d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000170a07031dfffd942367ede3b9a3484409000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r4=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000000)={r4}, &(0x7f00000000c0)=0x14)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000000)={r4, 0xfff}, &(0x7f0000000040)=0x8)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

[ 1479.474459][T10207] usb 4-1: device descriptor read/all, error -71
[ 1479.481347][T11836] usb 2-1: config 0 has an invalid interface number: 128 but max is 0
[ 1479.482426][ T9944] usb 3-1: config 0 has an invalid interface number: 128 but max is 0
[ 1479.489680][T11836] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1479.497948][ T9944] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1479.507996][T11836] usb 2-1: config 0 has no interface number 0
[ 1479.518198][ T9944] usb 3-1: config 0 has no interface number 0
[ 1479.524302][T11836] usb 2-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1479.530362][ T9944] usb 3-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1479.541962][T11836] usb 2-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1479.552765][ T9944] usb 3-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1479.561544][T11836] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1479.570636][ T9944] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1479.582326][T10207] usb usb4-port1: unable to enumerate USB device
[ 1479.599713][ T9944] usb 3-1: config 0 descriptor??
[ 1479.607604][T11836] usb 2-1: config 0 descriptor??
[ 1479.617285][T10856] radio-si470x 6-1:0.128: DeviceID=0xc84b ChipID=0xab81
[ 1479.632895][ T8851] cdc_ncm 1-1:1.0: bind() failure
[ 1479.643324][ T8851] cdc_ncm 1-1:1.1: bind() failure
[ 1479.670158][ T8851] usb 1-1: USB disconnect, device number 51
20:25:54 executing program 1:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)=ANY=[@ANYBLOB="12f723c4a1b90101000000000000003355d88c4a9dbf00001e95cd10cf1211710848000000010902"], 0x0)
pipe(&(0x7f0000001300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x7)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

[ 1479.821954][T10856] radio-si470x 6-1:0.128: software version 200, hardware version 75
[ 1479.852200][ T9944] radio-si470x 3-1:0.128: DeviceID=0xc94b ChipID=0xab81
[ 1479.892449][T11836] radio-si470x 2-1:0.128: si470x_get_report: usb_control_msg returned -71
[ 1479.901436][T11836] radio-si470x: probe of 2-1:0.128 failed with error -5
[ 1479.933260][T11836] usb 2-1: USB disconnect, device number 111
[ 1479.942007][ T8450] usb 5-1: new high-speed USB device number 118 using dummy_hcd
[ 1479.983527][T10207] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[ 1480.042102][T10856] radio-si470x 6-1:0.128: submitting int urb failed (-90)
[ 1480.072025][ T9944] radio-si470x 3-1:0.128: software version 201, hardware version 75
[ 1480.212955][ T8450] usb 5-1: Using ep0 maxpacket: 8
[ 1480.241998][T10207] usb 4-1: Using ep0 maxpacket: 16
[ 1480.262106][T10856] radio-si470x 6-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1480.271140][T10856] radio-si470x: probe of 6-1:0.128 failed with error -22
[ 1480.284066][T10856] usb 6-1: USB disconnect, device number 127
[ 1480.292710][ T9944] radio-si470x 3-1:0.128: submitting int urb failed (-90)
[ 1480.312411][T11836] usb 2-1: new high-speed USB device number 112 using dummy_hcd
[ 1480.352380][ T8450] usb 5-1: config 0 has an invalid interface number: 190 but max is 0
[ 1480.360670][ T8450] usb 5-1: config 0 has no interface number 0
[ 1480.367004][ T8450] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=28.72
[ 1480.376151][ T8450] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1480.385040][ T8851] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[ 1480.393349][T10207] usb 4-1: config 0 has an invalid interface number: 128 but max is 0
[ 1480.401616][T10207] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1480.411980][T10207] usb 4-1: config 0 has no interface number 0
[ 1480.418129][T10207] usb 4-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1480.429373][T10207] usb 4-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1480.438584][T10207] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1480.448338][ T8450] usb 5-1: config 0 descriptor??
[ 1480.454833][T10207] usb 4-1: config 0 descriptor??
[ 1480.496599][ T8450] gspca_main: cpia1-2.14.0 probing 0813:0001
20:25:55 executing program 4:
r0 = socket$kcm(0xa, 0x2, 0x73)
r1 = socket$kcm(0xa, 0x2, 0x73)
r2 = dup2(r1, r0)
ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000140))
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000)=0x9, 0x4)

[ 1480.652083][ T8851] usb 1-1: Using ep0 maxpacket: 8
[ 1480.661983][ T8450] gspca_cpia1: usb_control_msg 05, error -71
[ 1480.668196][ T8450] cpia1 5-1:0.190: Cannot go to low power mode: -71
[ 1480.677068][T11836] usb 2-1: device descriptor read/64, error 18
[ 1480.696035][ T8450] gspca_cpia1: usb_control_msg 01, error -71
[ 1480.702473][ T8450] cpia1 5-1:0.190: only firmware version 1 is supported (got: 0)
[ 1480.714897][T10207] radio-si470x 4-1:0.128: DeviceID=0x9cd5 ChipID=0xc681
[ 1480.731323][ T8450] usb 5-1: USB disconnect, device number 118
[ 1480.744089][ T9944] radio-si470x 3-1:0.128: si470x_set_report: usb_control_msg returned -71
20:25:55 executing program 5:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x20, {0x20, 0x0, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "3a3c5a98a0b88f20dab28f43fd604a180bf5c40802c641ed238502ea05de14099c5dfa19c61d2715c179a8913d43848ebb6058f0ae47cea480ef4ae3d1bd7724bc870bcd80db1746d211f5f7dde4bd2f33e5a634f6174cf4dab428a4bdd5141e1cdfd7535edf28bbf44e35cb9180ea022e265108d6db9ab408e8b86c601dc9baf360878fefb4286f933f037b53d6c51bf10ba2a82424f4cf64d7a43f8235463a4e3651ce704859e92aa583ee3327735693aa9147f8b908c3d665302cff8ef37ebcb56efae4f83bc51fa46f6295b1622a46895dded87879de64c990feb0f52a533e44a8d7c9ef25ea0f8e90ff09ab06f93e605e04f9f5ac3102bcefe10a31"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x20000, 0x0)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f00000001c0)={0x7, 0x100})
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000200)={0xfffffffffffffd55, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x23, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "3a3c5a98a0b88f20dab28f43fd604a180bf5c40802c641ed238502ea05de14099c5dfa19c61d2715c179a8913d43848ebb6058f0ae47cea480ef4ae3d1bd7724bc870bcd80db1746d211f5f7dde4bd2f33e5a634f6174cf4dab428a4bdd5141e1cdfd7535edf28bbf44e35cb9180ea022e265108d6db9ab408e8b86c601dc9baf360878fefb4286f933f037b53d6c51bf10ba2a82424f4cf64d7a43f8235463a4e3651ce704859e92aa583ee3327735693aa9147f8b908c3d665302cff8ef37ebcb56efae4f83bc51fa46f6295b1622a46895dded87879de64c990feb0f52a533e44a8d7c9ef25ea0f8e90ff09ab06f93e605e04f9f5ac3102bcefe10a31"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r4 = socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r5=>0xffffffffffffffff})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
close(r6)
splice(r5, 0x0, r6, 0x0, 0x10003, 0x0)
ioctl$EVIOCGABS3F(r5, 0x8018457f, &(0x7f00000005c0)=""/181)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @multicast2}}}, &(0x7f0000000180)=0x90)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e20, 0xaa, @empty, 0x8000}, {0xa, 0x4e24, 0x7fffffff, @dev={0xfe, 0x80, [], 0xf}, 0x6}, 0x8000, [0x8, 0x1, 0x84, 0xf5, 0x7, 0x5, 0x0, 0x3]}, 0x5c)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

[ 1480.753665][ T9944] radio-si470x: probe of 3-1:0.128 failed with error -22
[ 1480.784004][ T9944] usb 3-1: USB disconnect, device number 53
20:25:55 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071")
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
close(r1)
r4 = socket$inet6(0xa, 0x6, 0x0)
listen(r4, 0x0)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000040)={<r5=>0x0, 0x401}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f00000000c0)={r5, 0x2}, 0x8)
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r6, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x32e)

[ 1480.852131][ T8851] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1480.863401][ T8851] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[ 1480.873512][ T8851] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 4
[ 1480.883328][ T8851] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1480.892552][ T8851] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1480.912121][T10207] radio-si470x 4-1:0.128: software version 156, hardware version 213
20:25:56 executing program 4:
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x6, &(0x7f0000000040)=[{0xe336, 0x40, 0x7, 0x8}, {0x1, 0x0, 0x8}, {0x3, 0x8, 0x1f, 0x1}, {0x0, 0x7ec3, 0x0, 0x3}, {0x0, 0x6, 0x4, 0x9}, {0xfffc, 0x1, 0x8}]}, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r1 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x198, 0x0)
ioctl$TCXONC(r1, 0x540a, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x0, 0x0, 0x0, 0x3}, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10)
ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0)
sched_setattr(0x0, 0x0, 0x0)
pivot_root(&(0x7f0000000000)='./bus\x00', 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x83, 0x0)
tee(r2, 0xffffffffffffffff, 0x8000000000000003, 0x0)
ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f00000002c0)=""/129)
read$eventfd(r2, &(0x7f0000000140), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0x40200, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}})
r4 = gettid()
perf_event_open(0x0, r4, 0x0, 0xffffffffffffffff, 0x8)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x83, 0x0)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000046a4"], 0xb8}}, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000180)=0xd2, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

[ 1481.046802][T32404] Unknown ioctl 35233
20:25:56 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00005a6ff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c00000024000100000000569e43233235834b148c8f0007f9d60000000000666c61746500"/97], 0x5c}}, 0x0)

[ 1481.092304][T11836] usb 2-1: device descriptor read/64, error 18
[ 1481.122066][T10856] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[ 1481.132371][T10207] radio-si470x 4-1:0.128: submitting int urb failed (-90)
20:25:56 executing program 4:
accept(0xffffffffffffffff, &(0x7f00000000c0)=@generic, &(0x7f0000000040)=0xd62b)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0)
pipe(&(0x7f0000001300)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r2, 0x28, 0x6, &(0x7f0000000000)={0x77359400}, 0x10)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x20, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x4ce]})
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000480)={0x3, 0x0, [{0x0, 0x0, 0x6}, {0xc0000000}, {0xc0000000}]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 1481.150863][T32409] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'.
20:25:56 executing program 2:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x20000, 0x0)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f00000001c0)={0x7, 0x100})
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000200)={0xfffffffffffffd55, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x23, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "3a3c5a98a0b88f20dab28f43fd604a180bf5c40802c641ed238502ea05de14099c5dfa19c61d2715c179a8913d43848ebb6058f0ae47cea480ef4ae3d1bd7724bc870bcd80db1746d211f5f7dde4bd2f33e5a634f6174cf4dab428a4bdd5141e1cdfd7535edf28bbf44e35cb9180ea022e265108d6db9ab408e8b86c601dc9baf360878fefb4286f933f037b53d6c51bf10ba2a82424f4cf64d7a43f8235463a4e3651ce704859e92aa583ee3327735693aa9147f8b908c3d665302cff8ef37ebcb56efae4f83bc51fa46f6295b1622a46895dded87879de64c990feb0f52a533e44a8d7c9ef25ea0f8e90ff09ab06f93e605e04f9f5ac3102bcefe10a31"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r4=>0xffffffffffffffff})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
close(r5)
ioctl$EVIOCGABS3F(r4, 0x8018457f, &(0x7f00000005c0)=""/181)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

20:25:56 executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x0, 0x4, 0xd}, 0x2c)
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000040)="1c0000001a005f0214f9f407000904001100"/28, 0x1c)
recvmmsg(r0, &(0x7f0000005340)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x10, 0x3, 0x0)
write(r2, &(0x7f0000000040)="1c0000001a005f0214f9f407000904001100"/28, 0x1c)
r3 = socket$inet6(0xa, 0x803, 0x3)
socket$inet(0x2, 0x5, 0x3)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4)
setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8)
bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e23}, 0x10)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000100), 0x4)
r5 = dup3(r4, r3, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0xb)
recvmmsg(r2, &(0x7f0000005340)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000001b40)=""/85, 0x55}, {&(0x7f0000001bc0)=""/26, 0x1a}, {&(0x7f0000001c00)=""/19, 0x13}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/181, 0xb5}, {&(0x7f0000000600)=""/131, 0x83}], 0x6}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00')
sendmsg$TIPC_NL_PEER_REMOVE(r6, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="1d0000058dc27db8bc4ca05b991da58ee32dd65d11d890e42b2c2d00000000000000000000a154d3ac8e6c4bacb9e14e85fc10cd17b7474893e1449084b46f6d727e32ef4b8465"], 0x14}}, 0x0)
sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x280009}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f8010000", @ANYRES16=r7, @ANYBLOB="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"], 0x1f8}, 0x1, 0x0, 0x0, 0x800}, 0x4000000)
openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x24002, 0x0)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r8, 0xc01, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x4c, 0x18, {0x4074e506, @media='eth\x00'}}}}, 0x68}}, 0x0)
sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r8, 0x20, 0x70bd27, 0x25dfdbfd, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x7f}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4040090}, 0x40088)

[ 1481.362313][T11836] usb 2-1: new high-speed USB device number 113 using dummy_hcd
[ 1481.370676][ T8851] cdc_ncm 1-1:1.0: bind() failure
[ 1481.382797][ T8851] cdc_ncm 1-1:1.1: bind() failure
[ 1481.385081][T10856] usb 6-1: Using ep0 maxpacket: 16
[ 1481.408964][ T8851] usb 1-1: USB disconnect, device number 52
20:25:56 executing program 0:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc))
move_pages(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000313000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000002000), 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x20)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)

[ 1481.523567][T10856] usb 6-1: config 0 has an invalid interface number: 128 but max is 0
[ 1481.531920][T10856] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1481.542250][T10856] usb 6-1: config 0 has no interface number 0
[ 1481.548491][T10856] usb 6-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1481.560760][T10856] usb 6-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1481.569882][T10856] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1481.592075][T10856] usb 6-1: config 0 descriptor??
[ 1481.642269][T11836] usb 2-1: device descriptor read/64, error 18
[ 1481.654626][ T9944] usb 3-1: new high-speed USB device number 54 using dummy_hcd
20:25:56 executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x9d, 0xc8, 0xf9, 0x10, 0x1d50, 0x6089, 0xfb62, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x7f, 0x0, 0x0, 0xd2, 0xb, 0xb0}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000040)={0x15, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000002180)={0x34, &(0x7f0000001200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})

[ 1481.813369][T10207] radio-si470x 4-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1481.822563][T10207] radio-si470x: probe of 4-1:0.128 failed with error -22
[ 1481.834762][T10207] usb 4-1: USB disconnect, device number 55
[ 1481.852121][T10856] radio-si470x 6-1:0.128: DeviceID=0xc04b ChipID=0xab81
[ 1481.911956][ T9944] usb 3-1: Using ep0 maxpacket: 16
[ 1482.033732][ T9944] usb 3-1: config 0 has an invalid interface number: 128 but max is 0
[ 1482.041793][T11836] usb 2-1: device descriptor read/64, error 18
[ 1482.042157][ T9944] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1482.058413][ T9944] usb 3-1: config 0 has no interface number 0
[ 1482.064616][ T9944] usb 3-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1482.075975][ T9944] usb 3-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1482.085124][ T9944] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1482.093637][T10856] radio-si470x 6-1:0.128: software version 192, hardware version 75
[ 1482.102019][T11774] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[ 1482.115494][ T9944] usb 3-1: config 0 descriptor??
[ 1482.162168][T11836] usb usb2-port1: attempt power cycle
[ 1482.302098][T10856] radio-si470x 6-1:0.128: submitting int urb failed (-90)
[ 1482.342058][T11774] usb 1-1: Using ep0 maxpacket: 16
[ 1482.372058][ T9944] radio-si470x 3-1:0.128: DeviceID=0xc94b ChipID=0xab81
[ 1482.462115][T11774] usb 1-1: config 0 has an invalid interface number: 127 but max is 0
[ 1482.470446][T11774] usb 1-1: config 0 has no interface number 0
[ 1482.476706][T11774] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=fb.62
[ 1482.485879][T11774] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1482.495486][T11774] usb 1-1: config 0 descriptor??
[ 1482.522081][T10856] radio-si470x 6-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1482.530966][T10856] radio-si470x: probe of 6-1:0.128 failed with error -22
[ 1482.548332][T10856] usb 6-1: USB disconnect, device number 2
[ 1482.571988][T10207] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[ 1482.592072][ T9944] radio-si470x 3-1:0.128: software version 201, hardware version 75
[ 1482.812924][ T9944] radio-si470x 3-1:0.128: submitting int urb failed (-90)
[ 1482.822263][T10207] usb 4-1: Using ep0 maxpacket: 16
[ 1482.871888][T11836] usb 2-1: new high-speed USB device number 114 using dummy_hcd
[ 1482.942227][T10207] usb 4-1: config 0 has an invalid interface number: 128 but max is 0
[ 1482.950638][T10207] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1482.960921][T10207] usb 4-1: config 0 has no interface number 0
[ 1482.961961][T11774] hackrf 1-1:0.127: Board ID: 00
[ 1482.967261][T10207] usb 4-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1482.972137][T11774] hackrf 1-1:0.127: Firmware version: 
[ 1482.983306][T10207] usb 4-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1482.991484][T11774] hackrf 1-1:0.127: Registered as swradio16
[ 1482.997779][T10207] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1483.008799][T10207] usb 4-1: config 0 descriptor??
[ 1483.025783][T11774] hackrf 1-1:0.127: Registered as swradio17
[ 1483.032009][T11774] hackrf 1-1:0.127: SDR API is still slightly experimental and functionality changes may follow
[ 1483.193477][ T8851] usb 1-1: USB disconnect, device number 53
[ 1483.214947][T11836] usb 2-1: device descriptor read/64, error 18
20:25:58 executing program 3:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001e95cd10cf42c36b11480000000109021b000100000000090480000103000005000000da2ada539c5f0c7078d4cd0b0000000000"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
pause()
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

20:25:58 executing program 4:
syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035e54d20aa142b02d6b400000001090229000100000000090400000000000000052406000005240000000d240f016a6e00000600000000"], 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x20000, 0x0)
write$P9_RMKDIR(r0, &(0x7f0000000100)={0x14, 0x49, 0x1, {0xc, 0x1, 0x8}}, 0x14)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xea, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000080)={0x9, 0x0, 0x0, 0x0, "f019fc8240ebae4a481118b83e441e0fd752efd57fe546aedba5d82cc184a3fe"})

20:25:58 executing program 5:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x20, {0x20, 0x0, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x20000, 0x0)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f00000001c0)={0x7, 0x100})
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000200)={0xfffffffffffffd55, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x23, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r4 = socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r5=>0xffffffffffffffff})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
close(r6)
splice(r5, 0x0, r6, 0x0, 0x10003, 0x0)
ioctl$EVIOCGABS3F(r5, 0x8018457f, &(0x7f00000005c0)=""/181)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @multicast2}}}, &(0x7f0000000180)=0x90)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e20, 0xaa, @empty, 0x8000}, {0xa, 0x4e24, 0x7fffffff, @dev={0xfe, 0x80, [], 0xf}, 0x6}, 0x8000, [0x8, 0x1, 0x84, 0xf5, 0x7, 0x5, 0x0, 0x3]}, 0x5c)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

20:25:58 executing program 1:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x989680}, &(0x7f0000000040))
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

[ 1483.252344][ T9944] radio-si470x 3-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1483.261425][ T9944] radio-si470x: probe of 3-1:0.128 failed with error -22
[ 1483.273839][ T9944] usb 3-1: USB disconnect, device number 54
[ 1483.293093][T10207] radio-si470x 4-1:0.128: DeviceID=0x94d5 ChipID=0xc681
[ 1483.343063][T10207] radio-si470x 4-1:0.128: si470x_get_report: usb_control_msg returned -71
[ 1483.351847][T10207] radio-si470x 4-1:0.128: si470x_get_scratch: si470x_get_report returned -71
[ 1483.361053][T10207] radio-si470x: probe of 4-1:0.128 failed with error -5
[ 1483.428898][T10207] usb 4-1: USB disconnect, device number 56
[ 1483.671822][T11774] usb 5-1: new high-speed USB device number 119 using dummy_hcd
[ 1483.679869][T10856] usb 6-1: new high-speed USB device number 3 using dummy_hcd
20:25:58 executing program 2:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x20000, 0x0)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f00000001c0)={0x7, 0x100})
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000200)={0xfffffffffffffd55, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x23, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "3a3c5a98a0b88f20dab28f43fd604a180bf5c40802c641ed238502ea05de14099c5dfa19c61d2715c179a8913d43848ebb6058f0ae47cea480ef4ae3d1bd7724bc870bcd80db1746d211f5f7dde4bd2f33e5a634f6174cf4dab428a4bdd5141e1cdfd7535edf28bbf44e35cb9180ea022e265108d6db9ab408e8b86c601dc9baf360878fefb4286f933f037b53d6c51bf10ba2a82424f4cf64d7a43f8235463a4e3651ce704859e92aa583ee3327735693aa9147f8b908c3d665302cff8ef37ebcb56efae4f83bc51fa46f6295b1622a46895dded87879de64c990feb0f52a533e44a8d7c9ef25ea0f8e90ff09ab06f93e605e04f9f5ac3102bcefe10a31"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r4=>0xffffffffffffffff})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
close(r5)
ioctl$EVIOCGABS3F(r4, 0x8018457f, &(0x7f00000005c0)=""/181)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

[ 1483.792472][T10207] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[ 1483.800439][T11836] usb 2-1: device descriptor read/64, error -71
[ 1483.922004][T11774] usb 5-1: Using ep0 maxpacket: 32
[ 1483.931956][T10856] usb 6-1: Using ep0 maxpacket: 16
[ 1483.971877][ T9944] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[ 1484.031962][T10207] usb 4-1: Using ep0 maxpacket: 16
[ 1484.042700][T11774] usb 5-1: New USB device found, idVendor=14aa, idProduct=022b, bcdDevice=b4.d6
[ 1484.052168][T11774] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1484.060890][T10856] usb 6-1: config 0 has an invalid interface number: 128 but max is 0
[ 1484.069257][T10856] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1484.079511][T10856] usb 6-1: config 0 has no interface number 0
[ 1484.082024][T11836] usb 2-1: new high-speed USB device number 115 using dummy_hcd
[ 1484.085752][T10856] usb 6-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1484.085863][T10856] usb 6-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1484.114669][T10856] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1484.124066][T11720] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[ 1484.133297][T11774] usb 5-1: config 0 descriptor??
[ 1484.139560][T10856] usb 6-1: config 0 descriptor??
[ 1484.175845][T11774] dvb-usb: found a 'WideView WT-220U PenType Receiver (based on ZL353)' in warm state.
[ 1484.182970][T10207] usb 4-1: config 0 has an invalid interface number: 128 but max is 0
[ 1484.185701][T11774] dvb-usb: bulk message failed: -22 (2/-30592)
[ 1484.194013][T10207] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1484.200064][T11774] dvb-usb: will use the device's hardware PID filter (table count: 15).
[ 1484.210289][T10207] usb 4-1: config 0 has no interface number 0
[ 1484.224866][T10207] usb 4-1: config 0 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1484.238417][T10207] usb 4-1: New USB device found, idVendor=42cf, idProduct=6bc3, bcdDevice=48.11
[ 1484.247605][T10207] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1484.255469][T11774] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (based on ZL353))
[ 1484.265965][T11774] usb 5-1: media controller created
[ 1484.272491][ T9944] usb 1-1: Using ep0 maxpacket: 16
[ 1484.287384][T10207] usb 4-1: config 0 descriptor??
[ 1484.308779][T11774] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1484.329896][T11774] usb 5-1: DVB: registering adapter 0 frontend 0 (WideView USB DVB-T)...
[ 1484.338705][T11774] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered.
[ 1484.392551][ T9944] usb 1-1: config 0 has an invalid interface number: 127 but max is 0
[ 1484.400954][ T9944] usb 1-1: config 0 has no interface number 0
[ 1484.407346][ T9944] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=fb.62
[ 1484.411821][T11836] usb 2-1: Using ep0 maxpacket: 16
[ 1484.416738][ T9944] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1484.432667][T11720] usb 3-1: Using ep0 maxpacket: 16
[ 1484.443291][T10856] radio-si470x 6-1:0.128: DeviceID=0xc74b ChipID=0xab81
[ 1484.455697][T11774] Registered IR keymap rc-dtt200u
[ 1484.462204][T11774] rc rc0: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0
[ 1484.475910][T11774] input: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input1452
[ 1484.493376][ T9944] usb 1-1: config 0 descriptor??
[ 1484.509231][T11774] dvb-usb: schedule remote query interval to 300 msecs.
[ 1484.516713][T11774] dvb-usb: WideView WT-220U PenType Receiver (based on ZL353) successfully initialized and connected.
[ 1484.552113][T11836] usb 2-1: config 0 has an invalid interface number: 128 but max is 0
[ 1484.560486][T11836] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1484.570780][T11836] usb 2-1: config 0 has no interface number 0
[ 1484.577246][T11836] usb 2-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1484.588552][T11836] usb 2-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1484.594068][T11720] usb 3-1: config 0 has an invalid interface number: 128 but max is 0
[ 1484.597745][T11836] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1484.606006][T11720] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1484.624312][T11720] usb 3-1: config 0 has no interface number 0
[ 1484.630519][T11720] usb 3-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1484.641872][T11720] usb 3-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1484.651043][T11720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1484.661256][T11720] usb 3-1: config 0 descriptor??
[ 1484.667207][T10856] radio-si470x 6-1:0.128: software version 199, hardware version 75
[ 1484.742448][T11836] usb 2-1: config 0 descriptor??
[ 1484.823197][T11774] dvb-usb: bulk message failed: -22 (1/0)
[ 1484.829006][T11774] dvb-usb: error -22 while querying for an remote control event.
20:25:59 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = socket$vsock_dgram(0x28, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0x0, &(0x7f00000000c0)=0x9d5d, 0x4)
pipe(&(0x7f0000001300)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
bind$can_raw(r4, &(0x7f0000000040), 0x10)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x24}, 0x24}}, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00')
sendmsg$IPVS_CMD_GET_DEST(r6, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0xac, r7, 0x20, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @empty}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80000000}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x66}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x2bc0c8b14d5dd9bb}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1f}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000006400070500"/20, @ANYRES32, @ANYBLOB="0200ffff0000ffff000000000c000500677265640000000004000200"], 0x34}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x4924924924924f0, 0x0)

[ 1484.882501][ T9944] hackrf 1-1:0.127: usb_control_msg() failed -71 request 0f
[ 1484.890602][ T9944] hackrf 1-1:0.127: Could not detect board
[ 1484.897161][ T9944] hackrf: probe of 1-1:0.127 failed with error -71
[ 1484.907671][T10856] radio-si470x 6-1:0.128: submitting int urb failed (-90)
[ 1484.916876][ T9944] usb 1-1: USB disconnect, device number 54
[ 1484.925570][T11720] radio-si470x 3-1:0.128: DeviceID=0xc04b ChipID=0xab81
[ 1484.993582][T11836] radio-si470x 2-1:0.128: DeviceID=0x90d5 ChipID=0xc681
[ 1485.016245][ T8851] usb 5-1: USB disconnect, device number 119
20:26:00 executing program 0:
r0 = socket$inet6(0xa, 0x6, 0x0)
setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000000)=[0x2], 0x2)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x5)
setsockopt(r1, 0x800000000010d, 0x8000000011, &(0x7f00001c9fff), 0xc5)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x6, 0x10000)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000080)={0x80000000, {{0x2, 0x4e21, @loopback}}}, 0x88)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/mcfilter\x00')
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x4000000400200)
sendmmsg(r1, &(0x7f0000000100), 0x4000000000001cc, 0x8040)

[ 1485.132387][T11720] radio-si470x 3-1:0.128: software version 192, hardware version 75
[ 1485.140919][T10856] radio-si470x 6-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1485.150137][T10856] radio-si470x: probe of 6-1:0.128 failed with error -22
[ 1485.184142][T10856] usb 6-1: USB disconnect, device number 3
[ 1485.205461][T11836] radio-si470x 2-1:0.128: software version 144, hardware version 213
[ 1485.220417][ T8851] dvb-usb: WideView WT-220U PenType Receiver (base successfully deinitialized and disconnected.
20:26:00 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f00000000c0)=""/180)
r3 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000080)={0x0, 0x5})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffffc)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1485.353025][T11720] radio-si470x 3-1:0.128: submitting int urb failed (-90)
20:26:00 executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x73, 0xb6, 0xf0, 0x10, 0xccd, 0x10a3, 0xf453, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x77, 0xea, 0xcb}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x40, 0x0)
ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f0000000040)={0x1, 0x9})
syz_usb_control_io(r0, 0x0, 0x0)

[ 1485.423876][T11836] radio-si470x 2-1:0.128: submitting int urb failed (-90)
20:26:00 executing program 5:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x20, {0x20, 0x0, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x20000, 0x0)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f00000001c0)={0x7, 0x100})
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000200)={0xfffffffffffffd55, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x23, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r4 = socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r5=>0xffffffffffffffff})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
close(r6)
splice(r5, 0x0, r6, 0x0, 0x10003, 0x0)
ioctl$EVIOCGABS3F(r5, 0x8018457f, &(0x7f00000005c0)=""/181)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @multicast2}}}, &(0x7f0000000180)=0x90)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e20, 0xaa, @empty, 0x8000}, {0xa, 0x4e24, 0x7fffffff, @dev={0xfe, 0x80, [], 0xf}, 0x6}, 0x8000, [0x8, 0x1, 0x84, 0xf5, 0x7, 0x5, 0x0, 0x3]}, 0x5c)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

[ 1485.731909][ T8851] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[ 1485.792067][T11720] radio-si470x 3-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1485.801000][T11720] radio-si470x: probe of 3-1:0.128 failed with error -22
[ 1485.813922][T11720] usb 3-1: USB disconnect, device number 55
[ 1485.852458][T11836] radio-si470x 2-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1485.861424][T11836] radio-si470x: probe of 2-1:0.128 failed with error -22
[ 1485.873098][T11836] usb 2-1: USB disconnect, device number 115
[ 1485.961886][T10856] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[ 1485.991909][ T8851] usb 1-1: Using ep0 maxpacket: 16
[ 1485.992024][ T9944] usb 5-1: new high-speed USB device number 120 using dummy_hcd
[ 1486.112108][ T8851] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=f4.53
[ 1486.121359][ T8851] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1486.131610][ T8851] usb 1-1: config 0 descriptor??
[ 1486.232432][T10856] usb 6-1: Using ep0 maxpacket: 16
20:26:01 executing program 2:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x20000, 0x0)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f00000001c0)={0x7, 0x100})
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000200)={0xfffffffffffffd55, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x23, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r4=>0xffffffffffffffff})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
close(r5)
ioctl$EVIOCGABS3F(r4, 0x8018457f, &(0x7f00000005c0)=""/181)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

[ 1486.261909][ T9944] usb 5-1: Using ep0 maxpacket: 32
[ 1486.372230][T10856] usb 6-1: config 0 has an invalid interface number: 128 but max is 0
[ 1486.380592][T10856] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1486.391521][T10856] usb 6-1: config 0 has no interface number 0
[ 1486.397964][T10856] usb 6-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1486.409203][T10856] usb 6-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1486.418400][T10856] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1486.427744][ T9944] usb 5-1: New USB device found, idVendor=14aa, idProduct=022b, bcdDevice=b4.d6
[ 1486.437005][ T9944] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1486.448183][ T9944] usb 5-1: config 0 descriptor??
[ 1486.461989][T10856] usb 6-1: config 0 descriptor??
20:26:01 executing program 3:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0)
r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r3 = socket$inet6(0xa, 0x5, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @multicast2}}}, &(0x7f0000000180)=0x90)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket$inet6_sctp(0xa, 0x90fcbd8d578fa8ca, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r6=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000000)={r6}, &(0x7f00000000c0)=0x14)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r9=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000000000)={r9}, &(0x7f00000000c0)=0x14)
getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000180)={r6, 0x8, 0x400, 0x0, 0xfb, 0x3f, 0x7, 0x3, {<r10=>r9, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x29}}}, 0x2, 0x7, 0x6, 0x6}}, &(0x7f00000000c0)=0xb0)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000240)={0x109, 0x6, 0x8000, 0x0, 0x5, 0x3f, 0x5, 0x400, r10}, &(0x7f0000000280)=0x20)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x8000, @ipv4={[], [], @remote}, 0x5}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x2c)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000005b396aed547aa340d99abf49cbfe99c9ac8bb1a85f503f8f7f4631d6586a1c0000000000d80500fe5122cdbb52b8122d3c54ad1822c813dda09947cc55915a7b4e9a6140bccf598f8e5856617320628f97e9187e214e557767d7b66e16aebd2194f714185c636d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x14, &(0x7f0000000000), 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

[ 1486.484403][T10207] usb 4-1: string descriptor 0 read error: -71
[ 1486.495091][T10207] usbhid 4-1:0.128: couldn't find an input interrupt endpoint
[ 1486.516367][ T9944] dvb-usb: found a 'WideView WT-220U PenType Receiver (based on ZL353)' in warm state.
[ 1486.516433][ T9944] dvb-usb: bulk message failed: -22 (2/-30592)
[ 1486.527601][T10207] usb 4-1: USB disconnect, device number 57
[ 1486.532416][ T9944] dvb-usb: will use the device's hardware PID filter (table count: 15).
[ 1486.584550][ T9944] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (based on ZL353))
[ 1486.594985][ T9944] usb 5-1: media controller created
[ 1486.614077][T11774] usb 2-1: new high-speed USB device number 116 using dummy_hcd
[ 1486.638804][ T9944] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1486.652858][T11720] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[ 1486.684389][ T9944] usb 5-1: DVB: registering adapter 0 frontend 0 (WideView USB DVB-T)...
[ 1486.693189][ T9944] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered.
[ 1486.736829][T10856] radio-si470x 6-1:0.128: DeviceID=0xcf4b ChipID=0xab81
[ 1486.762757][ T9944] Registered IR keymap rc-dtt200u
[ 1486.768841][ T9944] rc rc0: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0
[ 1486.782866][ T9944] input: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input1453
[ 1486.832232][ T8851] usb write operation failed. (-71)
[ 1486.845955][ T9944] dvb-usb: schedule remote query interval to 300 msecs.
[ 1486.853047][ T9944] dvb-usb: WideView WT-220U PenType Receiver (based on ZL353) successfully initialized and connected.
[ 1486.853214][ T8851] usb write operation failed. (-71)
[ 1486.869374][ T8851] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in cold state
[ 1486.877382][ T8851] usb 1-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2
[ 1486.878035][ T9944] usb 5-1: USB disconnect, device number 120
[ 1486.887236][ T8851] usb 1-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -2). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[ 1486.887417][ T8851] dvb_usb_az6007: probe of 1-1:0.0 failed with error -2
[ 1486.942197][T10856] radio-si470x 6-1:0.128: software version 207, hardware version 75
[ 1486.950501][T11720] usb 3-1: Using ep0 maxpacket: 16
[ 1486.955728][ T8851] usb 1-1: USB disconnect, device number 55
[ 1486.962100][T11774] usb 2-1: Using ep0 maxpacket: 16
[ 1486.991871][T10207] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[ 1487.087385][ T9944] dvb-usb: WideView WT-220U PenType Receiver (base successfully deinitialized and disconnected.
[ 1487.102187][T11720] usb 3-1: config 0 has an invalid interface number: 128 but max is 0
[ 1487.110491][T11720] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1487.120943][T11720] usb 3-1: config 0 has no interface number 0
[ 1487.133401][T11720] usb 3-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1487.144673][T11720] usb 3-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1487.153983][T11720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1487.163027][T11774] usb 2-1: config 0 has an invalid interface number: 128 but max is 0
[ 1487.171308][T11774] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1487.181768][T11774] usb 2-1: config 0 has no interface number 0
[ 1487.187983][T11774] usb 2-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1487.199256][T11774] usb 2-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1487.208477][T11774] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1487.218551][T10856] radio-si470x 6-1:0.128: submitting int urb failed (-90)
[ 1487.229564][T11774] usb 2-1: config 0 descriptor??
[ 1487.236232][T11720] usb 3-1: config 0 descriptor??
[ 1487.292261][T10207] usb 4-1: Using ep0 maxpacket: 16
20:26:02 executing program 1:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
pipe(&(0x7f0000001300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
ioctl$CAPI_GET_PROFILE(r1, 0xc0404309, &(0x7f0000000000)=0x20)
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

[ 1487.392094][T11774] radio-si470x 2-1:0.128: si470x_get_report: usb_control_msg returned -71
[ 1487.401208][T11774] radio-si470x: probe of 2-1:0.128 failed with error -5
[ 1487.420984][T11774] usb 2-1: USB disconnect, device number 116
[ 1487.428006][T10856] radio-si470x 6-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1487.437094][T10856] radio-si470x: probe of 6-1:0.128 failed with error -22
[ 1487.446381][T10207] usb 4-1: config 0 has an invalid interface number: 128 but max is 0
[ 1487.454922][T10207] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1487.465172][T10207] usb 4-1: config 0 has no interface number 0
[ 1487.471345][T10207] usb 4-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1487.482624][T10207] usb 4-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1487.491793][T10207] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1487.504364][T10856] usb 6-1: USB disconnect, device number 4
[ 1487.518544][T11720] radio-si470x 3-1:0.128: DeviceID=0xc94b ChipID=0xab81
[ 1487.561102][T10207] usb 4-1: config 0 descriptor??
20:26:02 executing program 4:
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000040)=@ethtool_rxnfc={0x2d, 0x0, 0x0, {0x0, @sctp_ip6_spec={@mcast1, @dev}, {0x0, @random="9fc380cd76c3"}, @ether_spec={@random="d56dbed47985", @remote}, {0x0, @broadcast}}}})
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000140), 0xa1f3ffff)

20:26:02 executing program 4:
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000040)=@ethtool_rxnfc={0x2d, 0x0, 0x0, {0x0, @sctp_ip6_spec={@mcast1, @dev}, {0x0, @random="9fc380cd76c3"}, @ether_spec={@random="d56dbed47985", @remote}, {0x0, @broadcast}}}})
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000140), 0xa1f3ffff)

[ 1487.722162][ T8851] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[ 1487.722350][T11720] radio-si470x 3-1:0.128: software version 201, hardware version 75
[ 1487.748294][  T668] futex_wake_op: syz-executor.4 tries to shift op by -193; fix this program
[ 1487.761353][  T668] futex_wake_op: syz-executor.4 tries to shift op by -193; fix this program
20:26:02 executing program 4:
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000040)=@ethtool_rxnfc={0x2d, 0x0, 0x0, {0x0, @sctp_ip6_spec={@mcast1, @dev}, {0x0, @random="9fc380cd76c3"}, @ether_spec={@random="d56dbed47985", @remote}, {0x0, @broadcast}}}})
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000140), 0xa1f3ffff)

[ 1487.822139][T10207] radio-si470x 4-1:0.128: DeviceID=0x93d5 ChipID=0xc681
[ 1487.850972][  T672] futex_wake_op: syz-executor.4 tries to shift op by -193; fix this program
20:26:03 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='cmdline\x00')
preadv(r0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280))
pipe(&(0x7f0000001300)={<r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
splice(r1, 0x0, r2, 0x0, 0x10003, 0x0)
syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x200, 0x800900)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f00000001c0))

[ 1487.913533][  T675] futex_wake_op: syz-executor.4 tries to shift op by -193; fix this program
[ 1487.942598][T11720] radio-si470x 3-1:0.128: submitting int urb failed (-90)
20:26:03 executing program 5:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x25, {0x25, 0x0, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c425"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x20000, 0x0)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f00000001c0)={0x7, 0x100})
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000200)={0xfffffffffffffd55, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x23, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r4 = socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r5=>0xffffffffffffffff})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
close(r6)
splice(r5, 0x0, r6, 0x0, 0x10003, 0x0)
ioctl$EVIOCGABS3F(r5, 0x8018457f, &(0x7f00000005c0)=""/181)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @multicast2}}}, &(0x7f0000000180)=0x90)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e20, 0xaa, @empty, 0x8000}, {0xa, 0x4e24, 0x7fffffff, @dev={0xfe, 0x80, [], 0xf}, 0x6}, 0x8000, [0x8, 0x1, 0x84, 0xf5, 0x7, 0x5, 0x0, 0x3]}, 0x5c)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

[ 1487.962698][ T8851] usb 1-1: Using ep0 maxpacket: 16
[ 1487.967820][T11774] usb 2-1: new high-speed USB device number 117 using dummy_hcd
20:26:03 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000080)=<r3=>0x0)
process_vm_readv(r3, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/128, 0x80}, {&(0x7f0000000200)=""/163, 0xa3}, {&(0x7f0000000340)=""/215, 0xd7}, {&(0x7f0000000440)=""/227, 0xe3}], 0x4, &(0x7f0000000580)=[{&(0x7f0000000180)=""/32, 0x20}, {&(0x7f00000002c0)=""/30, 0x1e}, {&(0x7f0000000540)=""/23, 0x17}], 0x3, 0x0)
write(r0, &(0x7f0000000040)="e0", 0xfffffe00)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r4, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0))

[ 1488.042719][T10207] radio-si470x 4-1:0.128: software version 147, hardware version 213
[ 1488.082054][ T8851] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=f4.53
[ 1488.091281][ T8851] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1488.119886][ T8851] usb 1-1: config 0 descriptor??
[ 1488.232006][T11774] usb 2-1: Using ep0 maxpacket: 16
20:26:03 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x2, 0x0)
r2 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/attr/exec\x00', 0x2, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000140)=0xffffffffffffff80)
setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f00000000c0)=',\x14nodevem0])wlan0GPL\x00', 0x15)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff, 0x4}})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000170a07031dfffd942367ede3b9a3484409000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r4 = accept(r3, &(0x7f0000000180)=@nfc_llcp, &(0x7f0000000200)=0x80)
ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000240)={0x0, 0x1, 0x2})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

[ 1488.262189][T10207] radio-si470x 4-1:0.128: submitting int urb failed (-90)
[ 1488.362776][T11720] radio-si470x 3-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1488.371906][T11720] radio-si470x: probe of 3-1:0.128 failed with error -22
[ 1488.381878][T11774] usb 2-1: config 0 has an invalid interface number: 128 but max is 0
[ 1488.390254][T11774] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1488.400497][T11774] usb 2-1: config 0 has no interface number 0
[ 1488.400985][T11836] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[ 1488.406729][T11774] usb 2-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1488.406833][T11774] usb 2-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1488.406920][T11774] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1488.421294][ T8851] usb write operation failed. (-32)
[ 1488.450204][T11720] usb 3-1: USB disconnect, device number 56
[ 1488.458623][T11774] usb 2-1: config 0 descriptor??
20:26:03 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
socket$packet(0x11, 0x0, 0x300)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e23, @empty}, 0x10)
r2 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000170a07031dfffd942367ede3b9a3484409000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000170a07031dfffd942367ede3b9a3484409000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
getsockopt$inet_mreqn(r3, 0x0, 0x0, &(0x7f0000000880)={@loopback, @multicast1, <r4=>0x0}, &(0x7f00000008c0)=0xc)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000900)={r4, @rand_addr=0x1ff, @remote}, 0xc)
sendto$inet(r1, 0x0, 0x0, 0x20000003, &(0x7f0000000080)={0x2, 0x1000004e23, @local}, 0x10)
r5 = socket$inet6(0xa, 0x5, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @multicast2}}}, &(0x7f0000000180)=0x90)
setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000040)=0x86cf07d1c87cf729, 0x4)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='sit0\x00', 0x10)
r6 = memfd_create(&(0x7f00000000c0)='n\x9e\xc2ux/.bdevh\x01\xd9\"\x8f\xa9\x91\x95\x7f\b\x00\x00', 0x0)
ftruncate(r6, 0x4000b)
sendfile(r1, r6, 0x0, 0x10010000000002)

[ 1488.512102][ T8851] usb write operation failed. (-71)
[ 1488.536719][ T8851] usb write operation failed. (-71)
[ 1488.542309][ T8851] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in cold state
[ 1488.550260][ T8851] usb 1-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2
[ 1488.560911][ T8851] usb 1-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -2). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[ 1488.578019][ T8851] dvb_usb_az6007: probe of 1-1:0.0 failed with error -2
[ 1488.681460][ T8851] usb 1-1: USB disconnect, device number 56
[ 1488.703537][T11836] usb 6-1: Using ep0 maxpacket: 16
[ 1488.714212][T11774] radio-si470x 2-1:0.128: DeviceID=0xcf4b ChipID=0xab81
[ 1488.822125][T11836] usb 6-1: config 0 has an invalid interface number: 128 but max is 0
[ 1488.830506][T11836] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1488.840809][T11836] usb 6-1: config 0 has no interface number 0
[ 1488.847085][T11836] usb 6-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1488.858321][T11836] usb 6-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1488.867611][T11836] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
20:26:04 executing program 2:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x20000, 0x0)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f00000001c0)={0x7, 0x100})
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000200)={0xfffffffffffffd55, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x23, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r4=>0xffffffffffffffff})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
close(r5)
ioctl$EVIOCGABS3F(r4, 0x8018457f, &(0x7f00000005c0)=""/181)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

[ 1488.921991][T10207] radio-si470x 4-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1488.931974][T10207] radio-si470x: probe of 4-1:0.128 failed with error -22
[ 1488.972944][T10207] usb 4-1: USB disconnect, device number 58
[ 1488.974866][T11774] radio-si470x 2-1:0.128: software version 207, hardware version 75
[ 1488.981174][T11836] usb 6-1: config 0 descriptor??
[ 1489.204213][T11774] radio-si470x 2-1:0.128: submitting int urb failed (-90)
[ 1489.252048][T11836] radio-si470x 6-1:0.128: DeviceID=0x90d5 ChipID=0xc681
[ 1489.331945][T11720] usb 3-1: new high-speed USB device number 57 using dummy_hcd
20:26:04 executing program 4:
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x3, &(0x7f0000000000)=[{0x80, 0x9, 0x8, 0x10001}, {0x401, 0x1, 0x1, 0x1ff}, {0x1f, 0x2, 0x8, 0x8}]}, 0x10)
listen(r0, 0x0)

[ 1489.472149][T11836] radio-si470x 6-1:0.128: software version 144, hardware version 213
[ 1489.573986][T11720] usb 3-1: Using ep0 maxpacket: 16
[ 1489.682306][T10856] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[ 1489.692010][T11836] radio-si470x 6-1:0.128: submitting int urb failed (-90)
[ 1489.692856][T11720] usb 3-1: config 0 has an invalid interface number: 128 but max is 0
[ 1489.708717][T11720] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1489.718963][T11720] usb 3-1: config 0 has no interface number 0
[ 1489.719090][T11836] radio-si470x 6-1:0.128: si470x_set_report: usb_control_msg returned -32
[ 1489.725179][T11720] usb 3-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1489.734113][T11836] radio-si470x: probe of 6-1:0.128 failed with error -22
[ 1489.744816][T11720] usb 3-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1489.760900][T11720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1489.788691][T11720] usb 3-1: config 0 descriptor??
[ 1489.953868][T11774] radio-si470x 2-1:0.128: si470x_set_report: usb_control_msg returned -110
[ 1489.963059][T11774] radio-si470x: probe of 2-1:0.128 failed with error -22
[ 1490.004039][T10856] usb 4-1: Using ep0 maxpacket: 16
[ 1490.020193][ T9944] usb 6-1: USB disconnect, device number 5
[ 1490.042498][T11720] radio-si470x 3-1:0.128: DeviceID=0xca4b ChipID=0xab81
[ 1490.142057][T10856] usb 4-1: config 0 has an invalid interface number: 128 but max is 0
[ 1490.150454][T10856] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1490.160776][T10856] usb 4-1: config 0 has no interface number 0
[ 1490.167059][T10856] usb 4-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1490.178380][T10856] usb 4-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1490.187599][T10856] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1490.252033][T11720] radio-si470x 3-1:0.128: software version 202, hardware version 75
[ 1490.262561][T10856] usb 4-1: config 0 descriptor??
20:26:05 executing program 4:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00008a7fe4)={0x5, 0x1, 0x6, 0x28}, 0x1b)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x40, r2, 0x401, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x2c, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}]}]}]}, 0x40}}, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00002ff000)={r0, 0x181, &(0x7f00007dc000)}, 0x3df)

[ 1490.452139][T10856] radio-si470x 4-1:0.128: si470x_get_report: usb_control_msg returned -71
[ 1490.461339][T10856] radio-si470x: probe of 4-1:0.128 failed with error -5
[ 1490.477708][T11720] radio-si470x 3-1:0.128: submitting int urb failed (-90)
[ 1490.544700][T10856] usb 4-1: USB disconnect, device number 59
20:26:05 executing program 1:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
pipe(&(0x7f0000001300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f0000000000)=0x3)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000140)=0x8)
ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000100)={0x400000100002f, {0x0, 0x0, 0xdeba}})
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3)
nanosleep(&(0x7f0000000340)={0x77359400}, &(0x7f0000000380))
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000002c0)={{}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r2, 0x5501)
ioctl(r2, 0x47, &(0x7f0000000040)="86afa81b3c8ff3bef6ba7ecca748762dd49337012f897c02095742d9b33b9fdd7f4bc7c00fddbe73d9f15cd5936eeedf3459275b1a3d4c77750260fd89bd5c2b12ad0068b4ab214172e1e528df7ab893ccf49e30b7fba6f576785223172afe331f003e88807d2388b4909e7adc28ced36023646a3bf55ec8b940ee2db6a9aa9dcec9f582a47b85d11fea857eaa3c81e18c69e0")
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

20:26:05 executing program 5:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x25, {0x25, 0x0, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c425"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x20000, 0x0)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f00000001c0)={0x7, 0x100})
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000200)={0xfffffffffffffd55, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x23, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "3a3c5a98a0b88f20dab28f43fd604a180bf5c40802c641ed238502ea05de14099c5dfa19c61d2715c179a8913d43848ebb6058f0ae47cea480ef4ae3d1bd7724bc870bcd80db1746d211f5f7dde4bd2f33e5a634f6174cf4dab428a4bdd5141e1cdfd7535edf28bbf44e35cb9180ea022e265108d6db9ab408e8b86c601dc9baf360878fefb4286f933f037b53d6c51bf10ba2a82424f4cf64d7a43f8235463a4e3651ce704859e92aa583ee3327735693aa9147f8b908c3d665302cff8ef37ebcb56efae4f83bc51fa46f6295b1622a46895dded87879de64c990feb0f52a533e44a8d7c9ef25ea0f8e90ff09ab06f93e605e04f9f5ac3102bcefe10a31"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r4 = socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r5=>0xffffffffffffffff})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
close(r6)
splice(r5, 0x0, r6, 0x0, 0x10003, 0x0)
ioctl$EVIOCGABS3F(r5, 0x8018457f, &(0x7f00000005c0)=""/181)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @multicast2}}}, &(0x7f0000000180)=0x90)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e20, 0xaa, @empty, 0x8000}, {0xa, 0x4e24, 0x7fffffff, @dev={0xfe, 0x80, [], 0xf}, 0x6}, 0x8000, [0x8, 0x1, 0x84, 0xf5, 0x7, 0x5, 0x0, 0x3]}, 0x5c)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

20:26:05 executing program 3:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = semget$private(0x0, 0x3, 0x0)
r2 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0xa224, 0x80)
ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000140)={0x0, 0x0, @ioapic})
semop(r1, &(0x7f00000000c0)=[{0x0, 0xffffbfffffffb6d0, 0x1000}], 0x1)
semctl$IPC_RMID(r1, 0x0, 0x0)
semctl$GETZCNT(r1, 0x3, 0xf, &(0x7f0000000000)=""/99)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

[ 1490.671486][ T9944] usb 2-1: USB disconnect, device number 117
20:26:05 executing program 4:
r0 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0x1, 0x2)
r1 = syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000000), 0xa)
ioctl$VIDIOC_PREPARE_BUF(r1, 0xc0585611, &(0x7f00000000c0)={0x0, 0x7, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "35643d88"}, 0x0, 0x0, @planes=0x0, 0x4})
r2 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r2, &(0x7f0000000900)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @multicast1}}, 0x24)

20:26:05 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)="240000001c0007041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2000, 0x0)
getsockopt$inet6_int(r2, 0x29, 0x10, &(0x7f0000000100), &(0x7f0000000140)=0x4)

[ 1490.885124][  T772] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1490.897362][T11720] radio-si470x 3-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1490.907078][T11720] radio-si470x: probe of 3-1:0.128 failed with error -22
[ 1490.930886][T11720] usb 3-1: USB disconnect, device number 57
[ 1490.933514][  T772] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
20:26:06 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000040, 0x46d, 0xc211, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="20220fc2b54e09013026a8b6d1464c0400b3671c40f9cc4712eb12e121e69e4d92a7f2cffb1df5e4cbe4d09d69506261df332e77c4194cad3d0f3990206517960069c8d6eb8b006eb040ee"], 0x0, 0x0, 0x0, 0x0}, 0x0)

[ 1491.011892][T10207] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[ 1491.132002][T10856] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[ 1491.233322][ T9944] usb 2-1: new high-speed USB device number 118 using dummy_hcd
[ 1491.251932][T10207] usb 6-1: Using ep0 maxpacket: 16
[ 1491.342034][T11774] usb 5-1: new high-speed USB device number 121 using dummy_hcd
[ 1491.371858][T10856] usb 4-1: Using ep0 maxpacket: 16
[ 1491.385822][T10207] usb 6-1: config 0 has an invalid interface number: 128 but max is 0
[ 1491.394218][T10207] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1491.404516][T10207] usb 6-1: config 0 has no interface number 0
[ 1491.410725][T10207] usb 6-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1491.421996][T10207] usb 6-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1491.431136][T10207] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1491.441874][T10207] usb 6-1: config 0 descriptor??
20:26:06 executing program 2:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x20000, 0x0)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f00000001c0)={0x7, 0x100})
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000200)={0xfffffffffffffd55, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x23, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r4=>0xffffffffffffffff})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
close(r5)
ioctl$EVIOCGABS3F(r4, 0x8018457f, &(0x7f00000005c0)=""/181)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

