1, 0x1, [r12]}}], 0x38}, 0x0) dup2(0xffffffffffffffff, r0) getsockopt$sock_buf(r5, 0x1, 0x1a, &(0x7f0000000000)=""/25, &(0x7f0000000080)=0x19) r17 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000a00)=ANY=[@ANYBLOB="05000000000000007bf1551f07000000bd164466000000001f000000ce3c00009f0100000000000000000000000000000b40000007100000020000007c0700000100000006000000ff030000000000000000000000000000070000000000d69d6e"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:05:59 executing program 2: pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r4}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x38}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup2(r8, r7) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r9, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r10}}}, @rights={{0x14, 0x1, 0x1, [r6]}}], 0x38}, 0x0) pipe(&(0x7f0000000a00)) r11 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup2(r12, r11) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000100)=0xc) getegid() sendmsg$netlink(r13, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x2be, &(0x7f00000003c0)}, 0x0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r18 = dup2(r17, r15) getsockopt$sock_cred(r18, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r18, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r19}}}, @rights={{0x14, 0x1, 0x1, [r14]}}], 0x38}, 0x0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r21 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r23 = dup2(r22, r21) getsockopt$sock_cred(r23, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) r25 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r26, r25) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r28 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r30 = dup2(r29, r28) getsockopt$sock_cred(r30, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r30, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r31}}}, @rights={{0x14, 0x1, 0x1, [r27]}}], 0x38}, 0x0) sendmsg$netlink(r27, &(0x7f0000000440)={0x0, 0x69, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1c00ff00004800000200000000000000", @ANYRES32=r24, @ANYRES32=0x0, @ANYRESHEX, @ANYRESOCT=r26, @ANYRES32=r20, @ANYBLOB="e89fbc42"], 0x38, 0x4000}, 0x0) syz_usb_connect(0x2, 0x6, &(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f0000000180)=ANY=[@ANYRESDEC, @ANYRESDEC=r3, @ANYRESOCT, @ANYRES32=0x0, @ANYPTR=&(0x7f0000000040)=ANY=[@ANYPTR64, @ANYRESOCT=0x0, @ANYRES64, @ANYRESDEC, @ANYBLOB="24cfe217e8166d71f9d41247ccb31f2b45cd19b18daa2eb8ed83b2cc06bbede8c9bfed961c05a536ce95a9efbbbf3fca1ee5bc2193b168ad3e947886bba729d2f65b941fd295caed0354f9a8aa3291cc537e9763dbba3330f5426c46b748a50c842a7b28bbc716c383e867fa88cb3466a82fa60fdd9500deb1e2f7adfc", @ANYRES16=r5, @ANYRES64=r9, @ANYRESDEC=r13], @ANYPTR64=&(0x7f0000000140)=ANY=[@ANYPTR], @ANYRES32, @ANYRESDEC=r19], @ANYBLOB="65ba0629f389ccc7ff6dbeabdbd7ca5c845a52d4c0d1c45b334a3df6cfa79cfb5710081372682125aa506fd91ff27ea1148ace6c19ff391e7852608eceef97cb2bf57214479491202514d9", @ANYPTR64, @ANYRESOCT=r16, @ANYPTR, @ANYRESDEC=r20], 0x0) 16:05:59 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000000000000000000006000200050020"]) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x89f9, &(0x7f0000000180)={'sit0\x00', @ifru_flags}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r5, r4) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r7}}}, @rights={{0x14, 0x1, 0x1, [r3]}}], 0x38}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, &(0x7f00000000c0)=0x8) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000040)={'irlan0\x00', {0x2, 0x4e20, @multicast1}}) [ 706.513965][ T5] usbhid 2-1:0.0: can't add hid device: -71 [ 706.521584][ T5] usbhid: probe of 2-1:0.0 failed with error -71 [ 706.555403][ T5] usb 2-1: USB disconnect, device number 55 16:05:59 executing program 3: socketpair(0x1d, 0x68c1446337e13012, 0x2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000040)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9, 0x1, 'prio\x00'}, {0xd, 0x2, {0x0, "c39fc4fc7b456346f38daebbe791f4c8"}}}]}, 0x48}}, 0x0) 16:05:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000400)="11dca5fa5d01cfe47bf070") r1 = socket(0x10, 0x3, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x202020, 0x0) write(r1, &(0x7f0000000280)="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", 0xfc) open(&(0x7f0000000100)='./bus\x00', 0x20000000000b02, 0x0) epoll_create(0xfd2e) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0xc8, &(0x7f00000004c0), 0x38) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x4}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xc9, 0x0, 0x0) [ 706.677921][T22784] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 16:05:59 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x14, 0x16, [{0x10, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc}]}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r6}}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x38}, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000180)={'bridge_slave_0\x00', 0x80000000}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=@deltaction={0x110, 0x31, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x78, 0x1, [{0x18, 