[ 1491.473833][ T9944] usb 2-1: Using ep0 maxpacket: 16
[ 1491.542219][T10856] usb 4-1: config 0 has an invalid interface number: 128 but max is 0
[ 1491.550484][T10856] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1491.561066][T10856] usb 4-1: config 0 has no interface number 0
[ 1491.567411][T10856] usb 4-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1491.578598][T10856] usb 4-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1491.587826][T10856] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1491.609607][T10856] usb 4-1: config 0 descriptor??
[ 1491.632408][ T9944] usb 2-1: config 0 has an invalid interface number: 128 but max is 0
[ 1491.640761][ T9944] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1491.651177][ T9944] usb 2-1: config 0 has no interface number 0
[ 1491.657857][ T9944] usb 2-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1491.669108][ T9944] usb 2-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1491.678294][ T9944] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1491.712267][T10207] radio-si470x 6-1:0.128: DeviceID=0x90d5 ChipID=0xc681
[ 1491.762561][ T9944] usb 2-1: config 0 descriptor??
[ 1491.782476][T11836] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[ 1491.791847][T11774] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1491.802900][T11774] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1491.815910][T11774] usb 5-1: New USB device found, idVendor=046d, idProduct=c211, bcdDevice= 0.40
[ 1491.825145][T11774] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1491.840187][T11774] usb 5-1: config 0 descriptor??
[ 1491.872443][T10856] radio-si470x 4-1:0.128: DeviceID=0xcb4b ChipID=0xab81
[ 1491.932157][T10207] radio-si470x 6-1:0.128: software version 144, hardware version 213
[ 1492.041866][T11836] usb 3-1: Using ep0 maxpacket: 16
[ 1492.052048][ T9944] radio-si470x 2-1:0.128: DeviceID=0xcb4b ChipID=0xab81
[ 1492.091990][T10856] radio-si470x 4-1:0.128: software version 203, hardware version 75
[ 1492.153610][T10207] radio-si470x 6-1:0.128: submitting int urb failed (-90)
[ 1492.183318][T11836] usb 3-1: config 0 has an invalid interface number: 128 but max is 0
[ 1492.191601][T11836] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1492.201930][T11836] usb 3-1: config 0 has no interface number 0
[ 1492.208129][T11836] usb 3-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1492.219362][T11836] usb 3-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1492.228594][T11836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1492.240739][T11836] usb 3-1: config 0 descriptor??
[ 1492.312109][T10856] radio-si470x 4-1:0.128: submitting int urb failed (-90)
20:26:07 executing program 0:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x2000, 0x0)
readv(r0, &(0x7f0000000200), 0x0)
ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000080)={0xb015})
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x13, r1, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x0, 0x2)
ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000140)={0xcd, <r4=>0x0, 0x10001, 0x100000001})
ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000180)={0x7, r4, 0x1, 0xca})
write$FUSE_NOTIFY_DELETE(r3, &(0x7f00000001c0)={0x35, 0x6, 0x0, {0x1, 0x1, 0xc, 0x0, '/dev/nullb0\x00'}}, 0x35)
getsockopt$SO_COOKIE(r2, 0x1, 0x39, 0x0, &(0x7f0000000040))

[ 1492.367681][  T786] input: syz0 as /devices/virtual/input/input1454
[ 1492.382855][T10207] radio-si470x 6-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1492.392163][T10207] radio-si470x: probe of 6-1:0.128 failed with error -22
[ 1492.426823][T10207] usb 6-1: USB disconnect, device number 6
[ 1492.454516][ T9944] radio-si470x 2-1:0.128: software version 203, hardware version 75
20:26:07 executing program 0:
r0 = socket$inet6(0xa, 0x6, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x103, 0x1}, 0x20)
r1 = socket$inet6(0xa, 0x5, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @multicast2}}}, &(0x7f0000000180)=0x90)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @rand_addr="07b48397daae3e207feb8ac9d43732fb", 0x6}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x4, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x380000, @ipv4}, 0x1c)

[ 1492.492369][T11836] radio-si470x 3-1:0.128: DeviceID=0x96d5 ChipID=0xc681
[ 1492.582372][T11774] usbhid 5-1:0.0: can't add hid device: -71
[ 1492.588645][T11774] usbhid: probe of 5-1:0.0 failed with error -71
[ 1492.608071][T11774] usb 5-1: USB disconnect, device number 121
20:26:07 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x212042, 0x28)
getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000240)=0x8)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffe09, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0)
setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000280)=0x6d4, 0x4)
r2 = socket$inet6(0xa, 0x5, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @multicast2}}}, &(0x7f0000000180)=0x90)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x2, r6}]]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x2, r6}]]}}}]}, 0x38}}, 0x0)
setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000002c0)={@empty, r6}, 0x14)

[ 1492.665016][ T9944] radio-si470x 2-1:0.128: submitting int urb failed (-90)
[ 1492.702174][T11836] radio-si470x 3-1:0.128: software version 150, hardware version 213
20:26:07 executing program 0:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000100)={0x400000100002f, {0x0, 0x0, 0xdeba}})
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000002c0)={{}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r1, 0x5501)
ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000000)={0x7f, {0x5, 0x0, 0x8, 0x10001, 0x6, 0x4}})
r2 = dup(r1)
ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000040)=""/2)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000440)=""/246)
r3 = semget$private(0x0, 0x3, 0x0)
semop(r3, &(0x7f00000000c0)=[{0x0, 0xffffbfffffffb6d0, 0x1000}], 0x1)
semctl$IPC_RMID(r3, 0x0, 0x0)
semctl$SEM_INFO(r3, 0x0, 0x13, &(0x7f0000000140)=""/211)
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, 0xffffffffffffffff)

20:26:07 executing program 5:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x25, {0x25, 0x0, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c425"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "3a3c5a98a0b88f20dab28f43fd604a180bf5c40802c641ed238502ea05de14099c5dfa19c61d2715c179a8913d43848ebb6058f0ae47cea480ef4ae3d1bd7724bc870bcd80db1746d211f5f7dde4bd2f33e5a634f6174cf4dab428a4bdd5141e1cdfd7535edf28bbf44e35cb9180ea022e265108d6db9ab408e8b86c601dc9baf360878fefb4286f933f037b53d6c51bf10ba2a82424f4cf64d7a43f8235463a4e3651ce704859e92aa583ee3327735693aa9147f8b908c3d665302cff8ef37ebcb56efae4f83bc51fa46f6295b1622a46895dded87879de64c990feb0f52a533e44a8d7c9ef25ea0f8e90ff09ab06f93e605e04f9f5ac3102bcefe10a31"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x20000, 0x0)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f00000001c0)={0x7, 0x100})
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000200)={0xfffffffffffffd55, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x23, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "3a3c5a98a0b88f20dab28f43fd604a180bf5c40802c641ed238502ea05de14099c5dfa19c61d2715c179a8913d43848ebb6058f0ae47cea480ef4ae3d1bd7724bc870bcd80db1746d211f5f7dde4bd2f33e5a634f6174cf4dab428a4bdd5141e1cdfd7535edf28bbf44e35cb9180ea022e265108d6db9ab408e8b86c601dc9baf360878fefb4286f933f037b53d6c51bf10ba2a82424f4cf64d7a43f8235463a4e3651ce704859e92aa583ee3327735693aa9147f8b908c3d665302cff8ef37ebcb56efae4f83bc51fa46f6295b1622a46895dded87879de64c990feb0f52a533e44a8d7c9ef25ea0f8e90ff09ab06f93e605e04f9f5ac3102bcefe10a31"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r4 = socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r5=>0xffffffffffffffff})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
close(r6)
splice(r5, 0x0, r6, 0x0, 0x10003, 0x0)
ioctl$EVIOCGABS3F(r5, 0x8018457f, &(0x7f00000005c0)=""/181)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @multicast2}}}, &(0x7f0000000180)=0x90)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e20, 0xaa, @empty, 0x8000}, {0xa, 0x4e24, 0x7fffffff, @dev={0xfe, 0x80, [], 0xf}, 0x6}, 0x8000, [0x8, 0x1, 0x84, 0xf5, 0x7, 0x5, 0x0, 0x3]}, 0x5c)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

[ 1492.838961][ T1099] input: syz0 as /devices/virtual/input/input1455
[ 1492.923163][T11836] radio-si470x 3-1:0.128: submitting int urb failed (-90)
[ 1493.012326][T10856] radio-si470x 4-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1493.025458][T10856] radio-si470x: probe of 4-1:0.128 failed with error -22
[ 1493.039686][T10856] usb 4-1: USB disconnect, device number 60
[ 1493.201851][T10207] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[ 1493.311933][ T8851] usb 5-1: new high-speed USB device number 122 using dummy_hcd
[ 1493.362162][T11836] radio-si470x 3-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1493.370993][T11836] radio-si470x: probe of 3-1:0.128 failed with error -22
[ 1493.383608][T11836] usb 3-1: USB disconnect, device number 58
[ 1493.412061][ T9944] radio-si470x 2-1:0.128: si470x_set_report: usb_control_msg returned -110
[ 1493.421161][ T9944] radio-si470x: probe of 2-1:0.128 failed with error -22
[ 1493.441925][T10207] usb 6-1: Using ep0 maxpacket: 16
[ 1493.562131][T10207] usb 6-1: config 0 has an invalid interface number: 128 but max is 0
[ 1493.570519][T10207] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1493.583595][T10207] usb 6-1: config 0 has no interface number 0
[ 1493.590499][T10207] usb 6-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1493.601962][T10207] usb 6-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1493.612019][T10207] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1493.625160][T10207] usb 6-1: config 0 descriptor??
[ 1493.691929][ T8851] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1493.703040][ T8851] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1493.715982][ T8851] usb 5-1: New USB device found, idVendor=046d, idProduct=c211, bcdDevice= 0.40
[ 1493.727330][ T8851] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1493.737374][ T8851] usb 5-1: config 0 descriptor??
[ 1493.802030][ T8450] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[ 1493.892120][T10207] radio-si470x 6-1:0.128: DeviceID=0x97d5 ChipID=0xc681
[ 1494.042225][ T8450] usb 4-1: Using ep0 maxpacket: 16
[ 1494.102556][T10207] radio-si470x 6-1:0.128: software version 151, hardware version 213
[ 1494.132405][ T8851] usbhid 5-1:0.0: can't add hid device: -71
[ 1494.138653][ T8851] usbhid: probe of 5-1:0.0 failed with error -71
20:26:09 executing program 1:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2)
ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f00000000c0)=""/101)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

20:26:09 executing program 0:
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={<r0=>0x0}, &(0x7f0000000040)=0xc)
waitid(0x0, r0, &(0x7f0000000080), 0x80000000, &(0x7f0000000100))
r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xcc580, 0x3ebd061d3a049afd)
fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f00000001c0)='\a^,eth0,\x00', &(0x7f0000000200)='\x00', r2)
r3 = syz_open_dev$vcsa(&(0x7f0000000280)='/dev/vcsa#\x00', 0x1020000000000, 0x210e40)
setsockopt$RXRPC_SECURITY_KEYRING(r3, 0x110, 0x2, &(0x7f00000002c0)='\a^,eth0,\x00', 0x9)
r4 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
dup3(r4, r3, 0x80000)
syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00')
r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000340)='/proc/capi/capi20ncci\x00', 0x105480, 0x0)
pread64(r5, 0xfffffffffffffffe, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000003c0)='nbd\x00')
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80040000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r6, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}]}, 0x38}, 0x1, 0x0, 0x0, 0x42000}, 0x8884)
r7 = accept4$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000500)=0x14, 0x80800)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000580)=0xc)
r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/snapshot\x00', 0x424000, 0x0)
setsockopt$inet_mreq(r8, 0x0, 0x23, &(0x7f0000000600)={@broadcast, @loopback}, 0x8)
r9 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000640)='/dev/dlm-monitor\x00', 0x1, 0x0)
ioctl$sock_inet_tcp_SIOCATMARK(r9, 0x8905, &(0x7f0000000680))
setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000006c0)=0xffffffffffffffff, 0x4)
r10 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000700)='/dev/vga_arbiter\x00', 0x8000, 0x0)
ioctl$PIO_SCRNMAP(r10, 0x4b41, &(0x7f0000000740)="ac102cc26bcbe5c0e83b91196500101e7947997cf16aad909278e54ecb63e61daf3237c6871128a66d09a8348259594d394dcec01f165b921ce0a03422451374d2d67798b7b705774ff93cb4dc3df53d48fa43df0da00beac91664107beca34ea461c124852388713cf3b8a9ca17248c10ed75d1b13ad5aaf03e4958cd5309f489f1386df20b251bd15f62a6597e5eb5186e076943f129962942cecb326efe6410941e61b22afbb151f82d6e35533785dc5497824a4c285245c6fb1deb5022e90cbdb88495d0995e0d5ce6af47f59ab23bfb5769cbaae338c1d74c721ee9a46baf5406c193f1598b078291b30881af5a66")
r11 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000980)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0)
getsockopt$bt_BT_DEFER_SETUP(r11, 0x112, 0x7, &(0x7f00000009c0)=0x1, &(0x7f0000000a00)=0x4)
r12 = accept4$inet(0xffffffffffffffff, &(0x7f0000000a40)={0x2, 0x0, @local}, &(0x7f0000000a80)=0x10, 0x1000)
getsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000ac0)={<r13=>0x0, 0x4}, &(0x7f0000000b00)=0x8)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r12, 0x84, 0x9, &(0x7f0000000b40)={r13, @in6={{0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, [], 0xd}, 0x1}}, 0x3, 0x9, 0x94, 0x4c9a7fa5, 0xc2}, &(0x7f0000000c00)=0x98)
r14 = shmget$private(0x0, 0x3000, 0x2a000400, &(0x7f0000ffc000/0x3000)=nil)
shmctl$SHM_STAT(r14, 0xd, &(0x7f0000000c40)=""/248)

[ 1494.147811][ T8851] usb 5-1: USB disconnect, device number 122
[ 1494.167350][T11836] usb 2-1: USB disconnect, device number 118
[ 1494.182014][ T8450] usb 4-1: config 0 has an invalid interface number: 128 but max is 0
[ 1494.190394][ T8450] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1494.200649][ T8450] usb 4-1: config 0 has no interface number 0
[ 1494.206943][ T8450] usb 4-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1494.218163][ T8450] usb 4-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1494.227483][ T8450] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1494.257233][ T8450] usb 4-1: config 0 descriptor??
[ 1494.322250][T10207] radio-si470x 6-1:0.128: submitting int urb failed (-90)
20:26:09 executing program 2:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x20000, 0x0)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f00000001c0)={0x7, 0x100})
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000200)={0xfffffffffffffd55, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x23, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r4=>0xffffffffffffffff})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
close(r5)
ioctl$EVIOCGABS3F(r4, 0x8018457f, &(0x7f00000005c0)=""/181)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

20:26:09 executing program 3:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
r1 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000170a07031dfffd942367ede3b9a3484409000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000000)={'icmp\x00'}, &(0x7f0000000040)=0x1e)

20:26:09 executing program 4:
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c)
getpgid(0x0)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
recvfrom$inet6(r1, &(0x7f0000000080)=""/56, 0x38, 0x41, &(0x7f00000000c0)={0xa, 0x4e20, 0xe2, @mcast1}, 0x1c)
ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000040)={0x6, 0x1, 0xfe, 0x0, 0x5, 0x1, 0x7fffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, 0x0)
shutdown(r2, 0x1)
recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfbdabf04, 0x100, &(0x7f0000001880)={0xa, 0x0, 0x0, @rand_addr='\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}, 0x715000)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendto$inet6(r3, &(0x7f0000000200)="e5b997fddd402f61a17706a1d4444ee1aa909bdd5b98c93789fd48f97cc7015e8483cc86c9818d14b23c3f7b41ba4391", 0xfffffdda, 0x8dffffff, 0x0, 0xfffffee0)

20:26:09 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'vxcan1\x00'})
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x101000, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f0000000280)=0x5)
setuid(r2)
getresuid(&(0x7f0000000100), &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000240))
r4 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x27)
r5 = socket(0xa, 0x3, 0x6)
connect$bt_rfcomm(r5, &(0x7f0000000000)={0x1f, {0xfe, 0x0, 0x1000, 0x80000001, 0x6, 0x5}, 0x8}, 0xa)
bind$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x6}, 0x1c)
getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@loopback}}}, &(0x7f0000000480)=0xe8)
r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000000900)=ANY=[@ANYBLOB="ab000000a6d23fa0c9cb488b619002d1d896e5ffb3b62ccfa516aec8038d482cd2aa0b6ac0d684fba227e9983be9f367da66938eddee11b161213cdf2bd00a8ae552bc17ec5e976fa67846060aa7629aed35eb9bb9e096cc3825df10acb8c0dff4569bb0f686a3856eb778df7afa4a3112676e9547e0d65bee83afa0b4f46a0b10af299da7efdcc6c573074de84403de7902a06096d7483194ad47775d355b9800000008008b0500"/193], &(0x7f0000000540)=0x1)
getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8)
setuid(r9)
r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r10, 0x84, 0x6d, &(0x7f00000006c0)=ANY=[@ANYBLOB="ab000000a6d23fa0c9cb488bfdee3eb191726190f2d1d896773545328b79d2b3b62ccfa516aec8038d48d684fba227e9983be9f367da66938eddee11b1613f0d5ff3b2213c782bd00a8ae552bc17ec5e976fa67846060aa7629aed35eb9bb9e096cc3825df10acb8c0dff4569bb0f6f309ab46fa86a3856eb778df7afa4a3112676e9547e0d65bee83afa0b4f46a0b10af299da7efdcc6c573074de84403de7902a07096d7483194ad47775d355bd65460a5a52aa9cc384c962b12062cf85884362f08008907665c6716449a30c81bd56a349d36094f2add75bf53000100000000000000678a50a09ff13589016438d0c5f0044462e676a23850b5c862e289843fe3bb7d0fb8bcdcd9c07ccacbf83de79626720dae5ec76e30837a2c9dea5637c2ad6439cd6bf51986860a677896248acef0867cfdedb1f0f8e592c6105aef57c1c073c23507bd28cfcd47a74cafba3762f6b6c1c6ee238a2bfe44d0b9e8ef5a7998b7317c4b9dd2f9a20b0031abf74f7d16d6907e95b2addeda2f736ccb52ea2a1d243ce205c3a88af23045c0614b21cbf1b3cf4ece451658e9785da902db6baa4895a67e96c8eacc5e8fcf8de57aa3c70518f31e0d89b0a35a336c2e68e7846f8330302b729eceffdf18b98e510a6c236daeef51b4ea88a6326060d504db45d42ac1881dd10ff951cfd04d7ae550ccce2eaa0f62e03aa8b38c5e"], &(0x7f0000000540)=0x1)
getsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8)
setuid(r11)
r12 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r12, 0x84, 0x6d, &(0x7f0000000b40)=ANY=[@ANYBLOB="ab000000a6d23fa0c9cb488b6190f2d1d89677354590dde5ffb3b62ccfa516aec8038d48d684fba227e9983be9f367da66938eddee11b1613f0d5ff3b2213cdf2bd00a8ae552bc17ec5e976fa67846060aa7629aed35eb9bb9e096cc3825df10acb8c0dff4569bb0f6a15cab46fa86a3856eb778df7afa4a3112676e9547e0d65bee83afa0b4f46a0b10af299da7efdcc6c573074de84403de7902a07096d7483194ad47775d355bd65460a5a52aa9cc384c962b12062cf85884362f08008b07"], &(0x7f0000000540)=0x1)
getsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8)
setuid(r13)
r14 = request_key(0x0, &(0x7f0000001300)={'syz', 0x2}, &(0x7f0000001340)='em0cpusetmime_type\x00', 0xfffffffffffffff8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, <r15=>0x0}, 0x0)
keyctl$chown(0x4, r14, 0x0, r15)
r16 = request_key(0x0, &(0x7f0000001300)={'syz', 0x2}, &(0x7f0000001340)='em0cpusetmime_type\x00', 0xfffffffffffffff8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, <r17=>0x0}, 0x0)
keyctl$chown(0x4, r16, 0x0, r17)
r18 = request_key(0x0, &(0x7f0000001300)={'syz', 0x2}, &(0x7f0000001340)='em0cpusetmime_type\x00', 0xfffffffffffffff8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, <r19=>0x0}, 0x0)
keyctl$chown(0x4, r18, 0x0, r19)
stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, <r20=>0x0})
fsetxattr$system_posix_acl(r4, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000a00)=ANY=[@ANYBLOB="02000000010002000000000002000400", @ANYRES32=r6, @ANYBLOB="02000200", @ANYRES32=r8, @ANYBLOB="02000100bb86b4c5600d592e64b86edda53135e0f392e4c9ca69b61556778ccf29c4990d1893fd049001c62278a88220d8bb3ef088a2bbfd6fdd3bbbaa8e7ff1e7d747037c523caba1237cfd937b81d9ae40c8e42df69a9ad815e799bd07b8468681a262136f0b4027e75c77b74f2bc0ad4402225b8f934741a657b08fa3e58bffe4394310ebab08c71788455eb3b79d61d24d289378388103fdaa96ee42a18df1027aa5865c0b", @ANYRES32=r9, @ANYBLOB="02000400", @ANYRES32=r3, @ANYBLOB, @ANYRES32=r11, @ANYBLOB="02000200", @ANYRES32=r13, @ANYBLOB="02000500", @ANYRES32=r3, @ANYBLOB="040002000000000008000100", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=r15, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r17, @ANYBLOB="08000400", @ANYRES32=r19, @ANYBLOB="08000300", @ANYRES32=r20, @ANYRES32, @ANYBLOB="0800d8b8", @ANYRES32, @ANYBLOB="10000200000000002000d6f800000000"], 0x1c, 0x2)
write$FUSE_ATTR(r1, &(0x7f00000000c0)={0x78, 0x0, 0x4, {0x59b, 0x6, 0x0, {0x6, 0x8e1, 0x401, 0x0, 0xfffffffffffffff8, 0x0, 0x2, 0x0, 0x401, 0x7fff, 0xd48e, r2, r19, 0x8, 0x7}}}, 0x78)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'vxcan1\x00', 0xfd})

[ 1494.533827][ T8450] radio-si470x 4-1:0.128: si470x_get_report: usb_control_msg returned -71
[ 1494.542914][ T8450] radio-si470x: probe of 4-1:0.128 failed with error -5
[ 1494.556469][T10207] radio-si470x 6-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1494.566149][T10207] radio-si470x: probe of 6-1:0.128 failed with error -22
[ 1494.622736][T10207] usb 6-1: USB disconnect, device number 7
[ 1494.636760][ T8450] usb 4-1: USB disconnect, device number 61
20:26:09 executing program 4:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x8, &(0x7f0000000280)=0x81, 0x4)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x208, 0xa5)
setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000002c0)={@in6={{0xa, 0x0, 0x4, @mcast1}}, 0x0, 0x0, 0x0, "9fc72b543b28dd4728c3988b7adea76fa59f716c731782304d2a8b2baf8c1724fb01b86d7c1d88f3c7322926d8f0fcdb51b5df3ba8b696320eb85ae1bd8e6af048c54f27e0dad819d7cb50aaa2bc300f"}, 0xd8)
setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f00000000c0)=0x7, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x401, 0x0, @mcast2}, 0x1c)
syz_open_dev$mice(0x0, 0x0, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
open(0x0, 0x0, 0x0)
ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0)
clock_nanosleep(0x0, 0x0, 0x0, 0x0)
openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0xffffffffffffffe9)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_GET_TIMERSLACK(0x1e)
ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0)
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20008058, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0)
ftruncate(r3, 0x7fff)
sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000ffffbffe)

[ 1494.662944][T11836] usb 2-1: new high-speed USB device number 119 using dummy_hcd
20:26:09 executing program 4:
pipe(&(0x7f0000001300)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
close(r1)
splice(r0, 0x0, r1, 0x0, 0x10003, 0x0)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x8000, 0x0)
ioctl$BLKBSZGET(r2, 0x80081270, &(0x7f00000000c0))
syz_usb_connect(0x0, 0xffffffffffffff79, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c1459c2000000000b88d000b238d7e0000019de673fa126717ccec"], 0x0)

20:26:09 executing program 0:
socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
syz_emit_ethernet(0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="b100485caa2a43333e128ef586dd60e49d7800002f002293ca12379ead9c65dcd6bb64696744ff03000000000000000000000000000100000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0000004090780000"], 0x0)
r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x36d8, 0x105000)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, r3}}, 0x48)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r3}}, 0x10)
write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f00000000c0)={0x8, 0x120, 0xfa00, {0x4, {0x44, 0xc7f6, "38d0b393ecaf1b84ab415fea8a397974b05f67cb0a7438d55a766ac6452db1d6ba63b05a62489b5460dd497806f31cfaf9767bf089864ec13a2af5f962cc5aab1af9bf5f2b3f5a85c34a3066cb775b90afdfc25f7c4e576a5a336be715b8a671ff95c8ffbc8d7d68bfc15a20d949839fbdecf73c86d9a08befc89c8b847ac4757379a306d07dc40735e3242fa4ad1a1fd3162e84ef699f2a138e7694a3eacb365175738c5f9578e70c0ef48c0ecfb61b341d4a69db8a91dc154cd6ba361bd231e8cc1102068c3b9582215d53580a79d2aadaaf99b088f371024c530fde5bc1e5f686d90afc2c8fe925fdd7819f399de4aec2e18c26e06f01cfa5a9cbeff729ce", 0xaa, 0x3, 0x5, 0x81, 0x8, 0x1, 0x4}, r3}}, 0x128)

[ 1494.902254][ T8851] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[ 1494.912610][T11836] usb 2-1: Using ep0 maxpacket: 16
20:26:10 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x0, 0x40000})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = fcntl$dupfd(r2, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_open_pts(r1, 0x0)
r6 = syz_open_pts(r1, 0x0)
ioctl$int_in(r5, 0x5452, &(0x7f0000000040)=0xffffffff80000000)
ioctl$int_in(r6, 0x5452, &(0x7f0000000000)=0x7)
r7 = syz_open_pts(r1, 0x0)
r8 = dup2(r5, r7)
pipe(&(0x7f0000001300)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
write$binfmt_misc(r9, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
r11 = dup(r10)
ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200)
r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DEST(r11, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10081}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xc0, r12, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x23}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, [], 0x22}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0xb}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xfff7}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x180}, 0x20040840)
sendmsg$IPVS_CMD_ZERO(r9, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x90008004}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r12, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'por\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\xff\xff\xff\xff\xff\xff\xff\xef\x00\x00\x03\xff\x00\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc3, 0x80003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cf5bb34219fe38a})
r13 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7f, 0x0)
ioctl$NBD_CLEAR_QUE(r13, 0xab05)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
r14 = dup(r8)
ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x10240, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x4142, 0x0)

[ 1495.012097][ T8450] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[ 1495.042359][T11836] usb 2-1: config 0 has an invalid interface number: 128 but max is 0
[ 1495.050672][T11836] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
20:26:10 executing program 5:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x27, {0x27, 0x0, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x20000, 0x0)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f00000001c0)={0x7, 0x100})
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000200)={0xfffffffffffffd55, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x23, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r4 = socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r5=>0xffffffffffffffff})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
close(r6)
splice(r5, 0x0, r6, 0x0, 0x10003, 0x0)
ioctl$EVIOCGABS3F(r5, 0x8018457f, &(0x7f00000005c0)=""/181)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @multicast2}}}, &(0x7f0000000180)=0x90)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e20, 0xaa, @empty, 0x8000}, {0xa, 0x4e24, 0x7fffffff, @dev={0xfe, 0x80, [], 0xf}, 0x6}, 0x8000, [0x8, 0x1, 0x84, 0xf5, 0x7, 0x5, 0x0, 0x3]}, 0x5c)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

[ 1495.061027][T11836] usb 2-1: config 0 has no interface number 0
[ 1495.067337][T11836] usb 2-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1495.078632][T11836] usb 2-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1495.087838][T11836] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1495.099694][T11836] usb 2-1: config 0 descriptor??
[ 1495.162317][ T8852] usb 5-1: new high-speed USB device number 123 using dummy_hcd
20:26:10 executing program 0:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x6000, 0x0)
ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000040))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r5=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000002400070500"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000000e00020000000000000037f400"/52], 0x4c}}, 0x0)
r6 = socket(0x4000000000010, 0x1000000000080002, 0x0)
sendmmsg$alg(r6, &(0x7f0000000140), 0x42, 0x0)

[ 1495.211965][ T8851] usb 3-1: Using ep0 maxpacket: 16
[ 1495.271225][ T1543] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1495.280887][ T1543] netem: invalid attributes len -14
[ 1495.286195][ T1543] netem: change failed
[ 1495.292297][ T8450] usb 4-1: Using ep0 maxpacket: 16
[ 1495.333662][ T8851] usb 3-1: config 0 has an invalid interface number: 128 but max is 0
[ 1495.342147][ T8851] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1495.352521][ T8851] usb 3-1: config 0 has no interface number 0
[ 1495.358720][ T8851] usb 3-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1495.369992][ T8851] usb 3-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1495.379192][ T8851] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1495.392043][ T8851] usb 3-1: config 0 descriptor??
[ 1495.405595][T11836] radio-si470x 2-1:0.128: DeviceID=0x9ed5 ChipID=0xc681
[ 1495.432271][ T8852] usb 5-1: Using ep0 maxpacket: 32
[ 1495.444796][ T9944] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[ 1495.463452][ T8450] usb 4-1: config 0 has an invalid interface number: 128 but max is 0
[ 1495.471881][ T8450] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1495.482142][ T8450] usb 4-1: config 0 has no interface number 0
[ 1495.488322][ T8450] usb 4-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1495.499507][ T8450] usb 4-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1495.508663][ T8450] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1495.517871][ T8852] usb 5-1: too many configurations: 141, using maximum allowed: 8
[ 1495.526878][ T8450] usb 4-1: config 0 descriptor??
[ 1495.632144][T11836] radio-si470x 2-1:0.128: software version 158, hardware version 213
[ 1495.642050][ T8852] usb 5-1: config index 0 descriptor too short (expected 9, got 0)
[ 1495.650169][ T8852] usb 5-1: can't read configurations, error -22
[ 1495.656953][ T8851] radio-si470x 3-1:0.128: DeviceID=0x99d5 ChipID=0xc681
[ 1495.703175][ T9944] usb 6-1: Using ep0 maxpacket: 16
[ 1495.792066][ T8450] radio-si470x 4-1:0.128: DeviceID=0x9dd5 ChipID=0xc681
[ 1495.812194][ T8852] usb 5-1: new high-speed USB device number 124 using dummy_hcd
[ 1495.842183][ T9944] usb 6-1: config 0 has an invalid interface number: 128 but max is 0
[ 1495.850483][ T9944] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1495.852160][T11836] radio-si470x 2-1:0.128: submitting int urb failed (-90)
[ 1495.860857][ T9944] usb 6-1: config 0 has no interface number 0
[ 1495.874114][ T9944] usb 6-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1495.885347][ T9944] usb 6-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1495.894561][ T9944] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1495.905976][ T9944] usb 6-1: config 0 descriptor??
[ 1495.922266][ T8851] radio-si470x 3-1:0.128: software version 153, hardware version 213
[ 1496.012255][ T8450] radio-si470x 4-1:0.128: software version 157, hardware version 213
[ 1496.061977][ T8852] usb 5-1: Using ep0 maxpacket: 32
[ 1496.103733][ T8852] usb 5-1: too many configurations: 141, using maximum allowed: 8
[ 1496.142156][ T8851] radio-si470x 3-1:0.128: submitting int urb failed (-90)
[ 1496.162135][ T9944] radio-si470x 6-1:0.128: DeviceID=0xc94b ChipID=0xab81
[ 1496.232246][ T8450] radio-si470x 4-1:0.128: submitting int urb failed (-90)
[ 1496.241521][ T8852] usb 5-1: config index 0 descriptor too short (expected 9, got 0)
[ 1496.249733][ T8852] usb 5-1: can't read configurations, error -22
[ 1496.258212][ T8852] usb usb5-port1: attempt power cycle
[ 1496.302076][T11836] radio-si470x 2-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1496.311064][T11836] radio-si470x: probe of 2-1:0.128 failed with error -22
[ 1496.321539][T11836] usb 2-1: USB disconnect, device number 119
[ 1496.382310][ T9944] radio-si470x 6-1:0.128: software version 201, hardware version 75
[ 1496.582054][ T8851] radio-si470x 3-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1496.590997][ T8851] radio-si470x: probe of 3-1:0.128 failed with error -22
[ 1496.613264][ T8851] usb 3-1: USB disconnect, device number 59
[ 1496.632092][ T9944] radio-si470x 6-1:0.128: submitting int urb failed (-90)
[ 1496.851942][ T9944] radio-si470x 6-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1496.860954][ T9944] radio-si470x: probe of 6-1:0.128 failed with error -22
[ 1496.873679][ T9944] usb 6-1: USB disconnect, device number 8
[ 1496.893729][ T8450] radio-si470x 4-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1496.902866][ T8450] radio-si470x: probe of 4-1:0.128 failed with error -22
[ 1496.918572][ T8450] usb 4-1: USB disconnect, device number 62
[ 1496.982091][ T8852] usb 5-1: new high-speed USB device number 125 using dummy_hcd
[ 1497.061915][T11836] usb 2-1: new high-speed USB device number 120 using dummy_hcd
[ 1497.221978][ T8852] usb 5-1: Using ep0 maxpacket: 32
[ 1497.262153][ T8852] usb 5-1: too many configurations: 141, using maximum allowed: 8
[ 1497.301847][T11836] usb 2-1: Using ep0 maxpacket: 16
[ 1497.382400][ T8852] usb 5-1: config index 0 descriptor too short (expected 9, got 0)
[ 1497.390396][ T8852] usb 5-1: can't read configurations, error -22
[ 1497.422016][T11836] usb 2-1: config 0 has an invalid interface number: 128 but max is 0
[ 1497.430387][T11836] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1497.440755][T11836] usb 2-1: config 0 has no interface number 0
[ 1497.446946][T11836] usb 2-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1497.458136][T11836] usb 2-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1497.467309][T11836] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1497.477173][T11836] usb 2-1: config 0 descriptor??
[ 1497.542132][ T8852] usb 5-1: new high-speed USB device number 126 using dummy_hcd
[ 1497.661916][ T8450] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[ 1497.741988][T11836] radio-si470x 2-1:0.128: DeviceID=0x9dd5 ChipID=0xc681
20:26:12 executing program 1:
r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xe4, 0x11, 0xbb, 0x10, 0x1e2d, 0x63, 0x61f9, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x2, 0x7d, 0x10, 0xfc, [{{0x9, 0x4, 0xa, 0x0, 0x3, 0x10, 0x64, 0x41, 0x4, [], [{{0x9, 0x5, 0xa, 0x4, 0x273, 0x1, 0x0, 0x8}}, {{0x9, 0x5, 0x8, 0x0, 0x87, 0x3, 0x3}}, {{0x9, 0x5, 0x9, 0x1, 0x16a, 0x4, 0x40, 0x64}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

20:26:12 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000002000)=ANY=[@ANYBLOB="b70000000000000000"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f0000006f3d)=""/195}, 0x48)
pipe(&(0x7f0000001300)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
close(r1)
splice(r0, 0x0, r1, 0x0, 0x10003, 0x0)
ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f00000005c0)={0x1, 0x29c2, 0x9, 0xfff, 0x40, 0x2})
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000600)='/dev/snapshot\x00', 0x80000, 0x0)
ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xae44, 0x7)
write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000640)={0x28, 0x2, 0x0, {0x6, 0x8, 0xfffffffffffffffa}}, 0x28)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x494402, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
open$dir(&(0x7f0000000540)='./file0\x00', 0x80000, 0x20)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x3c3, &(0x7f0000000240)={&(0x7f0000000580)=@newlink={0x30, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0x4}}}]}, 0x30}}, 0x4008015)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000001020050700001f00000000000000000032ccfbd0ef23b2f0db9d868001538fef019334af5e96accff03ea6ca5e", @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100736974000c00020008000200", @ANYRES32=r7], 0x38}}, 0x0)
ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@rand_addr="9f6d2faba255ff62d3387c7e760fa3c8", 0x4d, r7})
pipe(&(0x7f0000001300)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r9, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000170a07031dfffd942367ede3b9a3484409000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
r11 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r12=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r10, 0x84, 0x1, &(0x7f0000000000)={<r13=>r12}, &(0x7f00000000c0)=0x14)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000680)={r13, 0xf551}, &(0x7f00000006c0)=0x8)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r9, 0x84, 0x1a, &(0x7f0000000880)=ANY=[@ANYRES32=r12, @ANYBLOB="ef0000005638ec965615362d75c238cdd7ffd430caa8319425dcc8465e6c2925526acd509301a62f256a003e61edb38c98ec38705d18e30adcaba3e82ee6b1d821af85da6740302981d6493176ab1f9f45d861998d6a48186f189a767f3176951ff953e6a3538a898f095191c00de03137de2248848c7626ad2cf61f096f473b162be2e9c59269af2ddddb2704d4251f085aadac1888fbc0d2f6d700b7a725c066af98ec6a12ac41553121f45b2ded8b40ba9f6b2020c160234915736f45d15b2c60533fff9fe1f00203773f29be665a83d0cb3b9314709d5f5d7683b2b89e1ea6f1796ae0c121881e67a0607627e200000000000000000000000000eae58a5a5293cfe35411fbacb8acababb1063f852ae3bf4f4eadf17ba8d52078f9e9c626b86a7737e83afd06d806a916ac597e619ce8b8463f835ff5d88fb1bd3eb5324d6c33e4ed843f1c2cd2756f8189"], &(0x7f0000000500)=0xfffffffffffffef9)
write$binfmt_misc(r8, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
lsetxattr$security_smack_transmute(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000340)='TRUE', 0x4, 0x1)
setsockopt$RDS_GET_MR(r8, 0x114, 0x2, &(0x7f0000000280)={{&(0x7f00000000c0)=""/37, 0x25}, &(0x7f0000000140), 0x10}, 0x20)

[ 1497.783152][T11836] radio-si470x 2-1:0.128: software version 157, hardware version 213
[ 1497.792085][ T8852] usb 5-1: Using ep0 maxpacket: 32
20:26:12 executing program 2:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x20000, 0x0)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f00000001c0)={0x7, 0x100})
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000200)={0xfffffffffffffd55, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x23, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r4=>0xffffffffffffffff})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
close(r5)
ioctl$EVIOCGABS3F(r4, 0x8018457f, &(0x7f00000005c0)=""/181)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

20:26:12 executing program 5:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x27, {0x27, 0x0, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x20000, 0x0)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f00000001c0)={0x7, 0x100})
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000200)={0xfffffffffffffd55, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x23, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r4 = socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r5=>0xffffffffffffffff})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
close(r6)
splice(r5, 0x0, r6, 0x0, 0x10003, 0x0)
ioctl$EVIOCGABS3F(r5, 0x8018457f, &(0x7f00000005c0)=""/181)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @multicast2}}}, &(0x7f0000000180)=0x90)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e20, 0xaa, @empty, 0x8000}, {0xa, 0x4e24, 0x7fffffff, @dev={0xfe, 0x80, [], 0xf}, 0x6}, 0x8000, [0x8, 0x1, 0x84, 0xf5, 0x7, 0x5, 0x0, 0x3]}, 0x5c)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

[ 1497.827226][T11836] radio-si470x 2-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1497.836019][T11836] radio-si470x 2-1:0.128: submitting int urb failed (-90)
20:26:12 executing program 4:
r0 = syz_open_dev$dspn(&(0x7f0000000940)='/dev/dsp#\x00', 0xa2, 0x0)
ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f0000000980)=0x8)
syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000497a8f102505882855a0000000010902120001000000000904960000cd28610047240124c50918af6f95f037d5dc74f1f5bdf136e7425172c942969aee0cff470b196a2b449531d3b467acb43bf82c447dfa3bb61412489eb10380855bfacfb522dbe02429885c847a3c3f1f115eaee001d62b90bba2993c305f3ceaae864ddb7811386a4198b3"], 0x0)
syz_usb_connect(0x3, 0x62a, &(0x7f0000000a40)={{0x12, 0x1, 0x300, 0xf8, 0xcb, 0xde, 0x10, 0x573, 0x4d38, 0x4ad1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x618, 0x1, 0x7, 0x7f, 0x8, 0x2, [{{0x9, 0x4, 0xf7, 0x6, 0x8, 0x1e, 0x94, 0x14, 0x9, [@generic={0x19, 0x10, "cfc60eede9ccc56ce8e94f074c360f577e97aac76212f3"}], [{{0x9, 0x5, 0x5, 0x4, 0x383, 0x6, 0xa7, 0x1}}, {{0x9, 0x5, 0xf, 0x2bf2a72691208064, 0x36, 0x25, 0xfc, 0x67, [@generic={0xa6, 0x8, "c1b90bc7f03e0daa27af560fbdf9c139d669e46315adf363651da6360ea45bbeaf50fd6ceb353154d851368ffc987186eaf0754af1e3756bb5e50e0eddbb4982b6001f17ef92e27e385d29771ad6bf1c119308f86ee79f8e4d3327cf84b188d1c60d37e66e3d1223464e125b68fd5e98b380c08f4040f0e598c4b1f20c61433e03ff6805d0338ceedf26205ce325187481056c50322e229d820cbe8a609d722ed8d1850b"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x1c7, 0x9a, 0x1, 0x0, [@generic={0xf2, 0x53, "c982e2337bbd3e752e396a1da0a5b2346e5a7d6da13289c3da1558e533a3c5d660390808974e83d5162f60a6705608b7ef84618932b623a04f035ddc97a50c9853e60dfa7f9b37474bb15eb850a28668ef5a1b9ff535b59b88ec368b5f80de2b613ad671cf16f0b66cf84bfa8453a7046dfa94f10ee6642117cf8237b7e3a2fe6741268a6bb053e6707ce964a590c5347578414df31e6cb41a372e7a567c4e8ae4432f1c640b4cef78edd4be3a2b9badd7f991bd64c4c35ffa38bbf30e6c1209ae7ce15e62589392631b3033054d2d3eaf58c791fcaf188658d3e6f31ce6d955a16dc9ebfeff9f9093f3be33191e48f4"}, @generic={0xd7, 0x30, "5878106ec7360b5da5f0e68281583376344d8d942c24180f7c8b0bf5b84662eaa483025d0e1348bc81fa7d486639669e72ad291da51b43fa446e0b006b1a8a67536d84427a0766cd7b895d947850b7939dc3e70ae3c9a13b2ab1fd8b29babcee92ed10e03ad7c3025b8f04b6c7fcbaa7da132f1ab7a5c7b9e7834b695dd6da81be7b27a627e01d14a6da6bd3e095cf9f6fe8080d90e1de93f80d243be8c342193749852addc70aad6c6b841d9c0ca36e6921066c60ce2fce8419e1dba0a34efcc2396ad0492af011aabbb4b5db401bc5e377eacb9e"}]}}, {{0x9, 0x5, 0xd, 0x12, 0x240, 0x4, 0x1, 0x0, [@generic={0x46, 0xb, "fab616317d02d40b9bf5da39e3857fbcb6c9a724ce07eca868e61f3470affe0d0a7d2751777ebc422a9888d9cd1fe73f6668729e61508ed32173669ed6a620abc54d12b7"}]}}, {{0x9, 0x5, 0x6, 0x1, 0xe0, 0x4, 0x4, 0x71, [@generic={0xfc, 0x24, "867e81f06c144d5a6a9d1a218c5400ac5aaf97eedbcd167ee9d4042b3bf40696b96fee7246e5a535ed77e7df1b1ebb83fa8965e9a73e7a804d739dc7872313d2c23ff6565892cce0ad5a30bfef52aab6930569ba8465559dd1f57fa44fa6c3c1a43dddb2f92182821445307da753be51ce5a5b187435a8608886f6cd4e81fd6ecf77d8879b41677564ed192fe026ce34d0a0f94cf4926edbb45fbaf3782a38aae3b0c275193c5367c81fdffae3326ef3896c9cfeb5b3c104f7e5d426cf7da518ffa58c4395f12af0577df3e447a7402a37186dc0de1b5885b066fed3f26f20e948bf16e715e7e1d1abb8a8111175989d89ffeb73a7d6e4a0c239"}, @generic={0xd3, 0xd, "9db51e286641c99c0bf1edfd73acbd99f82bab0d112f9155ae0b2521f76f8b13ae1d1b3155d47c4c645e61bfb344bd295633d67c2aae46711828e56b44d977728d7676cae2163d82a802a27d4e1fcd799c5226700f37939a95dd7b284d29853851819061ab4573b177cfea78303b92611326e5c0890261150d5354b98f17016b06a3e14351fdb20ef4f17aeaeb8da0dc3999def4fb0f9644e907fa0b80c91d3092d9631d3ebc5fec5e1a6fa8536a5370c727ac40b7ae9a3105a0a84e84ade1df24f76e0185751484500000000000000000"}]}}, {{0x9, 0x5, 0x9, 0xa, 0x9e, 0x1, 0x1, 0x3, [@generic={0x7e, 0x10, "1dac6b72d66c846b305ea08bc5914009b90c33979e414cb32c33e3681b1489ad30280b3497661813ea7479a22fb6fe99f9426bd629ea543dc7f6a3e73477f352a028c60f5b0f69dc9705dd6ad977c6bc16722bd2a88e58cea44bc2a034f25e0f15d549a54cfb8dbe3abe6aa131b5b66ad029f98334d0405c5d772a2e"}]}}, {{0x9, 0x5, 0xc, 0xe95fda0280d8d301, 0x172, 0xe3, 0x0, 0x29}}, {{0x9, 0x5, 0x0, 0x207c1022e10bd51a, 0x24d, 0xff, 0x1f, 0x81, [@generic={0x3f, 0xa, "6ca4a9e6fd9a7b1941882d8db0e0aed8ae93bb046c7b3e720f231ea4fa93a3e32dd46368e769229dc594e083732173fc379b7f786717e2239faf8ba0f4"}, @generic={0x64, 0x22, "977199b70f875f24333d2a85e2a456233ae50ef8d1557152434d0527f72e43f92a092d8af1091a2bb49540d26a25a9c74ea0dc8904c839c5500e478310b37ca69fa4f78869098fdcfc6f5dad8134e6155fab26e05c82c193e29e78a79ad06a4fbf50"}]}}]}}]}}]}}, &(0x7f00000008c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x82, 0xb, 0x20, 0x10, 0x40}, 0x24, &(0x7f00000000c0)={0x5, 0xf, 0x24, 0x2, [@ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0xbd, 0x4, 0x7fff, 0xf, 0x80, [0x7fc100, 0xc0, 0x3f00, 0x3f00]}]}, 0x1555555555555791, [{0x4, &(0x7f0000000080)=@lang_id={0x4}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x423}}, {0x52, &(0x7f00000009c0)=@string={0x52, 0x3, "7dd971ace3487e140b48417f63fdda85461c84624d61d4579832ca998cdc3ab3a0fe7ac3a0ca785b58a6b133ac9cbc92b2b36e53086c30e40141753c267b3ebc11d9b4184e307335d310848df62b49b7"}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x3009}}]})

[ 1497.900471][T11836] radio-si470x 2-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1497.921834][ T8450] usb 4-1: Using ep0 maxpacket: 16
[ 1497.931397][T11836] radio-si470x: probe of 2-1:0.128 failed with error -22
[ 1497.943893][T11836] usb 2-1: USB disconnect, device number 120
[ 1497.962523][ T8852] usb 5-1: device descriptor read/all, error -71
[ 1497.969885][ T8852] usb usb5-port1: unable to enumerate USB device
[ 1498.062415][ T8450] usb 4-1: config 0 has an invalid interface number: 128 but max is 0
[ 1498.070965][ T8450] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1498.081459][ T8450] usb 4-1: config 0 has no interface number 0
[ 1498.087687][ T8450] usb 4-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1498.098885][ T8450] usb 4-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1498.108040][ T8450] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1498.120773][ T8450] usb 4-1: config 0 descriptor??
[ 1498.126695][ T8851] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[ 1498.153298][ T9944] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[ 1498.361923][T11836] usb 2-1: new full-speed USB device number 121 using dummy_hcd
[ 1498.382129][ T8450] radio-si470x 4-1:0.128: DeviceID=0x9dd5 ChipID=0xc681
[ 1498.389500][ T8851] usb 3-1: Using ep0 maxpacket: 16
[ 1498.402280][ T9944] usb 6-1: Using ep0 maxpacket: 16
20:26:13 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}, 0x0, 0x6, 0x0, "4877bb1f56d48eb1fa5fac76a792a929a57f6062b013ec6b7a9ee231ea85a1c7f5c8fdf3bcaf6c5bb203dab4011d7c6096609012d3e979295204ae936681b23832f302a5020f3f6af0b1d2fb5a00eb09"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}, 0x0, 0x0, 0x0, "1c56400ef08dc0d7f6ffea3199772f0577915623cdca191dcc06ee3e04cd4eb98b6e444bdb49a176ca0be49468681ed3a055edd05610db8ffb464f1417af72c5677bdc0183e8da9f6e9d0d8071771351"}, 0xd8)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c)

20:26:13 executing program 3:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
pipe(&(0x7f0000001300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000000c0)={0x5, @vbi={0x304, 0x9, 0xfffffffa, 0x3147504d, [0x3, 0x3], [0xce6d, 0x2], 0x108}})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

[ 1498.412012][ T8852] usb 5-1: new high-speed USB device number 127 using dummy_hcd
[ 1498.430582][ T8450] radio-si470x 4-1:0.128: si470x_get_report: usb_control_msg returned -71
[ 1498.439601][ T8450] radio-si470x 4-1:0.128: si470x_get_scratch: si470x_get_report returned -71
[ 1498.448926][ T8450] radio-si470x: probe of 4-1:0.128 failed with error -5
[ 1498.497158][ T8450] usb 4-1: USB disconnect, device number 63
[ 1498.532595][ T9944] usb 6-1: config 0 has an invalid interface number: 128 but max is 0
[ 1498.535135][ T8851] usb 3-1: config 0 has an invalid interface number: 128 but max is 0
[ 1498.540917][ T9944] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1498.549089][ T8851] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1498.549164][ T8851] usb 3-1: config 0 has no interface number 0
[ 1498.559282][ T9944] usb 6-1: config 0 has no interface number 0
[ 1498.569432][ T8851] usb 3-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1498.575511][ T9944] usb 6-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1498.581584][ T8851] usb 3-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1498.592645][ T9944] usb 6-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1498.603694][ T8851] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1498.612750][ T9944] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1498.634348][ T9944] usb 6-1: config 0 descriptor??
[ 1498.645594][ T8851] usb 3-1: config 0 descriptor??
20:26:13 executing program 0:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0xa2a5, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5000000010000307ebff000600e7000040040000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x200}}, 0x0)
r0 = socket(0x10, 0x800000000080002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492805, 0x0)
r1 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000170a07031dfffd942367ede3b9a3484409000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44)

[ 1498.759820][ T1882] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1498.762165][ T8852] usb 5-1: Using ep0 maxpacket: 16
[ 1498.781628][ T1882] team0: Port device veth13 added
[ 1498.792289][T11836] usb 2-1: config 2 has an invalid interface number: 10 but max is 0
[ 1498.792770][ T1882] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1498.800625][T11836] usb 2-1: config 2 has no interface number 0
[ 1498.816103][T11836] usb 2-1: config 2 interface 10 altsetting 0 endpoint 0xA has invalid maxpacket 627, setting to 64
[ 1498.822790][ T1882] team0: Port device veth15 added
[ 1498.827035][T11836] usb 2-1: config 2 interface 10 altsetting 0 endpoint 0x8 has invalid maxpacket 135, setting to 64
[ 1498.843296][T11836] usb 2-1: New USB device found, idVendor=1e2d, idProduct=0063, bcdDevice=61.f9
[ 1498.852614][T11836] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1498.863239][T11836] usb 2-1: rejected 1 configuration due to insufficient available bus power
[ 1498.872106][T11836] usb 2-1: no configuration chosen from 1 choice
20:26:13 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
pipe(&(0x7f0000001300)={<r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
close(r3)
splice(r2, 0x0, r3, 0x0, 0x10003, 0x0)
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000000)='\x00', 0x0, r1)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x20200, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r5, 0xc040564b, &(0x7f0000000080)={0x4, 0x0, 0x2020, 0xc4, 0x7, {0x8001, 0x1}, 0x1})
ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000002840)={"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"})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = fcntl$dupfd(r6, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480)='TIPCv2\x00')
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x28, r9, 0x321, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'ib', 0x3a, 'vlan0\x00'}}]}]}, 0x28}}, 0x0)
sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x19030000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0x15c, r9, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffff20}]}, @TIPC_NLA_BEARER={0xb8, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xffffffff, @rand_addr="f8505d890d3b409615bf02690b759270", 0x8}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'bcsh0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9d16}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x64, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @rand_addr=0x7}}, {0x14, 0x2, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'teql0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xff}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000000c0)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0xffff, 0x0, [{0x0, 0x9, 0x0, [], 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, [], 0x4}]}})

[ 1498.902106][ T8851] radio-si470x 3-1:0.128: DeviceID=0x97d5 ChipID=0xc681
[ 1498.924044][ T9944] radio-si470x 6-1:0.128: DeviceID=0xc34b ChipID=0xab81
[ 1498.932027][ T8450] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[ 1498.942172][ T8852] usb 5-1: config 0 has an invalid interface number: 150 but max is 0
[ 1498.950519][ T8852] usb 5-1: config 0 has no interface number 0
[ 1498.956909][ T8852] usb 5-1: New USB device found, idVendor=0525, idProduct=2888, bcdDevice=a0.55
[ 1498.961353][ T1884] QAT: Invalid ioctl
[ 1498.966287][ T8852] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1498.981355][ T8852] usb 5-1: config 0 descriptor??
[ 1498.983791][ T1884] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1498.998383][ T1884] Disabled LAPIC found during irq injection
20:26:14 executing program 0:
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_emit_ethernet(0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa192bce5e2dfb86dd60d8652b00140600fe8000000000000000000d00000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50d4ff249864f5a0"], 0x0)

[ 1499.122295][ T8851] radio-si470x 3-1:0.128: software version 151, hardware version 213
[ 1499.142538][ T9944] radio-si470x 6-1:0.128: software version 195, hardware version 75
20:26:14 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c)
r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x0, 0xca210ca7e44f391f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480)='TIPCv2\x00')
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x28, r3, 0x321, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'ib', 0x3a, 'vlan0\x00'}}]}]}, 0x28}}, 0x0)
setrlimit(0x7, &(0x7f0000000180)={0xfffffffffffffff7, 0x3})
sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x6b1cac46c310365a}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r3, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x4}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000008}, 0x1)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001c40)="8858", 0x2}], 0x1}, 0xc100)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000480)="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", 0xfdef}], 0x1)

[ 1499.172522][ T8450] usb 4-1: Using ep0 maxpacket: 16
[ 1499.218542][ T2095] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1499.243874][ T8852] cdc_subset: probe of 5-1:0.150 failed with error -71
[ 1499.261621][ T8852] usb 5-1: USB disconnect, device number 127
[ 1499.291982][ T8450] usb 4-1: config 0 has an invalid interface number: 128 but max is 0
[ 1499.300382][ T8450] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1499.311036][ T8450] usb 4-1: config 0 has no interface number 0
[ 1499.317293][ T8450] usb 4-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1499.328505][ T8450] usb 4-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
20:26:14 executing program 0:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c)
r1 = socket$inet6(0xa, 0x5, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @multicast2}}}, &(0x7f0000000180)=0x90)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4}, 0x1c)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0x2, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0xfffc, 0x0, 0x8100000055}, 0x98)

[ 1499.337723][ T8450] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1499.347311][ T8851] radio-si470x 3-1:0.128: submitting int urb failed (-90)
[ 1499.377754][ T8450] usb 4-1: config 0 descriptor??
[ 1499.394317][ T9944] radio-si470x 6-1:0.128: submitting int urb failed (-90)
[ 1499.622157][ T9944] radio-si470x 6-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1499.631063][ T9944] radio-si470x: probe of 6-1:0.128 failed with error -22
[ 1499.642484][ T8450] radio-si470x 4-1:0.128: DeviceID=0x67f7 ChipID=0xba81
[ 1499.650071][ T9944] usb 6-1: USB disconnect, device number 9
[ 1499.772044][ T8851] radio-si470x 3-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1499.781004][ T8851] radio-si470x: probe of 3-1:0.128 failed with error -22
[ 1499.793687][ T8851] usb 3-1: USB disconnect, device number 60
[ 1499.862907][ T8450] radio-si470x 4-1:0.128: software version 103, hardware version 247
[ 1500.001967][ T8852] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 1500.123445][ T8450] radio-si470x 4-1:0.128: submitting int urb failed (-90)
[ 1500.273517][ T8852] usb 5-1: Using ep0 maxpacket: 16
[ 1500.392167][ T8852] usb 5-1: config 0 has an invalid interface number: 150 but max is 0
[ 1500.400578][ T8852] usb 5-1: config 0 has no interface number 0
[ 1500.406895][ T8852] usb 5-1: New USB device found, idVendor=0525, idProduct=2888, bcdDevice=a0.55
[ 1500.416110][ T8852] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1500.425732][ T8852] usb 5-1: config 0 descriptor??
[ 1500.672366][ T8852] cdc_subset: probe of 5-1:0.150 failed with error -71
[ 1500.689012][ T8852] usb 5-1: USB disconnect, device number 2
20:26:16 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x1, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000040)="0800a1695e1dcfe87b1071")
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
madvise(&(0x7f00001fa000/0x4000)=nil, 0x4000, 0x68)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

20:26:16 executing program 5:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x27, {0x27, 0x0, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x20000, 0x0)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f00000001c0)={0x7, 0x100})
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000200)={0xfffffffffffffd55, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x23, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "3a3c5a98a0b88f20dab28f43fd604a180bf5c40802c641ed238502ea05de14099c5dfa19c61d2715c179a8913d43848ebb6058f0ae47cea480ef4ae3d1bd7724bc870bcd80db1746d211f5f7dde4bd2f33e5a634f6174cf4dab428a4bdd5141e1cdfd7535edf28bbf44e35cb9180ea022e265108d6db9ab408e8b86c601dc9baf360878fefb4286f933f037b53d6c51bf10ba2a82424f4cf64d7a43f8235463a4e3651ce704859e92aa583ee3327735693aa9147f8b908c3d665302cff8ef37ebcb56efae4f83bc51fa46f6295b1622a46895dded87879de64c990feb0f52a533e44a8d7c9ef25ea0f8e90ff09ab06f93e605e04f9f5ac3102bcefe10a31"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r4 = socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r5=>0xffffffffffffffff})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
close(r6)
splice(r5, 0x0, r6, 0x0, 0x10003, 0x0)
ioctl$EVIOCGABS3F(r5, 0x8018457f, &(0x7f00000005c0)=""/181)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @multicast2}}}, &(0x7f0000000180)=0x90)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e20, 0xaa, @empty, 0x8000}, {0xa, 0x4e24, 0x7fffffff, @dev={0xfe, 0x80, [], 0xf}, 0x6}, 0x8000, [0x8, 0x1, 0x84, 0xf5, 0x7, 0x5, 0x0, 0x3]}, 0x5c)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

20:26:16 executing program 2:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x20000, 0x0)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f00000001c0)={0x7, 0x100})
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000200)={0xfffffffffffffd55, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x23, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r4=>0xffffffffffffffff})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
close(r5)
ioctl$EVIOCGABS3F(r4, 0x8018457f, &(0x7f00000005c0)=""/181)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

20:26:16 executing program 1:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2)
ioctl$HIDIOCGRAWPHYS(r1, 0x80404805, &(0x7f0000000040))
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

[ 1500.975899][ T9944] usb 2-1: USB disconnect, device number 121
20:26:16 executing program 4:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x13, r0, 0x0)
r1 = socket$inet(0x2, 0x3, 0x3)
getsockopt$sock_buf(r1, 0x1, 0x3e, 0x0, &(0x7f000020a000))

[ 1501.042030][ T8852] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[ 1501.114350][ T8450] radio-si470x 4-1:0.128: si470x_set_report: usb_control_msg returned -110
[ 1501.123548][ T8450] radio-si470x: probe of 4-1:0.128 failed with error -22
20:26:16 executing program 4:
syz_usb_connect(0x0, 0xfffffffffffffe21, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000827de50633a3421900000001090212001d000904bbf000e6f4ff000d2b9ac306e09900af4c2bc12c60b3b919aad0d5580aee5b36539337edadba784c99c9fe2d1554779d71c49c592c5a7239e3dfaaefe6cd51cd2151e038786ca7e1"], 0x0)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x10080, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x7, 0xe3bf, 0xc213, 0x401, 0xfffffff8, 0x6, 0x5, 0x4, <r1=>0x0}, &(0x7f00000000c0)=0x20)
getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r1, 0x4}, &(0x7f0000000140)=0x8)
socket$inet(0x2, 0x2, 0x0)

[ 1501.282535][T10856] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[ 1501.371886][ T8851] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[ 1501.522009][T10856] usb 6-1: Using ep0 maxpacket: 16
[ 1501.532173][ T9944] usb 2-1: new high-speed USB device number 122 using dummy_hcd
[ 1501.592124][ T8852] usb 5-1: device descriptor read/64, error -71
[ 1501.621934][ T8851] usb 3-1: Using ep0 maxpacket: 16
[ 1501.642443][T10856] usb 6-1: config 0 has an invalid interface number: 128 but max is 0
[ 1501.650874][T10856] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1501.661156][T10856] usb 6-1: config 0 has no interface number 0
[ 1501.667457][T10856] usb 6-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1501.678654][T10856] usb 6-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1501.687875][T10856] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1501.697829][T10856] usb 6-1: config 0 descriptor??
[ 1501.752384][ T8851] usb 3-1: config 0 has an invalid interface number: 128 but max is 0
[ 1501.760663][ T8851] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1501.771083][ T8851] usb 3-1: config 0 has no interface number 0
[ 1501.777509][ T8851] usb 3-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1501.788837][ T8851] usb 3-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
20:26:16 executing program 3:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)=ANY=[@ANYBLOB="120100001e95cd10cf12117108480000000109021b00010000000009048000010300"/45], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

20:26:16 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x1, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000040)="0800a1695e1dcfe87b1071")
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
madvise(&(0x7f00001fa000/0x4000)=nil, 0x4000, 0x68)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

[ 1501.798162][ T8851] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1501.822265][ T9944] usb 2-1: Using ep0 maxpacket: 16
[ 1501.828374][T11774] usb 4-1: USB disconnect, device number 64
[ 1501.832376][ T8851] usb 3-1: config 0 descriptor??
20:26:16 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x1, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000040)="0800a1695e1dcfe87b1071")
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
madvise(&(0x7f00001fa000/0x4000)=nil, 0x4000, 0x68)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

20:26:17 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x1, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000040)="0800a1695e1dcfe87b1071")
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
madvise(&(0x7f00001fa000/0x4000)=nil, 0x4000, 0x68)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

[ 1501.962184][T10856] radio-si470x 6-1:0.128: DeviceID=0xb955 ChipID=0xb681
[ 1501.969618][ T9944] usb 2-1: config 0 has an invalid interface number: 128 but max is 0
[ 1501.978237][ T9944] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1501.988477][ T9944] usb 2-1: config 0 has no interface number 0
[ 1501.994718][ T9944] usb 2-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1501.994829][ T8852] usb 5-1: device descriptor read/64, error 18
[ 1502.005898][ T9944] usb 2-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1502.005975][ T9944] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1502.033476][T10856] radio-si470x 6-1:0.128: si470x_get_report: usb_control_msg returned -32
[ 1502.042637][T10856] radio-si470x 6-1:0.128: si470x_get_scratch: si470x_get_report returned -32
[ 1502.051947][T10856] radio-si470x: probe of 6-1:0.128 failed with error -5
[ 1502.063926][ T9944] usb 2-1: config 0 descriptor??
20:26:17 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x1, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000040)="0800a1695e1dcfe87b1071")
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

[ 1502.096134][ T8851] radio-si470x 3-1:0.128: DeviceID=0x6ef7 ChipID=0xba81
20:26:17 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x1, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000040)="0800a1695e1dcfe87b1071")
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

20:26:17 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x1, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000040)="0800a1695e1dcfe87b1071")
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

[ 1502.282184][ T8852] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[ 1502.302083][ T8851] radio-si470x 3-1:0.128: software version 110, hardware version 247
[ 1502.322074][ T9944] radio-si470x 2-1:0.128: DeviceID=0xb655 ChipID=0xb681
[ 1502.342033][T11774] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[ 1502.522182][ T8851] radio-si470x 3-1:0.128: submitting int urb failed (-90)
[ 1502.542133][ T9944] radio-si470x 2-1:0.128: software version 182, hardware version 85
[ 1502.551926][ T8852] usb 5-1: device descriptor read/64, error 18
[ 1502.601929][T11774] usb 4-1: Using ep0 maxpacket: 16
[ 1502.722204][T11774] usb 4-1: config 0 has an invalid interface number: 128 but max is 0
[ 1502.730533][T11774] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1502.740874][T11774] usb 4-1: config 0 has no interface number 0
[ 1502.747070][T11774] usb 4-1: config 0 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1502.760359][T11774] usb 4-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1502.769513][T11774] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1502.778517][ T9944] radio-si470x 2-1:0.128: submitting int urb failed (-90)
[ 1502.786440][T11774] usb 4-1: config 0 descriptor??
[ 1502.828838][T11774] radio-si470x 4-1:0.128: could not find interrupt in endpoint
[ 1502.836775][T11774] radio-si470x: probe of 4-1:0.128 failed with error -5
[ 1502.844535][T11774] usbhid 4-1:0.128: couldn't find an input interrupt endpoint
[ 1502.962076][ T8851] radio-si470x 3-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1502.971043][ T8851] radio-si470x: probe of 3-1:0.128 failed with error -22
[ 1502.980511][ T8852] usb 5-1: device descriptor read/64, error 18
[ 1502.986964][ T9944] radio-si470x 2-1:0.128: si470x_set_report: usb_control_msg returned -32
[ 1502.996148][ T9944] radio-si470x: probe of 2-1:0.128 failed with error -22
[ 1502.996440][ T8851] usb 3-1: USB disconnect, device number 61
[ 1503.102125][ T8852] usb usb5-port1: attempt power cycle
[ 1503.190450][ T9944] usb 2-1: USB disconnect, device number 122
[ 1503.811894][ T8852] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[ 1503.961830][ T8851] usb 2-1: new high-speed USB device number 123 using dummy_hcd
20:26:19 executing program 5:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x28, {0x28, 0x0, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41fe"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x20000, 0x0)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f00000001c0)={0x7, 0x100})
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000200)={0xfffffffffffffd55, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x23, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r4 = socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r5=>0xffffffffffffffff})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
close(r6)
splice(r5, 0x0, r6, 0x0, 0x10003, 0x0)
ioctl$EVIOCGABS3F(r5, 0x8018457f, &(0x7f00000005c0)=""/181)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @multicast2}}}, &(0x7f0000000180)=0x90)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e20, 0xaa, @empty, 0x8000}, {0xa, 0x4e24, 0x7fffffff, @dev={0xfe, 0x80, [], 0xf}, 0x6}, 0x8000, [0x8, 0x1, 0x84, 0xf5, 0x7, 0x5, 0x0, 0x3]}, 0x5c)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

[ 1504.019732][ T8450] usb 6-1: USB disconnect, device number 10
[ 1504.092305][ T8852] usb 5-1: device descriptor read/64, error 18
[ 1504.211806][ T8851] usb 2-1: Using ep0 maxpacket: 16
[ 1504.332476][ T8851] usb 2-1: config 0 has an invalid interface number: 128 but max is 0
[ 1504.340775][ T8851] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1504.351244][ T8851] usb 2-1: config 0 has no interface number 0
[ 1504.357492][ T8851] usb 2-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1504.368683][ T8851] usb 2-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1504.377902][ T8851] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1504.388840][ T8851] usb 2-1: config 0 descriptor??
[ 1504.461893][ T8450] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[ 1504.652117][ T8851] radio-si470x 2-1:0.128: DeviceID=0x68f7 ChipID=0xba81
20:26:19 executing program 1:
r0 = syz_usb_connect(0x2, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x0, 0x0)
fcntl$getownex(r1, 0x10, &(0x7f0000000040))
fchmod(r1, 0x100)
syz_usb_control_io(r0, 0x0, 0x0)

20:26:19 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x1, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000040)="0800a1695e1dcfe87b1071")
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

20:26:19 executing program 2:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
r3 = openat$md(0xffffffffffffff9c, 0x0, 0x20000, 0x0)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f00000001c0)={0x7, 0x100})
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000200)={0xfffffffffffffd55, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x23, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r4=>0xffffffffffffffff})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
close(r5)
ioctl$EVIOCGABS3F(r4, 0x8018457f, &(0x7f00000005c0)=""/181)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

20:26:19 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)=[{0x0, 0x227}, {0x0}, {&(0x7f0000000180), 0xfffffffffffffc7a}], 0x3}, 0x0)
clone(0x800007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="13d50f34"], 0x4}}, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="0cda366f094e"], 0x0, 0x6}, 0x20)
tkill(r2, 0x3b)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r2, 0x0, 0x0)

[ 1504.712235][ T8450] usb 6-1: Using ep0 maxpacket: 16
[ 1504.739538][ T8851] radio-si470x 2-1:0.128: si470x_get_report: usb_control_msg returned -71
[ 1504.748500][ T8851] radio-si470x 2-1:0.128: si470x_get_scratch: si470x_get_report returned -71
[ 1504.755500][ T2473] ptrace attach of "/root/syz-executor.4"[2472] was attempted by "/root/syz-executor.4"[2473]
[ 1504.757804][ T8851] radio-si470x: probe of 2-1:0.128 failed with error -5
[ 1504.844560][ T8851] usb 2-1: USB disconnect, device number 123
[ 1504.862243][ T8450] usb 6-1: config 0 has an invalid interface number: 128 but max is 0
[ 1504.870583][ T8450] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1504.880803][ T8450] usb 6-1: config 0 has no interface number 0
20:26:20 executing program 3:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="120100001e95cd10cf12117108480000000109021b00dd4a0000000904800001030000000705840b00000070ae8461c137e75a658dddc14fbd192357af4f9d76885040d36ac3f10f1eb423cdd84a54492b5d50fd6ef12117a5e705ff2c288f38c991c850cba73c57e69dacdf839527d8c5e2ac80e0d771c18cbb123ffbb4b9f62ac4b1b7b1030000"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000100)={0x24c, r2, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1400000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x24, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x47a3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7a}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x73f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK={0x74, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xeed}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x51c}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x23a}]}, @TIPC_NLA_MEDIA={0x94, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xefd9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x58, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x15900e51}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x20}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6ed2}]}]}, 0x24c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

20:26:20 executing program 4:
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000080)="07098f29fe3a8de93274054ef49ef0a650c47839", 0x0}, 0x18)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x365, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"})
readlink(0x0, 0x0, 0xa)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="48000000100005070000000000000000000000009dbc6d3be4b79cf7091bc066a3d189e74ad1440c880b296028470d376f660a33bcfdbe4016d5d666c5e66e57471b6718f8738a14254b0f2a2e6bfb5399926ab7", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r4}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x3c}}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000200)=@xdp={0x2c, 0x4, r4, 0x39}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000580)="e58aca2df4ff1c1ecf00c7793665d13404ee809ba01139fbc0e65481ade1fa569917f72e0655786b88a05652d5d18559502503d7eafe0a495aa17b6849dfe26b3bac701d0d64fc9ae9d32f32bec29705e720725339750dd33a19f27c4ed1fb9bc9ce02552f0999eb0dc19ed7c1fd4daa11ab0122566a69dcb4198d0ee24732978902eeaf985fa3ae55675ddd9803fd82a8620ca7d7ee4330be", 0x99}, {&(0x7f0000000380)="f037f598e390ba0188a9c956cc868315f9563f5706a9da43b0b35a58a3b2e2bd634fb124e8836ecfd521b0eef5a10bee7cb2ba93de8a717880e6554196f89d3f1e990501228abb24478077ae3858e47bf2c665519eb8e459734ac497d2719c83bc0578d3aca7fa68981a558e58", 0x6d}, {&(0x7f00000002c0)="5f454edfd9fdb0950f53c1ef8663f3d3dba7acf1c8bf349fb346bc28e5366b47f59bffa3071b87e726ac44a70600a5cdc00a25da10c9", 0x36}, {&(0x7f0000000640)="f64678d4ff15c3f492bc1438ce992966ed8be1734716b2477d38510546967c44b8a3eeb09e75904eba65643323fae6b1ba5de3c4e5e7399423cf362cf3e74be1b4a13f4de742b316f9bb919de0a02ced3028ca612ab09a875dec1aff7f095faaff0d40a902824d29ea300ef05ca094559688c6c2204e2b55eb2ad371e5ccf65c096f1c4491a30fce92c36712dacc1fd7b563", 0x92}, {&(0x7f0000000700)="9c72b93bbc98b21a11507486baa076676b0f4a6d4faf8e3c178c8dea928a2bc5a64312b6175abf501d40bcf7dae21f462291c93f2d8fab5be2fbaed53acdcc4f09515beeef4682db94ad765f382a85a6cb6414d285bce6cffae1f3fda19bcc493da844b0a765f86c3e19df0ee4724eca7c22b0030cc481f2c9480b2ce14b91784924ba2e2ba29e02fc8e29820c5ae23ac04c1719b23d4086e1368e7eb463d4041f23714911fe7c2a52003b2a26e5841b37bc0b", 0xb3}], 0x5, &(0x7f0000000d80)=[{0xe0, 0xff, 0x1, "4f8c93f865f63d0efead91eacb119e915c6e5c1e62d33a72d243d4b8d3485a9b7ed01e2585fadcf3b1d09def81968761f80f29a3963b7e72072360c5e52436d19f855600294d69018a657e7b64b950ee913575b6be65fabfc1e83fb8b679861dd45c473f05333f493e9f3557405e10aedba099510d1e039994cef3164f7d94010485e07a631512192bb71c5ec3306fd83d85041581cdd1f4531593cba1ce2223e6e9fd1ad3a746a2f442616bacd9f3b0c5306eaa01461eddc6b164a3a5b6e4ea4d382829d7b86c7c5a"}, {0x20, 0x1, 0xa7, "05a04e980be2eb7192bed60e9bf4"}, {0x1010, 0x88, 0x10000, "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"}, {0x100, 0x10e, 0x7ff, "6f3f97a3fc34a2789a2fe8a40c51ac4d614e0f409324a391e7b26518dff4c71040a84fa0165cbe6388fbcdbece28cbf3ed228971179c2e7cd780795bfedef74965ca4ef91f48339e564c2aeca8de6240df7dd390060dceb099d448062eb0bd590f7af4b84fbd2e53a186dea3effd8718201b7759d705afa9874fb15e4c284d9fee3f74e8cefd759c0cd34582540f35e7e4c97b14f028c27334307fab8fd5bfb7818144bd51bd8e9703504ed5b8a128505c880d44749d0a6b18df4765100aa0cf3750c5c26bed6153acd6869cfa3e5e0c6d31895c856de02580d20b365f253674bc8c40fe81f09727ba24aee518d850"}, {0xa8, 0x3a, 0x7, "1dcb63f3e1ea12964f07b09da9c70e0be847a0fcdae93b1ebeb8e5a56a4d2cd947168b95411f6e1e8414e4fdd18e4ea3fa1aafa39d7bd5fd1d70b12268d62b7b5b32b0cdeee701dd9a311b538b18a89d83fd12482bcc09a655d52077f7a0964bd40cef33a207d51958d4fa0d58d231fe10621f717366a9e7f61548bb403bd5cddd0d72f79c514130603ce795945ac873a59f56118f"}, {0xd0, 0x119, 0xf01, "72fc9e859b54cf51572d0e2f6d4eeba634853547504d4855839be2876206c8dacdb2a24f96d716f712e9fcff4c06d3ec2d763e86d9da03d02930456cafc7c87b6f890024be5c8fff26f9fafdd75449c8afa61e5bfac673ec50b6aafb61306865dbabf55eb5b50b67a35c1c7df41858beb5193f18400bb7aa5f0a354987162073fd85aa2fc580bf3bf9c3ab09153e9be4e651966cd3e8488b47d83e4f0e0e18a668c64232c8d8948d878af9d1fa2c0f97333a3878db26bb5eaad2"}, {0x30, 0x105, 0x0, "3c493df8d15419703ac633791941dfef69232999681fb1e9b9e4"}, {0xa0, 0x1d7, 0x7fffffff, "3f64b9d15383c3113248ed009d3409d9196b0592dec2ac490e6897bd63515fdf641928605864fbbec84296f2d4e4428e56ca4201a441ca3528e9e56cc9ca3abb6fb14e6fcf1799a5879bb8313956c3de74194fec9f26a5e279820d4bcf7fbee80988d7a4f04ebc6d3208d3f4578565d6dc7b0a313d0d4542ffb17e3e1e7cd445bb3dc350dc40678795d360becebfba"}], 0x1458}, 0x800)
r5 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'})
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)
connect(0xffffffffffffffff, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)

20:26:20 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x1, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

[ 1504.887061][ T8450] usb 6-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1504.898514][ T8450] usb 6-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1504.907842][ T8450] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1504.918237][ T8450] usb 6-1: config 0 descriptor??
[ 1504.937678][T10207] usb 4-1: USB disconnect, device number 65
20:26:20 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x1, 0x0)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

[ 1505.034499][ T2487] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
20:26:20 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

20:26:20 executing program 4:
getpgid(0xffffffffffffffff)
r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0)
fallocate(r0, 0x1, 0x0, 0x20010001)
write$cgroup_type(r0, &(0x7f0000000240)='threaded\x00', 0xfffffefe)
fallocate(r0, 0x3, 0x8000, 0x8000)

[ 1505.087371][ T2491] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1505.122852][T11836] usb 3-1: new high-speed USB device number 62 using dummy_hcd
20:26:20 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

[ 1505.182671][ T8450] radio-si470x 6-1:0.128: DeviceID=0x6af7 ChipID=0xba81
[ 1505.242345][ T8851] usb 2-1: new full-speed USB device number 124 using dummy_hcd
[ 1505.391954][ T8450] radio-si470x 6-1:0.128: software version 106, hardware version 247
[ 1505.401781][T11836] usb 3-1: Using ep0 maxpacket: 16
[ 1505.407405][T10207] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[ 1505.522007][T11836] usb 3-1: config 0 has an invalid interface number: 128 but max is 0
[ 1505.530405][T11836] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1505.540810][T11836] usb 3-1: config 0 has no interface number 0
[ 1505.547080][T11836] usb 3-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1505.558760][T11836] usb 3-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1505.571063][T11836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1505.584007][T11836] usb 3-1: config 0 descriptor??
[ 1505.602196][ T8450] radio-si470x 6-1:0.128: submitting int urb failed (-90)
[ 1505.662079][ T8851] usb 2-1: config 0 has an invalid interface number: 128 but max is 0
[ 1505.672450][ T8851] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1505.684726][ T8851] usb 2-1: config 0 has no interface number 0
[ 1505.690888][ T8851] usb 2-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[ 1505.702218][ T8851] usb 2-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1505.711311][ T8851] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1505.722393][ T8851] usb 2-1: config 0 descriptor??
[ 1505.751982][T10207] usb 4-1: Using ep0 maxpacket: 16
[ 1505.822142][ T8450] radio-si470x 6-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1505.831318][ T8450] radio-si470x: probe of 6-1:0.128 failed with error -22
[ 1505.842447][T11836] radio-si470x 3-1:0.128: DeviceID=0x62f7 ChipID=0xba81
[ 1505.851204][ T8450] usb 6-1: USB disconnect, device number 11
[ 1505.882102][T10207] usb 4-1: config 74 has too many interfaces: 221, using maximum allowed: 32
[ 1505.891037][T10207] usb 4-1: config 74 has an invalid descriptor of length 112, skipping remainder of the config
[ 1505.901604][T10207] usb 4-1: config 74 has 1 interface, different from the descriptor's value: 221
[ 1505.910916][T10207] usb 4-1: config 74 has no interface number 0
[ 1505.917272][T10207] usb 4-1: config 74 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1505.928531][T10207] usb 4-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1505.937735][T10207] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1505.982100][ T8851] radio-si470x 2-1:0.128: DeviceID=0x6ef7 ChipID=0xba81
[ 1506.062038][T11836] radio-si470x 3-1:0.128: software version 98, hardware version 247
[ 1506.192153][T10207] radio-si470x 4-1:74.128: DeviceID=0x6ef7 ChipID=0xba81
[ 1506.202258][ T8851] radio-si470x 2-1:0.128: software version 110, hardware version 247
20:26:21 executing program 5:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x28, {0x28, 0x0, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41fe"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x20000, 0x0)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f00000001c0)={0x7, 0x100})
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000200)={0xfffffffffffffd55, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x23, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r4 = socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r5=>0xffffffffffffffff})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
close(r6)
splice(r5, 0x0, r6, 0x0, 0x10003, 0x0)
ioctl$EVIOCGABS3F(r5, 0x8018457f, &(0x7f00000005c0)=""/181)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @multicast2}}}, &(0x7f0000000180)=0x90)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e20, 0xaa, @empty, 0x8000}, {0xa, 0x4e24, 0x7fffffff, @dev={0xfe, 0x80, [], 0xf}, 0x6}, 0x8000, [0x8, 0x1, 0x84, 0xf5, 0x7, 0x5, 0x0, 0x3]}, 0x5c)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

[ 1506.282142][T11836] radio-si470x 3-1:0.128: submitting int urb failed (-90)
[ 1506.412108][T10207] radio-si470x 4-1:74.128: software version 110, hardware version 247
[ 1506.422451][ T8851] radio-si470x 2-1:0.128: submitting int urb failed (-90)
[ 1506.625123][ T8450] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[ 1506.633115][T10207] radio-si470x 4-1:74.128: submitting int urb failed (-90)
[ 1506.722048][T11836] radio-si470x 3-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1506.731145][T11836] radio-si470x: probe of 3-1:0.128 failed with error -22
[ 1506.741315][T11836] usb 3-1: USB disconnect, device number 62
[ 1506.862013][ T8851] radio-si470x 2-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1506.871167][ T8851] radio-si470x: probe of 2-1:0.128 failed with error -22
[ 1506.880709][ T8450] usb 6-1: Using ep0 maxpacket: 16
[ 1506.886875][ T8851] usb 2-1: USB disconnect, device number 124
[ 1507.001993][ T8450] usb 6-1: config 0 has an invalid interface number: 128 but max is 0
[ 1507.010425][ T8450] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1507.021008][ T8450] usb 6-1: config 0 has no interface number 0
[ 1507.027258][ T8450] usb 6-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1507.038567][ T8450] usb 6-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1507.047775][ T8450] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1507.058062][ T8450] usb 6-1: config 0 descriptor??
[ 1507.292048][T10207] radio-si470x 4-1:74.128: si470x_set_report: usb_control_msg returned -71
[ 1507.301169][T10207] radio-si470x: probe of 4-1:74.128 failed with error -22
[ 1507.310997][ T8450] radio-si470x 6-1:0.128: DeviceID=0x66f7 ChipID=0xba81
[ 1507.319012][T10207] usb 4-1: USB disconnect, device number 66
[ 1507.522107][ T8450] radio-si470x 6-1:0.128: software version 102, hardware version 247
[ 1507.611861][ T8851] usb 2-1: new full-speed USB device number 125 using dummy_hcd
[ 1507.742167][ T8450] radio-si470x 6-1:0.128: submitting int urb failed (-90)
[ 1507.962277][ T8450] radio-si470x 6-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1507.971184][ T8450] radio-si470x: probe of 6-1:0.128 failed with error -22
[ 1507.986828][ T8450] usb 6-1: USB disconnect, device number 12
[ 1507.994839][ T8851] usb 2-1: config 0 has an invalid interface number: 128 but max is 0
[ 1508.003168][ T8851] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1508.015139][ T8851] usb 2-1: config 0 has no interface number 0
[ 1508.021302][ T8851] usb 2-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[ 1508.032626][ T8851] usb 2-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1508.041804][ T8851] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1508.041900][ T9944] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[ 1508.057111][ T8851] usb 2-1: config 0 descriptor??
[ 1508.291921][ T9944] usb 4-1: Using ep0 maxpacket: 16
[ 1508.321908][ T8851] radio-si470x 2-1:0.128: DeviceID=0x67f7 ChipID=0xba81
20:26:23 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = gettid()
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000013000)={0x1, 0x10000007f, 0xa, 0x1000000000000008}, 0x1c)
sendmmsg$unix(r0, &(0x7f0000004f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x48}], 0xfd, 0x0)
r3 = syz_open_procfs(r1, &(0x7f0000000000)='schedstat\x00')
ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x3, @remote, 'ip6gre0\x00'}})
r4 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)

20:26:23 executing program 4:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0xfebc, &(0x7f0000000200)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0)

20:26:23 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r0, 0x0, r0)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

20:26:23 executing program 2:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
r3 = openat$md(0xffffffffffffff9c, 0x0, 0x20000, 0x0)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f00000001c0)={0x7, 0x100})
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000200)={0xfffffffffffffd55, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x23, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "3a3c5a98a0b88f20dab28f43fd604a180bf5c40802c641ed238502ea05de14099c5dfa19c61d2715c179a8913d43848ebb6058f0ae47cea480ef4ae3d1bd7724bc870bcd80db1746d211f5f7dde4bd2f33e5a634f6174cf4dab428a4bdd5141e1cdfd7535edf28bbf44e35cb9180ea022e265108d6db9ab408e8b86c601dc9baf360878fefb4286f933f037b53d6c51bf10ba2a82424f4cf64d7a43f8235463a4e3651ce704859e92aa583ee3327735693aa9147f8b908c3d665302cff8ef37ebcb56efae4f83bc51fa46f6295b1622a46895dded87879de64c990feb0f52a533e44a8d7c9ef25ea0f8e90ff09ab06f93e605e04f9f5ac3102bcefe10a31"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r4=>0xffffffffffffffff})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
close(r5)
ioctl$EVIOCGABS3F(r4, 0x8018457f, &(0x7f00000005c0)=""/181)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

[ 1508.364010][ T8851] radio-si470x 2-1:0.128: si470x_get_report: usb_control_msg returned -71
[ 1508.372798][ T8851] radio-si470x 2-1:0.128: si470x_get_scratch: si470x_get_report returned -71
[ 1508.382177][ T8851] radio-si470x: probe of 2-1:0.128 failed with error -5
[ 1508.425699][ T9944] usb 4-1: config 74 has too many interfaces: 221, using maximum allowed: 32
[ 1508.435154][ T9944] usb 4-1: config 74 has an invalid descriptor of length 112, skipping remainder of the config
[ 1508.445677][ T9944] usb 4-1: config 74 has 1 interface, different from the descriptor's value: 221
[ 1508.454168][ T8851] usb 2-1: USB disconnect, device number 125
[ 1508.454947][ T9944] usb 4-1: config 74 has no interface number 0
[ 1508.467228][ T9944] usb 4-1: config 74 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1508.478455][ T9944] usb 4-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1508.487608][ T9944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
20:26:23 executing program 4:
mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
set_robust_list(&(0x7f0000000140)={&(0x7f0000000040)={&(0x7f0000000000)}, 0x9, &(0x7f0000000100)={&(0x7f0000000080)}}, 0x18)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x4182)
r2 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x0)
clock_gettime(0x8e83c45269354d31, &(0x7f0000000400))
openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0xde000, 0x0)
sendfile(r1, r1, 0x0, 0x24000000)
socket$inet6(0xa, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff})
r4 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0)
pwritev(r4, &(0x7f0000000380)=[{&(0x7f0000000680)='d', 0x1}], 0x1, 0x4081806)
sendfile(r3, r4, 0x0, 0x20020102000007)
fcntl$setstatus(r3, 0x4, 0x2800)

20:26:23 executing program 5:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x28, {0x28, 0x0, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41fe"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x20000, 0x0)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f00000001c0)={0x7, 0x100})
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000200)={0xfffffffffffffd55, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x23, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "3a3c5a98a0b88f20dab28f43fd604a180bf5c40802c641ed238502ea05de14099c5dfa19c61d2715c179a8913d43848ebb6058f0ae47cea480ef4ae3d1bd7724bc870bcd80db1746d211f5f7dde4bd2f33e5a634f6174cf4dab428a4bdd5141e1cdfd7535edf28bbf44e35cb9180ea022e265108d6db9ab408e8b86c601dc9baf360878fefb4286f933f037b53d6c51bf10ba2a82424f4cf64d7a43f8235463a4e3651ce704859e92aa583ee3327735693aa9147f8b908c3d665302cff8ef37ebcb56efae4f83bc51fa46f6295b1622a46895dded87879de64c990feb0f52a533e44a8d7c9ef25ea0f8e90ff09ab06f93e605e04f9f5ac3102bcefe10a31"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r4 = socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r5=>0xffffffffffffffff})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
close(r6)
splice(r5, 0x0, r6, 0x0, 0x10003, 0x0)
ioctl$EVIOCGABS3F(r5, 0x8018457f, &(0x7f00000005c0)=""/181)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @multicast2}}}, &(0x7f0000000180)=0x90)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e20, 0xaa, @empty, 0x8000}, {0xa, 0x4e24, 0x7fffffff, @dev={0xfe, 0x80, [], 0xf}, 0x6}, 0x8000, [0x8, 0x1, 0x84, 0xf5, 0x7, 0x5, 0x0, 0x3]}, 0x5c)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

20:26:23 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r0, 0x0, r0)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

[ 1508.771896][T11774] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[ 1508.803927][ T9944] radio-si470x 4-1:74.128: si470x_get_report: usb_control_msg returned -71
[ 1508.813252][ T9944] radio-si470x: probe of 4-1:74.128 failed with error -5
20:26:23 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r0, 0x0, r0)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

20:26:23 executing program 3:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
r1 = open$dir(&(0x7f0000000280)='./file0\x00', 0x408000, 0x94)
mknodat(r1, &(0x7f00000002c0)='./file0\x00', 0xaea2e2c2b137837b, 0x1)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$link(0x16, 0x0, r2)
r3 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)="0e962b79baa1bf5ea073617a7dbf97f8fdb88d337d39615348e360137773b1cd2742b723fe1873bc0b250d2bffa5338f2d571fc695fbcab02e3d8f1e8a188ed1620adf7f635511c93e78871b3b73788581b4b7064cd87bc084e1a29523408ec09027eb4f90b1cb0d7bc645fc7f92e6fea957545e0db4a55473cd4bdda2a095bd66d18f9cf421a1a9c6a88159e2d52091b0d7eb41b6aa25f53d74608f2f5cda6e4926161e14b81b5afdb1a73701eeb0a362ad1f9077281518f8c08ece2a66934bbd526c1a910290bbaa0538986c203ee03ef667bb20769e79877b501d2da9ada6540685d077e3013c2a49c3898626e322768f1c26795a004d", 0xf8, r2)
keyctl$reject(0x13, r3, 0xfffffffffffffffe, 0xfffffffffffffffd, 0xfffffffffffffff9)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
pipe(&(0x7f0000001300)={<r6=>0xffffffffffffffff})
r7 = socket$inet_udp(0x2, 0x2, 0x0)
close(r7)
splice(r6, 0x0, r7, 0x0, 0x10003, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x2400, 0x2400)
fchmodat(r5, &(0x7f0000000000)='./file0\x00', 0x4)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
pipe(&(0x7f0000001300)={<r8=>0xffffffffffffffff})
pipe(&(0x7f0000001300)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
write$binfmt_misc(r9, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
setsockopt$packet_drop_memb(r9, 0x107, 0x2, &(0x7f0000000240)={0x0, 0x1, 0x6, @broadcast}, 0x10)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
close(r10)
bind$tipc(r8, &(0x7f0000000040)=@id={0x1e, 0x3, 0x1, {0x4e21, 0x2}}, 0x10)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
getgid()

[ 1508.876633][ T9944] usb 4-1: USB disconnect, device number 67
20:26:24 executing program 0:
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

20:26:24 executing program 0:
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

[ 1508.975321][ T8851] usb 2-1: new high-speed USB device number 126 using dummy_hcd
20:26:24 executing program 0:
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

[ 1509.032791][T11774] usb 3-1: Using ep0 maxpacket: 16
[ 1509.152296][T11774] usb 3-1: config 0 has an invalid interface number: 128 but max is 0
[ 1509.160625][T11774] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1509.170870][T11774] usb 3-1: config 0 has no interface number 0
[ 1509.177077][T11774] usb 3-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1509.181897][ T8450] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[ 1509.188285][T11774] usb 3-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1509.204908][T11774] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1509.215138][T11774] usb 3-1: config 0 descriptor??
[ 1509.262045][ T8851] usb 2-1: Using ep0 maxpacket: 16
[ 1509.371960][ T9944] usb 4-1: new high-speed USB device number 68 using dummy_hcd
[ 1509.382121][ T8851] usb 2-1: config 0 has an invalid interface number: 128 but max is 0
[ 1509.390492][ T8851] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1509.400840][ T8851] usb 2-1: config 0 has no interface number 0
[ 1509.407061][ T8851] usb 2-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1509.418249][ T8851] usb 2-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1509.427488][ T8851] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1509.437234][ T8851] usb 2-1: config 0 descriptor??
[ 1509.472228][T11774] radio-si470x 3-1:0.128: DeviceID=0xb355 ChipID=0xb681
[ 1509.482162][ T8450] usb 6-1: Using ep0 maxpacket: 16
[ 1509.601930][ T8450] usb 6-1: config 0 has an invalid interface number: 128 but max is 0
[ 1509.610410][ T8450] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1509.620805][ T8450] usb 6-1: config 0 has no interface number 0
[ 1509.627043][ T8450] usb 6-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1509.638234][ T8450] usb 6-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1509.647449][ T8450] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1509.656851][ T8450] usb 6-1: config 0 descriptor??
[ 1509.661852][ T9944] usb 4-1: Using ep0 maxpacket: 16
[ 1509.692258][ T8851] radio-si470x 2-1:0.128: DeviceID=0x67f7 ChipID=0xba81
[ 1509.692466][T11774] radio-si470x 3-1:0.128: software version 179, hardware version 85
[ 1509.782270][ T9944] usb 4-1: config 0 has an invalid interface number: 128 but max is 0
[ 1509.790598][ T9944] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1509.800843][ T9944] usb 4-1: config 0 has no interface number 0
[ 1509.807062][ T9944] usb 4-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1509.818244][ T9944] usb 4-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1509.827375][ T9944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1509.837078][ T9944] usb 4-1: config 0 descriptor??
[ 1509.912070][ T8851] radio-si470x 2-1:0.128: software version 103, hardware version 247
[ 1509.922097][T11774] radio-si470x 3-1:0.128: submitting int urb failed (-90)
[ 1509.922494][ T8450] radio-si470x 6-1:0.128: DeviceID=0x61f7 ChipID=0xba81
[ 1510.102188][ T9944] radio-si470x 4-1:0.128: DeviceID=0xbc55 ChipID=0xb681
[ 1510.132005][ T8851] radio-si470x 2-1:0.128: submitting int urb failed (-90)
[ 1510.139519][ T8450] radio-si470x 6-1:0.128: software version 97, hardware version 247
[ 1510.322168][ T9944] radio-si470x 4-1:0.128: software version 188, hardware version 85
[ 1510.362127][T11774] radio-si470x 3-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1510.363011][ T8450] radio-si470x 6-1:0.128: submitting int urb failed (-90)
[ 1510.371186][T11774] radio-si470x: probe of 3-1:0.128 failed with error -22
[ 1510.390305][T11774] usb 3-1: USB disconnect, device number 63
[ 1510.584255][ T8851] radio-si470x 2-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1510.592101][ T9944] radio-si470x 4-1:0.128: submitting int urb failed (-90)
[ 1510.594587][ T8851] radio-si470x: probe of 2-1:0.128 failed with error -22
[ 1510.613896][ T8450] radio-si470x 6-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1510.623410][ T8450] radio-si470x: probe of 6-1:0.128 failed with error -22
[ 1510.634147][ T8851] usb 2-1: USB disconnect, device number 126
[ 1510.643448][ T8450] usb 6-1: USB disconnect, device number 13
[ 1511.341819][ T8450] usb 2-1: new high-speed USB device number 127 using dummy_hcd
[ 1511.551908][ T9944] radio-si470x 4-1:0.128: si470x_set_report: usb_control_msg returned -110
[ 1511.560958][ T9944] radio-si470x: probe of 4-1:0.128 failed with error -22
[ 1511.612342][ T8450] usb 2-1: Using ep0 maxpacket: 16
[ 1511.741919][ T8450] usb 2-1: config 0 has an invalid interface number: 128 but max is 0
[ 1511.750338][ T8450] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1511.760606][ T8450] usb 2-1: config 0 has no interface number 0
[ 1511.766855][ T8450] usb 2-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1511.778103][ T8450] usb 2-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1511.787287][ T8450] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1511.796709][ T8450] usb 2-1: config 0 descriptor??
20:26:27 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x218}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x400000000000002, 0x0)

20:26:27 executing program 0:
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

20:26:27 executing program 2:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
r3 = openat$md(0xffffffffffffff9c, 0x0, 0x20000, 0x0)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f00000001c0)={0x7, 0x100})
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000200)={0xfffffffffffffd55, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x23, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r4=>0xffffffffffffffff})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
close(r5)
ioctl$EVIOCGABS3F(r4, 0x8018457f, &(0x7f00000005c0)=""/181)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

20:26:27 executing program 5:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x0, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "3a3c5a98a0b88f20dab28f43fd604a180bf5c40802c641ed238502ea05de14099c5dfa19c61d2715c179a8913d43848ebb6058f0ae47cea480ef4ae3d1bd7724bc870bcd80db1746d211f5f7dde4bd2f33e5a634f6174cf4dab428a4bdd5141e1cdfd7535edf28bbf44e35cb9180ea022e265108d6db9ab408e8b86c601dc9baf360878fefb4286f933f037b53d6c51bf10ba2a82424f4cf64d7a43f8235463a4e3651ce704859e92aa583ee3327735693aa9147f8b908c3d665302cff8ef37ebcb56efae4f83bc51fa46f6295b1622a46895dded87879de64c990feb0f52a533e44a8d7c9ef25ea0f8e90ff09ab06f93e605e04f9f5ac3102bcefe10a31"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x20000, 0x0)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f00000001c0)={0x7, 0x100})
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000200)={0xfffffffffffffd55, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x23, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r4 = socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r5=>0xffffffffffffffff})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
close(r6)
splice(r5, 0x0, r6, 0x0, 0x10003, 0x0)
ioctl$EVIOCGABS3F(r5, 0x8018457f, &(0x7f00000005c0)=""/181)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @multicast2}}}, &(0x7f0000000180)=0x90)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e20, 0xaa, @empty, 0x8000}, {0xa, 0x4e24, 0x7fffffff, @dev={0xfe, 0x80, [], 0xf}, 0x6}, 0x8000, [0x8, 0x1, 0x84, 0xf5, 0x7, 0x5, 0x0, 0x3]}, 0x5c)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

20:26:27 executing program 1:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = socket$inet6(0xa, 0x5, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @multicast2}}}, &(0x7f0000000180)=0x90)
setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4)
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

[ 1512.123197][ T8450] radio-si470x 2-1:0.128: si470x_get_report: usb_control_msg returned -71
[ 1512.132376][ T8450] radio-si470x: probe of 2-1:0.128 failed with error -5
20:26:27 executing program 0:
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

[ 1512.197771][ T8450] usb 2-1: USB disconnect, device number 127
20:26:27 executing program 3:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = dup(0xffffffffffffffff)
openat$cgroup_type(r1, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
pipe(&(0x7f0000001300)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000040)={0x0, 0x12})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
pipe(&(0x7f0000001300)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0)
ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000100)={0x400000100002f, {0x0, 0x0, 0xdeba}})
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f00000002c0)={{}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r3, 0x5501)
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r5, 0x401c5504, &(0x7f0000000100)={0x400000100002f, {0x0, 0x0, 0xdeba}})
ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f00000002c0)={{}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r5, 0x5501)
tee(r3, r5, 0x7, 0x4)

[ 1512.268171][ T8851] usb 4-1: USB disconnect, device number 68
20:26:27 executing program 0:
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

20:26:27 executing program 4:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000017fdc)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)

20:26:27 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

20:26:27 executing program 4:

[ 1512.412419][T11774] usb 3-1: new high-speed USB device number 64 using dummy_hcd
[ 1512.428658][ T2586] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
20:26:27 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

[ 1512.482167][ T9944] usb 6-1: new high-speed USB device number 14 using dummy_hcd
20:26:27 executing program 4:

20:26:27 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

[ 1512.592186][ T8450] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[ 1512.652102][T11774] usb 3-1: Using ep0 maxpacket: 16
[ 1512.701976][ T8851] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[ 1512.722172][ T9944] usb 6-1: Using ep0 maxpacket: 16
[ 1512.782108][T11774] usb 3-1: config 0 has an invalid interface number: 128 but max is 0
[ 1512.790441][T11774] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1512.800673][T11774] usb 3-1: config 0 has no interface number 0
[ 1512.806973][T11774] usb 3-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1512.819356][T11774] usb 3-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1512.828574][T11774] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1512.838377][T11774] usb 3-1: config 0 descriptor??
[ 1512.851945][ T8450] usb 2-1: Using ep0 maxpacket: 16
[ 1512.872145][ T9944] usb 6-1: config 0 has an invalid interface number: 128 but max is 0
[ 1512.880433][ T9944] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1512.891142][ T9944] usb 6-1: config 0 has no interface number 0
[ 1512.897436][ T9944] usb 6-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1512.908648][ T9944] usb 6-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1512.917903][ T9944] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1512.932231][ T9944] usb 6-1: config 0 descriptor??
[ 1512.972318][ T8450] usb 2-1: config 0 has an invalid interface number: 128 but max is 0
[ 1512.980565][ T8450] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1512.990788][ T8450] usb 2-1: config 0 has no interface number 0
[ 1512.997041][ T8450] usb 2-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1513.008264][ T8450] usb 2-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1513.017460][ T8450] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1513.026884][ T8851] usb 4-1: Using ep0 maxpacket: 16
[ 1513.032925][ T8450] usb 2-1: config 0 descriptor??
[ 1513.102075][T11774] radio-si470x 3-1:0.128: DeviceID=0xb155 ChipID=0xb681
[ 1513.162111][ T8851] usb 4-1: config 0 has an invalid interface number: 128 but max is 0
[ 1513.170526][ T8851] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1513.180910][ T8851] usb 4-1: config 0 has no interface number 0
[ 1513.187125][ T8851] usb 4-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1513.192125][ T9944] radio-si470x 6-1:0.128: DeviceID=0xb855 ChipID=0xb681
[ 1513.198364][ T8851] usb 4-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1513.214341][ T8851] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1513.224975][ T8851] usb 4-1: config 0 descriptor??
[ 1513.293198][ T8450] radio-si470x 2-1:0.128: DeviceID=0x63f7 ChipID=0xba81
[ 1513.312088][T11774] radio-si470x 3-1:0.128: software version 177, hardware version 85
[ 1513.412089][ T9944] radio-si470x 6-1:0.128: software version 184, hardware version 85
[ 1513.482010][ T8851] radio-si470x 4-1:0.128: DeviceID=0x6cf7 ChipID=0xba81
[ 1513.512041][ T8450] radio-si470x 2-1:0.128: software version 99, hardware version 247
[ 1513.533910][T11774] radio-si470x 3-1:0.128: submitting int urb failed (-90)
[ 1513.632001][ T9944] radio-si470x 6-1:0.128: submitting int urb failed (-90)
[ 1513.702035][ T8851] radio-si470x 4-1:0.128: software version 108, hardware version 247
[ 1513.732195][ T8450] radio-si470x 2-1:0.128: submitting int urb failed (-90)
[ 1513.862009][ T9944] radio-si470x 6-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1513.870964][ T9944] radio-si470x: probe of 6-1:0.128 failed with error -22
[ 1513.881410][ T9944] usb 6-1: USB disconnect, device number 14
[ 1513.922282][ T8851] radio-si470x 4-1:0.128: submitting int urb failed (-90)
[ 1513.962059][T11774] radio-si470x 3-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1513.971027][T11774] radio-si470x: probe of 3-1:0.128 failed with error -22
[ 1513.980877][T11774] usb 3-1: USB disconnect, device number 64
[ 1514.172091][ T8450] radio-si470x 2-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1514.181008][ T8450] radio-si470x: probe of 2-1:0.128 failed with error -22
[ 1514.197220][ T8450] usb 2-1: USB disconnect, device number 2
20:26:29 executing program 2:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f00000001c0)={0x7, 0x100})
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000200)={0xfffffffffffffd55, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x23, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r4=>0xffffffffffffffff})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
close(r5)
ioctl$EVIOCGABS3F(r4, 0x8018457f, &(0x7f00000005c0)=""/181)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

20:26:29 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

[ 1514.656606][ T2609] input: syz0 as /devices/virtual/input/input1456
[ 1514.672228][ T2609] input: syz0 as /devices/virtual/input/input1457
[ 1514.781877][ T8450] usb 3-1: new high-speed USB device number 65 using dummy_hcd
[ 1514.921819][T10207] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[ 1514.932021][ T8851] radio-si470x 4-1:0.128: si470x_set_report: usb_control_msg returned -110
[ 1514.941160][ T8851] radio-si470x: probe of 4-1:0.128 failed with error -22
[ 1515.021784][ T8450] usb 3-1: Using ep0 maxpacket: 16
[ 1515.142163][ T8450] usb 3-1: config 0 has an invalid interface number: 128 but max is 0
[ 1515.150468][ T8450] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1515.160736][ T8450] usb 3-1: config 0 has no interface number 0
[ 1515.166965][ T8450] usb 3-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1515.178152][ T8450] usb 3-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1515.187383][ T8450] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1515.196415][T10207] usb 2-1: Using ep0 maxpacket: 16
[ 1515.202811][ T8450] usb 3-1: config 0 descriptor??
[ 1515.312003][T10207] usb 2-1: config 0 has an invalid interface number: 128 but max is 0
[ 1515.320345][T10207] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1515.330649][T10207] usb 2-1: config 0 has no interface number 0
[ 1515.336881][T10207] usb 2-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1515.348103][T10207] usb 2-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1515.357223][T10207] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1515.366776][T10207] usb 2-1: config 0 descriptor??
[ 1515.462112][ T8450] radio-si470x 3-1:0.128: DeviceID=0x66f7 ChipID=0xba81
[ 1515.632034][T10207] radio-si470x 2-1:0.128: DeviceID=0x65f7 ChipID=0xba81
20:26:30 executing program 4:

20:26:30 executing program 5:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x0, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x20000, 0x0)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f00000001c0)={0x7, 0x100})
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000200)={0xfffffffffffffd55, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x23, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r4 = socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r5=>0xffffffffffffffff})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
close(r6)
splice(r5, 0x0, r6, 0x0, 0x10003, 0x0)
ioctl$EVIOCGABS3F(r5, 0x8018457f, &(0x7f00000005c0)=""/181)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @multicast2}}}, &(0x7f0000000180)=0x90)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e20, 0xaa, @empty, 0x8000}, {0xa, 0x4e24, 0x7fffffff, @dev={0xfe, 0x80, [], 0xf}, 0x6}, 0x8000, [0x8, 0x1, 0x84, 0xf5, 0x7, 0x5, 0x0, 0x3]}, 0x5c)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

[ 1515.683911][ T8450] radio-si470x 3-1:0.128: software version 102, hardware version 247
[ 1515.712834][T10207] radio-si470x 2-1:0.128: si470x_get_report: usb_control_msg returned -71
[ 1515.721428][T10207] radio-si470x 2-1:0.128: si470x_get_scratch: si470x_get_report returned -71
[ 1515.730919][T10207] radio-si470x: probe of 2-1:0.128 failed with error -5
[ 1515.772789][T10207] usb 2-1: USB disconnect, device number 3
20:26:30 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

20:26:30 executing program 1:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000000)=ANY=[@ANYPTR], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x0, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000100)={0x400000100002f, {0x0, 0x0, 0xdeba}})
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000002c0)={{}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r2, 0x5501)
pipe(&(0x7f0000001300)={<r3=>0xffffffffffffffff})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
splice(r3, 0x0, r4, 0x0, 0x10003, 0x0)
write$tun(r3, &(0x7f00000005c0)={@void, @val={0x1, 0x4, 0x3, 0x5, 0x1, 0x7}, @ipx={0xffff, 0xd3, 0xd7, 0x1, {@current, @broadcast, 0xffff}, {@random=0x5, @random="080e939af653", 0xfff}, "9a96a7ad3e7a64e868a4c636b8667570a9570be5ebd426154005277cf7d53e79ff17c393d785fe08b572c63420433b6165acb4619d9c99db7dc0296d4695ef471901c52fca1a56cdf868a1b4b5b0adb3196bb88f8f131a99f23c1a824d5fa9211044c61e13135638b1df398eb2069386d177d3ee4655c858e2611e685c72c0b335eaa9ee13141f0925d611eba49a3383dc65f65675406c1c7aef4452180ccee3f9531688ea4e15071141ceea17fdf7481beb3aa6ac"}}, 0xdd)
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r5, 0x401c5504, &(0x7f0000000100)={0x400000100002f, {0x0, 0x0, 0xdeba}})
ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f00000002c0)={{}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r5, 0x5501)
syz_usb_control_io(r1, 0x0, &(0x7f0000000500)={0xac, &(0x7f0000000140)=ANY=[@ANYRES16, @ANYBLOB="685fdccea4df765fadb10a54043601aafd393de0609b3e1849f97f9df1829ae72d9ffb6742edd52219c7c2f88df5867da5c50f3c5ef470fe4b2f7fa544356e53711cb3233675b051804975c6ce04cdd24ba3ee50c910a1120c72a4dd8454f9a6cdfce2ae1b6d9cb62b288f5a3fb06c68f915f578e47207", @ANYRES32, @ANYRESDEC=0x0, @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

20:26:30 executing program 3:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)=ANY=[@ANYBLOB="120100001e95cd10cf12517108480000000109021b0001f0ffffff0804800001030000000705840b0000000000"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, r4}}, 0x48)
write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r4}}, 0x10)
write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r4, 0x1c, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90)

20:26:30 executing program 4:

[ 1515.868325][ T8851] usb 4-1: USB disconnect, device number 69
[ 1515.912551][ T8450] radio-si470x 3-1:0.128: submitting int urb failed (-90)
20:26:31 executing program 4:

20:26:31 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

20:26:31 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

20:26:31 executing program 4:

[ 1516.035728][T11774] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[ 1516.301959][T11774] usb 6-1: Using ep0 maxpacket: 16
[ 1516.322008][ T8851] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[ 1516.342232][T10207] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[ 1516.352265][ T8450] radio-si470x 3-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1516.361119][ T8450] radio-si470x: probe of 3-1:0.128 failed with error -22
[ 1516.374750][ T8450] usb 3-1: USB disconnect, device number 65
[ 1516.452031][T11774] usb 6-1: config 0 has an invalid interface number: 128 but max is 0
[ 1516.460396][T11774] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1516.470694][T11774] usb 6-1: config 0 has no interface number 0
[ 1516.476953][T11774] usb 6-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1516.488261][T11774] usb 6-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1516.497510][T11774] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1516.509127][T11774] usb 6-1: config 0 descriptor??
[ 1516.562133][ T8851] usb 4-1: Using ep0 maxpacket: 16
[ 1516.582054][T10207] usb 2-1: Using ep0 maxpacket: 16
[ 1516.682104][ T8851] usb 4-1: config 240 has an invalid interface descriptor of length 8, skipping
[ 1516.691325][ T8851] usb 4-1: config 240 has an invalid descriptor of length 0, skipping remainder of the config
[ 1516.701932][ T8851] usb 4-1: config 240 has 0 interfaces, different from the descriptor's value: 1
[ 1516.711124][ T8851] usb 4-1: New USB device found, idVendor=12cf, idProduct=7151, bcdDevice=48.08
[ 1516.720350][ T8851] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1516.729036][T10207] usb 2-1: config 0 has an invalid interface number: 128 but max is 0
[ 1516.737364][T10207] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1516.747671][T10207] usb 2-1: config 0 has no interface number 0
[ 1516.753987][T10207] usb 2-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1516.765156][T10207] usb 2-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1516.774392][T10207] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
20:26:31 executing program 2:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f00000001c0)={0x7, 0x100})
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000200)={0xfffffffffffffd55, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x23, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r4=>0xffffffffffffffff})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
close(r5)
ioctl$EVIOCGABS3F(r4, 0x8018457f, &(0x7f00000005c0)=""/181)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