0x0, @TCA_ACT_KIND={0x10, 0x1, 'tunnel_key\x00'}}, {0x14, 0xc, @TCA_ACT_KIND={0xc, 0x1, 'mirred\x00'}}, {0x10, 0x12, @TCA_ACT_INDEX={0x8, 0x3, 0x62}}, {0x10, 0x5, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x14, 0x19, @TCA_ACT_KIND={0xc, 0x1, 'skbmod\x00'}}, {0x14, 0x20, @TCA_ACT_KIND={0xc, 0x1, 'pedit\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1d, @TCA_ACT_INDEX={0x8, 0x3, 0xf}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0x14, 0xd, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x14, 0x12, @TCA_ACT_KIND={0xc, 0x1, 'pedit\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xf, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x1e, @TCA_ACT_KIND={0xc, 0x1, 'vlan\x00'}}]}, @TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x4, @TCA_ACT_KIND={0xc, 0x1, 'csum\x00'}}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000040)) [ 706.725633][T22787] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 706.734175][T22787] netlink: 'syz-executor.1': attribute type 2 has an invalid length. 16:05:59 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r1, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0xc0585604, &(0x7f0000000140)={0x0, 0x0, {0x200, 0x3, 0x0, 0x2, 0x7, 0x0, 0x1, 0x2}}) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup2(r8, r6) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r9, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r10}}}, @rights={{0x14, 0x1, 0x1, [r5]}}], 0x38}, 0x0) ioctl$UI_SET_FFBIT(r5, 0x4004556b, 0x44) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup2(r11, r4) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r12, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r13}}}, @rights={{0x14, 0x1, 0x1, [r3]}}], 0x38}, 0x0) ioctl$TIOCOUTQ(r12, 0x5411, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000000)={0x0, 0xf047}, 0x8) ioctl$FS_IOC_GETFSLABEL(r7, 0x81009431, &(0x7f00000001c0)) [ 706.842555][T11874] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 706.907405][T22794] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 706.930497][T22794] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 16:06:00 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x1}, 0x8) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000280)={0x0, 0x2}, 0x8) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x38}, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r4, 0xc0106401, &(0x7f0000000240)={0x79, &(0x7f0000000140)=""/121}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r6 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r6) r7 = request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='*keyringproc(,\\)!em1&)\x00', r6) keyctl$set_timeout(0xf, r7, 0x2) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x34000}], 0x1}, 0x0) [ 706.977452][T22787] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 706.985753][T22787] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 707.083622][T11874] usb 6-1: Using ep0 maxpacket: 8 [ 707.202886][T11874] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 707.213956][T11874] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 707.226941][T11874] usb 6-1: New USB device found, idVendor=05ac, idProduct=8240, bcdDevice= 0.00 [ 707.236151][T11874] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.246785][T11874] usb 6-1: config 0 descriptor?? 16:06:00 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x6e, 0x4d, 0x30, 0x10, 0x12d1, 0x73f, 0x6001, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa4, 0x0, 0x1, 0xff, 0x4, 0x74, 0x2, [], [{{0x9, 0x5, 0x3}}]}}]}}]}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 16:06:00 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x5}]}}}], 0x18}, 0x0) sendmsg$kcm(r1, &(0x7f0000000280)={&(0x7f0000000300)=@pptp={0x18, 0x2, {0x2, @remote}}, 0x80, &(0x7f0000000b40)=[{&(0x7f00000001c0)="6748e6a6a89483659b7fbad4ccb55addfeb26fab7f1370b46ab9e2370ff762f6e089690e8ec32a34777d8440cef12199f8cc97115f", 0x35}, {&(0x7f0000000480)="44e969996d434b11ec4aae553b1b8dfaf26d9b746ac3ab07a16d317246439d5c10fe78ff46ea4aea0ef5f5c95b16b74be20084c23da6d03d8b8344721bc1d71c8961319a03abdd64584b8010207cf932ed", 0x51}, {&(0x7f0000000500)="78bcab0835fb1810ed7cb801b9706f26a1895ca85ef7f257423cc22988b29333b0dbacfc844802fe830e07978c6d318ebe135ff8922c796d943218504f6ddec646418f77b2d08b72533289affc6b0c026caca3c4ed0f3027dfdfd0698fb20c7c160327c9c6095e6d2ca1e682ccb3a18e149f3c489f397abb9c3b0d7a51bc5ebe47f5d994b111c975b58728a49b5d57ea7f9034359e207dda", 0x98}, {&(0x7f00000005c0)="6478742611b49d0dd93f78f80bdd9de08fa82aa997d8944905370511dc968e839212db38c393f52a7aafa593cd342fc5371be9c1c4d21eda5dc1005b36fd5df2a0285357db", 0x45}, {&(0x7f0000000640)="7d4d3e8cea1e3eb8402689e2c2f1b6e7be0c94e9f37e7f7e0071adee13585c763c8261468e2f3af36bdf6c9893b9e274ac591df0978583542e082d8bbeba4cf5ac206ab67a4716682998efd7171cac0a3605ead69593e74a341ad29010829d773f54f2c5240e05d9e86d6e4c2b50216d3db07af313b5a7ac90612f2ee92a2fbfe9b2cf70", 0x84}, {&(0x7f0000000700)="d002cc016db5b88af258a3558ccc1526ce513168be95d855da016b93bc7e9e6ed52097f82c3f1e91d5f8846e688e1553d45891987fc8a0a6bff01a1e20f94758cc8408756cbf63705d6666c3aef76c6cf811885da7be18ef2f511813e56c186a63c13a08554af3132b91c3954c3c61b89461b7d5be8e792dfcd80f31abda496d115d5a0a8a66d3c71f6506b74d1aae49722fbeaac9b0b31350df8aa3a6481217d1c2eada465c57a46d628730b781aabc35e5d87be1035665e915198b9036da22df652c802cd1a9043603a216341191ff614a291cb215beede995ba495df2566a04d4954c6c94bc6001cf8bd503e6a10738c6d6ed07c5e7", 