20:26:31 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

20:26:31 executing program 4:

[ 1516.784246][ T8851] usb 4-1: rejected 1 configuration due to insufficient available bus power
[ 1516.792053][T11774] radio-si470x 6-1:0.128: DeviceID=0xb255 ChipID=0xb681
[ 1516.793136][ T8851] usb 4-1: no configuration chosen from 1 choice
[ 1516.808333][T10207] usb 2-1: config 0 descriptor??
[ 1517.012294][T11774] radio-si470x 6-1:0.128: software version 178, hardware version 85
[ 1517.062009][T10207] radio-si470x 2-1:0.128: DeviceID=0x63f7 ChipID=0xba81
[ 1517.191965][ T8851] usb 3-1: new high-speed USB device number 66 using dummy_hcd
[ 1517.242168][T11774] radio-si470x 6-1:0.128: submitting int urb failed (-90)
[ 1517.273030][ T2627] input: syz0 as /devices/virtual/input/input1458
[ 1517.300300][ T2627] input: syz0 as /devices/virtual/input/input1459
[ 1517.431826][ T8851] usb 3-1: Using ep0 maxpacket: 16
[ 1517.462063][T11774] radio-si470x 6-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1517.471116][T11774] radio-si470x: probe of 6-1:0.128 failed with error -22
[ 1517.486217][T11774] usb 6-1: USB disconnect, device number 15
[ 1517.552112][ T8851] usb 3-1: config 0 has an invalid interface number: 128 but max is 0
[ 1517.560520][ T8851] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1517.570913][ T8851] usb 3-1: config 0 has no interface number 0
[ 1517.577112][ T8851] usb 3-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1517.588312][ T8851] usb 3-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1517.597470][ T8851] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1517.607025][ T8851] usb 3-1: config 0 descriptor??
[ 1517.622288][T10207] radio-si470x 2-1:0.128: si470x_get_report: usb_control_msg returned -110
[ 1517.631125][T10207] radio-si470x 2-1:0.128: si470x_get_scratch: si470x_get_report returned -110
[ 1517.640633][T10207] radio-si470x: probe of 2-1:0.128 failed with error -5
[ 1517.871915][ T8851] radio-si470x 3-1:0.128: DeviceID=0x6cf7 ChipID=0xba81
20:26:33 executing program 5:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x0, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x20000, 0x0)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f00000001c0)={0x7, 0x100})
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000200)={0xfffffffffffffd55, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x23, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "3a3c5a98a0b88f20dab28f43fd604a180bf5c40802c641ed238502ea05de14099c5dfa19c61d2715c179a8913d43848ebb6058f0ae47cea480ef4ae3d1bd7724bc870bcd80db1746d211f5f7dde4bd2f33e5a634f6174cf4dab428a4bdd5141e1cdfd7535edf28bbf44e35cb9180ea022e265108d6db9ab408e8b86c601dc9baf360878fefb4286f933f037b53d6c51bf10ba2a82424f4cf64d7a43f8235463a4e3651ce704859e92aa583ee3327735693aa9147f8b908c3d665302cff8ef37ebcb56efae4f83bc51fa46f6295b1622a46895dded87879de64c990feb0f52a533e44a8d7c9ef25ea0f8e90ff09ab06f93e605e04f9f5ac3102bcefe10a31"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r4 = socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r5=>0xffffffffffffffff})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
close(r6)
splice(r5, 0x0, r6, 0x0, 0x10003, 0x0)
ioctl$EVIOCGABS3F(r5, 0x8018457f, &(0x7f00000005c0)=""/181)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @multicast2}}}, &(0x7f0000000180)=0x90)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e20, 0xaa, @empty, 0x8000}, {0xa, 0x4e24, 0x7fffffff, @dev={0xfe, 0x80, [], 0xf}, 0x6}, 0x8000, [0x8, 0x1, 0x84, 0xf5, 0x7, 0x5, 0x0, 0x3]}, 0x5c)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

20:26:33 executing program 4:

[ 1518.070611][T11774] usb 4-1: USB disconnect, device number 70
[ 1518.092129][ T8851] radio-si470x 3-1:0.128: software version 108, hardware version 247
[ 1518.281808][T10207] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[ 1518.312139][ T8851] radio-si470x 3-1:0.128: submitting int urb failed (-90)
[ 1518.521840][T10207] usb 6-1: Using ep0 maxpacket: 16
[ 1518.642096][T10207] usb 6-1: config 0 has an invalid interface number: 128 but max is 0
[ 1518.650354][T10207] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1518.660646][T10207] usb 6-1: config 0 has no interface number 0
[ 1518.666830][T10207] usb 6-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1518.678101][T10207] usb 6-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1518.687299][T10207] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1518.697379][T10207] usb 6-1: config 0 descriptor??
[ 1518.752385][ T8851] radio-si470x 3-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1518.761481][ T8851] radio-si470x: probe of 3-1:0.128 failed with error -22
[ 1518.774675][ T8851] usb 3-1: USB disconnect, device number 66
[ 1518.962005][T10207] radio-si470x 6-1:0.128: DeviceID=0x6ef7 ChipID=0xba81
20:26:34 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

20:26:34 executing program 4:

20:26:34 executing program 3:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000000)=ANY=[@ANYBLOB="67c886474366f4c6ac70ee397bfa92000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

[ 1519.028872][T11774] usb 2-1: USB disconnect, device number 4
20:26:34 executing program 1:
lsetxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.ima\x00', &(0x7f00000000c0)=@md5={0x1, "2d6a0952f61ef05f5a5feae933585a26"}, 0x11, 0x3)
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080)={0x0, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f00000009c0)={{0x3, 0x200, 0x1, 0x9, 0x5, 0x1}, 0x74, [0x5, 0xfffffff8, 0x5, 0x0, 0x1, 0x5, 0x7fff, 0x100, 0x1ff, 0x7c0, 0x7, 0x3ff, 0x9, 0x6, 0x3, 0x7, 0x0, 0x0, 0x5, 0xfffffffd, 0x0, 0x8000, 0x1, 0x3, 0x200, 0x9, 0x1ba0, 0x1d3, 0x4, 0x80000001, 0x1, 0x800, 0x302, 0xffffffff, 0xf3cc, 0x7, 0x2, 0x7fffffff, 0x4, 0x0, 0x66, 0x7, 0x4, 0x8, 0x830, 0x1f, 0x3, 0xfff, 0x7ff, 0x3, 0x5, 0xb227, 0xffff, 0x8, 0x7f, 0x9, 0x40, 0x10000, 0x4fa6, 0x6, 0xbac, 0xef, 0x8, 0x0, 0x10000, 0x7, 0xc9, 0x3, 0x101, 0x3, 0x9, 0x3ff, 0x3, 0xffffff81, 0x2, 0x6, 0x6, 0x0, 0x4, 0x5, 0x5, 0xd9a5, 0x265, 0x40, 0x6, 0x2, 0x1f, 0x7, 0x8, 0x0, 0x1, 0x2, 0x9, 0x5, 0x2, 0x7, 0xfffffc00, 0x4d, 0x4, 0x4, 0xfffffff8, 0x7, 0x9, 0x4, 0x2, 0xc0000000, 0x8, 0x9, 0x6cd, 0xfffff643, 0x9, 0x10001, 0x8000, 0x4, 0xfe3, 0x3ff, 0x8, 0x2, 0x0, 0xff, 0x3f, 0x0, 0x40, 0xd0c000, 0xd7, 0x10001, 0x100020, 0x3, 0x6, 0x1f, 0x0, 0x5, 0x6, 0x9, 0x1, 0x9, 0xc00, 0x3, 0x2, 0x0, 0xfff, 0x7fffffff, 0x1f95a596, 0x101, 0x2, 0x3, 0x100, 0xfff, 0x66, 0x7, 0x2, 0x1ff, 0x2, 0x1, 0x2, 0x1, 0x4, 0xff, 0x9, 0x6, 0xfffffffe, 0x80000001, 0x6, 0x400, 0x1bb, 0x9, 0x80000000, 0x4, 0x6, 0x0, 0x5, 0x0, 0x3, 0x400, 0x3, 0x5, 0x292, 0x8906, 0xf02c, 0xffffff07, 0x8001, 0xffff8000, 0x4, 0x5, 0x0, 0x9, 0x1, 0x3, 0x3, 0x0, 0xc, 0x6b07, 0x4, 0x8, 0x3ff, 0x7fff, 0xffffffc0, 0x2419, 0x0, 0xffff7fff, 0x1000, 0x7, 0x1ffe000, 0x6, 0x68, 0x3, 0x1, 0xc26, 0x6, 0x400, 0x2, 0x8, 0x4, 0xd6a, 0x2, 0x2, 0xffffffff, 0x2, 0x1f, 0x100, 0x9, 0x0, 0x4, 0xffffff80, 0x3, 0x100, 0x8, 0x5, 0x0, 0x80, 0x8, 0x1, 0x2, 0xf8, 0x8, 0x3640, 0x7, 0x3, 0x9d, 0x1, 0xe7, 0x23, 0x7, 0x0, 0x8, 0x4, 0x7, 0x400, 0x2, 0x6, 0x9, 0x4, 0x7, 0xfffffe00, 0x6, 0x1f, 0x1f, 0x98, 0x0, 0x0, 0x6, 0x6, 0xffffffe0, 0x0, 0x21ab, 0x8, 0x2, 0x8000, 0x3, 0x3ff, 0x5, 0x3b, 0xfffffffd, 0x6, 0xfffffe01, 0x5, 0xfffffffc, 0x7, 0x1, 0x8000, 0x7, 0x2, 0x2a1, 0x9, 0x80, 0x3, 0x6, 0x7f, 0x1, 0x0, 0x1ff, 0x2825ec73, 0x6, 0x1, 0x1, 0x5, 0x6, 0x101, 0xfd5, 0x7, 0x2f, 0xd659, 0x8, 0x8, 0x2, 0xa97, 0x0, 0x7, 0x3, 0xfffffff9, 0x0, 0x3, 0x7ff, 0x86a, 0x9, 0x1, 0xffff4955, 0xffffffff, 0x9, 0x10000, 0x2, 0x2, 0x1, 0x0, 0xec, 0x80000000, 0x80, 0x2, 0x4, 0x50, 0x3, 0x20, 0x1a, 0x7, 0x1000, 0x2578, 0x3, 0xffffff27, 0x2, 0x101, 0x4, 0x2, 0xfffffff9, 0x5, 0xcd, 0xfff, 0x10000, 0x60, 0x40, 0x9, 0x7fffffff, 0x8000, 0x7fff, 0x4, 0x400, 0x8, 0x80000000, 0x90800000, 0x6, 0xf0c, 0x0, 0x9, 0x4, 0x0, 0x9, 0x1, 0xa621, 0x400, 0xc3c, 0xdbfd, 0xffff7fff, 0x0, 0x4, 0x3, 0x7, 0xbd20dd8c, 0xe8, 0xfffff499, 0x3, 0x8, 0x5, 0x6, 0x101, 0x7, 0x40, 0x9, 0x6, 0x8, 0x6, 0x57, 0x80, 0x10001, 0x6, 0x9, 0x9, 0x400, 0x3, 0x5, 0x5, 0x100, 0xbe9c, 0x7, 0x1, 0x9, 0x3, 0x8000, 0xa7, 0x5, 0x7fffffff, 0x4, 0x6, 0x15, 0xe1caefd, 0x2, 0x40, 0x5568, 0x9, 0x200, 0xffff, 0xfffff6b5, 0xcad, 0x800, 0x7, 0x0, 0x0, 0x0, 0xa3a, 0x2, 0xa24, 0x9, 0x1, 0x9, 0x80000000, 0x200, 0x6, 0x3ff, 0x0, 0x20, 0x824, 0x9, 0x9, 0x1971, 0xd225, 0x7, 0x1ff, 0x7d, 0x4, 0x7, 0x2, 0x26e, 0x6, 0xfffffff9, 0x6, 0x1000, 0x3, 0x5, 0x9, 0x50000, 0x80000000, 0x63, 0x4, 0x1, 0x6, 0xffffd394, 0xfffffffa, 0x1, 0x1, 0x14, 0xe1, 0x6, 0xfffffff9, 0x80, 0x5, 0x6, 0xecd, 0x2, 0x0, 0x0, 0x3, 0x3, 0x3, 0xfffffbff, 0x10001, 0x6, 0x8000, 0x200, 0x5, 0x7fff, 0x5, 0x0, 0x7, 0x2, 0x20, 0x2, 0x99e, 0xc80e, 0x6, 0xfffffffd, 0xffffffff, 0xbc, 0x8001, 0xb09c, 0x7, 0xffffffff, 0x90, 0x7, 0x80, 0x200, 0x10000, 0xf0, 0x0, 0xfff, 0x3f, 0x7fffffff, 0x0, 0x7, 0x10000, 0x1, 0x3, 0xfffffffd, 0x80000000, 0x4, 0x3, 0xffffffe9, 0x10001, 0xfffffffd, 0x0, 0x5, 0xf84, 0x3, 0x703, 0x6, 0x10000, 0x4, 0x3, 0x7fff, 0x1f, 0x10001, 0xddf4, 0x7ff, 0x89, 0x51, 0x1000, 0x7, 0x1, 0x1, 0x8, 0x8001, 0x1, 0x4, 0x401, 0x14, 0xff, 0xff, 0x2, 0x5, 0xfffffffd, 0x80000000, 0x5, 0x2, 0x7, 0xfff, 0x7fffffff, 0x200, 0x100, 0x82f, 0x9, 0x1, 0x0, 0x9, 0xfff, 0x9, 0xa7, 0x200, 0x6, 0x10000, 0x7268, 0x80000001, 0x0, 0x4, 0x8, 0x4f, 0x1, 0x7fff, 0x200, 0xb6, 0x8, 0xfffffffa, 0x81, 0xae2d, 0x1, 0x3, 0x7fff, 0x5a4e, 0x101, 0x200, 0x0, 0xffffff0a, 0xfffffe00, 0x1, 0x20, 0x70000, 0x8be, 0x0, 0x5, 0x1, 0x9, 0x20, 0xfffffffc, 0x20, 0x400, 0x9, 0x3, 0x100, 0xaa, 0x0, 0x5, 0x1000, 0x4, 0x7f, 0x5, 0x8, 0x8, 0x6, 0x4, 0x9, 0x10000, 0xffc0000, 0xb9df, 0x4, 0x6, 0x6, 0x5, 0x2, 0x2, 0xff, 0x2, 0x7, 0x3f, 0x8, 0x0, 0x6, 0xba, 0x1000, 0x100, 0x200, 0x43ad, 0x3ff, 0x3ff, 0x5, 0x8, 0x10001, 0xb6c7, 0x800, 0x4, 0x1, 0x2, 0x7, 0x81, 0x2cb, 0x3f, 0x2, 0x2, 0x7, 0x483, 0x3b, 0xffffffff, 0x19, 0xfffffffe, 0x194, 0x5, 0x406, 0x4, 0x7, 0x80000001, 0x0, 0x401, 0x4, 0x4, 0xffffff00, 0x7, 0x0, 0x200, 0x3, 0x7, 0x6, 0x401, 0x1f, 0x7, 0xffffffff, 0x9, 0x1, 0x1, 0x101, 0x7, 0x7, 0x2, 0x33db, 0x0, 0x800, 0x50a207c7, 0x0, 0x2a, 0x1f, 0x8, 0x7fff, 0x9, 0x5, 0x0, 0x6, 0x0, 0x1, 0x1, 0x7f, 0x80000000, 0x3, 0x8, 0xee7, 0x10000, 0x6, 0x8, 0x8, 0x80000000, 0x1e, 0x5, 0x9, 0x9, 0x5, 0x52d, 0x9, 0xb5, 0x10000, 0xfffffffd, 0x81, 0x1, 0xfffffffc, 0x2, 0x3ff, 0x200, 0xd178, 0x7fffffff, 0x12e, 0x100, 0x5, 0x24, 0x2, 0x40, 0x5, 0x87c, 0x2, 0xcb6, 0x6, 0x400, 0x0, 0x3, 0x9, 0x81, 0xb13d, 0x0, 0x6, 0x1, 0xe975, 0xe88, 0xf700, 0x5, 0x101, 0x7fffffff, 0x6, 0x7, 0x3, 0x0, 0x3, 0x472, 0x1000, 0x1, 0x2, 0xec, 0x9, 0x40, 0x9, 0x2, 0xaf, 0x20000000, 0x0, 0x0, 0xffffff18, 0x6, 0x7f, 0x0, 0xcfb1, 0x4, 0x9, 0x2, 0xfffffff7, 0x80000001, 0x200, 0x0, 0xce9, 0x5fd, 0x5, 0x40, 0x40, 0x38, 0x8, 0x0, 0x3f, 0x7fff, 0x7f, 0x8, 0x21, 0x4, 0x5, 0x800, 0x1000, 0x4, 0xff, 0x9, 0x8000, 0x10000, 0x800, 0x40, 0x2, 0x1ff, 0x0, 0x80000001, 0x5, 0x40, 0x366251b1, 0x0, 0x5, 0x10001, 0x2, 0xfffffffe, 0xfc000000, 0x401, 0x2, 0x8, 0x3, 0x4, 0xfffffffb, 0xff, 0x10000, 0x40, 0x2, 0x400, 0x3ff, 0x9, 0x800, 0x8b, 0x3ff, 0x8, 0xfffffeff, 0x3f, 0x1, 0x9, 0x1, 0xfff, 0x8, 0x1, 0x3, 0x1, 0x1, 0x6, 0x1, 0x0, 0x0, 0x9, 0x6, 0xdc, 0x9, 0xce42, 0x4, 0x1, 0x7c25, 0x9, 0x5, 0x100, 0x1, 0x6, 0x3ff, 0x2, 0x2, 0x20, 0x92, 0xff, 0x401, 0x79, 0xc9e, 0x10001, 0x9, 0xfffffeff, 0x1, 0x9, 0x0, 0x9, 0x5, 0x0, 0x9, 0x81, 0x20004000, 0x80000000, 0x9, 0x9, 0x5, 0x7, 0x80000001, 0x7, 0x80000000, 0x9, 0x0, 0x1, 0x0, 0x1, 0x383, 0x8000, 0xffff7491, 0x7fffffff, 0x5, 0x8001, 0x2, 0x1000, 0x8, 0x5, 0x1c8, 0x200, 0x100, 0x6, 0x20, 0x4, 0x0, 0xb5, 0x1f, 0x9, 0xac1, 0xffff, 0x0, 0x80000000, 0x7, 0xffffffff, 0x1, 0x80000001, 0x3, 0x1f, 0x3, 0xffffffff, 0x7, 0x2, 0x1, 0x0, 0x3, 0x7, 0x8, 0x7, 0x7ff, 0x1, 0x80000000, 0x6, 0x20, 0x7, 0x3, 0x80000000, 0x9, 0x101, 0x0, 0x6316, 0x2, 0x61, 0x0, 0x7bb, 0x8000, 0x7fff, 0xee, 0x6, 0x6, 0x6b16, 0x10000, 0x1, 0x5, 0x3, 0x2, 0x8, 0x0, 0x6, 0x8, 0x82e, 0xc73, 0xd0, 0xdc3, 0x6, 0x4e6d, 0x7ff, 0x81, 0x7, 0x40, 0x7fff, 0x3f, 0xe4d7, 0x0, 0x2, 0x0, 0xe41, 0x7f, 0x2, 0xffffffff, 0x73fb, 0x4, 0x10001, 0x2, 0x85, 0x1, 0x0, 0x4, 0x20, 0x100, 0x2, 0x7, 0x8, 0xfffffffe, 0x7f, 0x2, 0x0, 0xffffff01, 0x0, 0x3]})
syz_usb_control_io(r0, 0x0, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f00000001c0)='nbd\x00')
r1 = msgget(0x3, 0x222)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000000100)={0x400000100002f, {0x0, 0x0, 0xdeba}})
ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f00000002c0)={{}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r4, 0x5501)
r5 = fcntl$dupfd(r4, 0x406, 0xffffffffffffffff)
ioctl$MON_IOCG_STATS(r5, 0x80089203, &(0x7f0000000200))
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$EVIOCGABS0(r3, 0x80184540, &(0x7f0000000100)=""/182)
msgctl$IPC_RMID(r1, 0x0)

20:26:34 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

20:26:34 executing program 4:

20:26:34 executing program 4:

[ 1519.192460][T10207] radio-si470x 6-1:0.128: software version 110, hardware version 247
20:26:34 executing program 2:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f00000001c0)={0x7, 0x100})
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000200)={0xfffffffffffffd55, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x23, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r4=>0xffffffffffffffff})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
close(r5)
ioctl$EVIOCGABS3F(r4, 0x8018457f, &(0x7f00000005c0)=""/181)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

20:26:34 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

20:26:34 executing program 4:

[ 1519.353642][ T9944] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[ 1519.422128][T10207] radio-si470x 6-1:0.128: submitting int urb failed (-90)
[ 1519.481963][T11774] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[ 1519.591948][ T9944] usb 4-1: Using ep0 maxpacket: 16
[ 1519.632201][T10207] radio-si470x 6-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1519.641218][T10207] radio-si470x: probe of 6-1:0.128 failed with error -22
[ 1519.650670][ T8851] usb 3-1: new high-speed USB device number 67 using dummy_hcd
[ 1519.659230][T10207] usb 6-1: USB disconnect, device number 16
[ 1519.712177][ T9944] usb 4-1: config 0 has an invalid interface number: 128 but max is 0
[ 1519.720568][ T9944] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1519.730886][ T9944] usb 4-1: config 0 has no interface number 0
[ 1519.737097][ T9944] usb 4-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1519.748292][ T9944] usb 4-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1519.757470][ T9944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1519.766330][T11774] usb 2-1: Using ep0 maxpacket: 16
[ 1519.772430][ T9944] usb 4-1: config 0 descriptor??
[ 1519.882097][T11774] usb 2-1: config 0 has an invalid interface number: 128 but max is 0
[ 1519.890515][T11774] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1519.900828][T11774] usb 2-1: config 0 has no interface number 0
[ 1519.901901][ T8851] usb 3-1: Using ep0 maxpacket: 16
[ 1519.907075][T11774] usb 2-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1519.907175][T11774] usb 2-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1519.932599][T11774] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1519.942102][T11774] usb 2-1: config 0 descriptor??
[ 1520.032091][ T9944] radio-si470x 4-1:0.128: DeviceID=0xb555 ChipID=0xb681
[ 1520.042325][ T8851] usb 3-1: config 0 has an invalid interface number: 128 but max is 0
[ 1520.050703][ T8851] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1520.061104][ T8851] usb 3-1: config 0 has no interface number 0
[ 1520.067318][ T8851] usb 3-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1520.078515][ T8851] usb 3-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1520.087691][ T8851] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1520.097129][ T8851] usb 3-1: config 0 descriptor??
20:26:35 executing program 5:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x0, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x20000, 0x0)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f00000001c0)={0x7, 0x100})
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000200)={0xfffffffffffffd55, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x23, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r4 = socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r5=>0xffffffffffffffff})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
close(r6)
splice(r5, 0x0, r6, 0x0, 0x10003, 0x0)
ioctl$EVIOCGABS3F(r5, 0x8018457f, &(0x7f00000005c0)=""/181)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @multicast2}}}, &(0x7f0000000180)=0x90)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e20, 0xaa, @empty, 0x8000}, {0xa, 0x4e24, 0x7fffffff, @dev={0xfe, 0x80, [], 0xf}, 0x6}, 0x8000, [0x8, 0x1, 0x84, 0xf5, 0x7, 0x5, 0x0, 0x3]}, 0x5c)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

20:26:35 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

20:26:35 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, 0x0)
pipe2(&(0x7f0000000000), 0x0)
syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x2b4, 0x0)
connect$unix(r1, &(0x7f00002ffff6)=@file={0x0, './file0\x00'}, 0xa)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r2, 0x0, r2)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000006b00)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x8000)
r3 = socket(0x100000000011, 0x2, 0x0)
bind(r3, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, <r4=>0x0}, &(0x7f00000001c0)=0x14)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000400)={0xa, 0x4e24, 0x0, @dev, 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB], 0x4}}], 0x2, 0x0)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000180)={@mcast2, @mcast1, @empty, 0x3, 0x0, 0x6, 0x400, 0x81, 0x100000, r4})
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000140)={'team0\x00', r4})
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@remote}}, {{@in=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000280)=0xe8)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r5, 0x0, r5)
r6 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r6, &(0x7f0000006b00)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x8000)
r7 = socket(0x100000000011, 0x2, 0x0)
bind(r7, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r7, &(0x7f0000000040)={0x11, 0x0, <r8=>0x0}, &(0x7f00000001c0)=0x14)
sendmmsg$inet6(r6, 0x0, 0x0, 0x0)
ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000180)={@mcast2, @mcast1, @empty, 0x3, 0x0, 0x6, 0x400, 0x81, 0x100000, r8})
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r9, 0x0, r9)
r10 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r10, &(0x7f0000006b00), 0x0, 0x8000)
r11 = socket(0x100000000011, 0x2, 0x0)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r11, &(0x7f0000000040)={0x11, 0x0, <r12=>0x0}, &(0x7f00000001c0)=0x14)
sendmmsg$inet6(r10, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000400)={0xa, 0x4e24, 0x0, @dev, 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8800000000000000000000000000019a0c11687098e405c9110800aafed19336872201013533cf17247cd24acebde84ddf568db0a126039e151fb1d7", @ANYRES32=r12, @ANYBLOB], 0x51}}], 0x2, 0x0)
ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000000180)={@mcast2, @mcast1, @empty, 0x3, 0x0, 0x6, 0x400, 0x81, 0x0, r12})
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000002c0)={0x0, @rand_addr, @dev}, &(0x7f0000000300)=0xc)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r13, 0x0, r13)
r14 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r14, &(0x7f0000006b00)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x8000)
r15 = socket(0x100000000011, 0x2, 0x0)
bind(r15, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r15, &(0x7f0000000040)={0x11, 0x0, <r16=>0x0}, &(0x7f00000001c0)=0x14)
sendmmsg$inet6(r14, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000400)={0xa, 0x4e24, 0x0, @dev, 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8800000000000000000000000000019a0c11687098e405c9110800aafed19336872201013533cf17247cd24acebde84ddf568d", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00'], 0x4c}}], 0x2, 0x0)
ioctl$sock_inet6_SIOCADDRT(r13, 0x890b, &(0x7f0000000180)={@mcast2, @mcast1, @empty, 0x3, 0x0, 0x6, 0x400, 0x81, 0x100000})
r17 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, r17)
r18 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r18, &(0x7f0000006b00)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x8000)
r19 = socket(0x100000000011, 0x2, 0x0)
bind(r19, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r19, 0x0, &(0x7f00000001c0))
sendmmsg$inet6(r18, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000400)={0xa, 0x4e24, 0x0, @dev, 0x4}, 0x1c, 0x0}}], 0x2, 0x0)
ioctl$sock_inet6_SIOCADDRT(r17, 0x890b, &(0x7f0000000180)={@mcast2, @mcast1, @empty, 0x3, 0x0, 0x6, 0x400, 0x81, 0x100000})
r20 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r20, 0x0, r20)
r21 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r21, &(0x7f0000006b00)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0)
r22 = socket(0x100000000011, 0x2, 0x0)
bind(r22, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r22, &(0x7f0000000040)={0x11, 0x0, <r23=>0x0}, &(0x7f00000001c0)=0x14)
sendmmsg$inet6(r21, &(0x7f0000000980)=[{{&(0x7f0000000400)={0xa, 0x4e24, 0x0, @dev, 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8800000000000000000000000000019a0c11687098e405c9110800aafed19336872201013533cf17247cd24acebde84ddf568db0a126039e151fb1d7", @ANYRES32=r23, @ANYBLOB='\x00\x00'], 0x53}}], 0x1, 0x0)
ioctl$sock_inet6_SIOCADDRT(r20, 0x890b, &(0x7f0000000180)={@mcast2, @mcast1, @empty, 0x3, 0x0, 0x6, 0x400, 0x81, 0x100000, r23})
accept4$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000500)=0x14, 0x80000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r24=>0xffffffffffffffff})
sendmmsg$unix(r24, &(0x7f00000bd000), 0x2b4, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f00002ffff6)=@file={0x0, './file0\x00'}, 0xa)
r25 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r25, 0x0, r25)
r26 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r26, &(0x7f0000006b00)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x8000)
r27 = socket(0x100000000011, 0x2, 0x0)
bind(r27, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r27, &(0x7f0000000040)={0x11, 0x0, <r28=>0x0}, &(0x7f00000001c0)=0x14)
sendmmsg$inet6(r26, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000400)={0xa, 0x4e24, 0x0, @dev, 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYRES32=r28, @ANYBLOB='\x00\x00\x00\x00'], 0x8}}], 0x2, 0x0)
ioctl$sock_inet6_SIOCADDRT(r25, 0x890b, &(0x7f0000000180)={@mcast2, @mcast1, @empty, 0x3, 0x0, 0x6, 0x400, 0x81, 0x0, r28})
r29 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r29, 0x29, 0x23, &(0x7f00000006c0)={{{@in=@local, @in6=@remote}}, {{@in=@local}, 0x0, @in6=@mcast1}}, &(0x7f00000007c0)=0xe8)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r30 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r30, &(0x7f0000006b00)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x8000)
sendmmsg$inet6(r30, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000400)={0xa, 0x4e24, 0x0, @dev, 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8800000000000000000000000000019a0c11687098e405c9110800aafed19336872201013533cf17247cd24acebde84ddf568db0a126039e151fb1d7", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x28}}], 0x2, 0x0)

[ 1520.202275][T11774] radio-si470x 2-1:0.128: DeviceID=0xb955 ChipID=0xb681
20:26:35 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setrlimit(0x0, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

[ 1520.255533][ T9944] radio-si470x 4-1:0.128: software version 181, hardware version 85
[ 1520.362157][ T8851] radio-si470x 3-1:0.128: DeviceID=0x63f7 ChipID=0xba81
[ 1520.422367][T11774] radio-si470x 2-1:0.128: software version 185, hardware version 85
[ 1520.462149][ T9944] radio-si470x 4-1:0.128: submitting int urb failed (-90)
[ 1520.511919][T10207] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[ 1520.582278][ T8851] radio-si470x 3-1:0.128: software version 99, hardware version 247
[ 1520.632322][T11774] radio-si470x 2-1:0.128: submitting int urb failed (-90)
[ 1520.761995][T10207] usb 6-1: Using ep0 maxpacket: 16
[ 1520.802312][ T8851] radio-si470x 3-1:0.128: submitting int urb failed (-90)
[ 1520.902101][T10207] usb 6-1: config 0 has an invalid interface number: 128 but max is 0
[ 1520.910546][T10207] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1520.921082][T10207] usb 6-1: config 0 has no interface number 0
[ 1520.927367][T10207] usb 6-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1520.938573][T10207] usb 6-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1520.947709][T10207] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1520.957249][T10207] usb 6-1: config 0 descriptor??
[ 1521.062193][ T2666] input: syz0 as /devices/virtual/input/input1460
[ 1521.092246][T11774] radio-si470x 2-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1521.101212][T11774] radio-si470x: probe of 2-1:0.128 failed with error -22
[ 1521.132060][ T9944] radio-si470x 4-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1521.141008][ T9944] radio-si470x: probe of 4-1:0.128 failed with error -22
[ 1521.157166][T11774] usb 2-1: USB disconnect, device number 5
[ 1521.171684][ T9944] usb 4-1: USB disconnect, device number 71
[ 1521.242396][ T8851] radio-si470x 3-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1521.251449][ T8851] radio-si470x: probe of 3-1:0.128 failed with error -22
[ 1521.261406][T10207] radio-si470x 6-1:0.128: DeviceID=0x60f7 ChipID=0xba81
[ 1521.273603][ T8851] usb 3-1: USB disconnect, device number 67
[ 1521.452141][T10207] radio-si470x 6-1:0.128: software version 96, hardware version 247
[ 1521.663963][T10207] radio-si470x 6-1:0.128: submitting int urb failed (-90)
[ 1521.881903][T10207] radio-si470x 6-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1521.890951][T10207] radio-si470x: probe of 6-1:0.128 failed with error -22
[ 1521.901671][T10207] usb 6-1: USB disconnect, device number 17
[ 1521.902087][ T9944] usb 4-1: new high-speed USB device number 72 using dummy_hcd
[ 1521.915885][T11774] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[ 1522.161807][T11774] usb 2-1: Using ep0 maxpacket: 16
[ 1522.167272][ T9944] usb 4-1: Using ep0 maxpacket: 16
[ 1522.292027][ T9944] usb 4-1: config 0 has an invalid interface number: 128 but max is 0
[ 1522.300430][ T9944] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1522.310868][ T9944] usb 4-1: config 0 has no interface number 0
[ 1522.317057][ T9944] usb 4-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1522.328317][ T9944] usb 4-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1522.337523][ T9944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1522.347196][ T9944] usb 4-1: config 0 descriptor??
20:26:37 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, 0x0)
pipe2(&(0x7f0000000000), 0x0)
syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x2b4, 0x0)
connect$unix(r1, &(0x7f00002ffff6)=@file={0x0, './file0\x00'}, 0xa)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r2, 0x0, r2)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000006b00)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x8000)
r3 = socket(0x100000000011, 0x2, 0x0)
bind(r3, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, <r4=>0x0}, &(0x7f00000001c0)=0x14)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000400)={0xa, 0x4e24, 0x0, @dev, 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB], 0x4}}], 0x2, 0x0)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000180)={@mcast2, @mcast1, @empty, 0x3, 0x0, 0x6, 0x400, 0x81, 0x100000, r4})
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000140)={'team0\x00', r4})
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@remote}}, {{@in=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000280)=0xe8)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r5, 0x0, r5)
r6 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r6, &(0x7f0000006b00)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x8000)
r7 = socket(0x100000000011, 0x2, 0x0)
bind(r7, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r7, &(0x7f0000000040)={0x11, 0x0, <r8=>0x0}, &(0x7f00000001c0)=0x14)
sendmmsg$inet6(r6, 0x0, 0x0, 0x0)
ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000180)={@mcast2, @mcast1, @empty, 0x3, 0x0, 0x6, 0x400, 0x81, 0x100000, r8})
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r9, 0x0, r9)
r10 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r10, &(0x7f0000006b00), 0x0, 0x8000)
r11 = socket(0x100000000011, 0x2, 0x0)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r11, &(0x7f0000000040)={0x11, 0x0, <r12=>0x0}, &(0x7f00000001c0)=0x14)
sendmmsg$inet6(r10, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000400)={0xa, 0x4e24, 0x0, @dev, 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8800000000000000000000000000019a0c11687098e405c9110800aafed19336872201013533cf17247cd24acebde84ddf568db0a126039e151fb1d7", @ANYRES32=r12, @ANYBLOB], 0x51}}], 0x2, 0x0)
ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000000180)={@mcast2, @mcast1, @empty, 0x3, 0x0, 0x6, 0x400, 0x81, 0x0, r12})
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000002c0)={0x0, @rand_addr, @dev}, &(0x7f0000000300)=0xc)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r13, 0x0, r13)
r14 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r14, &(0x7f0000006b00)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x8000)
r15 = socket(0x100000000011, 0x2, 0x0)
bind(r15, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r15, &(0x7f0000000040)={0x11, 0x0, <r16=>0x0}, &(0x7f00000001c0)=0x14)
sendmmsg$inet6(r14, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000400)={0xa, 0x4e24, 0x0, @dev, 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8800000000000000000000000000019a0c11687098e405c9110800aafed19336872201013533cf17247cd24acebde84ddf568d", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00'], 0x4c}}], 0x2, 0x0)
ioctl$sock_inet6_SIOCADDRT(r13, 0x890b, &(0x7f0000000180)={@mcast2, @mcast1, @empty, 0x3, 0x0, 0x6, 0x400, 0x81, 0x100000})
r17 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, r17)
r18 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r18, &(0x7f0000006b00)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x8000)
r19 = socket(0x100000000011, 0x2, 0x0)
bind(r19, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r19, 0x0, &(0x7f00000001c0))
sendmmsg$inet6(r18, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000400)={0xa, 0x4e24, 0x0, @dev, 0x4}, 0x1c, 0x0}}], 0x2, 0x0)
ioctl$sock_inet6_SIOCADDRT(r17, 0x890b, &(0x7f0000000180)={@mcast2, @mcast1, @empty, 0x3, 0x0, 0x6, 0x400, 0x81, 0x100000})
r20 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r20, 0x0, r20)
r21 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r21, &(0x7f0000006b00)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0)
r22 = socket(0x100000000011, 0x2, 0x0)
bind(r22, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r22, &(0x7f0000000040)={0x11, 0x0, <r23=>0x0}, &(0x7f00000001c0)=0x14)
sendmmsg$inet6(r21, &(0x7f0000000980)=[{{&(0x7f0000000400)={0xa, 0x4e24, 0x0, @dev, 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8800000000000000000000000000019a0c11687098e405c9110800aafed19336872201013533cf17247cd24acebde84ddf568db0a126039e151fb1d7", @ANYRES32=r23, @ANYBLOB='\x00\x00'], 0x53}}], 0x1, 0x0)
ioctl$sock_inet6_SIOCADDRT(r20, 0x890b, &(0x7f0000000180)={@mcast2, @mcast1, @empty, 0x3, 0x0, 0x6, 0x400, 0x81, 0x100000, r23})
accept4$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000500)=0x14, 0x80000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r24=>0xffffffffffffffff})
sendmmsg$unix(r24, &(0x7f00000bd000), 0x2b4, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f00002ffff6)=@file={0x0, './file0\x00'}, 0xa)
r25 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r25, 0x0, r25)
r26 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r26, &(0x7f0000006b00)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x8000)
r27 = socket(0x100000000011, 0x2, 0x0)
bind(r27, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r27, &(0x7f0000000040)={0x11, 0x0, <r28=>0x0}, &(0x7f00000001c0)=0x14)
sendmmsg$inet6(r26, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000400)={0xa, 0x4e24, 0x0, @dev, 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYRES32=r28, @ANYBLOB='\x00\x00\x00\x00'], 0x8}}], 0x2, 0x0)
ioctl$sock_inet6_SIOCADDRT(r25, 0x890b, &(0x7f0000000180)={@mcast2, @mcast1, @empty, 0x3, 0x0, 0x6, 0x400, 0x81, 0x0, r28})
r29 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r29, 0x29, 0x23, &(0x7f00000006c0)={{{@in=@local, @in6=@remote}}, {{@in=@local}, 0x0, @in6=@mcast1}}, &(0x7f00000007c0)=0xe8)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r30 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r30, &(0x7f0000006b00)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x8000)
sendmmsg$inet6(r30, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000400)={0xa, 0x4e24, 0x0, @dev, 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8800000000000000000000000000019a0c11687098e405c9110800aafed19336872201013533cf17247cd24acebde84ddf568db0a126039e151fb1d7", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x28}}], 0x2, 0x0)

[ 1522.611953][ T9944] radio-si470x 4-1:0.128: DeviceID=0xb955 ChipID=0xb681
[ 1522.636512][ T9944] radio-si470x 4-1:0.128: si470x_get_report: usb_control_msg returned -71
[ 1522.645268][ T9944] radio-si470x 4-1:0.128: si470x_get_scratch: si470x_get_report returned -71
[ 1522.654648][ T9944] radio-si470x: probe of 4-1:0.128 failed with error -5
20:26:37 executing program 1:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x8b, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

20:26:37 executing program 2:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x20000, 0x0)
ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f00000001c0)={0x7, 0x100})
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000200)={0xfffffffffffffd55, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x23, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r3=>0xffffffffffffffff})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000005c0)=""/181)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

20:26:37 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setrlimit(0x0, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

20:26:37 executing program 5:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x0, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x20000, 0x0)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f00000001c0)={0x7, 0x100})
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000200)={0xfffffffffffffd55, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x23, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r4 = socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r5=>0xffffffffffffffff})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
close(r6)
splice(r5, 0x0, r6, 0x0, 0x10003, 0x0)
ioctl$EVIOCGABS3F(r5, 0x8018457f, &(0x7f00000005c0)=""/181)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @multicast2}}}, &(0x7f0000000180)=0x90)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e20, 0xaa, @empty, 0x8000}, {0xa, 0x4e24, 0x7fffffff, @dev={0xfe, 0x80, [], 0xf}, 0x6}, 0x8000, [0x8, 0x1, 0x84, 0xf5, 0x7, 0x5, 0x0, 0x3]}, 0x5c)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

20:26:37 executing program 3:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001e95cd10cf12117108480000000109021b0001000000000904800001030000000705840b0000000000d41d6a02cd0dc8"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f0000000000)=0xe8)
ioctl$TUNSETOWNER(r2, 0x400454cc, r3)
syz_usb_control_io$hid(r0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e24, @multicast1}}}, 0x84)
r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x600101, 0x0)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, r6}}, 0x48)
write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r6}}, 0x10)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7, @empty, 0xfff}, {0xa, 0x4e20, 0x3, @remote, 0x1}, r6, 0x7}}, 0x48)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

[ 1522.713270][ T9944] usb 4-1: USB disconnect, device number 72
[ 1522.772696][T11774] usb 2-1: device descriptor read/all, error -71
20:26:37 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setrlimit(0x0, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

20:26:37 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setrlimit(0x2, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

20:26:38 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setrlimit(0x2, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

20:26:38 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setrlimit(0x2, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

20:26:38 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setrlimit(0x2, &(0x7f0000000040)={0x0, 0x20080000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

20:26:38 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setrlimit(0x2, &(0x7f0000000040)={0x0, 0x20080000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

[ 1523.044059][T10207] usb 3-1: new high-speed USB device number 68 using dummy_hcd
[ 1523.073899][ T8851] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[ 1523.142031][ T9944] usb 4-1: new high-speed USB device number 73 using dummy_hcd
[ 1523.162023][T11774] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[ 1523.321911][ T8851] usb 6-1: Using ep0 maxpacket: 16
[ 1523.327326][T10207] usb 3-1: Using ep0 maxpacket: 16
[ 1523.401954][ T9944] usb 4-1: Using ep0 maxpacket: 16
[ 1523.412413][T11774] usb 2-1: Using ep0 maxpacket: 16
[ 1523.442131][ T8851] usb 6-1: config 0 has an invalid interface number: 128 but max is 0
[ 1523.450518][ T8851] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1523.460983][ T8851] usb 6-1: config 0 has no interface number 0
[ 1523.467252][ T8851] usb 6-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1523.478477][ T8851] usb 6-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1523.487652][ T8851] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1523.496713][T10207] usb 3-1: config 0 has an invalid interface number: 128 but max is 0
[ 1523.505038][T10207] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1523.515261][T10207] usb 3-1: config 0 has no interface number 0
[ 1523.521447][T10207] usb 3-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1523.532644][T10207] usb 3-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1523.541835][T10207] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1523.542202][ T9944] usb 4-1: config 0 has an invalid interface number: 128 but max is 0
[ 1523.551293][ T8851] usb 6-1: config 0 descriptor??
[ 1523.558278][ T9944] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1523.558349][ T9944] usb 4-1: config 0 has no interface number 0
[ 1523.572571][T10207] usb 3-1: config 0 descriptor??
[ 1523.573600][ T9944] usb 4-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1523.596012][ T9944] usb 4-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1523.605206][ T9944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1523.613479][T11774] usb 2-1: config 0 has an invalid interface number: 128 but max is 0
[ 1523.622902][T11774] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1523.633115][T11774] usb 2-1: config 0 has no interface number 0
[ 1523.639302][T11774] usb 2-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1523.650487][T11774] usb 2-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1523.659650][T11774] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1523.671301][T11774] usb 2-1: config 0 descriptor??
[ 1523.685209][ T9944] usb 4-1: config 0 descriptor??
[ 1523.832197][T10207] radio-si470x 3-1:0.128: DeviceID=0x66f7 ChipID=0xba81
[ 1523.839544][ T8851] radio-si470x 6-1:0.128: DeviceID=0x6bf7 ChipID=0xba81
20:26:38 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000007000432b2cc451dc024f710ea931caaa6e5b7e090000000000000100000038ee000000000a769d360ed6c6a9b68f4764531ed7e8769fb11a6a8f5805007a41c8372d8e1dec8f7a718495f5acb9cb74d61e37408f049a241d638c649a1c18840d1aed9105b7cd2771700dcc32ad687d59f0dac6eda5123a345a87d00b6e84a737e9da90fb5457fa23e24d59d000b96e222147aee7cc318bcbca38c69700888932c4"], 0x28}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x4924924924925f3, 0x0)

[ 1523.934894][T11774] radio-si470x 2-1:0.128: DeviceID=0xba55 ChipID=0xb681
[ 1523.955280][ T9944] radio-si470x 4-1:0.128: DeviceID=0xbd55 ChipID=0xb681
[ 1524.042311][ T8851] radio-si470x 6-1:0.128: software version 107, hardware version 247
[ 1524.052191][T10207] radio-si470x 3-1:0.128: software version 102, hardware version 247
[ 1524.152598][T11774] radio-si470x 2-1:0.128: software version 186, hardware version 85
[ 1524.172093][ T9944] radio-si470x 4-1:0.128: software version 189, hardware version 85
[ 1524.262038][ T8851] radio-si470x 6-1:0.128: submitting int urb failed (-90)
[ 1524.272083][T10207] radio-si470x 3-1:0.128: submitting int urb failed (-90)
[ 1524.372064][T11774] radio-si470x 2-1:0.128: submitting int urb failed (-90)
[ 1524.393271][ T9944] radio-si470x 4-1:0.128: submitting int urb failed (-90)
[ 1524.481995][ T8851] radio-si470x 6-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1524.490888][ T8851] radio-si470x: probe of 6-1:0.128 failed with error -22
[ 1524.503438][ T8851] usb 6-1: USB disconnect, device number 18
[ 1524.711951][T10207] radio-si470x 3-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1524.721185][T10207] radio-si470x: probe of 3-1:0.128 failed with error -22
[ 1524.732186][T10207] usb 3-1: USB disconnect, device number 68
[ 1524.802022][T11774] radio-si470x 2-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1524.811067][T11774] radio-si470x: probe of 2-1:0.128 failed with error -22
[ 1524.827131][T11774] usb 2-1: USB disconnect, device number 7
[ 1525.062835][ T9944] radio-si470x 4-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1525.071646][ T9944] radio-si470x: probe of 4-1:0.128 failed with error -22
[ 1525.083770][ T9944] usb 4-1: USB disconnect, device number 73
[ 1525.561872][T11774] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[ 1525.801769][T11774] usb 2-1: Using ep0 maxpacket: 16
[ 1525.812121][ T9944] usb 4-1: new high-speed USB device number 74 using dummy_hcd
[ 1525.922001][T11774] usb 2-1: config 0 has an invalid interface number: 128 but max is 0
[ 1525.930228][T11774] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1525.940501][T11774] usb 2-1: config 0 has no interface number 0
[ 1525.946695][T11774] usb 2-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1525.957894][T11774] usb 2-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1525.967058][T11774] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1525.976742][T11774] usb 2-1: config 0 descriptor??
[ 1526.091997][ T9944] usb 4-1: Using ep0 maxpacket: 16
[ 1526.212007][ T9944] usb 4-1: config 0 has an invalid interface number: 128 but max is 0
[ 1526.220588][ T9944] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1526.230935][ T9944] usb 4-1: config 0 has no interface number 0
[ 1526.237166][ T9944] usb 4-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1526.248387][ T9944] usb 4-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
20:26:41 executing program 4:
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x401000000801, 0x0)
close(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
ftruncate(r1, 0x2007fff)
sendfile(r0, r1, 0x0, 0x8000fffffffe)
close(0xffffffffffffffff)
ftruncate(0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000300)={@local, @initdev}, &(0x7f0000000340)=0xffffffffffffff36)
ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000180)=""/144)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, 0x0)
close(0xffffffffffffffff)
ftruncate(0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)={0x63, 0x7d, 0x2, {{0x0, 0x4c, 0x0, 0x0, {0x21, 0x3, 0x2}, 0x40000000, 0x0, 0x9b7f, 0x100000000, 0x16, 'security.SMACK64IPOUT\x00', 0x1, '\x00', 0x1, '\x00', 0x1, '\x00'}, 0x2, '%['}}, 0x63)
epoll_create1(0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x401000000801, 0x0)
close(r2)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
creat(&(0x7f0000000100)='./bus\x00', 0x0)

20:26:41 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setrlimit(0x2, &(0x7f0000000040)={0x0, 0x20080000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

20:26:41 executing program 5:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x0, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x20000, 0x0)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f00000001c0)={0x7, 0x100})
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000200)={0xfffffffffffffd55, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x23, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "3a3c5a98a0b88f20dab28f43fd604a180bf5c40802c641ed238502ea05de14099c5dfa19c61d2715c179a8913d43848ebb6058f0ae47cea480ef4ae3d1bd7724bc870bcd80db1746d211f5f7dde4bd2f33e5a634f6174cf4dab428a4bdd5141e1cdfd7535edf28bbf44e35cb9180ea022e265108d6db9ab408e8b86c601dc9baf360878fefb4286f933f037b53d6c51bf10ba2a82424f4cf64d7a43f8235463a4e3651ce704859e92aa583ee3327735693aa9147f8b908c3d665302cff8ef37ebcb56efae4f83bc51fa46f6295b1622a46895dded87879de64c990feb0f52a533e44a8d7c9ef25ea0f8e90ff09ab06f93e605e04f9f5ac3102bcefe10a31"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r4 = socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r5=>0xffffffffffffffff})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
close(r6)
splice(r5, 0x0, r6, 0x0, 0x10003, 0x0)
ioctl$EVIOCGABS3F(r5, 0x8018457f, &(0x7f00000005c0)=""/181)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @multicast2}}}, &(0x7f0000000180)=0x90)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e20, 0xaa, @empty, 0x8000}, {0xa, 0x4e24, 0x7fffffff, @dev={0xfe, 0x80, [], 0xf}, 0x6}, 0x8000, [0x8, 0x1, 0x84, 0xf5, 0x7, 0x5, 0x0, 0x3]}, 0x5c)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

[ 1526.257610][ T9944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1526.266539][T11774] radio-si470x 2-1:0.128: DeviceID=0xbf55 ChipID=0xb681
[ 1526.274261][ T9944] usb 4-1: config 0 descriptor??
20:26:41 executing program 2:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x20000, 0x0)
ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f00000001c0)={0x7, 0x100})
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000200)={0xfffffffffffffd55, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x23, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r3=>0xffffffffffffffff})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000005c0)=""/181)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

[ 1526.312169][T11774] radio-si470x 2-1:0.128: si470x_get_report: usb_control_msg returned -71
[ 1526.320764][T11774] radio-si470x 2-1:0.128: si470x_get_scratch: si470x_get_report returned -71
[ 1526.330756][T11774] radio-si470x: probe of 2-1:0.128 failed with error -5
[ 1526.433298][T11774] usb 2-1: USB disconnect, device number 8
20:26:41 executing program 1:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="120100001e95cd10cf1211710848000000021b0001000000000904800001030000000705840b00000800000000196ebe295147bd9b7007ba45c3e8a09265f557f7a5746243965421c895a8c9c86f1a365d25685c9c46d4894c5d62862bfca5a7498472ab1df3c3eae10ae3d0f7262735b596ffb6c583b17b22eb0ceb8359d9afb60d357c23ccba9013e035edad3790e24b38b0470e2d3e9596ab5e34c8a1b8f57a447995a66314ac697a8dd6438ed763525e90"], 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140)=<r1=>0x0)
move_pages(r1, 0x3, &(0x7f0000000180)=[&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil], &(0x7f00000002c0)=[0x9, 0xeb, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080)=ANY=[@ANYBLOB="00050000001a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000100)={@reserved})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
pipe(&(0x7f0000001300)={<r2=>0xffffffffffffffff})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
shmget(0x2, 0x3000, 0x10, &(0x7f0000ffd000/0x3000)=nil)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x40000021], [0xc1]})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
close(r6)
pipe(&(0x7f0000001300)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
write$binfmt_misc(r7, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
ioctl$BLKSECTGET(r7, 0x1267, &(0x7f00000000c0))
splice(r2, 0x0, r6, 0x0, 0x10003, 0x0)
ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000340)={0x18, 0x0, {0x2, @local, 'teql0\x00'}})

20:26:41 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

20:26:41 executing program 3:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x3, 0x1e06, &(0x7f00000009c0)={{0x12, 0x1, 0x310, 0x22, 0x1b, 0xd0, 0xff, 0xbb4, 0xa3d, 0xecf1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1df4, 0x3, 0xa2, 0x8, 0x70, 0x8, [{{0x9, 0x4, 0xcb, 0x9, 0x6, 0x70, 0x50, 0x9f, 0x7f, [], [{{0x9, 0x5, 0x4, 0xbba444e6e3a5814c, 0x259, 0x1, 0x4b, 0x40, [@generic={0x21, 0x8, "7ab5f1c45d7dd5ae2310bee78f604210e77b6b4d5a5347dfd5fa72785de8f7"}]}}, {{0x9, 0x5, 0x9, 0x8, 0xa1, 0x6, 0x80, 0x5a, [@generic={0xb3, 0x23, "35b5c1705324d48ed04a4cc8b35fc4584f7b84ade53812fcba88b26c62b82aa9d67d90cda34e8adb1dbffe7de15e3d94af0bda94fefd0229b701d30f2adcc54c82a368c369cf1dcb1a7d312ffff756a3dc4cebb4da7339f1029a1cbe524f2e393575cdefb393941439ff8803dd4602a6df7b70bbf3fe4ad6c617f4d3640016418f4ed784d814b65af064d1d51d51a0e24b2e122c1f49d326e4d2f2470ee00e438e8ed9924eb027daab7218dab91b4ba534"}, @generic={0x60, 0x5, "4ed31ed6ad5d50986095e46247fcb86013bdea4db0d3c4a8c937c5c873e900893cf606ebe6d16f5d57e5e927f712b0dd254dd089cafd93642107a368067bee11b9a42b05fcbd8cfa6ff4ed53607025ec18b6be0f5afcf42c9ca457ba3327"}]}}, {{0x9, 0x5, 0x4, 0x8, 0x172, 0x8, 0x7, 0x3, [@generic={0xda, 0x3, "9ecedf9296e32594ef97aeb5a86fdd292105895644485a7ca9b05734d2762e579a6bab19ac2af8e1cb9f512b8691cf674bfd64831d383001537aa18ec80e1cd9bf4cc1debe9dd96126440a65c96aa2a194bde98e210545be12bf7c0a7673622abbbeda9ceeb1fef68b667a75b7a83f82cb3bdbc6d083baa7d1457318fd835937a154bfac6aa98dc96f23e372ceb032228b78b53f96c70a22763897e3cca46f5d475640faa7992e633ad7c03da228ffade087104c4a3eb2449f2a9c111adef86079b08bd95a12de54d9626e27ebd0faca10fe5511df6f199a"}]}}, {{0x9, 0x5, 0xf, 0x2c, 0x217, 0x2, 0x7, 0x9, [@generic={0x5, 0xb, "98e28a"}, @generic={0xfc, 0x23, "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"}]}}, {{0x9, 0x5, 0xb, 0x2, 0x117, 0x0, 0x3, 0x7f}}, {{0x9, 0x5, 0x9, 0x3, 0xc4, 0x9, 0x36, 0x6, [@generic={0xbf, 0xf8c3faf4524c49fc, "512b66702b8808785060866290211f1cb6817840f5b55e2cbd115dc662fa77baaf565c08ebd8e953069b048c26207a95a2a1e6b858e63f806b176646000f6abe2cfd35c86a57dff9091739ccce76b15046a84113ba1bb6230e6d1f856b1b5aec5833e35aadba1e9cb41a0f4a3f08e00bc2bb88c6f71a1f5b999fa1e70052864692ba6d1a7a5af8923df4ee826f263544039dd9a770bac1536e6bcb79527fb2c711db9c4441d6f99d86ffc51eb4134c0f40c427d0c8e0fb3b9d10fd6377"}]}}]}}, {{0x9, 0x4, 0x2f, 0x5, 0x5, 0x99, 0x30, 0x6e, 0x7, [@hid_hid={0x9, 0x21, 0xed83, 0x40, 0x1, {0x22, 0x70}}], [{{0x9, 0x5, 0xa, 0x1, 0x2da, 0x80, 0x40, 0x6}}, {{0x9, 0x5, 0xf, 0x4, 0x1ec, 0x9, 0x5, 0x9, [@generic={0xd8, 0xf, "d2a3fd9db562ff9ffa3d56569464996508fd62068ebe1db37e0c88d48471c7cc063a744148e4a847a75f494e7ff3b2020a501f020315a99b46136b543b778a59a974d56c5d8283387953714ccd96ddd333c721d855a70d75495e6425837ffc60abac230814021889af9e5ed71df1bb6e3e4c05adb284502f30613eefb407141b74b65fa0ab390d6dae18d413c2cd7037095e9ba402ef25fbd2484298456050efc73976b548b3ca5aca697ea44a4f0f70fad3f4434197c33b1b79b33dceedd6494339e849f40afc643c2e5ed8f85dc168705ce35d3f3d"}, @generic={0x99, 0x31, "9813be425bcc7f0812131fb84ed648951c24f7ce323f294d3d77da713b0b55989e75e64c7dafffe177c2da44203223ea286a0a0113b19ab1321efa0f2a96ec8a1e89ee38af74d68fb615e40325c2e8091837cb09cdab82131d811376e25425693c44dd697a7ca80b7c660a21a8a38d73582e0cd1e96a8bcb8a40949540b56bc4874633303cb3fac1a9ada87ad58585a018229e46630509"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x206, 0x7, 0xce, 0x2, [@generic={0x1002, 0x975e2e8d6ad0581d, "6daf26a31b640b56c39ea33f0b1d884a7951220c788e3190d4a34d6afcb169d12b91e2cade144d4f3bd3d4b82a9ee8da7212f07322eaaaa20b4878672fb581de8bc06e9c04b59dba57ddc3fe82a64f17dba7d8d7e61324ad7b44af231c1cc6ac9b1b55b5336da0456243644cd69ca8675cb86c619f4cd48b264145c230a3e962d65ac4e35ebbf5624142cb672629732cdd4a90c9b9438b3623f0bd308324d1b696a3405b7faab099800342a39b28c84b9a668334c14050374bfe7c59563ed409a9582e00afce871fedca2a3ad2ec964ad05dec4e31924241b9df5c2cb502a909f668e529d8bba54eeef0dc148f39431f61f3de2808c409bb733746d37ad4516b2c2c5ef73133f4cefdd907c1cefe8051864b82596b3d3c61fdd114ec9e6f430bc975b2cdb89b974692ed2dfc095a8887c2e6ff2017e4c2ffd38c02051a688d9de1872e652a828b55db18b5278003c843abfbf877fba05aa0a97cd99646c43f95772c97a0115cc86c60469e7a8c9bc111fcaa8c4f8927b0e2dc267f80c589d976553202af9a8896c99523a681f18f7be1bf97c3343f4219359f40fe54022ab90bc5f009d22486c393483710767f596c67d2bb9b0e8dbfd4fed6f8deb3dea67e61ea104cd0b1713f32af0dd8c1798962bf3214623013616939520bc5396569d821695a4b25fea568d2f8cec35f5178eab2222e34eef6833db96b6f0453f6e45ead5ba6d148a2846c1438d941687c1e61c5c35a3930e09cbec0593e6e9c01846a45d8cc7fb3951f37fe0aab7a8ec223f5e324eb13f831bea5dfdbff1d1df1a8c8ca62e09ea327ce4150aa61f46b03491d2fa22f448bed9bfde1242393435b03f336f3d19f13db07f61d3e4dbce4b4cf0eb8e79a38102e43ed9d10adb09a2bf66deca2de756a64d676ecb5b1dfaa1eae634c8945a6249a452ba1110d8bd536726d06a22d34c7e9ddfc7112633e81fb514295b39dc8f0e548333ed7f85a2d93450607832871ce7b2e0537423b44b44f870eda1a5671ec1d86fc6673f4cf096462ec381af6f7c1eb08c4aa7b1e73eb63d995b56cf92305688adb8cc2b5ff4683232f81566289b399a71dbebcad139f7cbf2ff913dfda9388f3bcb713b53398a651280b1df25ae8ff68bcac8a8379408898cf3aa3c51bb045d861f1dd66d72f916b2ceb4b0915ecb4d70c93d0b813ad5635c72abe4108a767308ab487f1356f4054b5495c012676bfe16afbbb2be46241dc547a82762b0a501868f4ef533a5a53f7dad82e9968f1abc6897f8b3daab9f4b47d2fd2a1ff8c4f27d64a78b8b7f912ac4c45d3b7aad0a6259b06bac7340bd9ffb518029aa52f68437da6eeecfa85453ae6bac14a3ed94daeb594847672e7c8545702b20f77fbf62c10e15dc2bb0a3e29fe630c1c060c74b34f91891975c198e044abd0dd2a3704053e64eb7a7275161de45aa675cc488c2b1e24c3d22c7ea0f08a023df17117726da6f4b79a61f245fa20190960af8c04c8256cc5eb76ac2209105a1f80226e4a68a10eb84fbddfaa61b93894efea1956aeaa59c0a1c629a87c1e4e197ff80b70f1907803d40b0a91b4e223d08f89ab2cd345c28ec959b18da11979a3953107137da1c33a29c8e5e6ab212d460129c0298816739f69e2fc7d48dafec4419299af50a5647fa85b9b62bd7fe0107045265a907780ac6d24ba4330dcef751843986ba407bf2a4e0a8f0ecd35a9eaa1ad80375e61bcf3aad0ae5454f2cd54f95a6d1d3a4bc64235109ddd3540f9e1277adbd16d18c6933d6cdab9a27587a9b240a0519f55619f14efac3305e6e6d804a51415007750c729fb6dc659b297f86e66b191bf6af61c1effbfc4a6f80e2aafbfed4577a4e930fc4fb17954d43a707a4dcd12012e996195f4db0f0e412b5117410e770f121c2c2b3b21b840172532b8f553a3323a6c0ebfe74a4cd7fe75b1a33391b38eb04d25177387c9c1aef602aa22129fe98a5978c1610002b6ad376bfe7e306fcf2a2c47b36a517eb6e6c5f262b16e998b79f3da76997368aa342608d92e4671bbe4751c9256b1d129e73d211818ac57e545ff72e1dc640ff87938f09b8e0379d59fc2eb0eb04c6b6347b71f15acfe989f52500f2d0524a52f2c2167bceb0633a6bad604ecee05525b65139be1b3c903a8b8917f4b367f8605e7493f5482e7c6eda60f28d31fc9abe91ee9807e340d5892a7653cc2af41a8ad1373e23748b35f4754ef6c8f05c8131ba9aa1da1aab619565902abec068dda77b7e1567686c2806293b7b3d7568dbb54b911097c4f4514b573fd969fa0513e9c9abd9bfe00817ec256fe3f3b3e883ad7d93c6622bba5ff598367e88709b981eadab757b23727dbc5555045ef6e84091310ccb78e6cc99811dde27b049214b237ee7bb4dd7b071c43e43994a0a041f087f94ea600e59e380233e74a289de766b44cb7cdabc444809da8d4c8cb936a0629711cce22a3a1801b98d9ecb4f497f88d908eb948d6d686af13f2b9f129826d802ef163f9569a56d80b397f5f8850c3d13b7584e0070e5a7a2964fea3067aaf63f55c6183ecee8bceadd05d32632e96e192088a2eff6b6cb94e9a100d7004959a7b676d3ca465eeab0d96247d2de3fe54158ad2987d7c23311ded4018c6c02f50ff60939717d861d5c332cca3838993a23a9216ae9064468b063b27920d67abf034932b01b09241e9b8731c3ffa022e32e503eb2610011da442b3633738820d56254b31a4804a28095eb7e539ca7e924a3f62e4f99de4d8ab2e0a0db7264b54c95d2133a9301f3a57b0f3f97ceaed18effcaaf2d992982de84f59febeaf66a814aa4f62efbe632d0bf620962acb9620b360dd1b4c531370ab48e08d5605724dde5282f06ab76f6100a2ed685265922da2a736ca913fc7563b4e28ccd510597aaa0f5c8e9c8d5ff3a07a9b45da081572289be5f8f08666c42b9198df0e7fce91de99b11e362d970bbf0a5dc815311634c2bce2245843d70ca882118212837f3e6368b06c85628024dbc39c3877974dc6179a3eb4167fdec508e5ec06eb6c2e72b18bbb104abce9f6edf143fdd7d3b515be6316ca73b510d995d8240321070e1ed7dd03a596dc295776a7ee9f6ac513fac5377cc1b86601acbbc1128e3bc786d34c5c48de333eb1994ba9c5a9ae0964e7ef86f91f342bafe19055f02e370425c5f12b62cdad7f91f2b05038e00877315183cb020299179928835b3b0f05aed4aa3180176c8815eb244e8dc4e5206bb7aa3c5907606c72d4b34539378d0994561926f04d37b03077ca8922995069bd760dc761dc0853e00dfd9b754366d9440e3ee44569089c9107825d057d4dd3a5775c216c52f9f40db3471eb1c44ff2989e9662b41fdb7af39ab017e201700b63465179d9ec917394bdfb4e3fc1403ef147b0bb74fbc1a1040bac72d9431e691a030f04ba15ea0fb629a3448801506edc68509026d1536fd9a3bbe72bfca2300406633462af9c2313ff5b7564e706662af564fa25ca13d890c8d770ee8db511c45a280dde72f76f97853da087d157b715b4541b83b2fbcfc66c989904712f283a3357aaf51688ddae9c363563b46f198b858876cefda682e43fa3873a4075da84411fe99364100a6cee9753599a7b0b6bbf81075d8db0908bac2b643832b478f6ac4515d1e326c9485d6019e3215700d0658ab816c4ccc7b60e18f3bc0b6e316f65c29fc261b65baf02b2ca3d93d45246f356aea45cbcb0646eb4e90b1a17b484c5403d997eb01b4249d5ff40aed68164ddf060d668891ed3875d76e9859b485464704ca16dec4707c9363d0bb8519e38abe1a8b5d84c17a7c2e9ada250168184102b0c724a299646e54c3df9ae0f25b0426acbe5ce35fea338db1e129c5e9eb4f10cfe38dae192b656d1bc5cf479213f360cb4c9efbdb4588d722ee385a92a6c2a73b8324d26b0e0a00271be07933737590a35ae9aad65070613dd23031e352c854abff290b60d8391fb6499c87b3c61578d7b3172984fbb063a41180349846f53af08017dc1dc3f6d3d8155666ab99dbb9e70789e90a55b3b0db151c429ce3222e956ba195ee360df91742fcb111c05199643b72ee9cc47d4513f8e22b33f0af02fafb504c82f8418b3ed219923ab0b9deb318bd02fe1930cd3f898901893f872a4523cdfbb6a2bd023d2b94f5ee0579348b5b6a9097d4e89263cba588cf71594cd4dfaafcd59cbeee19a72f142ae201b73df2b4ec51d30f7fd2e3f6ab9726b01bc44b77642c9bb9f861bdf52db50e564ac80fafa7be69d63c8aaff7b5d94254f3ac6cab3ff74defbd2fa2f33f38693bcbb998985bd00549b882d6d6038973d9a8d6de54bbdc065627b77c52a69492a907f708a066846d65a01e9f24fd93f9789656bee29e12fd4f9a6c1136fba5e39c46f32bafc4d8848d80742f2848fa4ecf5669387017c3f4291707165c1ddb554ba98b854619b42220367cbb4a4a6955d25022aa7c83855bade27aada092d1ffe8cf88d3d669554dcb07dec20d5111a5750b3bc15b199773ef326b619ef91e8f9822abb1708a6727844c4dfde2781ce4519320a176c04b980005363d08fabd2ea6b4371aab75f32c87fd8edb589a6c67361580c5edc69076606f63edc16eb1e505c6192ac4194155119166fa07b9b30b455b14dede64183afd4a0d3635019963f06f8f09f17cba737c7a9754b46b57897bfc82ee4b31b03e6a0d981dc7d85e8daa865723b1a4a61f840808d1424c81d3a368fb84b6c991f9da7175edd6c711976a33e2e5babde39bd47288947bc9a2689ac7da180e1ad2d294b49c64986bcc6fdf72a152e34668345556f947584f60a3b9e7a8b480a6e1fd31d68019430e107edeaa0349c3f17f45bf42040ad238e9d72ae94f90bfe43d5c21931d2538b8eaed5f6c02c5ba557f5b34ca5777a43bec30ae3d9e5d575eb065209b8f3abf04487e8dc5ce93900384b8ed140e18583ceb6c21a1bf97673e7e44a7c6cf986d934b1645f93e3dd8dbdfd1339fe8fcff5aae390f5af9d7168abbfe674ecd0bfff5bf2c3fd0b67f6f764900cd5115b2cef482f2a0d54f39f6c70969618621b668df4d5930a9ef47ca9d04cfbe4ce18eb96eff1e996ec1de87ee405017f5b60dff074ae82e7b789b2c7523782655216da3a009668b16a08e25b20bc35904157bc3a422ee3444506263de101c9b179b726811dfa608b640f60ecf5cbe5c0cd35bedecd219aba0f0492b051457ad5075b506d70799152568e5e7d6fecee02b633af6882c761e2e04ff658878caeca5b2457e32f7aa43c89482dd7e4998723be0a3958f8127ea39b2d4670b70e0abad56d985286a2acea0604b17255f22ab67b1aebb3a3cd42baa858600cc8c394c7688dce98f38c02181ca8957605fbf139f0187e60dea366bbb0c6a617db2303ab54caf740cea10cf50822d4fbb1e4915f38e1ead7c2339a6e7efeaaff9e39156e0517a40d546837ec17fcd0e6b03752f122ab2ed6b5404d4a29995e7c94361f17eefcdb7a2028043434a56ff44a010c2339b667f4d1409c60a1091fad025783de058d9e72b2d9edab722aba4241c7a1a2325534ac69f8a2c6fea02aaa4eee0c664ee25987fc08572a735b702bd0eeed9133e4c7c186e61ccf81b23a3cb72d33168bfdf04a8e0b74de836030a386b1d7f790a5aa13aa2d71ce51b87c935b2aeff7b7338e306233b1f82fe338b5908a2c72bb699d7a59738c4c1fa244c967b1e74bf6293d7a50157bd6b4b357a3e28bddc699bc185d47c982c244774eed6cb84896b16b5c3d24e8873fa0853b91"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x1f0, 0x8, 0xff, 0xd}}, {{0x9, 0x5, 0x0, 0x1, 0x59, 0x0, 0x0, 0x20, [@generic={0xe6, 0x22, "26109b2b9cd48456d71d7f65a6af23fb4df05341759043986fe6f96c1a924746e48ba0efd38b8f3cab70bb1dec249d538f8fe3e61e0eb04f6d67c72ed2cd357fef0fb32622c363535340a70e1fc857ef9786d8640d5af8ecbd756e483732787150bae5aa9e12a44f6250afb727c80e0ab9d5deb2a4725f41ebbd2c76115c51fdeec1fdc19489fa0a6033cd0bd70df4ebc6e3db7e1fb3b555b49d7ea691c042b2f75b26aa0cdf2f905539eaf09f48d7eb060c0b714f3387f3db06a0ebc3554fa28c226de7f6f2a028e80329385241de74a1836d90b479ff71f531ec2d710886cf3ff50ec8"}, @generic={0x11, 0x24, "3724e565c1d2e473656b8f89d4fd61"}]}}]}}, {{0x9, 0x4, 0x9b, 0x1f, 0xf, 0x54, 0xe3, 0x4e, 0x81, [], [{{0x9, 0x5, 0x6, 0x0, 0xc4, 0xff, 0x30, 0x77}}, {{0x9, 0x5, 0x4, 0x8, 0x327, 0x7, 0x3, 0x71, [@generic={0x4, 0xd, "f009"}]}}, {{0x9, 0x5, 0xf, 0x3, 0x3fe, 0x8, 0x6, 0x20, [@generic={0x5f, 0x0, "f3606ba7399f85fd0e64a927621c6eed6478e89b941795cd5ef411bb479615bad6e1e86c3f9a6ef020cbb6907bbc564d92900688e6de94044a7649b958c58705ab5d76ea93392e1b2689019bbc05a69c877dcc9aa36cc7b2abb46bc1c0"}]}}, {{0x9, 0x5, 0x9, 0x18, 0x3cd, 0xff, 0xa9, 0x2, [@generic={0xce, 0xba3181d2398afae3, "c53c76670360a26bfe20d00c5afdc5ff911cb78056e2b970567c6c8d6ee7f8cf6422cbed3074d2c2629024fd7fda6f02ef773928c24902ef12feb8483333afbfbdc2aee79ae886522a4ba02cefdb4f0a60da16d81c4a4f4f51f79fc49c8df5f29dbe25ec56e5a47b058955a82162c42f1d9f0231f0f0beb2b72b7c1b85b7adb3920801e44f40b49e94170e43cdd36f687153328e54b9db883f3151b7cb2843a2375e254d8b9893aba36fb3c29e5dda88d2a168921c7076255a69f2e2f356379d065c12542f1f980a6afa65ec"}, @generic={0x6f, 0x21, "2377c2997d9a309791deff68af44d4a7977b4f9c3f45650f72df843a91ede9ea74165dcc9db5459b741b6c293b7b716b57b5f48f88abf4d9cb23d80b9a901a8c19f426ce8a62f1c0f8f45d26fd51d3fa2c21d94f4a25cf7bde82a0d325416ca99b2c26839ac49de69dad9deaa6"}]}}, {{0x9, 0x5, 0xa, 0x30, 0x3a4, 0x8, 0x5, 0x20, [@generic={0xa3, 0x0, "e45623d5a2bc1a52adb0976062a98c9a8163eb792e883ced5f4a53d396a8336ded810768f502465cddab2937121165496c41796dffa3acf7c02e591e52a427671a9ec5288cbdb4212f8d6160e743bdadceb0df541612394338d489fc1b01971dc325e695a0685d5ad19482d39c065af0174bdadf076bfea87f2d7216fe7ca2c8b852c3e5b2f91b46f7de1f1ea9820db5a005911923eb47d6a1fc014bbe3fc5e7b5"}, @generic={0xb9, 0x2d, "a38db4b02c7426e96f8c9398caedb0fd8866ede2ff01a441fa629a6efbfdce038bab4120cfe906a9621adcf778133b9383c57e11027ebb33ea5af8f56163eb87a4422f8bebaa35d513d2de17ee434cb1ab09726cbbd33ae22c1e9d737cf082fbf3d15828e63733e117d288209a4fdae2b55dcb66db8b2d41842092f9139059561a07d6085a9241a2734cb9fa3498ec283d66b790c8bff74270944d234bbb11ca13beff42412e15125c439152907d8646ee9dbf6e910c41"}]}}, {{0x9, 0x5, 0xb, 0x64b052032626d3c2, 0x3a4, 0x1, 0xc}}, {{0x9, 0x5, 0x2, 0x10, 0x154, 0x0, 0x81, 0x5, [@generic={0x1b, 0x8, "17d4a9192311f3439a84cdc05ec523da1b504e2ec6a4be7b4d"}, @generic={0x96, 0x31, "03b58a214467b3b3d9e6d500e9e7b878a2080ebe842fa11d7e860632f384a7ea39b90e9aae7294fe0d33038ff27d78a09869fe154e9bf6cd08300515401646decce3c2b7e1a3b6c0afbe7199bd5d2b9620f7dcc3aad41a7fc47073c6c124b7ddb00488ce362db5cecab52fa824cc98260387811d5f9ab984c53c6b2a2ec2a0b8f0b2344f3e5ea7f8eb41d9837bc1b2ae6ae2d5e4"}]}}, {{0x9, 0x5, 0xe, 0x2, 0x6f, 0x5, 0x9, 0xff}}, {{0x9, 0x5, 0x6, 0x0, 0x278, 0x44, 0x0, 0x78, [@generic={0xaf, 0x11, "d016fe52f54fa0e838163ffd694a81816cc4d81d586ac7b8b53b26f62f569ac54c3ea8bfa2fac4b08a0fe6c69a3c1b5faeab92f8047e82f69d597d342231aacc05431a80d1c472b96c5cfb4773252806c4e5b5c5463d45a92105554995733c370a8360a0faf3c53d9eadcbafe2c45b229d185b1eba6e67c1e9d6d740c7c6c95437345bbce8870255a87c5cc2070689691710c6c0169294ac70db568f732b5234ae8b62dd2aae76e06ea92b5c6e"}]}}, {{0x9, 0x5, 0xd, 0x2, 0x210, 0x3, 0x9, 0x8, [@generic={0xcc, 0x4, "5acd4f81993054713bdd98c605cfff1129e2620d4686740225e8a05eba86fe1d493bc5ca081882d4838884bbd05ba7873f9a876ebed73227319c9578be4273d45a0299067f8f8573a363a51a19829302f7219469db089d5a01a1fa0c4d594e8f577bc0e61ad4f05866a1df60cc35235ec83e94004ba0f5c96e976e6af9eb96be87f6cf3c4e1f23dfc5d38330a46197371c495f6a8285a40269833d56a3785b17fbb3580f5de809b51cd1a26256d1262b0fd676ff301ea3561f398bdfe6ff4cf56b72b6bb61efdc0ca940"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x27e, 0x5, 0x4, 0x0, [@generic={0x2a, 0x0, "310dd57ce35673e1325d24aabdf4366646fa6f831b879cf280299804b14255210961e11f48222e9a"}]}}, {{0x9, 0x5, 0x7, 0x2, 0x3b0, 0x2, 0x9, 0x1, [@generic={0x75, 0xa61ee0a7645bdab4, "113c49f9ee1fb15b5cbc0449a2b7ca9774470494611a87e90902184c6de645f1054893a8cbb74b745f19c0d4608eaddd8d651d222ff9d93f6160a2a4aadab6ec8ba3c127e71fd18cb6438f9ef521329ebf0b18db12819aeee218a3e0227cc3ed4d5db8a5aa3486fa122064395c17b158adb940"}]}}, {{0x9, 0x5, 0xd, 0xf1be39017a323882, 0xfb, 0xad, 0x9, 0x9}}, {{0x9, 0x5, 0x8, 0x879632f91b93dc24, 0x204, 0xa8, 0x7, 0x20, [@generic={0x95, 0x7bb1677dcdf40a, "44f68b0ec256318a2111060a90ef591b44d70192e5b8719374756248561086c928e795a64c0935c19a94e6e88bd886c46f910bf90b39862f9dce374e2949d4d7a2032efbc78ca7847526b68a53ca3ce81e09af259c5a66e986fa33e57b59b36dbaf42a313406863e4991a955859f69a72fb211eea2de005481c6a1fa291369b2e914bc3f57a0a6624461104629a575b1b71162"}]}}, {{0x9, 0x5, 0x2, 0x25, 0x112, 0x3, 0x2, 0x1, [@generic={0x11, 0xc, "f9780f3162e4b1ab97d63110caebdb"}, @generic={0x38, 0x0, "e08b40c7a1069c6fa0702e09ff35706846cb35dfddac2adbbf40bf10d57a06cde0bc95dd7e47bf586e77e2cc7e769ce7cb158f9e8b39"}]}}]}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x1, 0x76, 0x0, 0xff, 0x5}, 0x5, &(0x7f0000000040)={0x5, 0xf, 0x5}, 0x6, [{0x97, &(0x7f00000000c0)=@string={0x97, 0x3, "73d406c90e094a296b4aa72e2067a6df23587b7e3d3f131107bca3891721c5e28e19d32422f296090987999003a656eb7c8c44f53b743944e1086fb6ad70b6a1a28b74dcc4265db62d765101be01655ae9e0700d25ff16f6d0d87d160d310a26a71f8fef8aa9daf8ca6afd6cedee4a3efdb3cc537a07ce368b1867c4ff81945a6e4971a09a9d3a371882b53e61db66d005eb1e7914"}}, {0x1002, &(0x7f0000002800)=@string={0x1002, 0x3, "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"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4}}, {0x9e, &(0x7f00000001c0)=@string={0x9e, 0x3, "cf00ab6fb56735fc33ac8436110f631e2f10dd6e3fa599635a0df446eeaa942e572d5f823b9cb3088a1685437df08ca702d69568c8a3ca97fa727b6ab23cbd3bd14beed2b15a2ce8958c490bba91939be483107afd29b95b90db7d70b2e2a5cb9dadc8a2b514a735053f854061672aa3f31a68d48f8abf3f245c10bb626b67f3352b6f9a501a1af3ab336ba8ad296f304f4c7705409bfac6323b7af5"}}, {0xa7, &(0x7f0000000280)=@string={0xa7, 0x3, "beb9cc9ece47a32b5edbfb83b242894a609e80cb397088eaad7b2cba95022e3cec8014e8fad9133ce287f3ca85a471b10b6fb1571c5aa90e6653d83e8b0686d9f767110a6fc4a5f855b5ba44545a1b436875b1a9db3e34bc6f8e7681a12f1f76bee3779b33e54c298b02f2749c2652c91ccd9bbaf2754b9791e8416c50c021167509c322769ab2c5741eaff5f150382f8a08348f5cf5af3cf2c2a890c05148f7f81ec0b7f9"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x280a}}]})
setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000400)=0x12, 0x4)
syz_usb_control_io(r0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

[ 1526.592007][ T9944] radio-si470x 4-1:0.128: si470x_get_report: usb_control_msg returned -71
[ 1526.601936][ T9944] radio-si470x: probe of 4-1:0.128 failed with error -5
[ 1526.641895][T10207] usb 6-1: new high-speed USB device number 19 using dummy_hcd
20:26:41 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

[ 1526.694135][ T9944] usb 4-1: USB disconnect, device number 74
20:26:41 executing program 4:
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x401000000801, 0x0)
close(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
ftruncate(r1, 0x2007fff)
sendfile(r0, r1, 0x0, 0x8000fffffffe)
close(0xffffffffffffffff)
ftruncate(0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000300)={@local, @initdev}, &(0x7f0000000340)=0xffffffffffffff36)
ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000180)=""/144)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, 0x0)
close(0xffffffffffffffff)
ftruncate(0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)={0x63, 0x7d, 0x2, {{0x0, 0x4c, 0x0, 0x0, {0x21, 0x3, 0x2}, 0x40000000, 0x0, 0x9b7f, 0x100000000, 0x16, 'security.SMACK64IPOUT\x00', 0x1, '\x00', 0x1, '\x00', 0x1, '\x00'}, 0x2, '%['}}, 0x63)
epoll_create1(0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x401000000801, 0x0)
close(r2)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
creat(&(0x7f0000000100)='./bus\x00', 0x0)

[ 1526.746777][T10856] usb 3-1: new high-speed USB device number 69 using dummy_hcd
20:26:41 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

20:26:41 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0)

[ 1526.893516][T10207] usb 6-1: Using ep0 maxpacket: 16
20:26:42 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0)

[ 1527.001956][T10856] usb 3-1: Using ep0 maxpacket: 16
20:26:42 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x8})

20:26:42 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0)

[ 1527.022947][T10207] usb 6-1: config 0 has an invalid interface number: 128 but max is 0
[ 1527.031386][T10207] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1527.041812][T10207] usb 6-1: config 0 has no interface number 0
[ 1527.048005][T10207] usb 6-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1527.053813][T11774] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[ 1527.059187][T10207] usb 6-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1527.073626][ T9944] usb 4-1: new high-speed USB device number 75 using dummy_hcd
[ 1527.075683][T10207] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1527.123264][T10856] usb 3-1: config 0 has an invalid interface number: 128 but max is 0
[ 1527.131553][T10856] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1527.143105][T10856] usb 3-1: config 0 has no interface number 0
[ 1527.147096][T10207] usb 6-1: config 0 descriptor??
[ 1527.149286][T10856] usb 3-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1527.165428][T10856] usb 3-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1527.174613][T10856] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1527.201076][T10856] usb 3-1: config 0 descriptor??
[ 1527.314301][T11774] usb 2-1: Using ep0 maxpacket: 16
[ 1527.392579][ T9944] usb 4-1: Using ep0 maxpacket: 16
[ 1527.412005][T10207] radio-si470x 6-1:0.128: DeviceID=0x65f7 ChipID=0xba81
[ 1527.462081][T10856] radio-si470x 3-1:0.128: DeviceID=0xb055 ChipID=0xb681
[ 1527.472132][T11774] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 1527.479890][T11774] usb 2-1: can't read configurations, error -61
[ 1527.522190][ T9944] usb 4-1: config 0 has an invalid interface number: 128 but max is 0
[ 1527.530572][ T9944] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1527.540800][ T9944] usb 4-1: config 0 has no interface number 0
[ 1527.547103][ T9944] usb 4-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1527.558405][ T9944] usb 4-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1527.567601][ T9944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1527.577445][ T9944] usb 4-1: config 0 descriptor??
[ 1527.633212][T10207] radio-si470x 6-1:0.128: software version 101, hardware version 247
[ 1527.641971][T11774] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[ 1527.682283][T10856] radio-si470x 3-1:0.128: software version 176, hardware version 85
[ 1527.842136][T10207] radio-si470x 6-1:0.128: submitting int urb failed (-90)
[ 1527.862035][ T9944] radio-si470x 4-1:0.128: DeviceID=0xba55 ChipID=0xb681
[ 1527.882049][T11774] usb 2-1: Using ep0 maxpacket: 16
[ 1527.902177][T10856] radio-si470x 3-1:0.128: submitting int urb failed (-90)
[ 1528.042179][T11774] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 1528.049997][T11774] usb 2-1: can't read configurations, error -61
[ 1528.060304][T11774] usb usb2-port1: attempt power cycle
[ 1528.067075][T10207] radio-si470x 6-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1528.075970][T10207] radio-si470x: probe of 6-1:0.128 failed with error -22
[ 1528.086703][T10207] usb 6-1: USB disconnect, device number 19
[ 1528.092190][ T9944] radio-si470x 4-1:0.128: software version 186, hardware version 85
[ 1528.313165][ T9944] radio-si470x 4-1:0.128: submitting int urb failed (-90)
[ 1528.341901][T10856] radio-si470x 3-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1528.350923][T10856] radio-si470x: probe of 3-1:0.128 failed with error -22
[ 1528.363105][T10856] usb 3-1: USB disconnect, device number 69
20:26:43 executing program 5:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x0, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x20000, 0x0)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f00000001c0)={0x7, 0x100})
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000200)={0xfffffffffffffd55, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x23, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "3a3c5a98a0b88f20dab28f43fd604a180bf5c40802c641ed238502ea05de14099c5dfa19c61d2715c179a8913d43848ebb6058f0ae47cea480ef4ae3d1bd7724bc870bcd80db1746d211f5f7dde4bd2f33e5a634f6174cf4dab428a4bdd5141e1cdfd7535edf28bbf44e35cb9180ea022e265108d6db9ab408e8b86c601dc9baf360878fefb4286f933f037b53d6c51bf10ba2a82424f4cf64d7a43f8235463a4e3651ce704859e92aa583ee3327735693aa9147f8b908c3d665302cff8ef37ebcb56efae4f83bc51fa46f6295b1622a46895dded87879de64c990feb0f52a533e44a8d7c9ef25ea0f8e90ff09ab06f93e605e04f9f5ac3102bcefe10a31"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r4 = socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r5=>0xffffffffffffffff})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
close(r6)
splice(r5, 0x0, r6, 0x0, 0x10003, 0x0)
ioctl$EVIOCGABS3F(r5, 0x8018457f, &(0x7f00000005c0)=""/181)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @multicast2}}}, &(0x7f0000000180)=0x90)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e20, 0xaa, @empty, 0x8000}, {0xa, 0x4e24, 0x7fffffff, @dev={0xfe, 0x80, [], 0xf}, 0x6}, 0x8000, [0x8, 0x1, 0x84, 0xf5, 0x7, 0x5, 0x0, 0x3]}, 0x5c)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

[ 1528.771986][T11774] usb 2-1: new high-speed USB device number 11 using dummy_hcd
20:26:43 executing program 2:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x20000, 0x0)
ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f00000001c0)={0x7, 0x100})
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000200)={0xfffffffffffffd55, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x23, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r3=>0xffffffffffffffff})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000005c0)=""/181)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

[ 1528.882344][T10207] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[ 1529.011899][T11774] usb 2-1: Using ep0 maxpacket: 16
[ 1529.131853][T10207] usb 6-1: Using ep0 maxpacket: 16
[ 1529.141990][T10856] usb 3-1: new high-speed USB device number 70 using dummy_hcd
[ 1529.172080][T11774] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 1529.179881][T11774] usb 2-1: can't read configurations, error -61
[ 1529.192638][ T9944] radio-si470x 4-1:0.128: si470x_get_report: usb_control_msg returned -71
[ 1529.201538][ T9944] radio-si470x: probe of 4-1:0.128 failed with error -22
[ 1529.211828][ T9944] usb 4-1: USB disconnect, device number 75
[ 1529.282178][T10207] usb 6-1: config 0 has an invalid interface number: 128 but max is 0
[ 1529.290521][T10207] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1529.300793][T10207] usb 6-1: config 0 has no interface number 0
[ 1529.307118][T10207] usb 6-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1529.318366][T10207] usb 6-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1529.327751][T10207] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1529.337386][T10207] usb 6-1: config 0 descriptor??
[ 1529.346009][T11774] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[ 1529.401911][T10856] usb 3-1: Using ep0 maxpacket: 16
[ 1529.521978][T10856] usb 3-1: config 0 has an invalid interface number: 128 but max is 0
[ 1529.530353][T10856] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1529.540693][T10856] usb 3-1: config 0 has no interface number 0
[ 1529.546887][T10856] usb 3-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1529.558127][T10856] usb 3-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1529.567428][T10856] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1529.578345][T10856] usb 3-1: config 0 descriptor??
[ 1529.592403][T10207] radio-si470x 6-1:0.128: DeviceID=0x65f7 ChipID=0xba81
[ 1529.622135][T11774] usb 2-1: Using ep0 maxpacket: 16
20:26:44 executing program 1:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

20:26:44 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x10, 0xffffffffffffffff, 0x0)

[ 1529.782049][T11774] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 1529.789855][T11774] usb 2-1: can't read configurations, error -61
[ 1529.798088][T11774] usb usb2-port1: unable to enumerate USB device
[ 1529.814161][T10207] radio-si470x 6-1:0.128: software version 101, hardware version 247
[ 1529.842079][T10856] radio-si470x 3-1:0.128: DeviceID=0xb355 ChipID=0xb681
[ 1529.972339][ T8851] usb 4-1: new high-speed USB device number 76 using dummy_hcd
[ 1530.022234][T10207] radio-si470x 6-1:0.128: submitting int urb failed (-90)
[ 1530.061998][T10856] radio-si470x 3-1:0.128: software version 179, hardware version 85
[ 1530.221916][ T8851] usb 4-1: Using ep0 maxpacket: 16
[ 1530.231872][ T8450] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[ 1530.252121][T10207] radio-si470x 6-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1530.261016][T10207] radio-si470x: probe of 6-1:0.128 failed with error -22
[ 1530.274344][T10207] usb 6-1: USB disconnect, device number 20
[ 1530.302124][T10856] radio-si470x 3-1:0.128: submitting int urb failed (-90)
[ 1530.372003][ T8851] usb 4-1: config 0 has an invalid interface number: 128 but max is 0
[ 1530.380426][ T8851] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1530.390743][ T8851] usb 4-1: config 0 has no interface number 0
[ 1530.396977][ T8851] usb 4-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1530.408243][ T8851] usb 4-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1530.417454][ T8851] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1530.427163][ T8851] usb 4-1: config 0 descriptor??
[ 1530.472096][ T8450] usb 2-1: Using ep0 maxpacket: 16
[ 1530.592072][ T8450] usb 2-1: config 0 has an invalid interface number: 128 but max is 0
[ 1530.600511][ T8450] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1530.610778][ T8450] usb 2-1: config 0 has no interface number 0
[ 1530.617017][ T8450] usb 2-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1530.628199][ T8450] usb 2-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1530.637342][ T8450] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1530.646798][ T8450] usb 2-1: config 0 descriptor??
20:26:45 executing program 3:
r0 = syz_usb_connect(0x3, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1f, 0xed, 0x6d, 0x10, 0x413, 0x6025, 0x20ae, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x6, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x6d, 0x0, 0x1, 0x5d, 0x45, 0x17, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

20:26:45 executing program 4:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0xe6)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14)
sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000180)=@nfc={0x27, 0x1}, 0x80, 0x0}}], 0x3ad, 0x0)

20:26:45 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x10, 0xffffffffffffffff, 0x0)

[ 1530.728728][ T8851] radio-si470x 4-1:0.128: si470x_get_report: usb_control_msg returned -71
[ 1530.737793][ T8851] radio-si470x: probe of 4-1:0.128 failed with error -5
[ 1530.782812][T10856] radio-si470x 3-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1530.792005][T10856] radio-si470x: probe of 3-1:0.128 failed with error -22
20:26:45 executing program 5:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x0, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x20000, 0x0)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f00000001c0)={0x7, 0x100})
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000200)={0xfffffffffffffd55, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x23, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r4 = socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r5=>0xffffffffffffffff})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
close(r6)
splice(r5, 0x0, r6, 0x0, 0x10003, 0x0)
ioctl$EVIOCGABS3F(r5, 0x8018457f, &(0x7f00000005c0)=""/181)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @multicast2}}}, &(0x7f0000000180)=0x90)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e20, 0xaa, @empty, 0x8000}, {0xa, 0x4e24, 0x7fffffff, @dev={0xfe, 0x80, [], 0xf}, 0x6}, 0x8000, [0x8, 0x1, 0x84, 0xf5, 0x7, 0x5, 0x0, 0x3]}, 0x5c)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

[ 1530.830738][ T8851] usb 4-1: USB disconnect, device number 76
[ 1530.869425][T10856] usb 3-1: USB disconnect, device number 70
20:26:45 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x10, 0xffffffffffffffff, 0x0)

[ 1530.922238][ T8450] radio-si470x 2-1:0.128: DeviceID=0x6df7 ChipID=0xba81
20:26:46 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

20:26:46 executing program 0:
r0 = syz_usb_connect(0x2, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x0, 0x0)
fcntl$getownex(r1, 0x10, &(0x7f0000000040))
fchmod(r1, 0x100)
syz_usb_control_io(r0, 0x0, 0x0)

20:26:46 executing program 4 (fault-call:4 fault-nth:0):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

[ 1531.142158][ T8450] radio-si470x 2-1:0.128: software version 109, hardware version 247
[ 1531.222232][T11774] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[ 1531.236309][ T2831] FAULT_INJECTION: forcing a failure.
[ 1531.236309][ T2831] name failslab, interval 1, probability 0, space 0, times 0
[ 1531.242165][ T8851] usb 4-1: new high-speed USB device number 77 using dummy_hcd
[ 1531.249333][ T2831] CPU: 0 PID: 2831 Comm: syz-executor.4 Not tainted 5.3.0-rc7+ #0
[ 1531.264573][ T2831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1531.274654][ T2831] Call Trace:
[ 1531.278047][ T2831]  dump_stack+0x191/0x1f0
[ 1531.282421][ T2831]  ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0
[ 1531.288381][ T2831]  should_fail+0xa3f/0xa50
[ 1531.292882][ T2831]  __should_failslab+0x264/0x280
[ 1531.297859][ T2831]  should_failslab+0x29/0x70
[ 1531.302496][ T2831]  kmem_cache_alloc+0xd6/0xd10
[ 1531.307320][ T2831]  ? __msan_metadata_ptr_for_load_4+0x10/0x20
[ 1531.313429][ T2831]  ? vm_area_dup+0x64/0x1a0
[ 1531.318003][ T2831]  vm_area_dup+0x64/0x1a0
[ 1531.322370][ T2831]  __split_vma+0x1cf/0xb40
[ 1531.326823][ T2831]  __do_munmap+0xa04/0x2500
[ 1531.331386][ T2831]  mmap_region+0x14f7/0x3950
[ 1531.331994][T10207] usb 1-1: new full-speed USB device number 57 using dummy_hcd
[ 1531.336048][ T2831]  ? cap_mmap_addr+0x276/0x3c0
[ 1531.336133][ T2831]  do_mmap+0x1826/0x1e60
[ 1531.336236][ T2831]  vm_mmap_pgoff+0x31a/0x440
[ 1531.357422][ T2831]  ksys_mmap_pgoff+0x24f/0xb00
[ 1531.362266][ T2831]  __se_sys_mmap+0x172/0x1a0
[ 1531.366900][ T2831]  __x64_sys_mmap+0x69/0x90
[ 1531.371440][ T2831]  do_syscall_64+0xbc/0xf0
[ 1531.375967][ T2831]  entry_SYSCALL_64_after_hwframe+0x63/0xe7
[ 1531.381906][ T2831] RIP: 0033:0x459a59
[ 1531.385861][ T2831] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1531.405575][ T2831] RSP: 002b:00007ff632316c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 1531.414006][ T2831] RAX: ffffffffffffffda RBX: 00007ff632316c90 RCX: 0000000000459a59
20:26:46 executing program 2:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x20000, 0x0)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000200)={0xfffffffffffffd55, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x23, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r4=>0xffffffffffffffff})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
close(r5)
ioctl$EVIOCGABS3F(r4, 0x8018457f, &(0x7f00000005c0)=""/181)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

[ 1531.422001][ T2831] RDX: 0000000000000007 RSI: 0000000000fff000 RDI: 0000000020000000
[ 1531.430074][ T2831] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000
[ 1531.438073][ T2831] R10: 0000000000000032 R11: 0000000000000246 R12: 00007ff6323176d4
[ 1531.446064][ T2831] R13: 00000000004c6174 R14: 00000000004db118 R15: 0000000000000005
20:26:46 executing program 4 (fault-call:4 fault-nth:1):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

[ 1531.492566][ T8450] radio-si470x 2-1:0.128: submitting int urb failed (-90)
[ 1531.500151][ T8851] usb 4-1: Using ep0 maxpacket: 16
[ 1531.588322][ T2837] FAULT_INJECTION: forcing a failure.
[ 1531.588322][ T2837] name failslab, interval 1, probability 0, space 0, times 0
[ 1531.601140][ T2837] CPU: 0 PID: 2837 Comm: syz-executor.4 Not tainted 5.3.0-rc7+ #0
[ 1531.609034][ T2837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1531.619166][ T2837] Call Trace:
[ 1531.622504][ T2837]  dump_stack+0x191/0x1f0
[ 1531.622555][ T8851] usb 4-1: config 6 has an invalid interface number: 109 but max is 0
[ 1531.622630][ T8851] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[ 1531.626938][ T2837]  ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0
[ 1531.626998][ T2837]  should_fail+0xa3f/0xa50
[ 1531.635374][ T8851] usb 4-1: config 6 has no interface number 0
[ 1531.645240][ T2837]  __should_failslab+0x264/0x280
[ 1531.645298][ T2837]  should_failslab+0x29/0x70
[ 1531.651239][ T8851] usb 4-1: config 6 interface 109 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1531.655607][ T2837]  kmem_cache_alloc+0xd6/0xd10
[ 1531.655649][ T2837]  ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0
[ 1531.655685][ T2837]  ? anon_vma_clone+0x167/0xcb0
[ 1531.655742][ T2837]  anon_vma_clone+0x167/0xcb0
[ 1531.661920][ T8851] usb 4-1: New USB device found, idVendor=0413, idProduct=6025, bcdDevice=20.ae
[ 1531.666748][ T2837]  ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0
[ 1531.671348][ T8851] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1531.682331][ T2837]  ? vma_dup_policy+0x12f/0x190
[ 1531.682369][ T2837]  __split_vma+0x40d/0xb40
[ 1531.682421][ T2837]  __do_munmap+0xa04/0x2500
[ 1531.717558][ T2837]  mmap_region+0x14f7/0x3950
[ 1531.735822][ T8851] dvb-usb: found a 'Leadtek - USB2.0 Winfast DTV dongle' in cold state, will try to load a firmware
[ 1531.739328][ T2837]  ? cap_mmap_addr+0x276/0x3c0
[ 1531.744945][ T8851] usb 4-1: Direct firmware load for dvb-usb-dibusb-6.0.0.8.fw failed with error -2
[ 1531.754714][ T2837]  do_mmap+0x1826/0x1e60
[ 1531.754795][ T2837]  vm_mmap_pgoff+0x31a/0x440
[ 1531.759642][ T8851] dvb-usb: did not find the firmware file 'dvb-usb-dibusb-6.0.0.8.fw' (status -2). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[ 1531.768884][ T2837]  ksys_mmap_pgoff+0x24f/0xb00
[ 1531.768937][ T2837]  __se_sys_mmap+0x172/0x1a0
[ 1531.768978][ T2837]  __x64_sys_mmap+0x69/0x90
[ 1531.769034][ T2837]  do_syscall_64+0xbc/0xf0
[ 1531.773384][ T8851] dvb_usb_dibusb_mc: probe of 4-1:6.109 failed with error -2
[ 1531.777883][ T2837]  entry_SYSCALL_64_after_hwframe+0x63/0xe7
[ 1531.812399][T10207] usb 1-1: config 0 has an invalid interface number: 128 but max is 0
[ 1531.818880][ T2837] RIP: 0033:0x459a59
[ 1531.824915][T10207] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1531.832914][ T2837] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1531.832937][ T2837] RSP: 002b:00007ff632316c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 1531.832974][ T2837] RAX: ffffffffffffffda RBX: 00007ff632316c90 RCX: 0000000000459a59
[ 1531.832997][ T2837] RDX: 0000000000000007 RSI: 0000000000fff000 RDI: 0000000020000000
[ 1531.833019][ T2837] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000
[ 1531.833042][ T2837] R10: 0000000000000032 R11: 0000000000000246 R12: 00007ff6323176d4
[ 1531.833064][ T2837] R13: 00000000004c6174 R14: 00000000004db118 R15: 0000000000000005
[ 1531.875856][T10207] usb 1-1: config 0 has no interface number 0
[ 1531.921642][T10207] usb 1-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[ 1531.921935][T11774] usb 6-1: Using ep0 maxpacket: 16
[ 1531.932945][T10207] usb 1-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1531.932989][T10207] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1531.934220][T11836] usb 3-1: new high-speed USB device number 71 using dummy_hcd
[ 1532.000746][T10207] usb 1-1: config 0 descriptor??
[ 1532.052184][T11774] usb 6-1: config 0 has an invalid interface number: 128 but max is 0
[ 1532.060607][T11774] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1532.071224][T11774] usb 6-1: config 0 has no interface number 0
[ 1532.077461][T11774] usb 6-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1532.077563][T11774] usb 6-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1532.097691][T11774] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1532.106749][ T8450] radio-si470x 2-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1532.112365][T11774] usb 6-1: config 0 descriptor??
[ 1532.115986][ T8450] radio-si470x: probe of 2-1:0.128 failed with error -22
[ 1532.131144][ T8450] usb 2-1: USB disconnect, device number 13
[ 1532.241968][T11836] usb 3-1: Using ep0 maxpacket: 16
[ 1532.262201][T10207] radio-si470x 1-1:0.128: DeviceID=0x60f7 ChipID=0xba81
[ 1532.362083][T11836] usb 3-1: config 0 has an invalid interface number: 128 but max is 0
[ 1532.370452][T11836] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1532.380775][T11836] usb 3-1: config 0 has no interface number 0
[ 1532.387016][T11836] usb 3-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1532.398235][T11836] usb 3-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1532.401982][T11774] radio-si470x 6-1:0.128: DeviceID=0xb255 ChipID=0xb681
[ 1532.408107][T11836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1532.410198][T11836] usb 3-1: config 0 descriptor??
[ 1532.482075][T10207] radio-si470x 1-1:0.128: software version 96, hardware version 247
[ 1532.632054][T11774] radio-si470x 6-1:0.128: software version 178, hardware version 85
[ 1532.682115][T11836] radio-si470x 3-1:0.128: DeviceID=0x63f7 ChipID=0xba81
[ 1532.702170][T10207] radio-si470x 1-1:0.128: submitting int urb failed (-90)
[ 1532.852159][T11774] radio-si470x 6-1:0.128: submitting int urb failed (-90)
[ 1532.881965][ T8450] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[ 1532.892719][T11836] radio-si470x 3-1:0.128: software version 99, hardware version 247
[ 1533.072178][T11774] radio-si470x 6-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1533.081054][T11774] radio-si470x: probe of 6-1:0.128 failed with error -22
[ 1533.097509][T11774] usb 6-1: USB disconnect, device number 21
[ 1533.112123][T11836] radio-si470x 3-1:0.128: submitting int urb failed (-90)
[ 1533.132102][ T8450] usb 2-1: Using ep0 maxpacket: 16
[ 1533.137473][T10207] radio-si470x 1-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1533.148210][T10207] radio-si470x: probe of 1-1:0.128 failed with error -22
[ 1533.164524][T10207] usb 1-1: USB disconnect, device number 57
[ 1533.262082][ T8450] usb 2-1: config 0 has an invalid interface number: 128 but max is 0
[ 1533.270502][ T8450] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1533.280850][ T8450] usb 2-1: config 0 has no interface number 0
[ 1533.287122][ T8450] usb 2-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1533.298359][ T8450] usb 2-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1533.307555][ T8450] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1533.319036][ T8450] usb 2-1: config 0 descriptor??
[ 1533.542046][T11836] radio-si470x 3-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1533.551070][T11836] radio-si470x: probe of 3-1:0.128 failed with error -22
[ 1533.582932][ T8450] radio-si470x 2-1:0.128: DeviceID=0x6af7 ChipID=0xba81
[ 1533.590498][T11836] usb 3-1: USB disconnect, device number 71
20:26:48 executing program 1:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x0, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "3a3c5a98a0b88f20dab28f43fd604a180bf5c40802c641ed238502ea05de14099c5dfa19c61d2715c179a8913d43848ebb6058f0ae47cea480ef4ae3d1bd7724bc870bcd80db1746d211f5f7dde4bd2f33e5a634f6174cf4dab428a4bdd5141e1cdfd7535edf28bbf44e35cb9180ea022e265108d6db9ab408e8b86c601dc9baf360878fefb4286f933f037b53d6c51bf10ba2a82424f4cf64d7a43f8235463a4e3651ce704859e92aa583ee3327735693aa9147f8b908c3d665302cff8ef37ebcb56efae4f83bc51fa46f6295b1622a46895dded87879de64c990feb0f52a533e44a8d7c9ef25ea0f8e90ff09ab06f93e605e04f9f5ac3102bcefe10a31"}}, 0x0, 0x0, 0x0}, 0x0)
mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x0, 0x6, 0xf3, {0xf3, 0x5a31514fdabc4a22, "a1f89e7df903414c173d6ade146d20efcd5f7f3547a52138632ceb69ecf32e35709fbd51f33c36d12504e4f6c3b41974a3f08ec57884f6c08602b6e58ab300105dccb39feff777f7e599e61e6b82c881457536c2fa2bde81892e0be9e18f2fa40f4605325aeffbfc74b40e070ef94f5238c58886fd3f21aa0e618526807320dd2d435dcbf9f26aaced3e3d82a9116aa95d0dc552f8df923b578d17a8d5d0da2522c7c9a04eb46cdfc5a49514afb067228e33f0d00c592a09a8bf724e2d027be5a7f4948d5b5c74cb1b3e83432c1e80a384bfc24b9ba17c884ba50114ec0141f3b9b06719ea6f0f2bfdfdc530c40e7fe422"}}, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, &(0x7f0000000300)={0x0, 0xf, 0xd7, {0x5, 0xf, 0xd7, 0x5, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x5, 0xf7, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xb, 0x20, 0x8, 0x81}, @generic={0x3, 0x10, 0x2}, @generic={0xb8, 0x10, 0xa, "c79e681dd0d2da14b965902a141baf04804ff351037411eddce3fad5502db63ac3d08a9542a91bc5842f4754f9c6b273dd2a9195c124d24edf123d373e20e1a5b526fb39769e3f29f60ea6c46a60e69e885a9fc6b3a199adac4465dcce5fe67506c7c2e56ca718844b5810a2525a02794ca02fa5a8409a5746a81676fcccc1f24fb842e66a5b3ce04a9d6a0c558f1d204046f77f429f8637f59d9e30325518969f32f5b88b353aea78edc0c7a5da7a38198c173d47"}]}}, &(0x7f0000000400)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x78, 0x3, 0x8, "dec8470e", "f84b4c04"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x52, 0x2, 0x1, 0xa9, 0x1, 0x8f, 0xa2}}}, &(0x7f0000000c00)={0xac, &(0x7f00000005c0)={0x40, 0xf, 0x71, "cb7891b268d1772c591ae294bc1340d0d4902324891b0db35aa1a4b0c4b9cab349d917786b7e251eca976aa1dfab0a65146113579633f8c422978a40d9fb49d36bf2c9e6051ebb50f9ccbcf3dd6748f817d070a76f445e588df25fe857f1897cee1eb6a5470b9fc70e11815b9a7ff7e005"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0xf8}, &(0x7f00000006c0)={0x20, 0x81, 0x2, "ab44"}, &(0x7f0000000700)={0x20, 0x82, 0x3, "ce5ba3"}, &(0x7f0000000740)={0x20, 0x83, 0x2, "9fad"}, &(0x7f0000000780)={0x20, 0x84, 0x1, '1'}, &(0x7f00000007c0)={0x20, 0x85, 0x3, "3f7503"}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x2, 0x4}}, &(0x7f0000000880)={0x40, 0x7, 0x2, 0x8}, &(0x7f00000008c0)={0x40, 0x9, 0x1, 0x20}, &(0x7f00000009c0)={0x40, 0xb, 0x2, "f253"}, &(0x7f0000000a00)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000a40)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000a80)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000ac0)={0x40, 0x19, 0x2, "50b1"}, &(0x7f0000000b00)={0x40, 0x1a, 0x2, 0xfff}, &(0x7f0000000b40)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000000b80)={0x40, 0x1e, 0x1, 0x80}, &(0x7f0000000bc0)={0x40, 0x21, 0x1, 0xff}})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r2 = msgget(0x3, 0x192)
socket$nl_crypto(0x10, 0x3, 0x15)
clock_getres(0x5, &(0x7f0000000180))
msgrcv(r2, &(0x7f00000000c0)={0x0, ""/170}, 0xb2, 0x3, 0x800)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
accept$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10)

20:26:48 executing program 4 (fault-call:4 fault-nth:2):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

[ 1533.672234][ T8450] radio-si470x 2-1:0.128: si470x_get_report: usb_control_msg returned -71
[ 1533.680902][ T8450] radio-si470x 2-1:0.128: si470x_get_scratch: si470x_get_report returned -71
[ 1533.690369][ T8450] radio-si470x: probe of 2-1:0.128 failed with error -5
[ 1533.746838][ T8450] usb 2-1: USB disconnect, device number 14
20:26:48 executing program 5:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x0, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x20000, 0x0)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f00000001c0)={0x7, 0x100})
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000200)={0xfffffffffffffd55, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x23, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r4 = socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r5=>0xffffffffffffffff})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
close(r6)
splice(r5, 0x0, r6, 0x0, 0x10003, 0x0)
ioctl$EVIOCGABS3F(r5, 0x8018457f, &(0x7f00000005c0)=""/181)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @multicast2}}}, &(0x7f0000000180)=0x90)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e20, 0xaa, @empty, 0x8000}, {0xa, 0x4e24, 0x7fffffff, @dev={0xfe, 0x80, [], 0xf}, 0x6}, 0x8000, [0x8, 0x1, 0x84, 0xf5, 0x7, 0x5, 0x0, 0x3]}, 0x5c)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