0xf7}, {&(0x7f0000000800)="39c98ae0906da86600d156cf7386d71ee1a426b355a82158b55f351e91648777a0a6530fdb1dbe5abe63f77da9384e6c2de40051b1b6bf248d76be7381ad0888c810e1bcc19f03d1c49d9bec74446aac004b46ffd818c25c3614f182c38a392470c531da9853efc5c52aebbb5e5437ce8a93ce82a725e4b47e98c79d40cda7dca38c0b02c38a5c30bf0fc03d1eae639bf98d0bc3ab8fd28ad1801c3f04e1a05fdeffc2", 0xa3}, {&(0x7f00000008c0)="d91a5a6842a245fd1988e49b803cd795aae39e239eda52821f1d081bfeebb070f451cf9a3fb32231c3aa1574c18d93cdc308b8835c91fb2d8184422e00534f494088d30cdfa3cca5abf62aa33ddc71d56b75818460c5f0329d8430d1643221947218336f81c1a75ba883c02a611064e49cb0948c8f101c6832f789971f6ec9bdd2b9478d7652ca9b9b8d61773be6f6", 0x8f}, {&(0x7f0000000a40)="2d4f73791a2078a25ff3090e568b9e2c92daa10e94efebb902bc2397636d2f6500f286c51c332e1d7b71642df6a81a8e5ea4caaa0db5e3dd79fc91470167a4202d83bfc4113855a26147116cf07d467bacaad8e52f15c52b4b0c1b205597e3edc83fd761e4de9f7db91986521c7713daff3e3f80b0624806238df72f98b0a0627801275a91744e319bca0798a73a57e4ecf46d91ed7d14e2b255575fa445d2ab268d28b9e01e0ad3dcc14f0bfba42b1e1343ea30581b93883c8f48ae9dc278ff339dbd93b61c85359ad0ec4ff342985550c7e1b8695e9424b5", 0xd9}], 0x9, &(0x7f0000000c00)=[{0xd8, 0x114, 0x80000000, "0e50603c334449c830c05d3815536bd40ebda8b06e2b07fbd6f9a3343fb43056d6be699150fafae7259ae42fda1cef037862daaa158e52751a9a9f890abe9225838d9db3050cd4303656c2f94bf3520fc2a224b9d61801d0ed94c25b0f952c8383cd0b6d64bfc26383250069fc5fa583876299c323afa1d4f16a1d5993379e8e3b2cc8dcbf5968a78b632b4ba54e8a9fc900195f6bded44aeef1c0030be986b8cb556790838776668c63bd85afc943d9c4694cafbe8befd57db491ad5f955ab76f"}, {0x1010, 0x115, 0x5, "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"}, {0xb0, 0x88, 0x8, "fe9d4411edfeef9dd20bde7ea2f360296341525cec629989d6fa4ef7bff04d462b27f751e95ddec8d3b9a1f0a820a218d4277feb809193eef13a34cce30e355d37e2b4dc6a62a3f86499429a1fbe0b7a7bc9bd63e6f68cecfb6b52725b2d05e7b9688f4074cc9b8fed81fbd7eda94a3c991d9c6af85f64bdf00fba3b898d75c61ecf881148161a9091282db6141f55d826f3c2b595de8ad78e2e"}, {0xe0, 0x109, 0x4, "32fb5dd44f88277928110639be92a3d9d6cc2342be58d42f5495c7105ced8f214454846ce7fd184b94200a50ef4278ff77b3691a85a82adfb4d844744f0150a6287c5c35db745ed147a15a0fdf7f8547e323dd604cba1dca76fd52f87d3b543aa41d77773436e633952afdea81ea225c9ab840a6b3989bc6cb05a43de5da229b5f35c3c5fb8f38c29c7e0ffa7c65fc554dc90623fe8723a335cfb0065fe5999ad9ff30a3e5e1a3a196bbd7c0e61b389992fc95e552995d1b61ed51ae12732382e68ced91d66834e5f0"}, {0xa8, 0x184, 0x7, "ba0625fa0d88b4c1c02c2ec66fcda08838336651fb9e45966932f29acd1a8802e66747a0bc99c729a18c6f3a2c3b976e5c4d519b263585fdfa48a764ccd8f4a874fb8c6da182b975abc509d7eeefe303a3fcd978a0e27f454f6f54fbef5feb1b367655255935fc6e0d4cec1c5883fb9edf0cdaaaf075e1d2b2be508dfc6cb1dddb91a4925299d6a5128d24afdb52fd5741977ec0bf18c6"}, {0x1010, 0x114, 0xfff, "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"}], 0x2330}, 0x8000) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r6, r5) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$uhid(0xffffffffffffff9c, &(0x7f0000000980)='/dev/uhid\x00', 0x2, 0x0) r11 = dup2(r10, r9) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r11, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r12}}}, @rights={{0x14, 0x1, 0x1, [r8]}}], 0x38}, 0x0) ioctl$PIO_UNIMAP(r8, 0x4b67, &(0x7f0000000180)={0x3, &(0x7f0000000140)=[{0x400, 0x2}, {0x8000, 0x1661}, {0x4c, 0x2}]}) r13 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80000) setsockopt$inet_sctp_SCTP_NODELAY(r13, 0x84, 0x3, &(0x7f0000000400)=0x3, 0x4) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r7, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r14}}}, @rights={{0x14, 0x1, 0x1, [r4]}}], 0x38}, 0x0) ioctl$TCSETS(r7, 0x5402, &(0x7f00000000c0)={0x5a0e, 0x1, 0xffff, 0x6, 0xe, 0x82, 0x9, 0x40, 0x40, 0x199c, 0x7, 0x8}) [ 707.682205][ T5] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 707.734613][T11874] appleir 0003:05AC:8240.0019: unknown main item tag 0x0 [ 707.744051][T11874] input: HID 05ac:8240 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:05AC:8240.0019/input/input36 [ 707.844381][T11874] appleir 0003:05AC:8240.0019: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8240] on usb-dummy_hcd.5-1/input0 [ 707.935586][T11840] usb 6-1: USB disconnect, device number 66 [ 707.952084][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 708.072460][ T5] usb 5-1: config 0 has an invalid interface number: 164 but max is 0 [ 708.080824][ T5] usb 5-1: config 0 has no interface number 0 [ 708.087096][ T5] usb 5-1: New USB device found, idVendor=12d1, idProduct=073f, bcdDevice=60.01 [ 708.096495][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.106687][ T5] usb 5-1: config 0 descriptor?? [ 708.392659][ T5] usb 5-1: string descriptor 0 read error: -71 [ 708.402105][ T5] option 5-1:0.164: GSM modem (1-port) converter detected [ 708.413557][ T5] usb 5-1: USB disconnect, device number 70 [ 708.420912][ T5] option 5-1:0.164: device disconnected [ 708.712119][T11840] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 708.952086][T11840] usb 6-1: Using ep0 maxpacket: 8 [ 709.072298][T11840] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 709.083516][T11840] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 709.096498][T11840] usb 6-1: New USB device found, idVendor=05ac, idProduct=8240, bcdDevice= 0.00 [ 709.105698][T11840] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.114995][T11840] usb 6-1: config 0 descriptor?? [ 709.122436][ T5] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 709.372079][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 709.414402][T11840] appleir 0003:05AC:8240.001A: unknown main item tag 0x0 [ 709.423849][T11840] input: HID 05ac:8240 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:05AC:8240.001A/input/input37 [ 709.523236][ T5] usb 5-1: config 0 has an invalid interface number: 164 but max is 0 [ 709.531580][ T5] usb 5-1: config 0 has no interface number 0 [ 709.538784][ T5] usb 5-1: New USB device found, idVendor=12d1, idProduct=073f, bcdDevice=60.01 [ 709.548154][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.558147][T11840] appleir 0003:05AC:8240.001A: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8240] on usb-dummy_hcd.5-1/input0 16:06:02 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0xffffffe1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x1c) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) pwritev(r2, &(0x7f0000000280)=[{&(0x7f0000000100)="17d6bd60129c04935fc7845b0782c20f286316030c6780e6ee067bdff66367f68fd5973d764a41929c1437f49a61b4158fc2b04fcc1e3b8d6fea3838b2f65e7e84ac928140c57f746653a1945500118c1989ddbc2707585eb56121d0dc5f921a5d0dcc7bc352830aa9c5cdc83df62496c4326974b8077d", 0x77}, {&(0x7f0000000080)="e988e78529002b255a6efd83cbff7327b29dcd418316120d309978dfea61013c", 0x20}, {&(0x7f0000000180)="4828df4585b36f6565b9f0b3215d162a243f45070689e324b40b674926ac6cd112e5581c983f8ea9ece6fd36ed940eb805be0d7ae5015bbb0b56ff2811f3c5163d2af69ca3f91cf6a11a5dc84ffdb7ef337fa94c073949996cb914a407376a503a5a88c2eefd9e9a008b791822f7e8a9c788aa50781bcbb7e17497b0505ea636f635cf7a78b97ea326acf5ac821153acd5033c4919c1f7659d98a95ae9080f1ffaf7882ea1ce4aa66b309475f1bbf761076e9738eca7b59e8483560a074dc0700184b0c7ebb7ae19f6fe2b13dc7ec0d350a49ff092abe16f30f77fda408fe137accc443619b4296d9feb3d644040911f05a80a18e512", 0xf6}], 0x3, 0x0) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xffd8) 16:06:02 executing program 0: syz_usb_connect(0x0, 0xbc, &(0x7f0000002c40)={{0x12, 0x1, 0x0, 0x1c, 0x0, 0xf5, 0x40, 0x7c0, 0x1501, 0x6514, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x87, 0x0, 0x1, 0x3, 0x1, 0x12, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "81bb6e86a9"}]}}]}}]}}]}}, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000100)=' ', 0x1}], 0x1) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_int(r1, 0x6, 0x10, &(0x7f0000000040)=0x4, 0x4) r5 = dup2(r4, r3) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) r7 = socket$bt_cmtp(0x1f, 0x3, 0x5) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r12}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0xe, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f00000000c0)={'team0\x00', r12}) sendmsg$netlink(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="d0000000"], 0x38}, 0x0) ioctl$IOC_PR_PREEMPT(r5, 0x401870cb, &(0x7f0000000000)={0xdbdc, 0x8000, 0x3, 0x7}) r13 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r14, r13) ioctl$sock_SIOCGPGRP(r13, 0x8904, &(0x7f0000000140)=0x0) setpriority(0x0, r15, 0x3) 16:06:02 executing program 1: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000180)=[{&(0x7f0000000100)="fe", 0xfffffe32}], 0x1, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) r3 = semget$private(0x0, 0x207, 0x0) semop(r3, &(0x7f0000000140)=[{0x0, 0x23}], 0x1) semop(r3, &(0x7f0000000040), 0x46) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000040)) semctl$GETALL(r3, 0x0, 0xd, &(0x7f0000000580)=""/4096) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000540)=@ccm_128={{0x303}, "6cc4874d92ef3271", "a5b97f82a0f27ad6931bc9f6d3ec0a6e", "c04bee04", "e4e5646239d2b894"}, 0x28) splice(r0, 0x0, r1, 0x0, 0x4002, 0x0) 16:06:02 executing program 3: mknod(&(0x7f0000000000)='./bus\x00', 0xc000, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) lsetxattr$security_selinux(&(0x7f0000000180)='./bus\x00', &(0x7f0000000240)='security.selinux\x00', 0x0, 0x0, 0x0) clone(0x7fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) 16:06:02 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x100002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x100000000000, 0x400000) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x4) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x5) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 709.560002][ T5] usb 5-1: config 0 descriptor?? [ 709.585121][T11840] usb 6-1: USB disconnect, device number 67 16:06:02 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$VIDIOC_SUBDEV_G_EDID(r1, 0xc0285628, &(0x7f0000000180)={0x0, 0x164, 0x0, [], &(0x7f0000000140)}) r6 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r7, 0xffffffffffffffff) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000001c0)={@empty, 0x7, 0x1, 0x1, 0x2, 0x3f, 