20:26:48 executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0)
r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2)
ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000000c0)={0xa})
ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)={0x3})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000440)={0x80000000})
fstatfs(0xffffffffffffffff, &(0x7f0000000080)=""/141)
sendmsg$nl_netfilter(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000c8d000)={&(0x7f00000001c0)={0x20, 0x1, 0x2, 0x40000800000001, 0x0, 0x0, {0xa}, [@nested={0xc, 0x20, [@typed={0x8, 0xfffd, @ipv4=@multicast2}]}]}, 0x20}}, 0x0)
write$binfmt_script(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/454], 0x1c6)

20:26:48 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setrlimit(0xe, &(0x7f0000000040)={0x1fffffc, 0x1})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

[ 1533.883148][T11836] usb 4-1: USB disconnect, device number 77
20:26:49 executing program 3:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000100)={0x400000100002f, {0x0, 0x0, 0xdeba}})
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000002c0)={{}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r1, 0x5501)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000100)={0x400000100002f, {0x0, 0x0, 0xdeba}})
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000002c0)={{}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r2, 0x5501)
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xfffffdf9, &(0x7f0000000880)=ANY=[@ANYRES64=r1, @ANYPTR64=&(0x7f00000007c0)=ANY=[@ANYPTR=&(0x7f0000000340)=ANY=[@ANYRESDEC=r2, @ANYRES64=0x0], @ANYPTR64, @ANYRES32, @ANYPTR=&(0x7f0000000780)=ANY=[@ANYRES64=0x0, @ANYRES32=r1, @ANYRESDEC=0x0, @ANYRESOCT=r1, @ANYRES32=0x0]], @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC, @ANYPTR64, @ANYRESHEX=r2, @ANYRESOCT, @ANYRES32=r2]], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000100)={0x400000100002f, {0x0, 0x0, 0xdeba}})
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f00000002c0)={{}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r3, 0x5501)
ioctl$void(r3, 0x5451)
r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x8000, 0x0)
ioctl$SG_GET_PACK_ID(r4, 0x227c, &(0x7f0000000100))
r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x5c0, 0x0)
ioctl$SIOCGIFMTU(r5, 0x8921, &(0x7f0000000040))
syz_usb_control_io$hid(r0, 0x0, 0x0)
r6 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd5e23dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r7 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r7, r6, r7}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000240)={&(0x7f0000000080)={'md4\x00'}})
keyctl$revoke(0x3, r7)
r8 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd5e23dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r9 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r9, r8, r9}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000240)={&(0x7f0000000080)={'md4\x00'}})
keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000180)={r9, 0xfe, 0x30}, &(0x7f0000000600)={'enc=', 'raw', ' hash=', {'cmac(cipher_null)\x00'}}, &(0x7f0000000680)="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", &(0x7f00000001c0)=""/48)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

20:26:49 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x19)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

20:26:49 executing program 2:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x20000, 0x0)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000200)={0xfffffffffffffd55, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x23, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r4=>0xffffffffffffffff})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
close(r5)
ioctl$EVIOCGABS3F(r4, 0x8018457f, &(0x7f00000005c0)=""/181)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

20:26:49 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
delete_module(&(0x7f0000000880)='rose0\x00', 0xc00)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet(0x10, 0x3, 0xc)
r3 = semget$private(0x0, 0x2, 0x0)
semctl$GETZCNT(r3, 0x0, 0xf, &(0x7f0000001640)=""/4096)
sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000ac0)="bcef08d38fd2f43c45fcb6f6920ec67d5ad947e4ed7d0b47098adf68519cc8c13826c97cd7095c7565357c21f0feb179f41e2263e37f8eea5bda1e648ea3373d986de91d905308445838c4a936613455db44a0047db97f4395cf13546aa8848bf6891d2afc0d4075902c413f5633e2649a5cd82b40645ff9d9ea1e186ea41765d7b95ac06887f904d7a9b7d296ae44c906c9fb71dc31aa4ba4832744147b219df736b78cd113764534d9f7be7a87a4319b4e61995e6fb935918225969def9c1e2f820fa44e4edf80f01646faf06bdac6afb2e5cf460afedd14cb37abd9b64e2f4cbfdd", 0xe3}, {&(0x7f0000000980)="f10feec5a803cb3338be941ea09f03d3b8e221f2b6d7c255f8ddc8ba3b8da5ad9c9e51bb1166fd59807c9463c0f7dad1218983871413846abaf327fa3adac6f50bbc7101cbec6fbe9dbeeacca5df1eaf74de787cbe0fffe20f55a57c211781d274553b1b08833689635ea688f347ad280a0b07705d9b1078cd8fbccec846c6946f85c7df5d5bb9d41056ec530aa47732e878d934428bf4c19b", 0x99}, {&(0x7f0000000a40)="3a236b0300ea92de9c60c18882bfdf2f48ae25b40000", 0x16}], 0x3}, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000840)={'rose0\x00', 0x4})
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = socket$rds(0x15, 0x5, 0x0)
lsetxattr$security_selinux(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='security.selinux\x00', &(0x7f0000000800)='system_u:object_r:textrel_shlib_t:s0\x00', 0x25, 0x8fc39bd85001d74f)
ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0)
bind$rds(r4, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0)

[ 1534.111979][ T8450] usb 2-1: new high-speed USB device number 15 using dummy_hcd
20:26:49 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x1})
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
r2 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000170a07031dfffd942367ede3b9a3484409000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
getsockopt$inet_udp_int(r2, 0x11, 0x66, &(0x7f0000000000), &(0x7f0000000080)=0x4)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x2, r6}]]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x2, r6}]]}}}]}, 0x38}}, 0x0)
r7 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x8400, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xd, 0x2, 0x8, 0x5, 0x512, 0xffffffffffffffff, 0x40, [], r6, r7, 0x0, 0x3}, 0x3c)

[ 1534.212983][ T2976] rdma_op 00000000af642269 conn xmit_rdma 0000000027407062
[ 1534.232035][T11774] usb 6-1: new high-speed USB device number 22 using dummy_hcd
20:26:49 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setrlimit(0x2, &(0x7f0000000000)={0x1fffffc, 0x2007ffffffe})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x8, 0x32, 0xffffffffffffffff, 0x27)

[ 1534.353148][ T8450] usb 2-1: Using ep0 maxpacket: 16
20:26:49 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1cf8a118fc0d000000", @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000000000000941000000140018000000007564703a73797a3100000000"], 0x30}}, 0x0)
sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4080808}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x10, 0x70bd28, 0x80000000, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20004404)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$inet6(0xa, 0x5, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @multicast2}}}, &(0x7f0000000180)=0x90)
r6 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
r7 = socket$inet(0xa, 0x801, 0x84)
listen(r7, 0xfc0004)
dup3(r4, r7, 0x80000)

[ 1534.393955][T11836] usb 4-1: new high-speed USB device number 78 using dummy_hcd
[ 1534.431908][T10856] usb 3-1: new high-speed USB device number 72 using dummy_hcd
[ 1534.472528][ T8450] usb 2-1: config 0 has an invalid interface number: 128 but max is 0
[ 1534.480819][ T8450] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1534.491067][ T8450] usb 2-1: config 0 has no interface number 0
[ 1534.491840][T11774] usb 6-1: Using ep0 maxpacket: 16
[ 1534.497317][ T8450] usb 2-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1534.513608][ T8450] usb 2-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1534.522818][ T8450] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1534.533751][ T8450] usb 2-1: config 0 descriptor??
[ 1534.651963][T11836] usb 4-1: Using ep0 maxpacket: 16
[ 1534.652264][T11774] usb 6-1: config 0 has an invalid interface number: 128 but max is 0
[ 1534.665521][T11774] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1534.675655][T11774] usb 6-1: config 0 has no interface number 0
[ 1534.681883][T11774] usb 6-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1534.693069][T11774] usb 6-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1534.702192][T11774] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1534.711417][T10856] usb 3-1: Using ep0 maxpacket: 16
[ 1534.717701][T11774] usb 6-1: config 0 descriptor??
[ 1534.772244][T11836] usb 4-1: config 0 has an invalid interface number: 128 but max is 0
[ 1534.780673][T11836] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1534.791054][T11836] usb 4-1: config 0 has no interface number 0
[ 1534.797466][T11836] usb 4-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1534.808722][T11836] usb 4-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1534.817939][T11836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1534.826999][ T8450] radio-si470x 2-1:0.128: DeviceID=0x65f7 ChipID=0xba81
[ 1534.835161][T11836] usb 4-1: config 0 descriptor??
[ 1534.843024][T10856] usb 3-1: config 0 has an invalid interface number: 128 but max is 0
[ 1534.851344][T10856] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1534.861586][T10856] usb 3-1: config 0 has no interface number 0
[ 1534.867850][T10856] usb 3-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1534.879402][T10856] usb 3-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1534.888632][T10856] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1534.896933][T11836] radio-si470x 4-1:0.128: si470x_get_report: usb_control_msg returned -32
[ 1534.898320][T10856] usb 3-1: config 0 descriptor??
[ 1534.906053][T11836] radio-si470x: probe of 4-1:0.128 failed with error -5
[ 1534.992138][T11774] radio-si470x 6-1:0.128: DeviceID=0xb455 ChipID=0xb681
[ 1535.012306][ T8450] radio-si470x 2-1:0.128: software version 101, hardware version 247
[ 1535.162084][T10856] radio-si470x 3-1:0.128: DeviceID=0xb855 ChipID=0xb681
[ 1535.202178][T11774] radio-si470x 6-1:0.128: software version 180, hardware version 85
[ 1535.233465][ T8450] radio-si470x 2-1:0.128: submitting int urb failed (-90)
[ 1535.381991][T10856] radio-si470x 3-1:0.128: software version 184, hardware version 85
[ 1535.422173][T11774] radio-si470x 6-1:0.128: submitting int urb failed (-90)
[ 1535.454826][ T3194] input: syz0 as /devices/virtual/input/input1461
[ 1535.473349][ T3194] input: syz0 as /devices/virtual/input/input1462
[ 1535.602224][T10856] radio-si470x 3-1:0.128: submitting int urb failed (-90)
[ 1535.642075][T11774] radio-si470x 6-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1535.650968][T11774] radio-si470x: probe of 6-1:0.128 failed with error -22
[ 1535.670129][T11774] usb 6-1: USB disconnect, device number 22
[ 1535.682358][ T8450] radio-si470x 2-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1535.691392][ T8450] radio-si470x: probe of 2-1:0.128 failed with error -22
[ 1535.701666][ T8450] usb 2-1: USB disconnect, device number 15
[ 1535.838555][ T3197] input: syz0 as /devices/virtual/input/input1463
[ 1536.022348][T10856] radio-si470x 3-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1536.031269][T10856] radio-si470x: probe of 3-1:0.128 failed with error -22
[ 1536.047088][T10856] usb 3-1: USB disconnect, device number 72
[ 1536.431895][ T8450] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[ 1536.671841][ T8450] usb 2-1: Using ep0 maxpacket: 16
[ 1536.792077][ T8450] usb 2-1: config 0 has an invalid interface number: 128 but max is 0
[ 1536.800390][ T8450] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1536.810715][ T8450] usb 2-1: config 0 has no interface number 0
[ 1536.816911][ T8450] usb 2-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1536.828134][ T8450] usb 2-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1536.837328][ T8450] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1536.846817][ T8450] usb 2-1: config 0 descriptor??
[ 1537.102046][ T8450] radio-si470x 2-1:0.128: DeviceID=0x62f7 ChipID=0xba81
[ 1537.142274][ T8450] radio-si470x 2-1:0.128: software version 98, hardware version 247
20:26:52 executing program 1:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000000)={0x0, 0x0, 0x35, "b3dcdce18c21b88d7924f32a2135160ac70c430ddf20b7214b7dd5a4d1276d58832f68716b5427b325a156260bff49d9823006a97a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

20:26:52 executing program 4:
r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0), 0xc)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={0x0, r0, 0xe}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = gettid()
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000013000)={0x1, 0x10000007f, 0xa, 0x1000000000000008}, 0x1c)
sendmmsg$unix(r1, &(0x7f0000004f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32=r3, @ANYBLOB='Z\x00\x00\x00'], 0x48}], 0xfd, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x22, 0x0, @tid=r2}, &(0x7f0000000080)=<r4=>0x0)
clock_gettime(0x0, &(0x7f00000000c0))
clock_gettime(0x0, &(0x7f0000000100)={<r5=>0x0, <r6=>0x0})
timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {r5, r6+10000000}}, &(0x7f0000000180))
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = fcntl$dupfd(r7, 0x0, r7)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
r11 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x2, r12}]]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x2, r12}]]}}}]}, 0x38}}, 0x0)
flock(r11, 0x2)
setsockopt$inet6_IPV6_PKTINFO(r7, 0x29, 0x32, &(0x7f0000000240)={@mcast2, r12}, 0x14)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0xc0000000000000)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xf, 0x10010, 0xffffffffffffffff, 0x0)

20:26:52 executing program 0:
mknod$loop(&(0x7f0000000200)='./file0\x00', 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000800)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x0, &(0x7f0000000b00)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
unlink(&(0x7f0000000000)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)

20:26:52 executing program 5:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x0, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x20000, 0x0)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f00000001c0)={0x7, 0x100})
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000200)={0xfffffffffffffd55, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x23, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r4 = socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r5=>0xffffffffffffffff})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
close(r6)
splice(r5, 0x0, r6, 0x0, 0x10003, 0x0)
ioctl$EVIOCGABS3F(r5, 0x8018457f, &(0x7f00000005c0)=""/181)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @multicast2}}}, &(0x7f0000000180)=0x90)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e20, 0xaa, @empty, 0x8000}, {0xa, 0x4e24, 0x7fffffff, @dev={0xfe, 0x80, [], 0xf}, 0x6}, 0x8000, [0x8, 0x1, 0x84, 0xf5, 0x7, 0x5, 0x0, 0x3]}, 0x5c)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

20:26:52 executing program 2:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x20000, 0x0)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000200)={0xfffffffffffffd55, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x23, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "3a3c5a98a0b88f20dab28f43fd604a180bf5c40802c641ed238502ea05de14099c5dfa19c61d2715c179a8913d43848ebb6058f0ae47cea480ef4ae3d1bd7724bc870bcd80db1746d211f5f7dde4bd2f33e5a634f6174cf4dab428a4bdd5141e1cdfd7535edf28bbf44e35cb9180ea022e265108d6db9ab408e8b86c601dc9baf360878fefb4286f933f037b53d6c51bf10ba2a82424f4cf64d7a43f8235463a4e3651ce704859e92aa583ee3327735693aa9147f8b908c3d665302cff8ef37ebcb56efae4f83bc51fa46f6295b1622a46895dded87879de64c990feb0f52a533e44a8d7c9ef25ea0f8e90ff09ab06f93e605e04f9f5ac3102bcefe10a31"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r4=>0xffffffffffffffff})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
close(r5)
ioctl$EVIOCGABS3F(r4, 0x8018457f, &(0x7f00000005c0)=""/181)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

[ 1537.231499][ T8450] radio-si470x 2-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1537.240794][ T8450] radio-si470x 2-1:0.128: submitting int urb failed (-90)
[ 1537.297865][ T8450] radio-si470x 2-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1537.309111][ T8450] radio-si470x: probe of 2-1:0.128 failed with error -22
[ 1537.342525][ T8450] usb 2-1: USB disconnect, device number 16
20:26:52 executing program 3:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000cb0f789833a08108899ed4918b47c11d49db6b3163d8490e1aa9928f69f88f93781d0f78cd837b8c4c1d01ad89fcb892bdce828929"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0)
write$cgroup_int(r1, &(0x7f0000000080)=0xd, 0x12)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

20:26:52 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000100)={0x400000100002f, {0x0, 0x0, 0xdeba}})
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000002c0)={{}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r2, 0x5501)
fstat(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
r4 = getegid()
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
write$P9_RSTATu(r1, &(0x7f0000000180)={0x5b, 0x7d, 0x1, {{0x0, 0x44, 0x0, 0x200, {0x10, 0x3, 0x5}, 0x4000000, 0x5, 0x9, 0x9, 0x1, '@', 0x9, 'eth0nodev', 0x0, '', 0x7, '/vmnet0'}, 0x2, '-]', r3, r4, r5}}, 0x5b)

[ 1537.420347][T11774] usb 4-1: USB disconnect, device number 78
20:26:52 executing program 0:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in=@remote, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f0000000000)=0xe8)
r2 = geteuid()
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read'}}, {@allow_other='allow_other'}], [{@permit_directio='permit_directio'}, {@pcr={'pcr', 0x3d, 0x2a}}, {@subj_role={'subj_role', 0x3d, ':\\$'}}, {@fowner_eq={'fowner', 0x3d, r1}}, {@euid_gt={'euid>', r2}}]}})
r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00')
preadv(r3, &(0x7f0000001900)=[{&(0x7f0000000880)=""/4096, 0x1000}], 0x1, 0x0)
r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20ncci\x00', 0x200080, 0x0)
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000280))

[ 1537.532085][T11836] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[ 1537.545656][T10207] usb 3-1: new high-speed USB device number 73 using dummy_hcd
[ 1537.582879][ T3337] input: syz0 as /devices/virtual/input/input1464
20:26:52 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000100)={0x400000100002f, {0x0, 0x0, 0xdeba}})
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000002c0)={{}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r1, 0x5501)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000100)={0x400000100002f, {0x0, 0x0, 0xdeba}})
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000002c0)={{}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r2, 0x5501)
r3 = fcntl$dupfd(r2, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

20:26:52 executing program 0:
r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x5f, 0x1000)
ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000140)=0xe5)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
read$hidraw(r3, &(0x7f00000002c0)=""/130, 0x82)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00')
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4002, &(0x7f00000000c0)=0x4, 0x63, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = gettid()
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000013000)={0x1, 0x10000007f, 0xa, 0x1000000000000008}, 0x1c)
sendmmsg$unix(r6, &(0x7f0000004f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=[@cred={{0x1c, 0x1, 0x2, {r7}}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [r8]}}], 0x48}], 0xfd, 0x0)
r9 = syz_open_procfs(r7, &(0x7f00000003c0)='personality\x00')
ioctl$SCSI_IOCTL_GET_PCI(r9, 0x5387, &(0x7f0000000400))
r10 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r11=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000000)={r11}, &(0x7f00000000c0)=0x14)
write$apparmor_current(0xffffffffffffffff, &(0x7f0000000380)=@hat={'permhat ', 0x0, 0x5e, ['\x00', 'selinux$+vboxnet1\x00', 'nodevlosecurity\x00']}, 0x3e)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000180)={r11, 0xc2, "b591036667bd9d40b8b58751313697151fc8e205b280bdbff8d41a21bd997415dff72dc11c513d7a069ba6fd44b61edecc89698386a6fdcbdc28accc53f7650931c2473b8de6378f5f1810ea703c28289ded55afe69ce2152ee6ee8b5a128b3e7916e78108b4ce1a335ae0719b1403aeb8d85ca9d16f228c3458dcc6ca6f029ae5772c997367adc903c3766a121179585d685bfc662c570adfbd947cc2b902a9ec043ce694ad8da50b53b5b15d398c81d632cd12d5f98df52b0afa109379cc97ead1"}, &(0x7f0000000280)=0xca)

[ 1537.726622][ T3444] input: syz0 as /devices/virtual/input/input1465
[ 1537.793047][ T3444] input: syz0 as /devices/virtual/input/input1466
[ 1537.802197][T10207] usb 3-1: Using ep0 maxpacket: 16
[ 1537.807705][T11836] usb 6-1: Using ep0 maxpacket: 16
[ 1537.844165][ T8450] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[ 1537.896016][ T3444] input: syz0 as /devices/virtual/input/input1467
[ 1537.903759][T11774] usb 4-1: new high-speed USB device number 79 using dummy_hcd
[ 1537.909435][ T3513] input: syz0 as /devices/virtual/input/input1468
[ 1537.935054][T10207] usb 3-1: config 0 has an invalid interface number: 128 but max is 0
20:26:53 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
write$binfmt_aout(r0, &(0x7f0000000300)={{0x10b, 0x3, 0xf7, 0x72, 0x308, 0xfff, 0x2fe, 0x6}, "5d5eed97c41c23920cf67454b51b4df17287562e97", [[]]}, 0x135)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071")
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="850000002e000000a5000000ffffffeac47826719f4595a3eedeb6d021ff9500000000000000"], &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48)

[ 1537.943479][T10207] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1537.953725][T10207] usb 3-1: config 0 has no interface number 0
[ 1537.959949][T10207] usb 3-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1537.971160][T10207] usb 3-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1537.980351][T10207] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1537.992565][T11836] usb 6-1: config 0 has an invalid interface number: 128 but max is 0
[ 1538.000911][T11836] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1538.011484][T11836] usb 6-1: config 0 has no interface number 0
[ 1538.017782][T11836] usb 6-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1538.029050][T11836] usb 6-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1538.038233][T11836] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1538.051652][T10207] usb 3-1: config 0 descriptor??
[ 1538.058637][T11836] usb 6-1: config 0 descriptor??
[ 1538.152142][T11774] usb 4-1: Using ep0 maxpacket: 16
[ 1538.184529][ T8450] usb 2-1: Using ep0 maxpacket: 16
20:26:53 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
pipe(&(0x7f0000001300)={<r2=>0xffffffffffffffff})
r3 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x401, 0x400480)
mq_unlink(&(0x7f0000000080)='\x00')
ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
splice(r2, 0x0, r4, 0x0, 0x10003, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r2, &(0x7f00000001c0)="1f50f04b2d5a513d478859d8ee72797cf72138c332703cc2ead3092be4a583590bb9fad56d57168b2dafc4f8e5818230e3766b48fff70841491f2360c058c1d600ebffffe083a4c8b7db706b063023d9d43331e81d82ad30daaa74433191c70b02d9b8cfe3200884b23bbe9933eff5060051513a157fc50f13d0c7b2a71df1b8dc6fa1ee82c280f673d0166d6102514b8e4b4bb2dc4c79e4cf6a5b6c4a2ce8ac80ce2e440c0323b0af8a9933fa5f872a3df6b1c65b319b349fbb023a4ea72b7f2aef8001f7", &(0x7f0000000000)=""/57}, 0x20)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3)

[ 1538.273059][T11774] usb 4-1: config 0 has an invalid interface number: 128 but max is 0
[ 1538.281377][T11774] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1538.291969][T11774] usb 4-1: config 0 has no interface number 0
[ 1538.298188][T11774] usb 4-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1538.309469][T11774] usb 4-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1538.318745][T11774] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1538.327412][ T8450] usb 2-1: config 0 has an invalid interface number: 128 but max is 0
[ 1538.336354][ T8450] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1538.346616][ T8450] usb 2-1: config 0 has no interface number 0
[ 1538.352881][ T8450] usb 2-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1538.364124][ T8450] usb 2-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1538.375452][ T8450] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1538.384895][T11836] radio-si470x 6-1:0.128: DeviceID=0x60f7 ChipID=0xba81
[ 1538.392643][T10207] radio-si470x 3-1:0.128: DeviceID=0x65f7 ChipID=0xba81
[ 1538.406542][ T8450] usb 2-1: config 0 descriptor??
[ 1538.417338][T11774] usb 4-1: config 0 descriptor??
[ 1538.552302][T11836] radio-si470x 6-1:0.128: software version 96, hardware version 247
[ 1538.561510][T10207] radio-si470x 3-1:0.128: software version 101, hardware version 247
[ 1538.672133][ T8450] radio-si470x 2-1:0.128: DeviceID=0xdcdc ChipID=0xe18c
[ 1538.682141][T11774] radio-si470x 4-1:0.128: DeviceID=0xb355 ChipID=0xb681
[ 1538.782173][T10207] radio-si470x 3-1:0.128: submitting int urb failed (-90)
[ 1538.789695][T11836] radio-si470x 6-1:0.128: submitting int urb failed (-90)
[ 1538.892055][ T8450] radio-si470x 2-1:0.128: software version 220, hardware version 220
[ 1538.902487][T11774] radio-si470x 4-1:0.128: software version 179, hardware version 85
[ 1538.992633][T11836] radio-si470x 6-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1539.001577][T11836] radio-si470x: probe of 6-1:0.128 failed with error -22
[ 1539.011938][T11836] usb 6-1: USB disconnect, device number 23
[ 1539.111960][ T8450] radio-si470x 2-1:0.128: submitting int urb failed (-90)
[ 1539.122136][T11774] radio-si470x 4-1:0.128: submitting int urb failed (-90)
[ 1539.211992][T10207] radio-si470x 3-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1539.220936][T10207] radio-si470x: probe of 3-1:0.128 failed with error -22
[ 1539.237464][T10207] usb 3-1: USB disconnect, device number 73
[ 1539.542551][ T8450] radio-si470x 2-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1539.553658][ T8450] radio-si470x: probe of 2-1:0.128 failed with error -22
[ 1539.570390][ T8450] usb 2-1: USB disconnect, device number 17
[ 1539.772088][T11774] radio-si470x 4-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1539.781063][T11774] radio-si470x: probe of 4-1:0.128 failed with error -22
[ 1539.791214][T11774] usb 4-1: USB disconnect, device number 79
[ 1540.301931][T11774] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[ 1540.531893][ T8450] usb 4-1: new high-speed USB device number 80 using dummy_hcd
[ 1540.542063][T11774] usb 2-1: Using ep0 maxpacket: 16
[ 1540.662100][T11774] usb 2-1: config 0 has an invalid interface number: 128 but max is 0
[ 1540.670458][T11774] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1540.680841][T11774] usb 2-1: config 0 has no interface number 0
[ 1540.687082][T11774] usb 2-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1540.698344][T11774] usb 2-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1540.707566][T11774] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1540.716714][T11774] usb 2-1: config 0 descriptor??
[ 1540.791906][ T8450] usb 4-1: Using ep0 maxpacket: 16
[ 1540.932077][ T8450] usb 4-1: config 0 has an invalid interface number: 128 but max is 0
[ 1540.944611][ T8450] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1540.954852][ T8450] usb 4-1: config 0 has no interface number 0
[ 1540.961028][ T8450] usb 4-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1540.972304][ T8450] usb 4-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1540.981418][ T8450] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1540.981957][T11774] radio-si470x 2-1:0.128: DeviceID=0xdcdc ChipID=0xe18c
[ 1540.990980][ T8450] usb 4-1: config 0 descriptor??
20:26:56 executing program 0:
set_mempolicy(0x4003, 0x0, 0x0)
modify_ldt$write(0x1, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @multicast2}}}, &(0x7f0000000180)=0x90)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB="03020000901c5e9abdd21baf4c5294760c08000000000000d26085ac118d77879cdab20c16f3f31152140361625d6354a1e9776dab58c8f937d232dd1ef20002b2eac386a509fba04a2e0b1295d1b4fb9e859e3e3f0a72a9c090a576d5bfcd40554d13791314b2e9b305100b4041512a1236d88ed673dabf4d0700f9c06c7c9dc6d782d3c96ab7077bb5cafb5d4b3f447699cb67499825607a69e94e920f34ce224f030b75dfb81e6c31ef", @ANYRES32=<r3=>0x0], &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={r3}, &(0x7f00000000c0)=0x14)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000000)={r3, @in6={{0xa, 0x4e24, 0x2, @rand_addr="44ca421b41d1760002ec97eb76daa242", 0x100}}, 0x1, 0xf801}, &(0x7f00000000c0)=0x90)
clone(0x40108000, 0x0, 0x0, 0x0, 0x0)

20:26:56 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000100)={0x400000100002f, {0x0, 0x0, 0xdeba}})
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000002c0)={{}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r1, 0x5501)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612)
r2 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

20:26:56 executing program 5:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x0, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x20000, 0x0)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f00000001c0)={0x7, 0x100})
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000200)={0xfffffffffffffd55, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x23, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r4 = socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r5=>0xffffffffffffffff})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
close(r6)
splice(r5, 0x0, r6, 0x0, 0x10003, 0x0)
ioctl$EVIOCGABS3F(r5, 0x8018457f, &(0x7f00000005c0)=""/181)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @multicast2}}}, &(0x7f0000000180)=0x90)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e20, 0xaa, @empty, 0x8000}, {0xa, 0x4e24, 0x7fffffff, @dev={0xfe, 0x80, [], 0xf}, 0x6}, 0x8000, [0x8, 0x1, 0x84, 0xf5, 0x7, 0x5, 0x0, 0x3]}, 0x5c)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

20:26:56 executing program 2:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x20000, 0x0)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000200)={0xfffffffffffffd55, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x23, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r4=>0xffffffffffffffff})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
close(r5)
ioctl$EVIOCGABS3F(r4, 0x8018457f, &(0x7f00000005c0)=""/181)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

[ 1541.033447][T11774] radio-si470x 2-1:0.128: software version 220, hardware version 220
[ 1541.092131][T11774] radio-si470x 2-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1541.100803][T11774] radio-si470x 2-1:0.128: submitting int urb failed (-90)
20:26:56 executing program 1:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
pipe(&(0x7f0000001300)={<r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000100)={0x400000100002f, {0x0, 0x0, 0xdeba}})
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f00000002c0)={{}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r3, 0x5501)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000000100)={0x400000100002f, {0x0, 0x0, 0xdeba}})
ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f00000002c0)={{}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r4, 0x5501)
splice(r3, 0x0, r4, 0x0, 0x1c41, 0x8)
ioctl$KVM_GET_DEVICE_ATTR(r1, 0x4018aee2, &(0x7f0000000040)={0x0, 0x2af, 0x0, &(0x7f0000000000)=0x8})
syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sched_yield()
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

[ 1541.132645][ T3679] input: syz0 as /devices/virtual/input/input1469
[ 1541.191645][T11774] radio-si470x 2-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1541.201225][T11774] radio-si470x: probe of 2-1:0.128 failed with error -22
[ 1541.230895][ T3683] IPVS: ftp: loaded support on port[0] = 21
[ 1541.245672][T11774] usb 2-1: USB disconnect, device number 18
20:26:56 executing program 3:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r1 = socket(0x2000000000000021, 0x2, 0x2)
sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0xa, 'w'}], 0x18}}], 0x1, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x408088)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

[ 1541.310888][ T8450] radio-si470x 4-1:0.128: si470x_get_report: usb_control_msg returned -71
[ 1541.320076][ T8450] radio-si470x: probe of 4-1:0.128 failed with error -5
[ 1541.329999][ T3679] input: syz0 as /devices/virtual/input/input1470
[ 1541.337326][ T8450] usb 4-1: USB disconnect, device number 80
20:26:56 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000001300)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
setsockopt$CAIFSO_LINK_SELECT(r2, 0x116, 0x7f, &(0x7f0000000000)=0x8, 0x4)

[ 1541.411893][T10856] usb 3-1: new high-speed USB device number 74 using dummy_hcd
[ 1541.433778][ T9944] usb 6-1: new high-speed USB device number 24 using dummy_hcd
20:26:56 executing program 0:
r0 = socket(0x40000000002, 0x3, 0x2)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000480)={@empty, <r1=>0x0}, &(0x7f00000004c0)=0x14)
sendmmsg$inet(r0, &(0x7f0000003980)=[{{&(0x7f0000000340)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000380)="07943a190efdee6a5b569ce2db0fb9d931ec2842ea97d1756c741909cd3b16a3ea98521aa948f1394ecc57eb90e713c55d9cdd7c1f8adf6e0e3e6ea0b39f5b2b8834dec98b9a2403a822f64e0fc9f3f88cbed0fd53debf9395062387c38b50bae4c51a389d71d734a8e3753d4e6e8c6b04042320820219a84c30e322c28cfc658c8c75a2ed43", 0x86}], 0x1, &(0x7f0000000500)=[@ip_retopts={{0x3c, 0x0, 0x7, {[@timestamp={0x44, 0x2c, 0x1, 0x1, 0x9, [{[@multicast1], 0xa0}, {[], 0x7}, {[@dev={0xac, 0x14, 0x14, 0xd}], 0x7fff}, {[@dev={0xac, 0x14, 0x14, 0x29}], 0x5}, {}, {[@rand_addr=0x401], 0x40}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_retopts={{0xa0, 0x0, 0x7, {[@noop, @cipso={0x86, 0x60, 0x0, [{0x3, 0x3, "fe"}, {0x2, 0x12, "23a5b6082f4bae13a410c52aace4a965"}, {0x5, 0x7, "d91f7505b1"}, {0x6, 0x11, "a9fef8241e91e46f2f5fdac3d1b65b"}, {0x1, 0x9, "53e20410564119"}, {0x0, 0x8, "15a0e2c389bc"}, {0x2, 0x8, "1dd7e87f19ca"}, {0x6, 0x11, "a1d887ad2141ea1d803166d9640221"}, {0x2, 0x3, "e0"}]}, @noop, @ssrr={0x89, 0x3, 0xd4}, @timestamp={0x44, 0x10, 0x6, 0x0, 0x6, [{[], 0x1}, {[], 0x4}, {[], 0x7}]}, @rr={0x7, 0x1b, 0x4, [@remote, @dev={0xac, 0x14, 0x14, 0x11}, @local, @multicast1, @multicast2, @remote]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7f}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @multicast1, @loopback}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffffff01}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0x1a8}}, {{&(0x7f00000006c0)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000001840)=[{&(0x7f0000000700)="1a616eef7fe6a73aeb38a693ab704dd92d6de382dce4b486d18ac1caa4d1028a32d686d19210a0dff3de68fa9b8e6cd63899e39644fbb7c4f3042108f9b05aa611601e8aa397339aaa6b424578f8a1721f64a39a300fbf60be872f6615ca17f1fe4cfe1db9901280e99d868b4c3a1bc653da6f66f64efc4a46e83ec91b7144f2b75692993b33157ba60b8932fa7b9e63352e2782f761b913927bda6819cccfa120e8ce3f8fb18f24bbedf3e22e10cf946ebe7b294a05c8437b80e8a283f078ff6e90058429f2462deebc69d213f9a33368ebefe7769b882ef7a20f3e1beb943e76a75aa243deec4c54b4", 0xea}, {&(0x7f0000000800)="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", 0x1000}, {&(0x7f0000001800)="75d5dab4b9b093d0028fa1d954ff5f247032de2d007f3d74080e4713c4579f0aebd4", 0x22}], 0x3, &(0x7f0000001880)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x18}}, {{&(0x7f00000018c0)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000001ac0)=[{&(0x7f0000001940)="86df2953b0feb1bc2fa581caa01e2390ad265446e4ef43e6c104d6a746fb04c69aea37031fce87e56aaaa6cd003a255eb82dee51f7abd4392eff336231701efab33a269118b4a2038aed7dceb5c4aed070c1b9e8696764a89d676e02b7ffc50c1991a0b18e2df1b5ad5d159695de5990fbdd1b0e985ca513", 0x78}, {&(0x7f00000019c0)="012090705eeb80c7604e1dc0b0311bd18ab62caa56da80b0301880e306637fdf2a299fd6c3f835441daf5da02ecc27882a5f6fe3417e19cbd7809bd0f38901e5c36b28903c4152fefaf8ee838a5f7edb684983372aacecd67fdaf0654d12658e7ef1ea8833b966e57490915e982f18728e8b5fb3d446de8d92e333822320214f7a81909f5d50ba6e52c79419e40818ba2e86097359eb0cec7996c9ffff350d3f8e97005b949e195f9a9e9b06e242245f79c52cbcca4a0ab00093215baef0d13fa5ae3a52bc33112f163f2bcdd9663efe2c43461d441c35870cb7c6db6973c8e138aa3bb44f", 0xe5}], 0x2}}, {{&(0x7f0000001b00)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000001e80)=[{&(0x7f0000001b40)="1d58667a43ade8cc83e61428ffe2cb57287f28ec0e19ae095adf8486e23e267ae1f5f291d668df74d248b772b216ed9e0786a216f9f6b12b47c3764cf96d17e376eea6b7bedab1ae9873ebab3ef9e79684834c", 0x53}, {&(0x7f0000001bc0)="65e77fc5c34bb304dbf5ef0c6b7a291a9783a6c744d70837ddae44a5cc30cdd760f3c7c5899df0e082d3a9317fdd1986497b6830b0b22006b0c6d544c286b1f5e453b83336e24d3dbd2a765680ca8bb7744507dd8e3406bf90568187ba75bdf841eb75d410c1f93e2bd05d243ff2b49afec0771421525ff903a0c4d9911d7457332c46832152cf470ea9086d7c85194d958e05a144b50f2b4dbfa3244689370b69820a0ef5938157cdcc6176141fb6a040fe04da9e554bbb5333ee089069991135ce362e8ce22839072910566d7ae4baede8375a13e6b8535d212e1c1c84a98b0ae2fec0c5852777c5", 0xe9}, {&(0x7f0000001cc0)="3f8a7f615b59c9ae327804f93324fc088f5746ebcb675bf58882411d527892619e5ae6858f78a177abc46b437439e070d3ccc847db47b4c199ce8e34e23489c456fc484eba665747a4b3c68fb645ccde759c8c7726784790b8da1290eaf245ee0f99064cc5d7dcb919fa4d75cef96cc8557ac3793affa585b9f67e89f6bb026e5e3a50ae5d8efeda638eb3e3c75f8ac409b48245f997ef8f86b0ddbfacd7e7a3662401a7d9564c68d29cd35fe76bf9c3dbcf4dad667a961d5b723b189ea7aab010bf1f010b68b818", 0xc8}, {&(0x7f0000001dc0)="82b2626a7bd5afbe52a622412939171b77771d7df8b890fdbb6de4be086d3290638cc45c218584ba1087", 0x2a}, {&(0x7f0000001e00)="583f29fe70a13d64a3283c6f677456c7a2fe2f632c147fe89af08797a3302278b3f2c7704d507d6383d3052fb74f4d6f1e87640c757bf7bb4ead73958fea5825fe8e0392be562fd301aa34a8bbae906c334ce57bd3e9ba2bdb4ff3fa79012acd939e20de732d34739633773e25bfeb333bf6d4fa276e", 0x76}], 0x5, &(0x7f0000001f00)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7ff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}], 0x30}}, {{&(0x7f0000001f40)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002140)=[{&(0x7f0000001f80)}, {&(0x7f0000001fc0)="9009a1223bccc162c7a042a6b68e86811ca9291819e6fa928a834a20d9918a5ec2798e6686c1f36d5724526131cc6f202e6525ceb861ec803dc8d948c256521086aa6d8a49bc121d36637b99101e183cf70f162de830e7b367df5a3d7a9e0c9531d8a79fd14f9f8c68932c686b77bd13c5", 0x71}, {&(0x7f0000002040)="34a5f271834c5a2455fd2f8e8a93075190c896a80ac0cdffae1aa43b590dcd1de53afdee7dd95146c16c3685d265353367617ec7446c0cb6e160b4ed724b58ab363f8bba6e55f25ac3aa3ae2b2fab65ab04e5443b05d46979753036f36c4cbdd1f42a581b574b67d142772b9cf14ec23bf12e5d6bd4963711174624c2dd9a30bc670a2b1a260b9ebf6108fc1ffb7cbe779cc17f96cf93b3ee3257b845006a62e9a614409f27f7a5537a081cb702c433065dfbed74ca37e9896a88af62618f451dfc1c098f3101bd0eb2887728e8c9f767c16efeb5ba0578d2c8a", 0xda}, {&(0x7f0000002280)="8f5eefd0425302adbd135958bcf6ffe05d3417d5c287341c3a7b2e9d610a06590ca8f44c38c935aac40667810a1e68c3d6440ddb3f0eaa89d2cf85a6085f9a096043c5a337ebd8d144d8e97726382233129ecad8521ebbf7eb0ce2a94d3092a757e9ef43ef28cd3e9cab36b55101f2511674941b9db4e181115322bdf0bfb9ca4cea3df2547e76bb63500e08e4a480d3ba97d00cd692f2f0d3fc1a8a89a26a741dc160b94efc3efbbcd76604cfca911f2f84d8b3821f321dd5ac9f67cafa4aedda06bee2f3ce42c600975c1c5653aff7e6391d6c", 0xd4}], 0x4, &(0x7f0000002380)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=r1, @ANYBLOB="0000ffffac1414110000000014000000000000000000000002000000010000000000000014000000000000000000000002000000060000000000000014000000000000000000000001000000ba5900000000000011000000000000000000000001000000f800000000000000580000000000000000000000070000000101440c036000000008000007ff9406000000034414f991000000b5ffffffe0000000ea0000d915071f30ffffffffac1414bbac1e0101ac141413e0000001ac1414bb7f0000010014000000000000000000000002000000030000000000000018000000000000e1ffffff0007000000070705ac1e000100"], 0x108}}, {{&(0x7f0000002180)={0x2, 0x4e21, @rand_addr=0xbe04}, 0x10, &(0x7f00000025c0)=[{&(0x7f00000021c0)="cc4219bd86c00f75cfa95029c13715", 0xf}, {&(0x7f00000024c0)="73b9c7b8bc3ddd", 0x7}, {&(0x7f0000002500)="183f3c8d870f307049a1adac44a335b70c36367f9f0d982fb01fc58a74c2c359601140d6a4f3ab8b76c217de0b4ad024d9826fe2a4dac382f1244d936972755efb4e8d44e83c3cca5bbbe4639f0c15327e3e17a73daf11d7ec3d684b4c8da44cfc019b979b1d459a6a69aaae3fec39db2ebba6a1b435fff0fd4a1fe6e4753952ef76d9993276cd1160ba62b9da6d5f21125eb41bebcaf0471c91d6ed75a366bbcfd6b902df4ea637a5fe8e428d6661144982f422c01680c6e88a", 0xba}], 0x3, &(0x7f0000002600)=[@ip_ttl={{0x14, 0x0, 0x2, 0xfff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffff17e5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfff}}, @ip_retopts={{0x34, 0x0, 0x7, {[@end, @noop, @rr={0x7, 0xf, 0x40, [@empty, @local, @local]}, @cipso={0x86, 0xc, 0x9, [{0x0, 0x6, "29c5bcfa"}]}, @noop, @lsrr={0x83, 0x3, 0x20}, @end]}}}], 0x80}}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)="563e280ac9ab0e53510bf657cc21be9fdb31ee60095a78f92ee1270c8badf2e2f01ba01455a099440b92d030f20431a9a10d3615192c8bfbcdaa8a73d5c06b9f7c40c752bcb66dc3ee4a29e01a80aa1a94dba4945505d13ea6cbf7254d80dea8d50c2e2d3fed5f3285ab110c1d31d8c5126c94f97960085ba5b2d67553171df425b3c1f163daed507cffe52e92fe5ceb05c0f934c4a3a4e6931f85404ea228eedf90b32b18d7bd64283d234d73f15cf242188e16e311374c04b45ee49e94ac891a6c40efa8573d23e042f883992b73227ba005764b1aa91143b7ba95a8", 0xdd}, {&(0x7f0000002780)="24903ed5cb64ccfe961c1af807139b1bacf77b698791009d51b36770d5af610e235fa57aee18bf05c374d977947b67bee26dec9b7090214d44f9450366044f9ad48551dcde54a74a97aae7af0915e47b45ee434d34542e391b889ddaf502d074c35e94f6258efc354cf66cc189166b73123507800ff993e59ea863681da808ba4b04254642014975735ed82e5ccc20eb4004bc4df2c96222f5df0b224df3d6cb719de35610576c522cca8b58e536bcf7b7a8a4e53ff7445fc5dafa34bbd6e69927cf1bb5192743b1fcc59dc358f6e0d8ffb67cf19363234a08743924e90b8c7a37dd83f8c192512485dfe21a8b4049e2890a698a0e8f3cb25c3232", 0xfb}, {&(0x7f0000002880)="5de9f08c01bfd905f5177164ca184ac37ef4ec6cadcfabb9da6f6552ecf0b20af2eac1e49d79f7ca1f66fe66fdea65f76f778e", 0x33}, {&(0x7f00000028c0)="372a85d3480767e290bad0cf90698eb977982fdc9911e28cbbfe0e4dfcb037d06366ff38e2d95cd910d7e3f3ee1f13a5", 0x30}, {&(0x7f0000002900)="5ba5cb57c7a0b1fca999876a4b4adc5bb5cee00f56c6ddf4c1b13a40d02c1d4de4f095002f89db47e3ec3a652fa0bafa78569a6a64dc4eaf1006e11812ee8c0d6db5c60ffe277f9d77d9a8b2fc839b5339fdb63d611951d538387ffa619bacbb32aaeebb14", 0x65}, {&(0x7f0000002980)="7b74cc6471baeb65e97cf4eaea44369eb6e42de3bcdff395a9f519815756c1d19ee7ccd6fd58c9eef6d75c553531a8346e954afccd64fbdfb8b24261c46eb91e63aae9c1c6637dec8836f6a518bb72b15e859f97c5a7681d02ad88a060e20efc350350fa818b2f16231b5d4a9b7e128189e4cfdaf088754d6615418b000e03dc4c7095dfdad321aa729453a78a1fe5fa33de3b86033530659654fcd164ecacf290eb69889a371c25b60e0c3b2c7601c020083f02586409e11f29a857a3d22e9cd72e9dd6b0614e6a92de36986633d8761b683d164383480492223e4a7379c0caf4fe4a2e4c661cc529f653a10400f7f360", 0xf1}, {&(0x7f0000002a80)="d78a80d19f306978c77884c4e76e3f00095b2e9159da0d56d8bcbd213d7f9a12a6730460d948552247b76422debaa17bd68641158b88013cce4a2d8d423cca23e655c51c1bc162b43a6ceea0ec173a303cc5a85ba493ac761d9b54524633c69edbeda62ee84ed3bafd0e9c4ab11502912a28cab22677e7ac8a6b6f8834128748bb13dc549c03fd78d6dcc7f40b944e59e87fc428aa9948b1e8336cedccd8", 0x9e}, {&(0x7f0000002b40)="dfc9381bd75e6cf24e9ed9e79f8b0a31bc0fa0cae941ed846edf97b47488e380645683231c0cf6a124e6794e0b50703982eadd2a26908ae85da3fe2c40bd564d49912a03a4c0c25465422672cca00d7aaa8381e76b7f175b4b5db4b81312f04bd4cb786af44e1a41b6fda18de840b9e9b3e535a08040c03fa46d467622ae102c26a81382eedb3de0b303a10d77e4c9b3606e7db773b2b9fe95667428bfd3b3696294afca519700634de7a466eaeec6a682a8ff19d1ffc4ce8b", 0xb9}], 0x8, &(0x7f0000002c80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xc2}}, @ip_retopts={{0x10}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0x58}}, {{&(0x7f0000002d00)={0x2, 0x4e24, @rand_addr=0xc7}, 0x10, &(0x7f0000002f80)=[{&(0x7f0000002d40)="f93e034b3c0e6f00e984a18501d22bf85933a97f11368a56911bbde45e7ddaecfa0c1fa151cf98b69a38b836cb526f127c772764fffd5f873650b299da124d52", 0x40}, {&(0x7f0000002d80)="926b149a056f0a6eb07b7a9f8167a775b3a56f5d1de541f8afcf50f26bb29199eb3aef6fc120982a6ff303bf574c4be239607504ae52a342aa0f1ad5e33de303073eed9f229cac2768f98186772f7a9143761eaacdea981ef295045f48d8e4926d41457513f85f727a913bf1b8874271b9291f0a4a8e284dfc6500a0f5be2633bf5f5b7373ee201a8628bda51df29c015b41487bd489c6512654482f834ac63c53502895186c1af7fa7bdab613e9277ee9a4ca4f61243eab5e272cd801ff807663568b0dd059d045b13349fcaa7dc7", 0xcf}, {&(0x7f0000002e80)="7f4a3a24d0d966a21d948ead939f971ffd4dc586cde066400311876317a773f498035f5575265e65b4a043cd7985c3afb112611861797c4c008935ff140c3f1a9f27214d2b1d4a04177e9cf93d843ca7b104ac77cdc0bdd77ae93a1c9ac405d907c8e116d978f4a80eda1dc33e99801347148fb8845f524ad90417d1c152e39ff26228051c117eeb1d9e926dd19e77bdc529fa3d231a08cfbf2bf0d3c041366b6d86326a46a804a595dfb27bdba8b3df9cecaa5808d2d17d4c6b1f0c19719073186e85633af5e5fe93b1f3383452fefdcf30bb8e727a365cf4", 0xd9}], 0x3, &(0x7f0000002fc0)}}, {{&(0x7f0000003000)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000003200)=[{&(0x7f0000003040)="9151c9da828ab241342bd89e19dbdfa08bbafe15dcd87f4be084c333d961fe9b94abe11570d540693900ca538265bcee93527b1fe1bef7695e6151b76141469660498f9b3443bbaa9a97af3c7aef1190d901ccad3216de8f0b1f897f37f1f54182730260484d8aa010a6eeb01f1d300fd7d0a3bd9572320796c735b21f3bb267e4473b3c16d471be621acf10434717215794eba3997d72cf4be06b1e3a64982b8eb8a153bdf739f7d13274cd8cf88a9f053ae28444e71be30e3b36d3ea58c22bde816cab7c26da2ea6", 0xc9}, {&(0x7f0000003140)="9c0764ed2bfd5e150828e44a3e4d9bb3e2eb5330a9031021af7e133b0b328ba2ee67850ae16ec978c81ca79c1a54ac650f3bbb3ca054d6f6acef0fda43a39c13d3dbfeb651d3c28304a194fdd05d79d403197bd45eb1edbd75374cf33a019e495b96071c8e30ac3d56b85015f3ff51f1a7cb953f385a8fcf700a5310d679584b323bf8597f87c77940ff931dcfd8420d64a6c712905a783004bd23afe9dc643bb380eea0be4afc323ac897c4c4e18055533cb1bebc", 0xb5}], 0x2, &(0x7f0000003240)=[@ip_retopts={{0x8c, 0x0, 0x7, {[@ssrr={0x89, 0x17, 0xff, [@multicast2, @local, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @ra={0x94, 0x6, 0x3}, @timestamp={0x44, 0x38, 0x2, 0x0, 0x3, [{[@loopback], 0x7}, {[@empty], 0x6}, {[@loopback], 0x1}, {[@rand_addr=0x2], 0x5}, {[@multicast1], 0x3}, {[], 0x7}, {[@multicast2], 0x1400}]}, @cipso={0x86, 0x1f, 0x1, [{0xa, 0x3, '\t'}, {0x0, 0x2}, {0x7, 0x2}, {0x5, 0xb, "8a4ca0b869bab0322c"}, {0x0, 0x7, "d8304a5150"}]}, @ra={0x94, 0x6, 0x7}]}}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@generic={0x82, 0xc, "ef48fb54c382aa3a25e8"}, @rr={0x7, 0x3, 0x9}, @lsrr={0x83, 0x2b, 0x32, [@remote, @multicast2, @broadcast, @local, @broadcast, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @local, @remote]}, @ssrr={0x89, 0x7, 0x3, [@rand_addr=0x9cf70918]}, @cipso={0x86, 0x1b, 0xffffffff, [{0x0, 0x9, "10388a52fad4fc"}, {0x6b6bc509e225ed13, 0x2}, {0x5, 0xa, "c15cbb7e4dc531d9"}]}]}}}], 0x100}}, {{&(0x7f0000003380)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000003880)=[{&(0x7f00000033c0)="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", 0xfe}, {&(0x7f00000034c0)="7858ace011c7003bbb3d5f3dd5c5bec311818900ad8dbf6fb86978dde852558ae6372b813e7c9896213333e60b1ec655291942077fb9cfba0a314c607aed6f0734ad564b223f631221e7822d700a56dfafbf74c6747740444f127a63471418cc32db05bcbe4ff441be72ed919621f98d9d50659e938a9f075144706bd5dabaef8f3add89ce250f8199f4e45a74dd810ad949eaa5f1f2e671dc775f70da0e849c41d00600582bb4e794f0651a8c9fba562487753bf88e081982d9e22f0679d744e956", 0xc2}, {&(0x7f00000035c0)="fa00f91d26397c733328cdb8fc563e5a1d9e236d35a217dc0e63338b4aa0ce776155d12664da7031b2e51e4253a8837e4a5f3d829595d8c9644f53d0c206b9bca93768a78b29f40714ed146f879648922e494cdb1baa66b70896845246844310d8d2d0a743bb72b2e570ae69014109baf7281cf1b85726d364912e183ed45f90087b2b75897f1291548a6378613f30ac9fb0a43f24f5b0266e3a58135d2f50c827c539814f670cc14496a75cc1f6341a8a7639c574cf3387d972d0a22ed736135fc3b6a45e74cd07f4620e", 0xcb}, {&(0x7f00000036c0)="2f1fb5a332245707cf550e90f0c0ce19ecbe9dfe39cd13c987c14b6363ad522a13", 0x21}, {&(0x7f0000003700)="b6aac55e8075f2466435756842734b299febb7f835c13de52dafcee1420b53470841a9816af99e11c48557d465d75095af29dfd603e8424b20f3c5e27cdb659fbdaa4ffb8170b87574164c3d7b1ed54e3b23f271b64a7e57f3e665f36beb60d8fc", 0x61}, {&(0x7f0000003780)="d0bd472d679cd32252935f3d7170af3d18c097b8095f934f86df4d305c68c58f7badde8ddcd8e9b737442b2197ff610c8afb721702bb244151f7adda6ce29e62cb75e5314bda9c5edddd88977da3f92d505e17ce7cdf874335b0b320976cf85bda524e2f9ce9e53657efe31acee8f1bfeebb76fc97bcb4bb446f83c7c419a68478d9abed3faf34948e64fee24d4c4776119bda18953eb30fe963ed942f5451329ab850625918960303a7f856c6fb1a30335b30e1d59e13fe366882cdc294cf126d134248be769a73d335f2c5237fa01a5b", 0xd1}], 0x6, &(0x7f0000003900)=[@ip_ttl={{0x14, 0x0, 0x2, 0x76f}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_retopts={{0x34, 0x0, 0x7, {[@rr={0x7, 0x1b, 0x7, [@loopback, @remote, @loopback, @multicast1, @remote, @multicast2]}, @ra={0x94, 0x6, 0x9}, @noop, @end, @noop]}}}], 0x80}}], 0xa, 0x4)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000100)={0x400000100002f, {0x0, 0x0, 0xdeba}})
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000002c0)={{}, 'syz0\x00'})
ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000040))
ioctl$UI_DEV_CREATE(r2, 0x5501)
ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000000))
r3 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x40400)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r3, &(0x7f00000000c0)="d0c85b761c902cf2c4082aa1272c", &(0x7f00000001c0)=""/170}, 0x20)