0x1}, &(0x7f0000000200)=0x20) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f00000002c0)="bdb5cf96b4e0545d9552ccd7bc8f3fd76bbf7ab5786a21cc05cc6093eee06b7e4a8f692858fd4883000f67490e642a9ea290eb93165b3d8072ee03efa96ca5cb388c9be3012969f085488f5204419b5180a9d8a15ebd9798c0709a5060fad2cdd5fe17ff3ee611a01ff9a0b08ca3e72e430f1405465e6c211de7eb1099c2bd1213226ccb97106daff356c4e7b79f1619e0a18498370ee95b8bddb1e22d7c66fecc8b5b99f4f18681676d7643081abec6477af84f00feca907a3027495957", 0xbe, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000200140000000000000001000000a4678400", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x38}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x106, 0x5}}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r5, 0x800448d2, &(0x7f0000000380)={0x6, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}]}) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) unshare(0x40000000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)={0xffffffff, 0x8, 0x20}) [ 709.639966][T22832] input: syz0 as /devices/virtual/input/input38 [ 709.857288][ T5] usb 5-1: string descriptor 0 read error: -71 [ 709.866765][ T5] option 5-1:0.164: GSM modem (1-port) converter detected 16:06:02 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/qat_adf_ctl\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000540)={0x6, 0x118, 0xfa00, {{0x0, 0x1000, "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", 0x20, 0x7f, 0xa2, 0x0, 0x3, 0x1, 0x1f, 0x1}, r1}}, 0x120) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$l2tp(0x18, 0x1, 0x1) poll(&(0x7f0000000000)=[{r3}], 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x12800, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2f73d28e49cef8b9}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x124, r6, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}]}, @TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8d}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x20}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x220d}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x89}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xe2a}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xbcf6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x800}]}, @TIPC_NLA_MEDIA={0x40, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x0, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x315}, 0x1, 0x0, 0x0, 0x1}, 0x48000) socket(0xa, 0x1, 0xe0) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000040)={{0x2c, @multicast1, 0x4e22, 0x0, 'fo\x00', 0x442a5058716395ac, 0x1, 0xe}, {@loopback, 0x4e23, 0x0, 0x8, 0x5, 0x67c}}, 0x44) r7 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_mreqsrc(r5, 0x0, 0x25, &(0x7f0000000340)={@empty, @broadcast, @empty}, 0xc) dup2(r8, r7) setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000000240)={0x6, 0x9, 0x9b1, 0xffff}, 0x8) sendmmsg(r2, &(0x7f0000001b00), 0x4000000000000a2, 0x8802) r9 = socket$packet(0x11, 0xa, 0x300) dup2(r9, r2) getresuid(&(0x7f0000000100), &(0x7f0000000200)=0x0, &(0x7f0000000240)) r11 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x27) r12 = socket(0xa, 0x3, 0x6) connect$bt_rfcomm(r12, &(0x7f0000000000)={0x1f, {0xfe, 0x0, 0x1000, 0x80000001, 0x6, 0x5}, 0x8}, 0xa) bind$inet6(r12, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x6}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r12, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f0000000480)=0xe8) r14 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r14, 0x84, 0x6d, &(0x7f0000000c00)=ANY=[@ANYBLOB="ab000000a6d23fa0c9cb488b619002d1d896e5ffb3b62ccfa516aec8038d482cd2aa0b6ac0d684fba227e9983be9f367da66938eddee11b161213cdf23cb91032bd00a8ae552bc17ec5e976fa67846060aa7629aed35eb9bb9e096cc3825df10acb8c0dff4569bb0f686a3856eb778df7afa4ae0d65bee83afa0b4f46a0b10af299da7efdcc6c573074de84403de7902a06096d7483194ad47775d355b9800000008008b050000000000000000000000000000000000000000000000000000022dc3ad9f64a6d1c7243c00ba1874e0de0577d6a229cd1338f5d4fad9a65ad7159008e3be"], &(0x7f0000000540)=0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r14, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8) setuid(r16) r17 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r17, 0x84, 0x6d, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000540)=0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8) setuid(r18) r19 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r19, 0x84, 0x6d, &(0x7f0000000b40)=ANY=[@ANYBLOB="ab000000a6d23fa0c9cb488b6190f2d1d89677354590dde5ffb3b62ccfa516aec8038d48d684fba227e9983be9f367da66938eddee11b1613f0d5ff3b2213cdf2bd00a8ae552bc17ec5e976fa67846060aa7629aed35eb9bb9e096cc3825df10acb8c0dff4569bb0f6a15cab46fa86a3856eb778df7afa4a3112676e9547e0d65bee83afa0b4f46a0b10af299da7efdcc6c573074de84403de7902a07096d7483194ad47775d355bd65460a5a52aa9cc384c962b12062cf85884362f08008b07"], &(0x7f0000000540)=0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r19, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8) setuid(r20) r21 = request_key(0x0, &(0x7f0000001300)={'syz', 0x2}, &(0x7f0000001340)='em0cpusetmime_type\x00', 0xfffffffffffffff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) keyctl$chown(0x4, r21, 0x0, r22) r23 = request_key(0x0, &(0x7f0000001300)={'syz', 0x2}, &(0x7f0000001340)='em0cpusetmime_type\x00', 0xfffffffffffffff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) keyctl$chown(0x4, r23, 0x0, r24) r25 = request_key(0x0, &(0x7f0000001300)={'syz', 0x2}, &(0x7f0000001340)='em0cpusetmime_type\x00', 0xfffffffffffffff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) keyctl$chown(0x4, r25, 0x0, r26) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r11, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000a00)=ANY=[@ANYBLOB="02000000010002000000000002000400", @ANYRES32=r13, @ANYBLOB="02000200", @ANYRES32=r15, @ANYBLOB="02000100bb86b4c5600d592e64b86edda53135e0f392e4c9ca69b61556778ccf29c4990d1893fd049001c62278a88220d8bb3ef088a2bbfd6fdd3bbbaa8e7ff1e7d747037c523caba1237cfd937b81d9ae40c8e42df69a9ad815e799bd07b8468681a262136f0b4027e75c77b74f2bc0ad4402225b8f934741a657b08fa3e58bffe4394310ebab08c71788455eb3b79d61d24d289378388103fdaa96ee42a18df1027aa5865c0b", @ANYRES32=r16, @ANYBLOB="02000400", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r18, @ANYBLOB="02000200", @ANYRES32=r20, @ANYBLOB="02000500", @ANYRES32=r10, @ANYBLOB="040002000000000008000100", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=r22, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r24, @ANYBLOB="08000400", @ANYRES32=r26, @ANYBLOB="08000300", @ANYRES32=r27, @ANYRES32, @ANYBLOB="0800d8b8", @ANYRES32, @ANYBLOB="10000200000000002000d6f800000000"], 0x1c, 0x2) ioprio_set$uid(0x3, r10, 0x4) [ 709.922309][ T4071] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 709.947126][ T5] usb 5-1: USB disconnect, device number 71 [ 709.954698][ T5] option 5-1:0.164: device disconnected [ 710.002945][T22853] IPVS: ftp: loaded support on port[0] = 21 16:06:03 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) getresuid(&(0x7f0000000100), &(0x7f0000000200)=0x0, &(0x7f0000000240)) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x27) r4 = socket(0xa, 0x3, 0x6) connect$bt_rfcomm(r4, &(0x7f0000000000)={0x1f, {0xfe, 0x0, 0x1000, 0x80000001, 0x6, 0x5}, 0x8}, 0xa) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x6}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f0000000480)=0xe8) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000000900)=ANY=[@ANYBLOB="ab000000a6d23fa0c9cb488b619002d1d896e5ffb3b62ccfa516aec8038d482cd2aa0b6ac0d684fba227e9983be9f367da66938eddee11b161213cdf2bd00a8ae552bc17ec5e976fa67846060aa7629aed35eb9bb9e096cc3825df10acb8c0dff4569bb0f686a3856eb7010000804a3112676e9547e0d65bee83afa0b4f46a0b10af299da7efdcc6c573074d10bc41b99e9693e84403de7902a06096d7483194ad47775d355b9800000008008b0500"/193], &(0x7f0000000540)=0x1) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/btrfs-control\x00', 0x50002, 0x0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup2(r9, r8) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r11}}}, @rights={{0x14, 0x1, 0x1, [r7]}}], 0x38}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000c40)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8) setuid(r13) r14 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r14, 0x84, 0x6d, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000540)=0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r14, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8) setuid(r15) r16 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r16, 0x84, 0x6d, &(0x7f0000000580)=ANY=[@ANYBLOB="ab000000a6d23fa0c9cb488b6190f2d1d89677354590dde5ffb3b62ccfa516aec8038d48d684fba227e9983be9f367da66938eddee11b1613f0d5ff3b2213cdf2bd00a8ae552bc17ec5e976fa67846060aa7629aed35eb9bb9e096cc3825df10acb8c0dff4569bb0f6a15cab46fa86a3856eb778df7afa4a3112676e9547e0d65bee83afa0b4f46a0b10af299da70000c6c573074de84403de7902a07096d7483194ad47845d355bd65460a5a52aa9cc384c962b12062cc6fe99b77046cd6da113f85884362f08008b07"], &(0x7f0000000540)=0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r16, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8) setuid(r17) r18 = request_key(0x0, &(0x7f0000001300)={'syz', 0x2}, &(0x7f0000001340)='em0cpusetmime_type\x00', 0xfffffffffffffff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) keyctl$chown(0x4, r18, 0x0, r19) r20 = request_key(0x0, &(0x7f0000001300)={'syz', 0x2}, &(0x7f0000001340)='em0cpusetmime_type\x00', 0xfffffffffffffff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) keyctl$chown(0x4, r20, 0x0, r21) r22 = request_key(0x0, &(0x7f0000001300)={'syz', 0x2}, &(0x7f0000001340)='em0cpusetmime_type\x00', 0xfffffffffffffff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) keyctl$chown(0x4, r22, 0x0, r23) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r26 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r28 = dup2(r27, r26) getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r28, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r29}}}, @rights={{0x14, 0x1, 0x1, [r25]}}], 0x38}, 