[ 1541.617053][ T3802] input: syz0 as /devices/virtual/input/input1471
[ 1541.642063][T11774] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[ 1541.652172][T10856] usb 3-1: Using ep0 maxpacket: 16
[ 1541.672125][ T9944] usb 6-1: Using ep0 maxpacket: 16
[ 1541.741936][ T8450] usb 4-1: new high-speed USB device number 81 using dummy_hcd
[ 1541.772173][T10856] usb 3-1: config 0 has an invalid interface number: 128 but max is 0
[ 1541.780475][T10856] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1541.783414][ T3802] input: syz0 as /devices/virtual/input/input1472
[ 1541.791962][T10856] usb 3-1: config 0 has no interface number 0
[ 1541.803245][T10856] usb 3-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1541.814506][T10856] usb 3-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1541.823719][T10856] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1541.838353][T10856] usb 3-1: config 0 descriptor??
[ 1541.855538][ T9944] usb 6-1: config 0 has an invalid interface number: 128 but max is 0
[ 1541.864028][ T9944] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1541.874318][ T9944] usb 6-1: config 0 has no interface number 0
[ 1541.880495][ T9944] usb 6-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1541.891934][ T9944] usb 6-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1541.901058][ T9944] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1541.910694][T11774] usb 2-1: Using ep0 maxpacket: 16
[ 1541.925833][ T9944] usb 6-1: config 0 descriptor??
[ 1542.002021][ T8450] usb 4-1: Using ep0 maxpacket: 16
[ 1542.032039][T11774] usb 2-1: config 0 has an invalid interface number: 128 but max is 0
[ 1542.040395][T11774] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1542.050698][T11774] usb 2-1: config 0 has no interface number 0
[ 1542.056958][T11774] usb 2-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1542.068505][T11774] usb 2-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
20:26:57 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$inet(r2, &(0x7f0000001900)={&(0x7f00000001c0)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000001880)=[@ip_tos_u8={{0x11}}], 0x18}, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x100, 0x4)

[ 1542.077701][T11774] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1542.092025][T11774] usb 2-1: config 0 descriptor??
[ 1542.103403][T10856] radio-si470x 3-1:0.128: DeviceID=0x98d5 ChipID=0xc681
[ 1542.132252][ T8450] usb 4-1: config 0 has an invalid interface number: 128 but max is 0
[ 1542.140630][ T8450] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1542.151210][ T8450] usb 4-1: config 0 has no interface number 0
[ 1542.157466][ T8450] usb 4-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1542.168688][ T8450] usb 4-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1542.177893][ T8450] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1542.183054][ T9944] radio-si470x 6-1:0.128: DeviceID=0x94d5 ChipID=0xc681
[ 1542.200302][ T8450] usb 4-1: config 0 descriptor??
20:26:57 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
syz_open_dev$dspn(&(0x7f0000000300)='/dev/dsp#\x00', 0x0, 0x45aa01dbdb9f95ea)
r1 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000170a07031dfffd942367ede3b9a3484409000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f0000000380)={0x10001, 0x10000, 0x2, 0xba94, 0xffffcc60, 0x7})
setsockopt$inet_tcp_int(r1, 0x6, 0x7, &(0x7f0000000340)=0x8001, 0x4)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getpeername(r2, &(0x7f0000000280)=@caif=@rfm, &(0x7f00000000c0)=0x80)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in, 0x0, 0x20000000005, 0x2, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10)
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x0)
write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)
prctl$PR_CAP_AMBIENT(0x2f, 0x7, 0x7)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x200, 0x0)
fsetxattr$security_selinux(r0, &(0x7f0000000140)='security.selinux\x00', &(0x7f00000001c0)='unconfined\x00', 0xb, 0x2)

[ 1542.322043][T10856] radio-si470x 3-1:0.128: software version 152, hardware version 213
[ 1542.352640][T11774] radio-si470x 2-1:0.128: DeviceID=0x9ed5 ChipID=0xc681
[ 1542.392321][ T9944] radio-si470x 6-1:0.128: software version 148, hardware version 213
20:26:57 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000100)={0x400000100002f, {0x0, 0x0, 0xdeba}})
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000002c0)={{}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r2, 0x5501)
pipe(&(0x7f0000001300)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
ioctl$EVIOCGBITSND(r3, 0x80404532, &(0x7f0000000340)=""/224)
r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0)
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r5, 0x401c5504, &(0x7f0000000100)={0x400000100002f, {0x0, 0x0, 0xdeba}})
ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f00000002c0)={{}, 'syz0\x00'})
r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r6, 0x401c5504, &(0x7f0000000100)={0x400000100002f, {0x0, 0x0, 0xdeba}})
ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f00000002c0)={{}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r6, 0x5501)
fallocate(r6, 0x4, 0x8, 0x1ff)
ioctl$UI_DEV_CREATE(r5, 0x5501)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000001c0)=[r2, r4, r0, 0xffffffffffffffff, r1, r5, r0], 0x7)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)
getsockopt$inet_opts(r1, 0x0, 0x2, &(0x7f0000000080)=""/251, &(0x7f0000000000)=0xfb)

[ 1542.462225][ T8450] radio-si470x 4-1:0.128: DeviceID=0x61f7 ChipID=0xba81
[ 1542.544538][T10856] radio-si470x 3-1:0.128: submitting int urb failed (-90)
[ 1542.544710][ T4093] input: syz0 as /devices/virtual/input/input1473
[ 1542.573062][ T3688] input: syz0 as /devices/virtual/input/input1474
[ 1542.612250][ T9944] radio-si470x 6-1:0.128: submitting int urb failed (-90)
[ 1542.630530][ T3688] input: syz0 as /devices/virtual/input/input1475
[ 1542.682086][ T8450] radio-si470x 4-1:0.128: software version 97, hardware version 247
[ 1542.712074][T11774] radio-si470x 2-1:0.128: software version 158, hardware version 213
[ 1542.753437][ T4121] input: syz0 as /devices/virtual/input/input1477
[ 1542.832716][ T9944] radio-si470x 6-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1542.842639][ T9944] radio-si470x: probe of 6-1:0.128 failed with error -22
[ 1542.860474][ T9944] usb 6-1: USB disconnect, device number 24
[ 1542.898608][ T4123] input: syz0 as /devices/virtual/input/input1476
[ 1542.906942][ T8450] radio-si470x 4-1:0.128: submitting int urb failed (-90)
[ 1542.932180][T11774] radio-si470x 2-1:0.128: submitting int urb failed (-90)
[ 1543.011980][T10856] radio-si470x 3-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1543.021160][T10856] radio-si470x: probe of 3-1:0.128 failed with error -22
20:26:58 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000640)={0x0, 0xffffffffffffffff, 0x0, 0x14, &(0x7f0000000140)='eth0\xbbmime_type-user\x00'}, 0x30)
r2 = socket$inet6(0xa, 0x5, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @multicast2}}}, &(0x7f0000000180)=0x90)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f0000000080)=0x10)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f0, &(0x7f0000000140)='sit0\x00')

[ 1543.094508][T10856] usb 3-1: USB disconnect, device number 74
20:26:58 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000180)='lp\x00', 0x3)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000170a07031dfffd942367ede3b9a3484409000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
seccomp(0x0, 0x0, &(0x7f00000001c0)={0x6, &(0x7f0000000140)=[{0x80, 0x7b, 0x6, 0x800}, {0x8, 0x6a, 0x20, 0x6}, {0x6, 0xc0, 0x1, 0x5000000}, {0x2, 0x9, 0x2}, {0x6, 0x13}, {0x0, 0x7e, 0x6, 0x80}]})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x6, &(0x7f0000000040)=[{0x401, 0x1f, 0x6, 0x9}, {0x7, 0x2, 0x1, 0x9}, {0x0, 0x81, 0x9c, 0x5e9d}, {0xffff, 0x9, 0x5, 0x8}, {0x2, 0x58, 0x6, 0x4}, {0x7, 0xc4, 0xf0, 0x3f}]}, 0x10)
r2 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000170a07031dfffd942367ede3b9a3484409000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e24, @multicast1}, 0x10)
prctl$PR_GET_THP_DISABLE(0x2a)
io_submit(0x0, 0x2000000000000043, &(0x7f0000000780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0xe191, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}])
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf)
shutdown(r0, 0x1)
ioctl$IMDELTIMER(0xffffffffffffffff, 0x80044941, &(0x7f0000000080)=0x1)
recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100)

[ 1543.372620][T11774] radio-si470x 2-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1543.381640][T11774] radio-si470x: probe of 2-1:0.128 failed with error -22
[ 1543.427556][T11774] usb 2-1: USB disconnect, device number 19
20:26:58 executing program 5:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x0, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x20000, 0x0)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f00000001c0)={0x7, 0x100})
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000200)={0xfffffffffffffd55, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x23, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r4 = socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r5=>0xffffffffffffffff})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
close(r6)
splice(r5, 0x0, r6, 0x0, 0x10003, 0x0)
ioctl$EVIOCGABS3F(r5, 0x8018457f, &(0x7f00000005c0)=""/181)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @multicast2}}}, &(0x7f0000000180)=0x90)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e20, 0xaa, @empty, 0x8000}, {0xa, 0x4e24, 0x7fffffff, @dev={0xfe, 0x80, [], 0xf}, 0x6}, 0x8000, [0x8, 0x1, 0x84, 0xf5, 0x7, 0x5, 0x0, 0x3]}, 0x5c)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

[ 1543.531990][ T8450] radio-si470x 4-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1543.541052][ T8450] radio-si470x: probe of 4-1:0.128 failed with error -22
20:26:58 executing program 2:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x20000, 0x0)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000200)={0xfffffffffffffd55, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x23, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r4=>0xffffffffffffffff})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
close(r5)
ioctl$EVIOCGABS3F(r4, 0x8018457f, &(0x7f00000005c0)=""/181)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

20:26:58 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x40027d)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0)

[ 1543.627481][ T8450] usb 4-1: USB disconnect, device number 81
[ 1543.832320][T10856] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[ 1543.971901][T10207] usb 3-1: new high-speed USB device number 75 using dummy_hcd
[ 1544.071873][T10856] usb 6-1: Using ep0 maxpacket: 16
[ 1544.192313][T10856] usb 6-1: config 0 has an invalid interface number: 128 but max is 0
[ 1544.200772][T10856] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1544.211183][T10856] usb 6-1: config 0 has no interface number 0
[ 1544.217458][T10856] usb 6-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1544.221839][T10207] usb 3-1: Using ep0 maxpacket: 16
[ 1544.228718][T10856] usb 6-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1544.228795][T10856] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1544.252740][ T9944] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[ 1544.263666][T10856] usb 6-1: config 0 descriptor??
[ 1544.324214][ T8450] usb 4-1: new high-speed USB device number 82 using dummy_hcd
[ 1544.362054][T10207] usb 3-1: config 0 has an invalid interface number: 128 but max is 0
[ 1544.370439][T10207] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1544.380999][T10207] usb 3-1: config 0 has no interface number 0
[ 1544.387168][T10207] usb 3-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1544.398380][T10207] usb 3-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1544.407516][T10207] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1544.418769][T10207] usb 3-1: config 0 descriptor??
[ 1544.502072][ T9944] usb 2-1: Using ep0 maxpacket: 16
[ 1544.522111][T10856] radio-si470x 6-1:0.128: DeviceID=0x98d5 ChipID=0xc681
[ 1544.621964][ T8450] usb 4-1: Using ep0 maxpacket: 16
[ 1544.622045][ T9944] usb 2-1: config 0 has an invalid interface number: 128 but max is 0
[ 1544.635560][ T9944] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1544.645787][ T9944] usb 2-1: config 0 has no interface number 0
[ 1544.651997][ T9944] usb 2-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1544.663237][ T9944] usb 2-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1544.672084][T10207] radio-si470x 3-1:0.128: DeviceID=0x6af7 ChipID=0xba81
[ 1544.672393][ T9944] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1544.688672][ T9944] usb 2-1: config 0 descriptor??
[ 1544.742136][T10856] radio-si470x 6-1:0.128: software version 152, hardware version 213
[ 1544.762115][ T8450] usb 4-1: config 0 has an invalid interface number: 128 but max is 0
[ 1544.770442][ T8450] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1544.780852][ T8450] usb 4-1: config 0 has no interface number 0
[ 1544.787096][ T8450] usb 4-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1544.798244][ T8450] usb 4-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1544.807417][ T8450] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1544.816744][ T8450] usb 4-1: config 0 descriptor??
[ 1544.882022][T10207] radio-si470x 3-1:0.128: software version 106, hardware version 247
[ 1544.938496][ T4120] input: syz0 as /devices/virtual/input/input1478
[ 1544.956232][ T4363] input: syz0 as /devices/virtual/input/input1479
[ 1544.966050][ T9944] radio-si470x 2-1:0.128: DeviceID=0x98d5 ChipID=0xc681
[ 1544.985448][T10856] radio-si470x 6-1:0.128: submitting int urb failed (-90)
[ 1545.062917][ T8450] radio-si470x 4-1:0.128: si470x_get_report: usb_control_msg returned -71
[ 1545.072072][ T8450] radio-si470x: probe of 4-1:0.128 failed with error -5
[ 1545.102389][T10207] radio-si470x 3-1:0.128: submitting int urb failed (-90)
20:27:00 executing program 1:
pipe(&(0x7f0000001300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x8000, 0x0)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000180)={0x0, 0x3, 0x5, 0xa49d25cb, 0xc, 0x5, 0x2, 0x3, 0x6, 0x3, 0x5, 0x1000})
write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xfffffdf6)
sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8045)
r2 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r2, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)

20:27:00 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[]}, 0x1, 0xffffff7f0e000000}, 0x40000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = gettid()
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$HDIO_GETGEO(r4, 0x301, &(0x7f0000000040))
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000013000)={0x1, 0x10000007f, 0xa, 0x1000000000000008}, 0x1c)
sendmmsg$unix(r1, &(0x7f0000004f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=[@cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [r5]}}], 0x48}], 0xfd, 0x0)
ptrace$cont(0x9, r2, 0x2, 0x8000)

20:27:00 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x5, 0x1)
r2 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000170a07031dfffd942367ede3b9a3484409000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x3, 0x2, 0x4, 0x0, {0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}}}, 0x3a)
r3 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x4001fd)
setrlimit(0x7, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

20:27:00 executing program 3:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x0, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x0, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

[ 1545.111221][ T8450] usb 4-1: USB disconnect, device number 82
[ 1545.117504][ T9944] radio-si470x 2-1:0.128: si470x_get_report: usb_control_msg returned -71
[ 1545.126181][ T9944] radio-si470x 2-1:0.128: si470x_get_scratch: si470x_get_report returned -71
[ 1545.135501][ T9944] radio-si470x: probe of 2-1:0.128 failed with error -5
[ 1545.204813][T10856] radio-si470x 6-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1545.214295][T10856] radio-si470x: probe of 6-1:0.128 failed with error -22
[ 1545.248905][ T9944] usb 2-1: USB disconnect, device number 20
[ 1545.265960][T10856] usb 6-1: USB disconnect, device number 25
20:27:00 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
lsetxattr$security_smack_transmute(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000180)='TRUE', 0x4, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x1010, r1, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0xd4)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000100)={0x400000100002f, {0x0, 0x0, 0xdeba}})
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000002c0)={{}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r2, 0x5501)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000100)={0x400000100002f, {0x0, 0x0, 0xdeba}})
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f00000002c0)={{}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r3, 0x5501)
r4 = syz_open_dev$binderN(&(0x7f0000002840)='/dev/binder#\x00', 0x0, 0x2)
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r5, 0x401c5504, &(0x7f0000000100)={0x400000100002f, {0x0, 0x0, 0xdeba}})
ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f00000002c0)={{}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r5, 0x5501)
poll(&(0x7f0000002880)=[{r2, 0x10}, {0xffffffffffffffff, 0x8400}, {r0, 0x2}, {r3, 0x93}, {r4, 0x2}, {r5, 0x90}], 0x6, 0x51)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x8, @tick=0x9, 0x0, {0x3f, 0x3}, 0x1, 0x1, 0xf2})

20:27:00 executing program 0:
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001a00010000000000000000001c00000000000000e5f0fc9031aea2d12a11cb40"], 0x28}}, 0x0)

[ 1545.426765][ T4510] input: syz0 as /devices/virtual/input/input1480
[ 1545.465038][ T4510] input: syz0 as /devices/virtual/input/input1481
[ 1545.491243][ T4513] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1545.542190][T10207] radio-si470x 3-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1545.551413][T10207] radio-si470x: probe of 3-1:0.128 failed with error -22
[ 1545.565856][T10207] usb 3-1: USB disconnect, device number 75
20:27:00 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x5, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @multicast2}}}, &(0x7f0000000180)=0x90)
accept4$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000080)=0x10, 0x800)
r2 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setrlimit(0x0, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

20:27:00 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070")
r1 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000140)={0x0, 0x1850, &(0x7f0000000100), 0x1000000000000050}, 0x0)
rt_sigprocmask(0x0, &(0x7f0000000140)={0xfffffffffffffffd}, 0x0, 0x8)
r2 = gettid()
timer_create(0x7, &(0x7f0000000040)={0x0, 0x8, 0x4, @tid=r2}, &(0x7f0000000100))
clock_gettime(0x0, &(0x7f0000000180)={0x0, <r3=>0x0})
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, r3+10000000}, {0x0, 0xe4c}}, 0x0)
rt_sigtimedwait(&(0x7f0000000200)={0x7e5}, 0x0, 0x0, 0x8)
r4 = signalfd4(0xffffffffffffffff, &(0x7f00000001c0)={0xfffffffffffffdb0}, 0x8, 0x0)
read(r4, &(0x7f0000000340)=""/128, 0x80)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000170a07031dfffd942367ede3b9a3484409000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="84", @ANYRES32=<r8=>0x0], &(0x7f000095dffc)=0xffffffffffffff82)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000000)={r8}, &(0x7f00000000c0)=0x14)
r9 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x1)
r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r11=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r10, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, r11}}, 0x48)
write$RDMA_USER_CM_CMD_LISTEN(r10, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r11}}, 0x10)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r9, &(0x7f0000000300)={0xb, 0x10, 0xfa00, {&(0x7f0000000240), r11, 0xfffffff8}}, 0x18)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000000)={r8, 0x3ff}, 0x8)

[ 1545.633339][ T8450] usb 4-1: new high-speed USB device number 83 using dummy_hcd
[ 1545.692432][ T9944] usb 2-1: new high-speed USB device number 21 using dummy_hcd
20:27:00 executing program 5:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x0, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x81, @string={0x81, 0x3, "3a3c5a98a0b88f20dab28f43fd604a180bf5c40802c641ed238502ea05de14099c5dfa19c61d2715c179a8913d43848ebb6058f0ae47cea480ef4ae3d1bd7724bc870bcd80db1746d211f5f7dde4bd2f33e5a634f6174cf4dab428a4bdd5141e1cdfd7535edf28bbf44e35cb9180ea022e265108d6db9ab408e8b86c601dc9"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x20000, 0x0)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f00000001c0)={0x7, 0x100})
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000200)={0xfffffffffffffd55, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x23, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r4 = socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r5=>0xffffffffffffffff})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
close(r6)
splice(r5, 0x0, r6, 0x0, 0x10003, 0x0)
ioctl$EVIOCGABS3F(r5, 0x8018457f, &(0x7f00000005c0)=""/181)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @multicast2}}}, &(0x7f0000000180)=0x90)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e20, 0xaa, @empty, 0x8000}, {0xa, 0x4e24, 0x7fffffff, @dev={0xfe, 0x80, [], 0xf}, 0x6}, 0x8000, [0x8, 0x1, 0x84, 0xf5, 0x7, 0x5, 0x0, 0x3]}, 0x5c)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

20:27:00 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)
lseek(r1, 0x0, 0x0)

[ 1545.895057][ T8450] usb 4-1: Using ep0 maxpacket: 16
[ 1545.931973][ T9944] usb 2-1: Using ep0 maxpacket: 16
[ 1546.012136][ T8450] usb 4-1: config 0 has an invalid interface number: 128 but max is 0
[ 1546.020500][ T8450] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1546.030903][ T8450] usb 4-1: config 0 has no interface number 0
[ 1546.037209][ T8450] usb 4-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1546.048435][ T8450] usb 4-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
20:27:01 executing program 2:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x20000, 0x0)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000200)={0xfffffffffffffd55, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x23, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r4=>0xffffffffffffffff})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
close(r5)
ioctl$EVIOCGABS3F(r4, 0x8018457f, &(0x7f00000005c0)=""/181)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

20:27:01 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000170a07031dfffd942367ede3b9a3484409000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000000)={<r5=>r4})
preadv(r5, &(0x7f0000000180)=[{&(0x7f0000000080)=""/240, 0xf0}], 0x1, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

[ 1546.052220][ T9944] usb 2-1: config 0 has an invalid interface number: 128 but max is 0
[ 1546.057619][ T8450] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1546.066135][ T9944] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1546.084521][ T9944] usb 2-1: config 0 has no interface number 0
[ 1546.090713][ T9944] usb 2-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1546.102074][ T9944] usb 2-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1546.111215][ T9944] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1546.141924][T10207] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[ 1546.155546][ T9944] usb 2-1: config 0 descriptor??
[ 1546.158294][ T8450] usb 4-1: config 0 descriptor??
[ 1546.381954][T10207] usb 6-1: Using ep0 maxpacket: 16
[ 1546.411962][ T9944] radio-si470x 2-1:0.128: DeviceID=0x92d5 ChipID=0xc681
[ 1546.422192][ T8450] radio-si470x 4-1:0.128: DeviceID=0x65f7 ChipID=0xba81
[ 1546.431905][T11836] usb 3-1: new high-speed USB device number 76 using dummy_hcd
[ 1546.512122][T10207] usb 6-1: config 0 has an invalid interface number: 128 but max is 0
[ 1546.520531][T10207] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1546.530775][T10207] usb 6-1: config 0 has no interface number 0
[ 1546.537040][T10207] usb 6-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1546.548282][T10207] usb 6-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1546.557493][T10207] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1546.567263][T10207] usb 6-1: config 0 descriptor??
[ 1546.632239][ T8450] radio-si470x 4-1:0.128: software version 101, hardware version 247
[ 1546.633776][ T9944] radio-si470x 2-1:0.128: software version 146, hardware version 213
[ 1546.691866][T11836] usb 3-1: Using ep0 maxpacket: 16
[ 1546.812265][T11836] usb 3-1: config 0 has an invalid interface number: 128 but max is 0
[ 1546.820664][T11836] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1546.830992][T11836] usb 3-1: config 0 has no interface number 0
[ 1546.837362][T11836] usb 3-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1546.848679][T11836] usb 3-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1546.857874][T11836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1546.862153][ T9944] radio-si470x 2-1:0.128: submitting int urb failed (-90)
[ 1546.867120][T10207] radio-si470x 6-1:0.128: DeviceID=0x63f7 ChipID=0xba81
[ 1546.881642][T11836] usb 3-1: config 0 descriptor??
[ 1546.892111][ T8450] radio-si470x 4-1:0.128: submitting int urb failed (-90)
[ 1547.052120][T10207] radio-si470x 6-1:0.128: software version 99, hardware version 247
[ 1547.162053][T11836] radio-si470x 3-1:0.128: DeviceID=0x60f7 ChipID=0xba81
[ 1547.262050][T10207] radio-si470x 6-1:0.128: submitting int urb failed (-90)
[ 1547.332077][ T8450] radio-si470x 4-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1547.341055][ T8450] radio-si470x: probe of 4-1:0.128 failed with error -22
[ 1547.351412][ T8450] usb 4-1: USB disconnect, device number 83
[ 1547.371955][T11836] radio-si470x 3-1:0.128: software version 96, hardware version 247
[ 1547.482126][T10207] radio-si470x 6-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1547.491068][T10207] radio-si470x: probe of 6-1:0.128 failed with error -22
[ 1547.501356][T10207] usb 6-1: USB disconnect, device number 26
[ 1547.591986][ T9944] radio-si470x 2-1:0.128: si470x_set_report: usb_control_msg returned -110
[ 1547.600956][ T9944] radio-si470x: probe of 2-1:0.128 failed with error -22
[ 1547.612043][T11836] radio-si470x 3-1:0.128: submitting int urb failed (-90)
[ 1548.052420][T11836] radio-si470x 3-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1548.061251][T11836] radio-si470x: probe of 3-1:0.128 failed with error -22
[ 1548.071846][T11836] usb 3-1: USB disconnect, device number 76
[ 1548.082119][ T9944] usb 4-1: new high-speed USB device number 84 using dummy_hcd
20:27:03 executing program 0:
r0 = memfd_create(&(0x7f0000000280)='/dev/input/event#\x00', 0x0)
write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c46000000d2000000000000000003003e00000010000000000000000000400800000000000000000000000000eeffffff0f0000380002"], 0x39)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

20:27:03 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000100)={0x400000100002f, {0x0, 0x0, 0xdeba}})
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000002c0)={{}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r1, 0x5501)
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x20000, 0x0)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000100)={0x400000100002f, {0x0, 0x0, 0xdeba}})
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000002c0)={{}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r2, 0x5501)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000100)={0x400000100002f, {0x0, 0x0, 0xdeba}})
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f00000002c0)={{}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r3, 0x5501)
r4 = fcntl$dupfd(r2, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

20:27:03 executing program 5:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x0, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x81, @string={0x81, 0x3, "3a3c5a98a0b88f20dab28f43fd604a180bf5c40802c641ed238502ea05de14099c5dfa19c61d2715c179a8913d43848ebb6058f0ae47cea480ef4ae3d1bd7724bc870bcd80db1746d211f5f7dde4bd2f33e5a634f6174cf4dab428a4bdd5141e1cdfd7535edf28bbf44e35cb9180ea022e265108d6db9ab408e8b86c601dc9"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x20000, 0x0)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f00000001c0)={0x7, 0x100})
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000200)={0xfffffffffffffd55, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x23, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r4 = socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r5=>0xffffffffffffffff})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
close(r6)
splice(r5, 0x0, r6, 0x0, 0x10003, 0x0)
ioctl$EVIOCGABS3F(r5, 0x8018457f, &(0x7f00000005c0)=""/181)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @multicast2}}}, &(0x7f0000000180)=0x90)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e20, 0xaa, @empty, 0x8000}, {0xa, 0x4e24, 0x7fffffff, @dev={0xfe, 0x80, [], 0xf}, 0x6}, 0x8000, [0x8, 0x1, 0x84, 0xf5, 0x7, 0x5, 0x0, 0x3]}, 0x5c)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

[ 1548.289466][T11836] usb 2-1: USB disconnect, device number 21
[ 1548.331892][ T9944] usb 4-1: Using ep0 maxpacket: 16
[ 1548.348851][ T4764] input: syz0 as /devices/virtual/input/input1482
[ 1548.424069][ T4764] input: syz0 as /devices/virtual/input/input1483
[ 1548.453945][ T4764] input: syz0 as /devices/virtual/input/input1484
[ 1548.482047][ T9944] usb 4-1: config 0 has an invalid interface number: 128 but max is 0
[ 1548.490410][ T9944] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1548.500682][ T9944] usb 4-1: config 0 has no interface number 0
[ 1548.506972][ T9944] usb 4-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1548.518226][ T9944] usb 4-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1548.527421][ T9944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1548.596580][ T9944] usb 4-1: config 0 descriptor??
[ 1548.689537][ T4764] input: syz0 as /devices/virtual/input/input1485
[ 1548.702056][T10856] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[ 1548.712264][ T4764] input: syz0 as /devices/virtual/input/input1486
[ 1548.743191][ T4878] input: syz0 as /devices/virtual/input/input1487
20:27:03 executing program 3:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xc0, 0xb05, 0x1854, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x23, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x5, 0xfb, {0x9, 0x21, 0xff7f, 0x3, 0x1, {0x22, 0x7ab}}, {{{0x9, 0x5, 0x81, 0x3, 0x379, 0x79, 0x67, 0x80}}, [{{0x9, 0x5, 0x2, 0x3, 0x1f9, 0x40, 0x9b, 0x40}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x8, 0xbe, 0x5, 0x20, 0x4}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x6, [{0x2a, &(0x7f0000000100)=@string={0x2a, 0x3, "3ae22cb6021370b6d62e1a81b8becde4c77f8e93922b004bb2841b9085e175e8357cd40991eaaf59"}}, {0x90, &(0x7f0000000140)=@string={0x90, 0x3, "d22bdb919e4fcf301b3bf6ba5db4b1948d2f339e880c6ac6c495d9d56e78d50d8b83997b577622b31a66fb660bb67c743d365d87d83c422645a344350e234cc8ae9dbe3b302d0bd2bea044d1018a4d2b8d4be1ecb54eada14162a7431f42d3e6e0fc1909a50a22026d1800b8c1f9d9d2133a74df49a20ce267a98d0786351acd6226483f11a41a11b4c7b4a334fa"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xc0c}}, {0x29, &(0x7f0000000240)=@string={0x29, 0x3, "ce6145c57ab258bf05b0161988f2d39882ae4b0125dc03d4fe5a11a84d7f196a7be1971cb52a37"}}, {0x21, &(0x7f0000000280)=@string={0x21, 0x3, "ba9d66ff15bca97a82a37db6b72b357991ac1e4d74b0e334b07c2be6908e68"}}, {0x92, &(0x7f00000002c0)=@string={0x92, 0x3, "e829a5751b9915c891034ab4462e41d1d2a66007b7ff7c4df1274ca9d3e5c489b6ed313e45b3ec4d3f35b5281a6ada93f8bbe9211281f50bdfe45cfb12cb255f40635748b93d8983b1745d07cc03f643d9d836a1f196e4941e58668d9bcc1b24150cd10035cf5e13447d606d9e6839566d9c14fbddd47f12a40f73f079348377980bc8799e2aae5b7240ab102fe5ccc7"}}]})
syz_usb_control_io$hid(r1, &(0x7f00000006c0)={0x24, &(0x7f0000000400)={0xb0, 0xe, 0xaf, {0xaf, 0x24, "7c9e8a6a98a4c0eb4269ff38af406adc07b5e38d0c227411f026b733b5bb4bcaa7668a176b6a22ba9693b0dbba63193ff73cc437e0a2011578604541d2061cdca2460c7c07a158843015f5808729b5fcba5d8b6fdc844b3fa38b7f633829a08ceee9919e0874768ffcbf6f55afd09930077bb54147fee8a7c076704b11f3a0244dad52164377c8ff906ba30469332aec948284d66c0437eca41aff25a43adb75d049ef2da7f7815aa45886a116"}}, &(0x7f00000005c0)={0x0, 0x3, 0x3e, @string={0x3e, 0x3, "b7098689d80ab63a8930a7323fa78e0140ee3d5ca1a14f0da28469fdc3448c865cee7abe620e67a57736f2bbb06b4ff52bf4a914b0799a7bf3a39182"}}, &(0x7f0000000640)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0xb}]}}, &(0x7f0000000680)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x80, 0x1, {0x22, 0xaf7}}}}, &(0x7f00000008c0)={0x2c, &(0x7f00000009c0)={0x40, 0xe, 0x1000, "a579ac3c43d24beab54925aac1c6f4b5b07c9725408595dc048adc4c809bcc321ec6ef90154fcbf144b29d56c8eb0541e7c68f2ab90547821c36659519a4ffb5ed5aa90d18ca7fe23b5d493977f5eabe1b67f4cdc3e40cdb485b2955e8a65ab2eef8337a762781e44a2bdc26c82af12a339824ec5c01da7ac707cddd967bbbb892611458fca74e1d79592d66552a3774bb3768f10b26714d0dc13a5affdd5fe63c3447f298bc563fc3a6d9cfb0c56fabeb8bab466814032d5172b461815194a45aded89054f9c605904882c935c7b15f54a44b3a958e59484c386a1940017b14e649f98e3821f2efabddb372c3954761ec6b220fd694fbf6aceba3e3750ce50bc644fc14a79250c829e6f61a2abd9fd84c66322bbabde01406a3fba879cffb5a2280d261f9af3cd4c72d783cf3f0ee9d2ec6fe4c0afc24fea8d30518a78d5f10dbda444e02b7ed672f99d4ef00b249bfa02fc3a945c80ae9bf43132dc683185fcf0b8dac0079a057a6f0c2b36d54117d6c858be355308a9a244168a15da9ccf240abf96a2e2e07f6566a4eda5a9d1d133dc3770ad884d1041934b7b9d631ae82b45fc2e854445012dafcaacbf90851d67539f4b748478cf070cb218f11f8c35852ac011c917908a4519f1f0677c4c85ca3ea4a7c94bd2cf1f124cb079fa2cbe94bf8bf4b6039c935be1c825a47e7f8fc6f8aa17f2f4fc92eeee795bdf94c6e511727f453b609d3a285ad2c9120d2ad865ad3e7807ea4559554af42e594e820ad3ff2dd681e756d4c64fbceef528d8075f59d7476f37cbcb24ee382716f5aff84402bf883d5102fda1e14b1063539b5795d940f96f3bab2ee918120957cd763ef384d6c067b91b2bf33e4edd4f4bb39c8db6731cd319655a4e2823c424f39862f435c16a1332021cf4dc198308d63eab4b9cfd6b36f75b1242cbcff687f59520a6de7d08fd457660c62636d2eaec1f0caeaa82c86cd6120996d0452937254ba40cfa9b36adec92cd71b4df1eab90323f7f176985e1e6bf4cfab1f7cb582337c5bbeb8434623e3daa64a1f8b2031d6168720b4e9cb72d187d7f6f8778238a6cd3431b67d393c858e8dd5c8b7468269f85adcc36d5c67ba362515390fade3b576086533633b7944a9e6ded77878ac464774528b2c72f777beba85cf150ef0cda166beee2bac97e56b679001564607b6bcecef623acf18d107dbc6c2f727121a447bbe5aa9b6284382dbd5889b4a521bafb0556a7827c35ca5b9622e8d66a4ef155b49aec82a7d6d6a1dd15abe30333dd6b5f642a9209e571fc9a353da40beec73c58efd1ed86b5ddde0be00abff1ac819f33a31901657df41264f769034b1c720c0d678552dff6db9c78a30b7bfe783d127c55b8d099a6964511883ee4e9386f563a2ebe0c78d26624b39f9fad7539f47ba1e35c21bcaf4e8f4da01d86152e059cbe6e39d3d10c2e462d4a1c4708a8a7d436e256ec581c876ff58f757c83e46c24a06dee0ffd6705e88c435408671ac121af2afb0f8f9a6359b0ba9de181b7830936c12d68cacc0ac7dd707295cf6e8c911f15f6e5bfb61145a4e25bf50937508d414e4b5f1d8eb748d89f25418f9bfa09f4fa6da275b7dd9d78b186d303373c9efa232d3969c31a809b4311edff324650af8bd25bba6391fb80054cb2e8b33c216e1eec57e31cd323ede54590f797366d05a9e9311921d4b6e62de9628d77eb85141a6370ca70a9e750b3d4b85efea8ffb27074686c354119b49c67307f96eb31583dbfdc02abc38b113b1b47cb17e3aaf33789e503c3e4a8e0739617931a6aab5a1eec5977331014b574830872242ab437313696a9e315b5266263536c545ca4cec21904c8ead9f914c49e110cb613db3c19f3cfe6aca3f0aa741ebc2baee07d0d336f5d3dcd34d80ba96c910ef3200514855dd485e3498a2754e896203c41dfbc86e99aae08aeeea22066c42ba8bcfe49782401dab0f1189c7989f38ce70c706d3b3e2546c0463b7af04901a777be71c7acea5ca0e5beb2ed8ca400ead958a23f92469bca112a1b0ba579ad3e4471fb1791bbedd4f39a8f800d67c6c29bdef242a0455bb5415f921f7fe29e844872e0dbcbacdfb684dc301a498a4ef750546d8a9f032c3f42d72e3f608f7a645d023a9572dfc9b174986dc04edf172682544c9ac515109ad191e098fb3387c424a99e4e632041c77b55751c1e87ce14e430281bcc94169d857f8e5821ee61cba966c90a8792a2ab6f2feb8153b987597c1c5e09ea266c924cc157904a1183e6101a825069651c0c8c5c8278293f81bf048fde735e593ed0a42976c443abf14ec81078b2036331a73578947e17aceaa887cd6d6c37881178d0997d6be071f10e4e08abab583abdbfba2a06e608d1cab93a80e542e505b528bbad8c235022636f776a77b83687f651eb66defd679a82e49ec1b34962f0d96c9c4c631ea55ee752cca5d3ecb052bb0392eed8439652f5c5c0d76d03f8f506a2d11577833c2789713da0f3f95ceacd8fc14e67237c23682d907e704981dab2d684a8764305efc6ae6cef59f684062e427f98881e725db10fafa9bda8b1e3eac27152b628e0c6d6cccde3e2a89024f04bee9f341acf525df8b6dacf06ca53a54e7efa4126ac9b74af4d270f8583df3a3076f5b1db2651b4ae40cb64a14cb2ec5f2ca101f70b21a1b5e9b8c71fa9f50321f6694fd9279708459b7cef4adb083c2c713e8d691c38b9a0cc6309875ff76ebe1cd133f17a9c9d9ffecb15ef0ab5788af48225a052a9e0bde93f957a90b99ba86245c4e11bf652afa15726fea1c1260ef0da090f642bb62b919d1b3b6d64cb8a5db4d8dca8a8dbde5f4d030f1ad5a98b59de59c88c97fa7d8432af19fe45a5fc6183f304273d1252d9efe0963ff8b4deb9dc4a0cad2951acaf9b9602056fafb661042883aadca2628d5f320a3bdfcb7f9201a807f100e1f97290758955919a7faea17cffb32fbe27112b6e81bbbc5433230cce949a49b6aafaf17041d6840529e6dcba8ff5b3b1f6f399c1c49aa47a0bd2678ead0ebe25d947df09c7d19e8a57b4a1bd107ec93695e611d483a3b08288a174b171b78952a1bc647766ed8db39b5c6ccfd112939225bd1a6cf3adcc99bb8f74718e030e72bdaa712b7f4426c1f4d7770a5eefd468e54db7b2e3d3df9a4fd1d90a188d0d451ab02a192a51e3686b77954820ac4ec44df8fef942b38eedac23db10c95e99b729d70ae86b39d88553a550c452aa475134fe7975842fb36e6199fdb753369a9c99cd41a8171e365aa04588d9a197200de07e52d4f8f2eedc4bf2d422dde2922f6f08514be26ce6d35e5e7a453e5ae6d6a2d0efa47e7e6c346b851624b9273ca0fbc81514cb7c794c25818a304ac7f26747296b3af21c996a99c26d2fc07fcc521ee65d8045dab8e6e9a45a76010abfcdd582f587cbbbcc60fbba7acaade755960479c8ba64a8940c6127d59f70c41582198c8b7b31ca92dc32859d936c7c8742df4ccc9ff0d2e7fd00b1314fa7dfc7acb3791f1268222085eea5e96e0570818a42ae04c75cd8e70190a911b231af9552e0879f74e4328e0fe9aa04fe645955ff90a10276594a224cfa8d67cc9b55fc39a5e4ecf9f310a26389d5db01270c8b054a7483e4164dbb5bd0a76edec349893a4de0e43049e844354b7a5e883dcd5d5b9f7d998e426dce6939f0dba0cb86be608eac0b5066b816722d3ca832d1d645545ae57ff992c42458a5ff782a4be6499f7adba8ab54c431580601cb86dd6419af06e2bf7d4061cc5fcbadfaf0da9d122eef7e1867bc15963888fb4c526711ecb93066087edd5d563c0f9d277a8ddd957ca72fe85a66210cd72f6df67a39ca7ab08d0afccd51c5dfbcb31f302d89202e8e36790e912a954cf3cf683fee5e6605a0e49282e6f406bc784a805309ecdeb727705482987b1d5b7fa3055a8369cb02470f44fef66261f6295c5669d600f7fb7bacab0df62415d3ddcc7efee5cfa9d8a9e427005c3e29e2a74af0e029e0fb657042f22777b7f5d80b2db9b1776bd08e93ea780a1e922d50bfbcd0c27f248c919b549e76dc41c14b6a9d0511950f654dd8479994768a3f4d6a178e010aed29378a52c46af419562285e293b6cb50d682e35ccc73cfc98b1ed19d8eeb7d2e0d620a2d69c7a8702f3e08429fc0d8d37ccc813730ba0ac4a2e8f486f3408aad5de89f8a100a76fd3991c1b125c1d091ca7e8144cc34a3c6df7d2258b99e31423c21c1d9f845fed9fb20698f103f009d55724d6493f9446be38c369829ee40e90e23db23ea2a4e92b077a822b55b00e13264bb91391ee7410f29cc9788a4db577f4d1bc38ac030c0f54e28aef9e9d642984acac8694b0ed91c02d48f0dbe96c597469c22f349788e6ebfc14d246ee59a7285a82e57c98450aef778a44f6be316f1236f2b89ecee51203d4a59b1df26d88a7c223c5714c016640e45f7f4c1acfafb9ee3bd248397873ca2c74fe28f2807782e71fee6b87141d4b2032d41727a14da10c0c4410cbda81db06a5bec17193a7b690187b6f81a163e9868092e409c6f81dd4b3d428110b2db1516213f361260f2b243750a19ad3b119237b139401dc6eb59f95cfd678977f837732424407ba56bdb38b499758660a64afc077a01199dbf8461cb8cfbb569f21c0521e47c5552c5c754312c6907abf8ec77455a2fd8de86bf0bdb799375184de6492a9e02dea5c23fda16c058220690b1f137ef1772f671267143d6fa75a4160fc24cceec0cfccb383b3eb5ea3d7f3ad6fa51903e4bb45199f60ca0e03491bc1e9a7e0ed2c5ae293832b41a805f5047499990c397e02ec40628dd4a5d48d5ea41dab4e6ea9146c3a5730acd80c1c169d3edc8201c70237ce86174166e707729dfefbcdeb8de4aa37e0b48ce5f9eeaf8cd7d4b1e5b4ba5dc06bdaffe9339db51a9357d1ab34ff1ad6a24d4c1b91b5000453c94224a234b988d1517d00e33036da774cb67f4a0e449ceb6c5d0cd311486c9c4f20f916e79176608a27c41e5b5aebe9d9bd852e4865a40bb928587c05842e6a308626f29b34b5551744b9366413dbaadad073ac1935d1803c8102d5a5485604f02c8df450ac79419c25ccf221d36fa311176efb4c878ce9b153d1b6659205c97fc3b0fc51b10965c2559047cede6e309bfbc911f8e190d3b3f1b982143bb78b62312ea3a44fb350bcd845b41449e7fe8838a99ea78799ece9218493654d8ced0d8637da0289d5fd87644361f20713b11122715a6e2a91516c93d9abf1f6e92843f18c1dfcf7e12998525bca0bf1833172f1a4533c621fe4314b4beb9ade997913a3ec7ae4b908127596869404802d7951f235a519b6a1a7bfbd0514017b560d4b63de2197b051a92f7c28e654ec4e125b10928dbe9e218edcf9a8658245e16b7bbdc64b27663a57dfe13964aab7d6917e23e84c02c658eda5b9de8de77d3656bd6ed14f1acfd5674f13fa9a5529bf89473433474a0e60048a337e32fc8682301bb22807d744cda8a1800e2755875357e7c7880529ae274d7889e60a065da6e2853df857fa63d24e8b4d290a07f3a04a34425f18ffc84d55bcc15a661d1f69fa7c7ab0d806b9efad2959c8dfd4c54ab1b9fb4707a7b50d88e8e5081a549f77b9cb14072ca088caf21b7a9723c6b2e09008311ee6ff907a0c6b405751cf7f8b1d3eab6fa73f7dc5acb8d720d8493efc44c7814c00e71e1139be4da2a2aaa1be09fc52b937dce83db8e925a40c869e7952db37f1c3cbcf90053615751796e0c422c441c54dea7f0afc8ec52d461a"}, &(0x7f0000000700)={0x0, 0xa, 0x1}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x3b}, &(0x7f0000000780)={0x20, 0x1, 0xef, "65ae0aa0d4a2c51c068b97aa6aa69c0ec3c2f4830d3cb9e094b7ba41c45ce70be2c2c50ea9404b1ad9c16eeb2c4e52da8ce76f5beda0e0716d7b5086d1fafc14ac84f283de0eb92339df033f9131bf4a1de20780b3f9ea128ccce40fd08e23cf525df79176c236afc57909e97b88b47c398cc27a12ea76fc6092a2a000fb0f2e71d98fc9756af899b9b11bcfde792dd6f9c2d012b49426ff0e315c7ee4d4fdab5f7e3d42c236d4c336b3e037e5b1f46c9ab67e1456e749172ed86aaecd3d6a8626d62b09cbff5c4f8abc1b989e01ae94aabe52d02b6dad28626e39a94bc3d095026fc7bd436755edbbacf8285891e0"}, &(0x7f0000000880)={0x20, 0x3, 0x1, 0x2}})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

20:27:03 executing program 1:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
accept4$inet(r0, &(0x7f0000000040)={0x2, 0x0, @initdev}, &(0x7f00000000c0)=0x10, 0x80800)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000100)={0x400000100002f, {0x0, 0x0, 0xdeba}})
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3)
pipe(&(0x7f0000001300)={<r3=>0xffffffffffffffff})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r5, 0x401c5504, &(0x7f0000000100)={0x400000100002f, {0x0, 0x0, 0xdeba}})
ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f00000002c0)={{}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r5, 0x5501)
splice(0xffffffffffffffff, &(0x7f0000000240), r5, &(0x7f0000000340), 0x3e89c9b3, 0x4)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000380)={0x3, 0x1, {0x2, 0x1, 0x6419, 0x7f3571e354cac3b5, 0x80000000}})
splice(r3, 0x0, r4, 0x0, 0x10003, 0x0)
ioctl$VIDIOC_G_EDID(r3, 0xc0285628, &(0x7f0000000200)={0x0, 0xed68, 0x1, [], &(0x7f00000001c0)=0x3f})
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000002c0)={{}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r2, 0x5501)
r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r6, 0x401c5504, &(0x7f0000000100)={0x400000100002f, {0x0, 0x0, 0xdeba}})
ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f00000002c0)={{}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r6, 0x5501)
syz_usb_control_io(r1, 0x0, &(0x7f0000000100)={0xac, &(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYRESOCT=r6, @ANYRESHEX=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

20:27:03 executing program 2:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x20000, 0x0)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0xfffffffffffffd55, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x23, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "3a3c5a98a0b88f20dab28f43fd604a180bf5c40802c641ed238502ea05de14099c5dfa19c61d2715c179a8913d43848ebb6058f0ae47cea480ef4ae3d1bd7724bc870bcd80db1746d211f5f7dde4bd2f33e5a634f6174cf4dab428a4bdd5141e1cdfd7535edf28bbf44e35cb9180ea022e265108d6db9ab408e8b86c601dc9baf360878fefb4286f933f037b53d6c51bf10ba2a82424f4cf64d7a43f8235463a4e3651ce704859e92aa583ee3327735693aa9147f8b908c3d665302cff8ef37ebcb56efae4f83bc51fa46f6295b1622a46895dded87879de64c990feb0f52a533e44a8d7c9ef25ea0f8e90ff09ab06f93e605e04f9f5ac3102bcefe10a31"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r4=>0xffffffffffffffff})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
close(r5)
ioctl$EVIOCGABS3F(r4, 0x8018457f, &(0x7f00000005c0)=""/181)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

20:27:03 executing program 0:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000170a07031dfffd942367ede3b9a3484409000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040)=0x2, 0x4)
r1 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000170a07031dfffd942367ede3b9a3484409000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000000c0)={0x800000000000025d, [0x7, 0x2000]}, 0x4)
r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000380)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000000)={0x7fff, 0x1, 0x0, "17c51909000000000000009ec1ffffffb9dc62c64d960600dd00001d001cfd47"})

[ 1548.832806][ T9944] radio-si470x 4-1:0.128: si470x_get_report: usb_control_msg returned -71
[ 1548.841923][ T9944] radio-si470x: probe of 4-1:0.128 failed with error -5
[ 1548.925274][ T9944] usb 4-1: USB disconnect, device number 84
20:27:04 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = eventfd(0x0)
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

[ 1549.012061][T10856] usb 6-1: Using ep0 maxpacket: 16
20:27:04 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x101, 0x100)
fstat(r1, &(0x7f0000000040))
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10)
r2 = accept$alg(r0, 0x0, 0x0)
sendto(r2, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
pipe(&(0x7f0000000580))
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0)

20:27:04 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)
pipe2(&(0x7f0000000000)={<r2=>0xffffffffffffffff}, 0x80800)
getsockopt$inet_tcp_buf(r2, 0x6, 0xabebae770cf005b8, &(0x7f0000000080)=""/43, &(0x7f00000000c0)=0x2b)

[ 1549.143008][T10856] usb 6-1: config 0 has an invalid interface number: 128 but max is 0
[ 1549.151325][T10856] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1549.161578][T10856] usb 6-1: config 0 has no interface number 0
[ 1549.162121][T11836] usb 3-1: new high-speed USB device number 77 using dummy_hcd
[ 1549.167812][T10856] usb 6-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1549.167914][T10856] usb 6-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1549.195759][T10856] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1549.206243][T11774] usb 2-1: new high-speed USB device number 22 using dummy_hcd
20:27:04 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000100)={0x400000100002f, {0x0, 0x0, 0xdeba}})
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000002c0)={{}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r1, 0x5501)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x40d00, 0x0)
ioctl$HIDIOCGCOLLECTIONINDEX(r2, 0x40184810, &(0x7f0000000080)={0x3, 0x200, 0x200, 0x9, 0x8, 0x8})
r3 = fcntl$dupfd(r0, 0x406, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

[ 1549.258458][T10856] usb 6-1: config 0 descriptor??
[ 1549.358027][ T5109] input: syz0 as /devices/virtual/input/input1488
[ 1549.419573][T11836] usb 3-1: Using ep0 maxpacket: 16
[ 1549.432294][ T9944] usb 4-1: new high-speed USB device number 85 using dummy_hcd
[ 1549.457407][ T5109] input: syz0 as /devices/virtual/input/input1489
[ 1549.472382][T11774] usb 2-1: Using ep0 maxpacket: 16
[ 1549.532515][T10856] radio-si470x 6-1:0.128: DeviceID=0x9bd5 ChipID=0xc681
[ 1549.543939][T11836] usb 3-1: config 0 has an invalid interface number: 128 but max is 0
[ 1549.552331][T11836] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1549.562627][T11836] usb 3-1: config 0 has no interface number 0
[ 1549.568814][T11836] usb 3-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1549.580082][T11836] usb 3-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1549.589274][T11836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1549.608026][T11836] usb 3-1: config 0 descriptor??
[ 1549.612105][T11774] usb 2-1: config 0 has an invalid interface number: 128 but max is 0
[ 1549.621434][T11774] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1549.631885][T11774] usb 2-1: config 0 has no interface number 0
[ 1549.638071][T11774] usb 2-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1549.649276][T11774] usb 2-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1549.658465][T11774] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1549.672405][T11774] usb 2-1: config 0 descriptor??
[ 1549.722075][ T9944] usb 4-1: Using ep0 maxpacket: 16
[ 1549.754912][T10856] radio-si470x 6-1:0.128: software version 155, hardware version 213
[ 1549.864156][ T9944] usb 4-1: config 0 has an invalid interface number: 128 but max is 0
[ 1549.872794][ T9944] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1549.883129][ T9944] usb 4-1: config 0 has no interface number 0
[ 1549.889303][ T9944] usb 4-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1549.900502][ T9944] usb 4-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1549.909699][ T9944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1549.922053][T11774] radio-si470x 2-1:0.128: DeviceID=0x90d5 ChipID=0xc681
[ 1549.931972][T11836] radio-si470x 3-1:0.128: DeviceID=0x63f7 ChipID=0xba81
[ 1549.934446][ T9944] usb 4-1: config 0 descriptor??
20:27:05 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
shmget(0x1, 0x3000, 0x78000092, &(0x7f0000ffc000/0x3000)=nil)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f0000000280)=0x5)
setuid(r2)
getresgid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100))
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresuid(&(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000240))
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x27)
r3 = socket(0xa, 0x3, 0x6)
connect$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xfe, 0x0, 0x1000, 0x80000001, 0x6, 0x5}, 0x8}, 0xa)
bind$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x6}, 0x1c)
getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@mcast1, @in=@dev}}, {{@in=@loopback}}}, &(0x7f0000000480)=0xe8)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000900)=ANY=[@ANYBLOB="ab000000a6d23fa0c9cb488b619002d1d896e5ffb3b62ccfa516aec8038d482cd2aa0b6ac0d684fba227e9983be9f367da66938eddee11b161213c510a00008ae552bc17ec5e9788d20600060aa7629aed35eb9bb9e096cc3825df10acb8c0dff4569bb0f686a3856eb778df7afa4a3112676e9547e0d65bee83afa0b4f46a0b10af299da7efdcc6c573074de84403de7902a06096d7483194ad47775d355b9800000008008b0500"/193], &(0x7f0000000540)=0x1)
getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8)
setuid(r5)
r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000540)=0x1)
getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8)
setuid(r7)
r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r8, 0x84, 0x6d, &(0x7f0000000b40)=ANY=[@ANYBLOB="ab000000a6d23fa0c9cb488b6190f2d1d89677354590dde5ffb3b62ccfa516aec8038d48d684fba227e9983be9f367da66938eddee11b1613f0d5ff3b2213cdf2bd00a8ae552bc17ec5e976fa67846060aa7629aed35eb9bb9e096cc3825df10acb8c0dff4569bb0f6a15cab46fa86a3856eb778df7afa4a3112676e9547e0d65bee83afa0b4f46a0b10af299da7efdcc6c573074de84403de7902a07096d7483194ad47775d355bd65460a5a52aa9cc384c962b12062cf85884362f08008b07"], &(0x7f0000000540)=0x1)
getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000040)=0xe8)
setuid(r9)
r10 = request_key(0x0, &(0x7f0000001300)={'syz', 0x2}, &(0x7f0000001340)='em0cpusetmime_type\x00', 0xfffffffffffffff8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, <r11=>0x0}, 0x0)
keyctl$chown(0x4, r10, 0x0, r11)

[ 1549.982514][T10856] radio-si470x 6-1:0.128: submitting int urb failed (-90)
20:27:05 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x810, 0xffffffffffffffff, 0x200000)

[ 1550.135162][ T4888] input: syz0 as /devices/virtual/input/input1491
[ 1550.152386][T11836] radio-si470x 3-1:0.128: software version 99, hardware version 247
[ 1550.236919][ T9944] radio-si470x 4-1:0.128: DeviceID=0x94d5 ChipID=0xc681
[ 1550.248049][ T4888] input: syz0 as /devices/virtual/input/input1490
[ 1550.265442][T10856] radio-si470x 6-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1550.274533][T10856] radio-si470x: probe of 6-1:0.128 failed with error -22
20:27:05 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x101, 0x1ff00000, 0x8, 'queue1\x00', 0x3})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000110081aee405dc09000f00fe0701015b1e00000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)
r3 = dup2(r0, r0)
setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000000)=0x1f, 0x4)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r3, 0x110, 0x4, &(0x7f0000000100), 0x4)
r4 = msgget(0x2, 0x89)
msgctl$MSG_INFO(r4, 0xc, &(0x7f0000000040)=""/13)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r5, 0x401c5504, &(0x7f0000000100)={0x400000100002f, {0x0, 0x0, 0xdeba}})
ioctl$UI_SET_EVBIT(r5, 0x40045564, 0xe)
ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f00000002c0)={{}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r5, 0x5501)
syz_emit_ethernet(0x4, &(0x7f0000000480)=ANY=[@ANYRES64=r2, @ANYBLOB="31dd974d60d0419c562a19d7deda7b3c325e281804eb9e968203269f23a7b24fb2df439cfe3bbc9fb24c9d3f3277d6a3b48e360a9b454c5b8811d8e0f328682cd3ec8976cb07bff1eff7d94a9cec2acedf8487ae558440e9d7ef54c071c142e9acb0772c18244807f4b2252c451087dd5e401ca5765e17e601e50d211cc078cf15110c5eb5c6edc62ca13addee1344e30ffb890ec3b1d891403947ff928be1f5ecf02400937d4c7d530aaee51fed24c4c6fba9c4c6b7ae7c63d340d62216218c5d8f08823f6fb23ee7cca0e084cca9d3363dacac0a2d1b0ec312b83d509206da315a9d9117118b23f6f6a77cfc904def3584", @ANYRES32=r0, @ANYBLOB="5000000090780000d2cbb71bacde196d9f4fbacaa96f4631900bf17ef8ced2c4f055d82103a67588c81ee60a01ba15ff56f1e286c3829bd062ce118cd871fe71494c75955781976dc81dd46d4f694ff656db7e4a18413095b7"], 0x0)