0x0) fsetxattr$system_posix_acl(r3, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000a00)=ANY=[@ANYBLOB="02000000010002000000000002000400", @ANYRES32=r5, @ANYBLOB="02000200", @ANYRES32=r12, @ANYBLOB="02000100bb86b4c5600d592e64b86edda53135e0f392e4c9ca69b61556778ccf29c4990d1893fd049001c62278a88220d8bb3ef088a2bbfd6fdd3bbbaa8e7ff1e7d747037c523caba1237cfd937b81d9ae40c8e42df69a9ad815e799bd07b8468681a262136f0b4027e75c77b74f2bc0ad4402225b8f934741a657b08fa3e58bffe4394310ebab08c71788455eb3b79d61d24d289378388103fdaa96ee42a18df1027aa5865c0b", @ANYRES32=r13, @ANYRES32, @ANYRES32=r2, @ANYBLOB, @ANYRES32=r15, @ANYBLOB="02000200", @ANYRES32=r17, @ANYBLOB="02000500", @ANYRES32=r2, @ANYBLOB="040002000000000008000100", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=r19, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r25, @ANYBLOB="08000400", @ANYRES32=r23, @ANYBLOB="08000300", @ANYRES32=r24, @ANYRES32, @ANYBLOB="0800d8b8", @ANYRES32, @ANYBLOB="10000200000000002000d6f800000000"], 0x1c, 0x2) setxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3={0x3000000, [{0x8, 0x80}, {0x2, 0x8001}], r17}, 0x18, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) userfaultfd(0x0) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') r30 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r30}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r30, &(0x7f00000030c0), 0x1000) read$FUSE(r30, &(0x7f0000001000), 0x1000) umount2(&(0x7f0000000180)='./file0\x00', 0x0) 16:06:03 executing program 4: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x80080, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f0000000080)={0x0, {0x0, 0x3}}) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"/359], 0x18) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r6}}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x38}, 0x0) r7 = accept$inet6(r2, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000280)=0x1c) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto(0xffffffffffffffff, &(0x7f00000004c0)="5ed673a3d057aa14c8586a266950a982afd6c3e9adfe7d409f477b9e5fe18dd116103ba4fe9b04f561ffadd5a2785fd5857d0bc5a637e382e7c513ae3c2f3ee40d47b52001241e33b8c498bd74f321d6cd10671c445f74a1183876f7882f74c423576b49506d379308d44639af12730734ef25", 0x73, 0x40, &(0x7f0000000540)=@x25={0x9, @remote={[], 0x1}}, 0x80) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r8, 0x84, 0x7d, &(0x7f0000000300)={r10, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000040)=0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f00000002c0)={r10, 0x7fff}, &(0x7f0000000300)=0x8) r11 = syz_open_dev$dspn(&(0x7f0000000400)='/dev/dsp#\x00', 0x6, 0x80) ioctl$PPPIOCGFLAGS1(r11, 0x8004745a, &(0x7f0000000480)) 16:06:03 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") syz_usb_connect$cdc_ecm(0x0, 0xfffffffffffffebb, &(0x7f00000019c0)={{0x12, 0x1, 0x4c2ddb87eeaab5b0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x3f, {{0x5}, {0x5}, {0xd}}, {[{}]}}}]}}]}}, &(0x7f0000000400)=ANY=[@ANYBLOB='\n\x00\x00\x00', @ANYPTR, @ANYBLOB="05000000", @ANYPTR=&(0x7f0000001980)=ANY=[@ANYBLOB="050f050056"], @ANYBLOB="0500000004000000", @ANYPTR, @ANYBLOB="f4000000", @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="f40378907df69587ddb8263831a1b8af11c3d1005162928706d36d0f4809eebbdcaba3661d4e925fc6d9df0325de"]]) 16:06:03 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) writev(r2, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000280)="1d", 0x1}], 0x2) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x4, 0x0) 16:06:03 executing program 5: getpid() syz_open_dev$usbmon(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000002000)='./bus\x00', 0x48042, 0x0) ftruncate(r0, 0x88001) r1 = socket(0x11, 0x3, 0x81) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r2) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r6, r5) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r7, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r8}}}, @rights={{0x14, 0x1, 0x1, [r4]}}], 0x38}, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0, 0xc5}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f00000000c0)={r9, 0x15, "4a93181807e613037546aa4ea3f7f7cb19f8f1e6d2"}, &(0x7f0000000100)=0x1d) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r10 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r10, 0x0, 0x4e68d5f8) socket$bt_bnep(0x1f, 0x3, 0x4) [ 710.724149][T22866] IPVS: ftp: loaded support on port[0] = 21 16:06:03 executing program 2: pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000100)=0x7) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r4, r5}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x38}, 0x0) r6 = syz_usb_connect(0x0, 0x1, &(0x7f0000000080)=ANY=[@ANYRES32=r3], 0x0) syz_usb_control_io(r6, 0x0, 0xffffffffffffffff) ioctl$KVM_ASSIGN_SET_INTX_MASK(r3, 0x4040aea4, &(0x7f00000000c0)={0x7, 0x8, 0x1, 0x2, 0xfff}) [ 710.777435][ T4071] usb 1-1: config 0 has an invalid interface number: 135 but max is 0 [ 710.785871][ T4071] usb 1-1: config 0 has no interface number 0 [ 710.792804][ T4071] usb 1-1: config 0 interface 135 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 710.803572][ T4071] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 710.815066][ T4071] usb 1-1: config 0 interface 135 altsetting 0 endpoint 0x81 has invalid maxpacket 1646, setting to 1024 [ 710.826436][ T4071] usb 1-1: config 0 interface 135 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 710.839724][ T4071] usb 1-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=65.14 [ 710.848962][ T4071] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.895592][ T4071] usb 1-1: config 0 descriptor?? [ 710.939637][ T4071] iowarrior 1-1:0.135: IOWarrior product=0x1501, serial= interface=135 now attached to iowarrior0 [ 711.024030][T11838] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 711.208461][T22836] netlink: 'syz-executor.0': attribute type 14 has an invalid length. [ 711.237432][ T5] usb 1-1: USB disconnect, device number 122 [ 711.243915][ C0] iowarrior 1-1:0.135: iowarrior_callback - usb_submit_urb failed with result -19 [ 711.268888][ T5] ===================================================== [ 711.275889][ T5] BUG: KMSAN: uninit-value in __mutex_lock+0x8d8/0x1980 [ 711.282833][ T5] CPU: 0 PID: 5 Comm: kworker/0:0 Not tainted 5.3.0-rc7+ #0 [ 711.290107][ T5] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 711.300174][ T5] Workqueue: usb_hub_wq hub_event [ 711.305195][ T5] Call Trace: [ 711.308518][ T5] dump_stack+0x191/0x1f0 [ 711.312862][ T5] kmsan_report+0x13a/0x2b0 [ 711.317373][ T5] __msan_warning+0x73/0xe0 [ 711.321888][ T5] __list_add_valid+0x1b6/0x430 [ 711.326767][ T5] __mutex_lock+0x8d8/0x1980 [ 711.331383][ T5] ? kmsan_internal_unpoison_shadow+0x42/0x80 [ 711.337701][ T5] __mutex_lock_slowpath+0x2c/0x30 [ 711.342824][ T5] mutex_lock+0x5d/0x80 [ 711.346995][ T5] iowarrior_disconnect+0x133/0x3e0 [ 711.353091][ T5] ? iowarrior_probe+0x1a50/0x1a50 [ 711.358211][ T5] usb_unbind_interface+0x3a2/0xdd0 [ 711.363447][ T5] ? usb_driver_release_interface+0x2a0/0x2a0 [ 711.369543][ T5] device_release_driver_internal+0x911/0xd20 [ 711.375638][ T5] device_release_driver+0x4b/0x60 [ 711.380938][ T5] bus_remove_device+0x4bf/0x670 [ 711.385865][ T5] device_del+0xcd5/0x1d10 [ 711.390275][ T5] usb_disable_device+0x567/0x1150 [ 711.395374][ T5] usb_disconnect+0x51e/0xd60 [ 711.400085][ T5] hub_event+0x3fd0/0x72f0 [ 711.404506][ T5] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 711.410529][ T5] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 711.417385][ T5] ? led_work+0x720/0x720 [ 711.421728][ T5] ? led_work+0x720/0x720 [ 711.426052][ T5] process_one_work+0x1572/0x1ef0 [ 711.431071][ T5] worker_thread+0x111b/0x2460 [ 711.436356][ T5] kthread+0x4b5/0x4f0 [ 711.440410][ T5] ? process_one_work+0x1ef0/0x1ef0 [ 711.445592][ T5] ? kthread_blkcg+0xf0/0xf0 [ 711.450166][ T5] ret_from_fork+0x35/0x40 [ 711.454566][ T5] [ 711.456883][ T5] Uninit was created at: [ 711.461115][ T5] kmsan_internal_poison_shadow+0x53/0x100 [ 711.466909][ T5] kmsan_slab_free+0x8d/0x100 [ 711.471563][ T5] kfree+0x4c1/0x2db0 [ 711.475533][ T5] iowarrior_release+0x334/0x3a0 [ 711.480542][ T5] __fput+0x4c9/0xba0 [ 711.484509][ T5] ____fput+0x37/0x40 [ 711.488478][ T5] task_work_run+0x22e/0x2a0 [ 711.493049][ T5] prepare_exit_to_usermode+0x39d/0x4d0 [ 711.498573][ T5] syscall_return_slowpath+0x90/0x610 [ 711.503933][ T5] do_syscall_64+0xe2/0xf0 [ 711.508328][ T5] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 711.514194][ T5] ===================================================== [ 711.521110][ T5] Disabling lock debugging due to kernel taint [ 711.527249][ T5] Kernel panic - not syncing: panic_on_warn set ... [ 711.533957][ T5] CPU: 0 PID: 5 Comm: kworker/0:0 Tainted: G B 5.3.0-rc7+ #0 [ 711.542610][ T5] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 711.552439][T11838] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 711.552696][ T5] Workqueue: usb_hub_wq hub_event [ 711.560644][T11838] usb 2-1: can't read configurations, error -22 [ 711.567053][ T5] Call Trace: [ 711.567081][ T5] dump_stack+0x191/0x1f0 [ 711.567104][ T5] panic+0x3c9/0xc1e [ 711.567145][ T5] kmsan_report+0x2a2/0x2b0 [ 711.567168][ T5] __msan_warning+0x73/0xe0 [ 711.567190][ T5] __list_add_valid+0x1b6/0x430 [ 711.567227][ T5] __mutex_lock+0x8d8/0x1980 [ 711.603833][ T5] ? kmsan_internal_unpoison_shadow+0x42/0x80 [ 711.609884][ T5] __mutex_lock_slowpath+0x2c/0x30 [ 711.615500][ T5] mutex_lock+0x5d/0x80 [ 711.619899][ T5] iowarrior_disconnect+0x133/0x3e0 [ 711.625078][ T5] ? iowarrior_probe+0x1a50/0x1a50 [ 711.630774][ T5] usb_unbind_interface+0x3a2/0xdd0 [ 711.635973][ T5] ? usb_driver_release_interface+0x2a0/0x2a0 [ 711.642025][ T5] device_release_driver_internal+0x911/0xd20 [ 711.649534][ T5] device_release_driver+0x4b/0x60 [ 711.652453][T11838] dummy_hcd dummy_hcd.1: port status 0x00100503 has changes [ 711.654687][ T5] bus_remove_device+0x4bf/0x670 [ 711.666910][ T5] device_del+0xcd5/0x1d10 [ 711.671321][ T5] usb_disable_device+0x567/0x1150 [ 711.676421][ T5] usb_disconnect+0x51e/0xd60 [ 711.681085][ T5] hub_event+0x3fd0/0x72f0 [ 711.685505][ T5] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 711.691818][ T5] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 711.697698][ T5] ? led_work+0x720/0x720 [ 711.702007][ T5] ? led_work+0x720/0x720 [ 711.706500][ T5] process_one_work+0x1572/0x1ef0 [ 711.711546][ T5] worker_thread+0x111b/0x2460 [ 711.716314][ T5] kthread+0x4b5/0x4f0 [ 711.720366][ T5] ? process_one_work+0x1ef0/0x1ef0 [ 711.725551][ T5] ? kthread_blkcg+0xf0/0xf0 [ 711.730125][ T5] ret_from_fork+0x35/0x40 [ 711.732212][T11838] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 711.743614][ T5] Kernel Offset: disabled [ 711.747941][ T5] Rebooting in 86400 seconds..