[ 1550.310805][T10856] usb 6-1: USB disconnect, device number 27
[ 1550.316732][ T4888] input: syz0 as /devices/virtual/input/input1492
[ 1550.382293][T11774] radio-si470x 2-1:0.128: software version 144, hardware version 213
[ 1550.392837][T11836] radio-si470x 3-1:0.128: submitting int urb failed (-90)
[ 1550.422087][ T9944] radio-si470x 4-1:0.128: software version 148, hardware version 213
[ 1550.425902][ T5136] input: syz0 as /devices/virtual/input/input1493
[ 1550.592073][T11774] radio-si470x 2-1:0.128: submitting int urb failed (-90)
[ 1550.632038][ T9944] radio-si470x 4-1:0.128: submitting int urb failed (-90)
20:27:05 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setrlimit(0x2, &(0x7f0000000040)={0x2000000001fffffc, 0x22080000000})
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000100)={0x400000100002f, {0x0, 0x0, 0xdeba}})
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000002c0)={{}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r2, 0x5501)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000000)=0x7f)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

[ 1550.791365][ T5240] input: syz0 as /devices/virtual/input/input1494
[ 1550.832401][T11836] radio-si470x 3-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1550.841459][T11836] radio-si470x: probe of 3-1:0.128 failed with error -22
[ 1550.852277][T11836] usb 3-1: USB disconnect, device number 77
[ 1550.879361][ T5243] input: syz0 as /devices/virtual/input/input1495
[ 1551.022161][T11774] radio-si470x 2-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1551.031207][T11774] radio-si470x: probe of 2-1:0.128 failed with error -22
[ 1551.041998][T11774] usb 2-1: USB disconnect, device number 22
[ 1551.282132][ T9944] radio-si470x 4-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1551.291039][ T9944] radio-si470x: probe of 4-1:0.128 failed with error -22
[ 1551.306631][ T9944] usb 4-1: USB disconnect, device number 85
[ 1551.891778][ T9944] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[ 1552.031780][T11774] usb 4-1: new high-speed USB device number 86 using dummy_hcd
[ 1552.131852][ T9944] usb 2-1: Using ep0 maxpacket: 16
[ 1552.252332][ T9944] usb 2-1: config 0 has an invalid interface number: 128 but max is 0
[ 1552.260674][ T9944] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1552.270917][ T9944] usb 2-1: config 0 has no interface number 0
[ 1552.277189][ T9944] usb 2-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1552.288397][ T9944] usb 2-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1552.297534][ T9944] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1552.306441][T11774] usb 4-1: Using ep0 maxpacket: 16
[ 1552.312570][ T9944] usb 2-1: config 0 descriptor??
[ 1552.432013][T11774] usb 4-1: config 0 has an invalid interface number: 128 but max is 0
[ 1552.440350][T11774] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1552.450614][T11774] usb 4-1: config 0 has no interface number 0
[ 1552.456809][T11774] usb 4-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1552.468060][T11774] usb 4-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1552.477262][T11774] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1552.488150][T11774] usb 4-1: config 0 descriptor??
[ 1552.563262][ T5249] input: syz0 as /devices/virtual/input/input1497
[ 1552.574081][ T9944] radio-si470x 2-1:0.128: DeviceID=0x94d5 ChipID=0xc681
[ 1552.583375][ T5249] input: syz0 as /devices/virtual/input/input1498
[ 1552.616221][ T9944] radio-si470x 2-1:0.128: software version 148, hardware version 213
[ 1552.743410][ T9944] radio-si470x 2-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1552.752179][ T9944] radio-si470x 2-1:0.128: submitting int urb failed (-90)
[ 1552.760318][T11774] radio-si470x 4-1:0.128: DeviceID=0x9dd5 ChipID=0xc681
[ 1552.772189][ T9944] radio-si470x 2-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1552.781223][ T9944] radio-si470x: probe of 2-1:0.128 failed with error -22
20:27:07 executing program 3:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)=ANY=[@ANYBLOB="120100001e95cd10cf12117108480000000109021b0001000000000904800001030000e90605840b0000000000"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f00000000c0)=ANY=[@ANYBLOB="0049dfd30000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x5, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x5, 0x0}}}}, &(0x7f0000000180)=0x90)
setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000080), 0x4)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe0009003c0800240042ef420000000109021b00017600000009040000010209bd00070581070001000000bf52cf6794a9d3"], 0x0)
syz_usb_disconnect(r2)
syz_usb_control_io$printer(r2, &(0x7f0000000280)={0x14, &(0x7f0000000200)={0x0, 0x24, 0xe, {0xe, 0x2d, "a571fe6d8df26854357497a1"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c04}}}, &(0x7f0000000600)={0x34, &(0x7f00000002c0)={0x20, 0x6fc2d89b5728ef2d, 0x85, "752c6ce4dbcc18249dccee017dcdf89ab7bdb4dcde133f084eb44e4a34d20784fda854aa7689ac89e39bb6a935b9a8cb423a226225a83de8c819c167a52fc5aac804217aa1ab4531d4656c6b38f1581adbb3ddbbad8518b07475091f650a89720e7740ce6336bd21b9c8c6aba0a31da18f3b91c9a683d9a59c9a4e9e06ce21cc2fd6a874dd"}, &(0x7f0000000380)={0x0, 0xa, 0x1}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0xfe}, &(0x7f0000000400)={0x20, 0x0, 0x66, {0x64, "c29409c7568ebeb02db66c36a6b949beeb3c07bdcfcc041636050879c00a3cbcb147a2367f63d5dda6e7cd8e89758af4d8a06738c1b5c1c8db32c0bedc1d743aff8823e7fab99d546f244dde9f896769894b3d93a4859b8db40b49f5e478767975dc2dc7"}}, &(0x7f0000000480)={0x20, 0x1, 0x1, 0x1}, &(0x7f00000005c0)={0x20, 0x0, 0x1, 0x5}})
r3 = signalfd(0xffffffffffffffff, &(0x7f00000001c0)={0x6e9f4083}, 0x8)
close(r3)
r4 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x420080, 0x0)
ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040))

20:27:07 executing program 5:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x0, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x81, @string={0x81, 0x3, "3a3c5a98a0b88f20dab28f43fd604a180bf5c40802c641ed238502ea05de14099c5dfa19c61d2715c179a8913d43848ebb6058f0ae47cea480ef4ae3d1bd7724bc870bcd80db1746d211f5f7dde4bd2f33e5a634f6174cf4dab428a4bdd5141e1cdfd7535edf28bbf44e35cb9180ea022e265108d6db9ab408e8b86c601dc9"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x20000, 0x0)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f00000001c0)={0x7, 0x100})
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000200)={0xfffffffffffffd55, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x23, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r4 = socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r5=>0xffffffffffffffff})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
close(r6)
splice(r5, 0x0, r6, 0x0, 0x10003, 0x0)
ioctl$EVIOCGABS3F(r5, 0x8018457f, &(0x7f00000005c0)=""/181)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @multicast2}}}, &(0x7f0000000180)=0x90)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e20, 0xaa, @empty, 0x8000}, {0xa, 0x4e24, 0x7fffffff, @dev={0xfe, 0x80, [], 0xf}, 0x6}, 0x8000, [0x8, 0x1, 0x84, 0xf5, 0x7, 0x5, 0x0, 0x3]}, 0x5c)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

20:27:07 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071")
r1 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x4000, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0)
r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x82}, 0x8)
ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1})
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000027000)={0x1})
r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00')
sendmsg$FOU_CMD_ADD(r2, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r3, 0x400, 0x70bd27, 0x25dfdbff, {}, [@FOU_ATTR_PEER_PORT={0x8, 0xa, 0x4e22}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x2f}, @FOU_ATTR_PEER_PORT={0x8, 0xa, 0x4e22}, @FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x48042)
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f00000002c0)={0x7fffffff})
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
unshare(0x40000000)
ioctl$TIOCLINUX7(r2, 0x541c, &(0x7f0000000080)={0x7, 0x8})

20:27:07 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
pipe(&(0x7f0000001300)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00')
ioctl$PPPIOCGIDLE(r2, 0x8010743f, &(0x7f00000001c0))
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000000000000941000000140018000000007564703a73797a3100000000"], 0x30}}, 0x0)
sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x400, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x59088}, 0x84726c942c821eb8)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-monitor\x00', 0x40, 0x0)
ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000140)=""/31)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

20:27:07 executing program 2:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x20000, 0x0)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r4=>0xffffffffffffffff})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
close(r5)
ioctl$EVIOCGABS3F(r4, 0x8018457f, &(0x7f00000005c0)=""/181)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

20:27:07 executing program 1:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, &(0x7f0000000000)='keyring\x00', 0x8)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
pause()
clock_adjtime(0x0, &(0x7f00000000c0)={0x9, 0x80000001, 0x6, 0x19, 0x5, 0x7ff, 0x735, 0x400, 0x6, 0x3ff, 0xa46, 0x996, 0x7, 0x80000001, 0x1000, 0xc549, 0x1, 0x2, 0x8d66, 0x80, 0x5b9, 0x5, 0x143, 0x9, 0xfab9, 0x5})

[ 1552.792923][ T9944] usb 2-1: USB disconnect, device number 23
[ 1552.802189][T11774] radio-si470x 4-1:0.128: si470x_get_report: usb_control_msg returned -71
[ 1552.810758][T11774] radio-si470x 4-1:0.128: si470x_get_scratch: si470x_get_report returned -71
[ 1552.820074][T11774] radio-si470x: probe of 4-1:0.128 failed with error -5
[ 1552.833099][T11774] usb 4-1: USB disconnect, device number 86
[ 1552.983741][ T5258] IPVS: ftp: loaded support on port[0] = 21
[ 1553.152211][T10856] usb 3-1: new high-speed USB device number 78 using dummy_hcd
[ 1553.282414][T11774] usb 4-1: new high-speed USB device number 87 using dummy_hcd
[ 1553.302070][ T9944] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[ 1553.392142][T10856] usb 3-1: Using ep0 maxpacket: 16
[ 1553.463000][T11836] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[ 1553.512780][T10856] usb 3-1: config 0 has an invalid interface number: 128 but max is 0
[ 1553.521124][T10856] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1553.531396][T10856] usb 3-1: config 0 has no interface number 0
[ 1553.537612][T10856] usb 3-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1553.548869][T10856] usb 3-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
20:27:08 executing program 0:
socket$netlink(0x10, 0x3, 0xc)
writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a0676ffffff81004e220000000058000b4824ca944f64009400050028925aa800000000000002e1008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e", 0x58}], 0x1)
arch_prctl$ARCH_SET_CPUID(0x1012, 0x1)

[ 1553.558042][T10856] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1553.567751][ T9944] usb 2-1: Using ep0 maxpacket: 16
[ 1553.575093][T10856] usb 3-1: config 0 descriptor??
[ 1553.612473][T11774] usb 4-1: Using ep0 maxpacket: 16
20:27:08 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000000000843553130082e000000010902240001000000000904000009030000000921000000012229000905810300000000007f6817afcfcf904bbad482adca878a347f6a49981bbe29d0cb5455c017f59f2ca96322c451c01b61d51830cd50"], 0x0)
r1 = syz_open_dev$vbi(&(0x7f0000001900)='/dev/vbi#\x00', 0x1, 0x2)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000001940)={0x8942, 0x8001, 0x7, 0x0, 0x0, [], [], [], 0x40, 0x3})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x0, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000280)={0x2c, &(0x7f0000000040)={0x20, 0x4, 0x27, {0x27, 0x21, "c8df87d1c608da2e74ccc4517c18e27baa99e14f7b585e935683837a1a57e2bff5afdb430d"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x419}}, &(0x7f00000000c0)={0x0, 0xf, 0xc, {0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0xf, 0x1}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x2, 0x1f, 0x5, "4afef9fd", "374973e9"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xd3, 0x8, 0x1, 0x8, 0x80, 0x1f, 0x200}}}, &(0x7f0000001840)={0xac, &(0x7f0000000300)={0x80, 0x16, 0x1000, "e04aa87e51f2c5796577f17f3570aa3faecbfb0161594017f30d7edc749d743fd0f774a6f4c5d0f089ee0530cdbcad5ba6099f868ca1f4900b7d9b729e4063a9b1d880bae18acc50fd445b22eae49ef15cbe161af7d10a7f9a39e41638d40e6900218b5d93ee028c0aa7f422f9f07eea1b3ebe24f37d45350b04fe24f88dfb61f2b646f57e4419e2600842849c38b38f3946492a96f175344729d119e24bb525172e0255a4409d7fc6d0fce29fec22bb2c78b3cd9e528cd396b8d2a4be28f6e9b9cad1605e2c6d8b53a908982a106cd2fb4a014d632c8dd0e68c12667aceb58baa71d3c1fe10a0a47f04cb152bf5bd2f9c1298649679aeee1f34a45efb63393d38f72b9c005b6f9c42191cceb2f17c18a1e76a5bd1c3da2ee254d9f732cd94b029575b6fa2f6e1a61ccef8cf539574b675d30d05cf79a8a0339cf681e8c5cb10c7948d27157f1e0468ead8f95d1e33e7258ef0949146ab613381f0bd0977bbd7ab25d870c782e32310858980f6fb5889899c686a0e96532ccb3fcbec099ce80b27ce8a89f66d673672ee9abc48318c95fbe0f7f03d03988a0845457a17607863e24185dee58384d5e703c513113ac0b3bb7e1b745c9ffd553d6444463ce8d4f1d051409254701994aec42c9f6810a50fcc34746a41aea8c6eae7ff8b1ba52bc4b5bb40b128a73a99efa165169b85a055a5ba81dc6187e2be855a1e8a15c9c4b86da55184deaa2e74115e8bd1253ee69ca8a4dae5ab1f4ea0b9a42ae2243f83fc83ece66359c021ed652cc8c2ab3be9f8a0ebf141a4b44cacf5cf5b5b4ce2db95ff9f8748c33d0d134dd4ef1ca4171bf05935671fcfc13413e457db3eb6fc651432ce0d418756c011d82500252eb4b669a2a72639ca079ad6308f62fd1e6b3b2981fd435d2fdf87dd1ad06f98a8b7f88f14c755162aeafd73b40e6139fdacdb3d6e7b9ad87b0a5395cf63672f5fb551d521f85c7cafef031e0ecb1afee720a3c0d446dbae635f2c07fd32873d36bad3f0308e76341099a52499ace9242c647197c61229f3af5b9108ce2c6b9cc3cf35650bffe5d6a29edc81c3c0bb486151abb884a70f251dfe06a98e823cbd763784f0312173f0d76a7dc42ce40349fa1c279f677904391219aba149c13d55f290127e4784394a90e791077a7892439160c6936973adf0514558ccb0c0e48750091177a797031ec1712c2c48f132ea7fdd5454e784d1677b3f5e772d00258d2f331407fc9d2ade056184a265b11c33f2c265e0c1fe16c82fabadb7a5295eb5929321b0fc8e0312d6d880ba791152585d73c8bf24a2ee6a9649ef665e8c07be58319400cc5e102c1f276b8617c02071a71a8dfdfaf96923ff931214a4984c11f940a92d5d3db0e945b68bf846c91e91da1fc5fabebb176ca278d0181233683256b8f96c77be0367f747e5994d14a783fc3c3217a790ddcb5a2674c38588d3cc82220466369f1c6cc51b54440dd2c878a54b29554272b4c760f0fe2c8959836b5aa02cf4d3dce446e8badf9589494d59fa1e55c73a883562f1ca8080a8df8e2dc932b66b4deb500e773403de26ce4bfa5015c27f1df81be1c8efe63d8ad3c35828657afdf8c2697d87c9df171b57e249ccb33097f3e201839e264feacf2e74c76edcba05cbb23fbb7d7c57a3860084aa986d28205084d6c750e3eccd8e692df76f796421f58cc2bd2cca5dd3bd39cbbebabd45c6cfd9a09782e03843ac17e64f255e842fa42033332b996943a306956a7c356a2a2ba09ae0c9cc93a5c8b662c649d3afdac113d14257a0eb8427736d66de31f668e812967f714bddb5fcb54407384d115310030c8dba5e45838e9f86bbed26e2d9ad114e7fcbf22252769510fe32793b5ae3b8a6c560061498d8737db0d0cb38f207fdd093a179c2aec2f5e511282f8360c6205ed801ce4c43406327f07e74ea3a135d116e0d7edd9260638cc132d505f3a090e8f24c46b413228d1dbe755005e176fdfb7c96336b29d959acd5dadf31771c2d2c916b302dc96261720628356f247978a29101d64908636b88d5b4aae5cfb854a297387c1034bfc153add4c4cd4ca6c6f33dfc8b418ad3e2c7faf1cfc54164f9b8a5f907829ef5c84ad9118a3e452ebbe962ded9500e6d01bc28fd9de666b82eb370b849870db71b0ebf3a1192d37caf7e688b46064a102f32c5977332c3c6f83eb6a6dcd2f4751d26eb22c54a0c4d79270b20cd72e91bdab080fc965440165efb933557ea691b9427ea1ef873f915fb25483d311f26cc41a5d469c938afb00a65c7db871210c26978e14e5a472bf0a4ebb9ff7591d1cc1430aa1282db20da2fc9d78961c2eb6428dc320c5c2a4865555849e34b723e6ca6f9775fa144d9be5b43e33676c9f57227b2a7f32fa66cff52901e5cebb0d6a9f08e3b38dea1bd10ca871ac605b46fd7af65d9ea772903c8d4356a871fba9b08831a7c124fc1c60e10437b07dca25de2b62c94ad2267b924657d57cc48f251cd6a8fb9b5cb900af86e7667df367cd60ff1ac549525be36ea8ff50454a4171676e4127e399e32875f3e6cab32e81ac484dbeded83dd39019c6790c196de207e0c5b6c4c4aa6f5ef2d80ac52a4891016efb0442cb566c17fe0b03ec460c9fdb3207d5b70bdcdd2340de73d7de829b5469a39a88406603221c24789d712b83c0fc50771b12f5fae572efc31a61744f8207153d01dd0f55c893228ae95c9acb4398175270fab48b60e010c1ab84ff7e34bb1ea57c94397934cd78eefe45df9258bea5738dad6778f6d8c5e2a91eca82ff03ad1e00caf2219b41a22399498a39715d3637098aff06aca94b1c782b03c32dd2925428fcd183137c30a8cdaaf73057cb68e8c0673df9983e650f6e887fa1254b33f71b8ee24f00a839b00783e283fe04197c761fe7bf5768a8d272e8164d8d7d7ca91e74206ebd94e537c69367473eea74bd6dfbc481e9efb550c89c8197d164657357ed788eb23aa17e38b2cf5987e18abd841ca9bcc7aae9421f70ee7d7b4ce2e3d968150a04ee48c4fc9c4ef73c675cdfe3ff73823f81a00fe30b4e4adb22decf393777a6cfbd0550851738a2d13fa21d3ccb4243573e72dbbe4ecb316d0cea86045071e42cb09275557ea6f1eaf8d57bec0937c4644563c56ca6c6f09e7f5633986351ea27f11781829077e7afb056b7bf38f8b43f3e4e3f9c3f65a8ffc3db0967df4da38d020ecfaaacd237a9f83229da13012f1ef9306edc251786877a369357f351a4c99d5766f53d437d0bb45417aa9968fe100d40ab5c67df398178fa771b1d8287ebd4bc0f8ae4e3bffe05af147a43603cdfae992cf8345d9d155a4d3df84012401420378acd8d2bb6b4a81d610ea4a6893e392217fc2c2a9cba770c4006e6788d2b709a499759c25fd4d99e1ad7735b4d8008d513782b1deb3f7a262ba811c313ac05faac2950fd463b90d9a393d396d69997b7ca8acdb84a01dc43f4e893376a4162426f11caeea66364e29181e12da534fb346a43e819fb5b8e835dcc521c59e098ce0136983a87fcfef661568e6e375d07b431e306d009eeb4ed5894ce8eb14751b9379c36faa94107164bf41c5aae83add3aa54aa1b06e2c89daece138c45ec87e82eb4bbc760352cfdc430cf7c488d8f800085cfb03280b8d264e2accaf44fc220e9f4d6a14086c7a003f20a143f3136f1242a9eb801928069c8114bd673b9004756c7ef64a5588e430da53649ba8e893fa6133d2e40f1e89f28efe0f3a72167e9299bdeb018a0d3f3725ffe95cff5d4530d31ada75fcd5182bc9ef7e208d275309ba6df725cc5b42794277ca3bcf35156c348bae8ceba910431811c5259114b05e08d4a27302b8c99c80182500f152ab451d0003869e35658cbf996fb32937db030f682df4662a85e674d3fd44beb80a8a11c74e305aadbce2fa8de352de4626839591ba9b14980c22a23e711e5ffca3d7786677867b62b9d1aac7600776f16132928fb9bf5ffb84489b805e7f09b505d54c57bbc65ef9b60862792a9944995011290fda75ff2d760819ddb510a329e01cd195a8f910461c117e33fada1313ff69bc10cc66209c4ba43db226ae57ce96f238bef65ec2f9f11ab00f6db0357e5e024d356ba3a05560039b248ef13b4721345816b184181ab4b0e8fd27681a4b1e3ddf2156da5656c65fd000f34b1a76b9228d0046c87a712e22fe439bcb7ed3adc14506461ad66c7f202d6279590823352f20ca7e6d1b727dc90be8a1f8b8faf744bbba2500d338171203f44e47b3b6891285c147e1ec088d4068910537041e62cc1f209cb1e96848f61f33fa4dec59c3ce3070165bb8d8d85bacd5b41534832295f32750ddbcc98cd1efbda1b45729380570132e6f784830600dbc45fc889595183ecfff3a954d5fcb71495ca06ac0dc6f41970f79614e03005501c9ca85bfbc59df41403c0a81abdb5243dee314f14ea4b45dc03b92a977388675768577d551813df434fab191d53526a8d4f5892d7e665f493993af2d7bae2d68d4d2ed5e55c082c22bb9f0931af4d18a401b7b895d61e6caa16f035cf348748d672edb1eeb26a0844b9c515ea2087562df43b311ce0ef518ea5539605f0e1f3d9dec6f87b5cfed0ccb087b5aa9a3c8f544a155fd2bca5e952f22d5ec63e0028115db6f06c043807de7143c2f82cfb732ccd46d198b9657ceac875bfaab6107e5588c619db8cba3d2e4181481755974d2d5a568e0c84095f6adee1322554c6b5e70caec322c486e9e089599fe2ea5340b0004b59220a7e08c005ae8522f5a59549c3be691447200fb3224116d71a53ec62028c6289634bf57c7bb9fc35255a3b34b54d57623e0336e1d203617f112b8e5f5803a7cab9ed8f8ba92f3689a38ae5141198fda3ea77639bf38c12636948be37878fcce7a26562abc3b000da49828cc65542e7bf31971b331c20b4e0131fa9b3cbffd711123e497e30d9542785318e21314c212141b4461bb8aaa9964fb33ad2ed83391bc0ee69e90e422300b92a1f05d5eec733b0bebb47085799c4b34e0f5cc2f5128294e44c74561856b51801352fe4aa81adbd09c9de883f4db1bd9c3813e61af97ccd9952140008b914b804115ca8da05f2484fabaf781272a355841b9a624817545b20ab580f49d273e973639420523185e40c77c3eeac230494e8d53a18895a96075e21657eafce9c91d7af2dc55abe8bd8a5c0f3584852b9542124467a27e0d7b94f462dd96686777ffcefee27d15d095e96ed83350df53340b820bf2acd96c49803f86b22087c4268b9655adfe37b8275a689767c7bdabe9f7dc06af79457c1fa77732eec46b828788a77020b3954ff34e181991959f6b789ffbedd89c41407873657df56bb82647926308801c3688523ed0115881773d24dd1de20cd9e849d422d68d2473e26ce4bfc14824a74e3d4fcad28f6497c02874c7e2f296b25c7629d1e887f321e453e93a16606daee96567bae5612abb5b3534147686b71f8bcc29831929ddcd6d8b0b37da5695152b42b9c62ff1c9bd2320f7f6c9030eb01eaeafb60e740499e46e915134e6df03264d740348c72f6b6c72423def509845357429538109fe48a7da7700a0830f53d5aa56ea33fcf87795970cab0acf029710367775766e331ba30fad8d601e47d83e1dde4a7b71aac48ef86a6452b67d7327ceede7b12f52078a10008cab285a84ef695d5316955225db5d953f6d9cf15a2f40edcc47d2ab84fd39a327f13d06677780e8efad24b5b691eebad275dc807ceab0afa8698d4d588e1cd64ca982363a55db"}, &(0x7f0000001340)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000001380)={0x0, 0x8, 0x1, 0x7f}, &(0x7f00000013c0)={0x20, 0x81, 0x3, 'a4a'}, &(0x7f0000001400)={0x20, 0x82, 0x2, '9|'}, &(0x7f0000001440)={0x20, 0x83, 0x3, "59c471"}, &(0x7f0000001480)={0x20, 0x84, 0x1, "12"}, &(0x7f00000014c0)={0x20, 0x85, 0x3, "1ce845"}, &(0x7f0000001500)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000001540)={0x20, 0x0, 0x8, {0xd18b7337f5ee2ae5, 0x4, [0xf00]}}, &(0x7f0000001580)={0x40, 0x7, 0x2, 0x3955}, &(0x7f00000015c0)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000001600)={0x40, 0xb, 0x2, "fa7e"}, &(0x7f0000001640)={0x40, 0xf, 0x2, 0x521}, &(0x7f0000001680)={0x40, 0x13, 0x6, @random="f3260a2588c7"}, &(0x7f00000016c0)={0x40, 0x17, 0x6, @remote}, &(0x7f0000001700)={0x40, 0x19, 0x2, "de39"}, &(0x7f0000001740)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000001780)={0x40, 0x1c, 0x1, 0x1}, &(0x7f00000017c0)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000001800)={0x40, 0x21, 0x1, 0x2}})

[ 1553.692490][ T9944] usb 2-1: config 0 has an invalid interface number: 128 but max is 0
[ 1553.700739][ T9944] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1553.710984][ T9944] usb 2-1: config 0 has no interface number 0
[ 1553.717239][ T9944] usb 2-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1553.724564][T11836] usb 6-1: Using ep0 maxpacket: 16
[ 1553.728490][ T9944] usb 2-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
20:27:08 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

[ 1553.742621][ T9944] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1553.760273][ T9944] usb 2-1: config 0 descriptor??
[ 1553.782182][T11774] usb 4-1: config 0 has an invalid interface number: 128 but max is 0
[ 1553.790563][T11774] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1553.800950][T11774] usb 4-1: config 0 has no interface number 0
[ 1553.807182][T11774] usb 4-1: config 0 interface 128 altsetting 0 has an invalid endpoint descriptor of length 6, skipping
[ 1553.818535][T11774] usb 4-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1553.827711][T11774] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1553.837833][T10856] radio-si470x 3-1:0.128: DeviceID=0x99d5 ChipID=0xc681
[ 1553.851131][T11774] usb 4-1: config 0 descriptor??
[ 1553.864172][T11836] usb 6-1: config 0 has an invalid interface number: 128 but max is 0
[ 1553.872592][T11836] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1553.883322][T11836] usb 6-1: config 0 has no interface number 0
20:27:09 executing program 4:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000100)={0x400000100002f, {0x0, 0x0, 0xdeba}})
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000002c0)={{}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r0, 0x5501)
openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40100, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000100)={0x400000100002f, {0x0, 0x0, 0xdeba}})
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000002c0)={{}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r1, 0x5501)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000100)={0x400000100002f, {0x0, 0x0, 0xdeba}})
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000002c0)={{}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r2, 0x5501)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000100)={0x400000100002f, {0x0, 0x0, 0xdeba}})
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f00000002c0)={{}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r3, 0x5501)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000000100)={0x400000100002f, {0x0, 0x0, 0xdeba}})
ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f00000002c0)={{}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r4, 0x5501)
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r5, 0x401c5504, &(0x7f0000000100)={0x400000100002f, {0x0, 0x0, 0xdeba}})
ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f00000002c0)={{}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r5, 0x5501)
r6 = fcntl$dupfd(r4, 0xbd001801c059bb33, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

[ 1553.889514][T11836] usb 6-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1553.901158][T11836] usb 6-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1553.910325][T11836] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1553.921214][T11836] usb 6-1: config 0 descriptor??
[ 1553.981909][T10207] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[ 1554.016733][ T5386] input: syz0 as /devices/virtual/input/input1499
[ 1554.042213][ T5386] input: syz0 as /devices/virtual/input/input1500
[ 1554.042572][T10856] radio-si470x 3-1:0.128: software version 153, hardware version 213
[ 1554.061914][ T9944] radio-si470x 2-1:0.128: DeviceID=0x94d5 ChipID=0xc681
[ 1554.062512][ T5386] input: syz0 as /devices/virtual/input/input1501
[ 1554.089416][ T5386] input: syz0 as /devices/virtual/input/input1502
[ 1554.157716][ T5391] input: syz0 as /devices/virtual/input/input1503
[ 1554.209953][ T5392] input: syz0 as /devices/virtual/input/input1504
[ 1554.217013][T11836] radio-si470x 6-1:0.128: DeviceID=0x6d57 ChipID=0xbb81
[ 1554.252186][T10856] radio-si470x 3-1:0.128: submitting int urb failed (-90)
[ 1554.263490][T10207] usb 1-1: Using ep0 maxpacket: 8
[ 1554.263611][ T9944] radio-si470x 2-1:0.128: software version 148, hardware version 213
[ 1554.392129][T10207] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1554.403249][T10207] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1554.416210][T10207] usb 1-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice=2e.08
[ 1554.425349][T10207] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1554.435917][T10207] usb 1-1: config 0 descriptor??
[ 1554.462074][T11836] radio-si470x 6-1:0.128: software version 109, hardware version 87
[ 1554.492472][ T9944] radio-si470x 2-1:0.128: submitting int urb failed (-90)
[ 1554.532332][ T5386] input: syz0 as /devices/virtual/input/input1505
[ 1554.549703][ T5391] input: syz0 as /devices/virtual/input/input1506
[ 1554.575933][ T5399] input: syz0 as /devices/virtual/input/input1507
[ 1554.623060][ T5386] input: syz0 as /devices/virtual/input/input1508
[ 1554.698821][ T5399] input: syz0 as /devices/virtual/input/input1509
[ 1554.706054][T10856] radio-si470x 3-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1554.713880][T11836] radio-si470x 6-1:0.128: submitting int urb failed (-90)
[ 1554.715092][T10856] radio-si470x: probe of 3-1:0.128 failed with error -22
[ 1554.736285][T10856] usb 3-1: USB disconnect, device number 78
[ 1554.769880][ T5386] input: syz0 as /devices/virtual/input/input1510
[ 1554.922410][T11836] radio-si470x 6-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1554.931305][T11836] radio-si470x: probe of 6-1:0.128 failed with error -22
[ 1554.962494][T11836] usb 6-1: USB disconnect, device number 28
20:27:10 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x41984a3f228fdb81, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
pipe(&(0x7f0000001300)={<r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
close(r3)
splice(r2, 0x0, r3, 0x0, 0x10003, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={r1, r2, 0x2}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x5, 0x0)
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r5, 0x401c5504, &(0x7f0000000340)={0x31, {0x0, 0xffffffff, 0xdeba, 0xe000}})
ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x3)
r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='\x03\x00\x00\x00\x00\x00\x00\x00pxt\x00', 0x2, 0x0)
ioctl$UI_ABS_SETUP(r6, 0x401c5504, &(0x7f0000000100)={0x400000100002f, {0x0, 0x0, 0xdeba}})
ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000380))
ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f00000002c0)={{}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r6, 0x5501)
ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f00000002c0)={{0x0, 0x0, 0x0, 0x40}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r5, 0x5501)
fstatfs(r5, &(0x7f00000001c0)=""/206)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @multicast2}}}, &(0x7f0000000180)=0x90)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4)

[ 1555.163849][T10207] usb 1-1: language id specifier not provided by device, defaulting to English
20:27:10 executing program 2:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x20000, 0x0)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r4=>0xffffffffffffffff})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
close(r5)
ioctl$EVIOCGABS3F(r4, 0x8018457f, &(0x7f00000005c0)=""/181)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

[ 1555.253953][ T9944] radio-si470x 2-1:0.128: si470x_set_report: usb_control_msg returned -110
[ 1555.263298][ T9944] radio-si470x: probe of 2-1:0.128 failed with error -22
[ 1555.412161][T10207] uclogic 0003:5543:3031.0040: failed retrieving Huion firmware version: -71
[ 1555.421220][T10207] uclogic 0003:5543:3031.0040: failed probing parameters: -71
[ 1555.429212][T10207] uclogic: probe of 0003:5543:3031.0040 failed with error -71
[ 1555.465763][T10207] usb 1-1: USB disconnect, device number 58
[ 1555.611972][ T9944] usb 3-1: new high-speed USB device number 79 using dummy_hcd
[ 1555.851965][ T9944] usb 3-1: Using ep0 maxpacket: 16
[ 1555.963654][T11720] usb 2-1: USB disconnect, device number 24
[ 1555.975192][ T9944] usb 3-1: config 0 has an invalid interface number: 128 but max is 0
[ 1555.983693][ T9944] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1555.993989][ T9944] usb 3-1: config 0 has no interface number 0
[ 1556.000177][ T9944] usb 3-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1556.011384][ T9944] usb 3-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1556.020597][ T9944] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1556.035589][ T9944] usb 3-1: config 0 descriptor??
[ 1556.171927][T10856] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[ 1556.292110][ T9944] radio-si470x 3-1:0.128: DeviceID=0x90d5 ChipID=0xc681
[ 1556.411811][T10856] usb 1-1: Using ep0 maxpacket: 8
[ 1556.512271][ T9944] radio-si470x 3-1:0.128: software version 144, hardware version 213
[ 1556.532034][T10856] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1556.543311][T10856] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1556.556313][T10856] usb 1-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice=2e.08
[ 1556.565429][T10856] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1556.574969][T10856] usb 1-1: config 0 descriptor??
20:27:11 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setrlimit(0x2, &(0x7f0000000040)={0x2, 0x20080000000})
mmap(&(0x7f0000aaf000/0x4000)=nil, 0x4000, 0xeab8de83d9b9deab, 0x32, 0xffffffffffffffff, 0xfffffffffffffffe)

20:27:11 executing program 5:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x0, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0xc1, @string={0xc1, 0x3, "3a3c5a98a0b88f20dab28f43fd604a180bf5c40802c641ed238502ea05de14099c5dfa19c61d2715c179a8913d43848ebb6058f0ae47cea480ef4ae3d1bd7724bc870bcd80db1746d211f5f7dde4bd2f33e5a634f6174cf4dab428a4bdd5141e1cdfd7535edf28bbf44e35cb9180ea022e265108d6db9ab408e8b86c601dc9baf360878fefb4286f933f037b53d6c51bf10ba2a82424f4cf64d7a43f8235463a4e3651ce704859e92aa583ee3327735693aa9147f8b908c3d665302cff8ef3"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x20000, 0x0)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f00000001c0)={0x7, 0x100})
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000200)={0xfffffffffffffd55, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x23, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r4 = socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r5=>0xffffffffffffffff})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
close(r6)
splice(r5, 0x0, r6, 0x0, 0x10003, 0x0)
ioctl$EVIOCGABS3F(r5, 0x8018457f, &(0x7f00000005c0)=""/181)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @multicast2}}}, &(0x7f0000000180)=0x90)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e20, 0xaa, @empty, 0x8000}, {0xa, 0x4e24, 0x7fffffff, @dev={0xfe, 0x80, [], 0xf}, 0x6}, 0x8000, [0x8, 0x1, 0x84, 0xf5, 0x7, 0x5, 0x0, 0x3]}, 0x5c)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

20:27:11 executing program 1:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000000)=ANY=[@ANYBLOB="fffff937b3e2bcc1ff7f001e41a51883adc08bc5ed2deda0710c74ebc1329c01e2e2691010f57a250592f2c1b58a132f9d7c57d9adb5cc615813f23519e49b405b24303c414e51ee5dd9b01530ba84a0a8055af4aab3c2a657e3477e76da12940289d64e7c4470"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = open(&(0x7f0000000080)='./file0\x00', 0x88380, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff)
syz_usb_control_io$hid(r0, 0x0, 0x0)
setns(r1, 0x4000000)
syz_usb_control_io(r0, 0x0, 0x0)

[ 1556.732284][ T9944] radio-si470x 3-1:0.128: submitting int urb failed (-90)
[ 1556.797340][T11774] usb 4-1: string descriptor 0 read error: -71
[ 1556.808672][T11774] radio-si470x 4-1:0.128: could not find interrupt in endpoint
[ 1556.816524][T11774] radio-si470x: probe of 4-1:0.128 failed with error -5
[ 1556.823823][T11774] usbhid 4-1:0.128: couldn't find an input interrupt endpoint
20:27:11 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x1, 0x3, 0x3, 0x8, 0xf800, 0xff93}, 0x20)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

[ 1556.888652][T11774] usb 4-1: USB disconnect, device number 87
20:27:12 executing program 0:
unshare(0x40000000)
close(0xffffffffffffffff)
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0)
recvfrom$rxrpc(r0, &(0x7f0000000380)=""/92, 0x5c, 0x2000, 0x0, 0x0)
ioctl$MON_IOCG_STATS(r0, 0x80089203, 0x0)
capget(&(0x7f00000000c0)={0xaa47c53e5b3e8e4a}, 0x0)
syz_genetlink_get_family_id$tipc(0x0)
r1 = socket(0x10, 0x3, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0)
ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000000)={'\x00', @ifru_ivalue=0x4})
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0)
stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000400)=0x12, 0x4)
lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
write$FUSE_ENTRY(r2, &(0x7f00000002c0)={0x90, 0xffffffffffffffda, 0x7, {0x5, 0x2, 0x9, 0x80, 0x80000000, 0x0, {0x5, 0xccb5, 0x8, 0xfb, 0x7, 0xf3fe, 0x1, 0x1, 0xffff, 0x400, 0x961, r3, r4, 0x7, 0x3}}}, 0x90)
socket$inet_sctp(0x2, 0x1, 0x84)
openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0)
ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000080)={'ip_vti0\x00', @ifru_flags})

20:27:12 executing program 3:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0xfffffffffffffd1c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0xa0120, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x3b, 'rdma'}, {0x2d, 'memory'}, {0x2d, 'io'}, {0x2b, 'io'}]}, 0x16)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
pipe(&(0x7f0000001300)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000170a07031dfffd942367ede3b9a3484409000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000002c0)={<r4=>0x0}, &(0x7f0000000300)=0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, <r5=>0x0}, &(0x7f0000000280)=0x5)
setuid(r5)
getresuid(&(0x7f0000000100), &(0x7f0000000200)=<r6=>0x0, &(0x7f0000000240))
r7 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x27)
r8 = socket(0xa, 0x3, 0x6)
connect$bt_rfcomm(r8, &(0x7f0000000000)={0x1f, {0xfe, 0x0, 0x1000, 0x80000001, 0x6, 0x5}, 0x8}, 0xa)
bind$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x6}, 0x1c)
getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in=@loopback}}}, &(0x7f0000000480)=0xe8)
r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r10, 0x84, 0x6d, &(0x7f0000000900)=ANY=[@ANYBLOB="ab000000a6d23fa0c9cb488b619002d1d896e5ffb3b62ccfa516aec8038d482cd2aa0b6ac0d684fba227e9983be9f367da66938eddee11b161213cdf2bd00a8ae552bc17ec5e976fa67846060aa7629aed35eb9bb9e096cc3825df10acb8c0dff4569bb0f686a3856eb778df7afa4a3112676e9547e0d65bee83afa0b4f46a0b10af299da7efdcc6c573074de84403de7902a06096d7483194ad47775d355b9800000008008b0500"/193], &(0x7f0000000540)=0x1)
getsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8)
setuid(r12)
r13 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r13, 0x84, 0x6d, &(0x7f00000006c0)=ANY=[@ANYBLOB="ab000000a6d23fa0c9cb488bfdee3eb191726190f2d1d896773545328b79d2b3b62ccfa516aec8038d48d684fba227e9983be9f367da66938eddee11b1613f0d5ff3b2213c782bd00a8ae552bc17ec5e976fa67846060aa7629aed35eb9bb9e096cc3825df10acb8c0dff4569bb0f6f309ab46fa86a3856eb778df7afa4a3112676e9547e0d65bee83afa0b4f46a0b10af299da7efdcc6c573074de84403de7902a07096d7483194ad47775d355bd65460a5a52aa9cc384c962b12062cf85884362f08008907665c6716449a30c81bd56a349d36094f2add75bf53000100000000000000678a50a09ff13589016438d0c5f0044462e676a23850b5c862e289843fe3bb7d0fb8bcdcd9c07ccacbf83de79626720dae5ec76e30837a2c9dea5637c2ad6439cd6bf51986860a677896248acef0867cfdedb1f0f8e592c6105aef57c1c073c23507bd28cfcd47a74cafba3762f6b6c1c6ee238a2bfe44d0b9e8ef5a7998b7317c4b9dd2f9a20b0031abf74f7d16d6907e95b2addeda2f736ccb52ea2a1d243ce205c3a88af23045c0614b21cbf1b3cf4ece451658e9785da902db6baa4895a67e96c8eacc5e8fcf8de57aa3c70518f31e0d89b0a35a336c2e68e7846f8330302b729eceffdf18b98e510a6c236daeef51b4ea88a6326060d504db45d42ac1881dd10ff951cfd04d7ae550ccce2eaa0f62e03aa8b38c5e"], &(0x7f0000000540)=0x1)
getsockopt$inet6_IPV6_XFRM_POLICY(r13, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r14=>0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8)
setuid(r14)
r15 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r15, 0x84, 0x6d, &(0x7f0000000b40)=ANY=[@ANYBLOB="ab000000a6d23fa0c9cb488b6190f2d1d89677354590dde5ffb3b62ccfa516aec8038d48d684fba227e9983be9f367da66938eddee11b1613f0d5ff3b2213cdf2bd00a8ae552bc17ec5e976fa67846060aa7629aed35eb9bb9e096cc3825df10acb8c0dff4569bb0f6a15cab46fa86a3856eb778df7afa4a3112676e9547e0d65bee83afa0b4f46a0b10af299da7efdcc6c573074de84403de7902a07096d7483194ad47775d355bd65460a5a52aa9cc384c962b12062cf85884362f08008b07"], &(0x7f0000000540)=0x1)
getsockopt$inet6_IPV6_XFRM_POLICY(r15, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8)
setuid(r16)
r17 = request_key(0x0, &(0x7f0000001300)={'syz', 0x2}, &(0x7f0000001340)='em0cpusetmime_type\x00', 0xfffffffffffffff8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, <r18=>0x0}, 0x0)
keyctl$chown(0x4, r17, 0x0, r18)
r19 = request_key(0x0, &(0x7f0000001300)={'syz', 0x2}, &(0x7f0000001340)='em0cpusetmime_type\x00', 0xfffffffffffffff8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, <r20=>0x0}, 0x0)
keyctl$chown(0x4, r19, 0x0, r20)
r21 = request_key(0x0, &(0x7f0000001300)={'syz', 0x2}, &(0x7f0000001340)='em0cpusetmime_type\x00', 0xfffffffffffffff8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, <r22=>0x0}, 0x0)
keyctl$chown(0x4, r21, 0x0, r22)
stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, <r23=>0x0})
fsetxattr$system_posix_acl(r7, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000a00)=ANY=[@ANYBLOB="02000000010002000000000002000400", @ANYRES32=r9, @ANYBLOB="02000200", @ANYRES32=r11, @ANYBLOB="02000100bb86b4c5600d592e64b86edda53135e0f392e4c9ca69b61556778ccf29c4990d1893fd049001c62278a88220d8bb3ef088a2bbfd6fdd3bbbaa8e7ff1e7d747037c523caba1237cfd937b81d9ae40c8e42df69a9ad815e799bd07b8468681a262136f0b4027e75c77b74f2bc0ad4402225b8f934741a657b08fa3e58bffe4394310ebab08c71788455eb3b79d61d24d289378388103fdaa96ee42a18df1027aa5865c0b", @ANYRES32=r12, @ANYBLOB="02000400", @ANYRES32=r6, @ANYBLOB, @ANYRES32=r14, @ANYBLOB="02000200", @ANYRES32=r16, @ANYBLOB="02000500", @ANYRES32=r6, @ANYBLOB="040002000000000008000100", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=r18, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r20, @ANYBLOB="08000400", @ANYRES32=r22, @ANYBLOB="08000300", @ANYRES32=r23, @ANYRES32, @ANYBLOB="0800d8b8", @ANYRES32, @ANYBLOB="10000200000000002000d6f800000000"], 0x1c, 0x2)
sendmmsg$unix(r2, &(0x7f0000000380)=[{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000000)=[{&(0x7f0000000180)="85771d6e0322982c3cd8ee723425f527a0d3012dc02057c6a091af3ef4b2e039ef8e2d1732ab79c87c1c266cbd3d79611a6c4ab2661d9b39e4ed0347017d19dacadf5cb95e110dfa7a2cf5459aecd8e1d9f47a0ab2fb6662ab18f39b534fb618786146e40a0f8f2ad4646a24fec6b4b2860243ce", 0x74}], 0x1, &(0x7f0000000340)=[@cred={{0x1c, 0x1, 0x2, {r4, r5, r23}}}], 0x20, 0x40000}], 0x1, 0x40)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x101980, 0x0)

[ 1557.017319][ T5449] IPVS: ftp: loaded support on port[0] = 21
[ 1557.032381][T10856] usbhid 1-1:0.0: can't add hid device: -71
[ 1557.038739][T10856] usbhid: probe of 1-1:0.0 failed with error -71
20:27:12 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = gettid()
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000013000)={0x1, 0x10000007f, 0xa, 0x1000000000000008}, 0x1c)
sendmmsg$unix(r2, &(0x7f0000004f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=[@cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [r4]}}], 0x48}], 0xfd, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = gettid()
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000013000)={0x1, 0x10000007f, 0xa, 0x1000000000000008}, 0x1c)
sendmmsg$unix(r5, &(0x7f0000004f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=[@cred={{0x1c, 0x1, 0x2, {r6}}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [r7]}}], 0x48}], 0xfd, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = gettid()
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000013000)={0x1, 0x10000007f, 0xa, 0x1000000000000008}, 0x1c)
sendmmsg$unix(r8, &(0x7f0000004f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r9, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32=r10, @ANYBLOB], 0x48}], 0xfd, 0x0)
r11 = syz_open_procfs(r9, &(0x7f0000000100)='wchan\x00')
ioctl$IMCTRLREQ(r11, 0x80044945, &(0x7f0000000080)={0x80, 0xd684, 0x7})

[ 1557.102286][T10207] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[ 1557.112366][T10856] usb 1-1: USB disconnect, device number 59
[ 1557.172363][ T9944] radio-si470x 3-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1557.181434][ T9944] radio-si470x: probe of 3-1:0.128 failed with error -22
[ 1557.192254][T11720] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[ 1557.215052][ T9944] usb 3-1: USB disconnect, device number 79
[ 1557.362015][T10207] usb 2-1: Using ep0 maxpacket: 16
20:27:12 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1000000, 0x1010, r1, 0x4000000)

20:27:12 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = pkey_alloc(0x0, 0x1)
pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, r1)
pkey_free(r1)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001780)={'syz_tun\x00\x00\x00\x00\x00\x01\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_newaddr={0x34, 0x14, 0x109, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_FLAGS={0x8, 0x9, 0x284}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x34}}, 0x0)

[ 1557.444965][T11720] usb 6-1: Using ep0 maxpacket: 16
[ 1557.502814][T11774] usb 4-1: new high-speed USB device number 88 using dummy_hcd
[ 1557.502904][T10207] usb 2-1: config 0 has an invalid interface number: 128 but max is 0
[ 1557.518807][T10207] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1557.529323][T10207] usb 2-1: config 0 has no interface number 0
[ 1557.535569][T10207] usb 2-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1557.546805][T10207] usb 2-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1557.556007][T10207] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1557.562513][T11720] usb 6-1: config 0 has an invalid interface number: 128 but max is 0
[ 1557.572398][T11720] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1557.582629][T11720] usb 6-1: config 0 has no interface number 0
[ 1557.588842][T11720] usb 6-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
20:27:12 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000100)={0x2})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x4, 0x1802)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x1, 0x400200)
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000080)=0xff01, &(0x7f00000000c0)=0x2)
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000170a07031dfffd942367ede3b9a3484409000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000180)={@empty, @local, <r4=>0x0}, &(0x7f00000001c0)=0xc)
setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000200)={r4, 0x1, 0x0, @random}, 0x37f)
mmap(&(0x7f00007f5000/0x1000)=nil, 0x1000, 0xf, 0x32, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000001300)={<r5=>0xffffffffffffffff})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
close(r6)
splice(r5, 0x0, r6, 0x0, 0x10003, 0x0)
mmap$binder(&(0x7f00007f5000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0)

[ 1557.600067][T11720] usb 6-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1557.609322][T11720] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1557.629749][T10207] usb 2-1: config 0 descriptor??
[ 1557.655908][T11720] usb 6-1: config 0 descriptor??
20:27:12 executing program 2:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x20000, 0x0)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "3a3c5a98a0b88f20dab28f43fd604a180bf5c40802c641ed238502ea05de14099c5dfa19c61d2715c179a8913d43848ebb6058f0ae47cea480ef4ae3d1bd7724bc870bcd80db1746d211f5f7dde4bd2f33e5a634f6174cf4dab428a4bdd5141e1cdfd7535edf28bbf44e35cb9180ea022e265108d6db9ab408e8b86c601dc9baf360878fefb4286f933f037b53d6c51bf10ba2a82424f4cf64d7a43f8235463a4e3651ce704859e92aa583ee3327735693aa9147f8b908c3d665302cff8ef37ebcb56efae4f83bc51fa46f6295b1622a46895dded87879de64c990feb0f52a533e44a8d7c9ef25ea0f8e90ff09ab06f93e605e04f9f5ac3102bcefe10a31"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r4=>0xffffffffffffffff})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
close(r5)
ioctl$EVIOCGABS3F(r4, 0x8018457f, &(0x7f00000005c0)=""/181)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

[ 1557.746101][T11774] usb 4-1: Using ep0 maxpacket: 16
20:27:12 executing program 0:
r0 = socket$inet(0x2, 0x200000002, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10)
setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x1, 0x4)
syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[@ANYBLOB="0380c2001f000000aaaaaa0008004500001c000000000011907800080000e000000100f44d2100089078"], 0x0)

20:27:12 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
r2 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
flock(r3, 0xffffffffffffffff)
flock(r4, 0x2)
flock(r2, 0x2)
dup2(r2, r4)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

[ 1557.862493][T11774] usb 4-1: config 0 has an invalid interface number: 128 but max is 0
[ 1557.870802][T11774] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1557.881534][T11774] usb 4-1: config 0 has no interface number 0
[ 1557.882045][T10207] radio-si470x 2-1:0.128: DeviceID=0xbe55 ChipID=0xb681
[ 1557.887763][T11774] usb 4-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1557.905886][T11774] usb 4-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1557.915091][T11774] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1557.945363][T11720] radio-si470x 6-1:0.128: DeviceID=0x61f7 ChipID=0xba81
[ 1557.964961][T11774] usb 4-1: config 0 descriptor??
[ 1558.092192][T10207] radio-si470x 2-1:0.128: software version 190, hardware version 85
[ 1558.102308][T11712] usb 3-1: new high-speed USB device number 80 using dummy_hcd
[ 1558.152132][T11720] radio-si470x 6-1:0.128: software version 97, hardware version 247
[ 1558.302204][T10207] radio-si470x 2-1:0.128: submitting int urb failed (-90)
[ 1558.342091][T11712] usb 3-1: Using ep0 maxpacket: 16
[ 1558.372093][T11720] radio-si470x 6-1:0.128: submitting int urb failed (-90)
[ 1558.462068][T11712] usb 3-1: config 0 has an invalid interface number: 128 but max is 0
[ 1558.470473][T11712] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1558.480824][T11712] usb 3-1: config 0 has no interface number 0
[ 1558.487068][T11712] usb 3-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1558.498328][T11712] usb 3-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1558.507532][T11712] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1558.517263][T11712] usb 3-1: config 0 descriptor??
[ 1558.522800][T11774] radio-si470x 4-1:0.128: si470x_get_report: usb_control_msg returned -110
[ 1558.531802][T11774] radio-si470x: probe of 4-1:0.128 failed with error -5
[ 1558.592123][T11720] radio-si470x 6-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1558.601187][T11720] radio-si470x: probe of 6-1:0.128 failed with error -22
[ 1558.619468][T11720] usb 6-1: USB disconnect, device number 29
[ 1558.752107][T10207] radio-si470x 2-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1558.761099][T10207] radio-si470x: probe of 2-1:0.128 failed with error -22
[ 1558.771424][T10207] usb 2-1: USB disconnect, device number 25
[ 1558.782303][T11712] radio-si470x 3-1:0.128: DeviceID=0x65f7 ChipID=0xba81
[ 1558.985905][T11712] radio-si470x 3-1:0.128: software version 101, hardware version 247
20:27:14 executing program 0:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000300)='/proc/capi/capi20ncci\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000140)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000200)='/dev/capi20\x00', 0x0, 0x0)
r4 = socket(0xd, 0x6, 0xff)
setsockopt$inet_udp_int(r4, 0x11, 0x65, &(0x7f0000000000)=0xa, 0x4)
preadv(r0, &(0x7f00000017c0), 0x23f, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = gettid()
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000013000)={0x1, 0x10000007f, 0xa, 0x1000000000000008}, 0x1c)
sendmmsg$unix(r5, &(0x7f0000004f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=[@cred={{0x1c, 0x1, 0x2, {r6}}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [r7]}}], 0x48}], 0xfd, 0x0)
r8 = getpgid(r6)
ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000040)=r8)

[ 1559.192209][T11712] radio-si470x 3-1:0.128: submitting int urb failed (-90)
[ 1559.501983][T11720] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[ 1559.632245][T11712] radio-si470x 3-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1559.641276][T11712] radio-si470x: probe of 3-1:0.128 failed with error -22
[ 1559.651349][T11712] usb 3-1: USB disconnect, device number 80
[ 1559.741898][T11720] usb 2-1: Using ep0 maxpacket: 16
[ 1559.862144][T11720] usb 2-1: config 0 has an invalid interface number: 128 but max is 0
[ 1559.870565][T11720] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1559.880847][T11720] usb 2-1: config 0 has no interface number 0
[ 1559.887123][T11720] usb 2-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1559.898353][T11720] usb 2-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1559.907538][T11720] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1559.917500][T11720] usb 2-1: config 0 descriptor??
20:27:15 executing program 1:
r0 = syz_usb_connect(0x6, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000000)={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

20:27:15 executing program 5:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x0, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0xc1, @string={0xc1, 0x3, "3a3c5a98a0b88f20dab28f43fd604a180bf5c40802c641ed238502ea05de14099c5dfa19c61d2715c179a8913d43848ebb6058f0ae47cea480ef4ae3d1bd7724bc870bcd80db1746d211f5f7dde4bd2f33e5a634f6174cf4dab428a4bdd5141e1cdfd7535edf28bbf44e35cb9180ea022e265108d6db9ab408e8b86c601dc9baf360878fefb4286f933f037b53d6c51bf10ba2a82424f4cf64d7a43f8235463a4e3651ce704859e92aa583ee3327735693aa9147f8b908c3d665302cff8ef3"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x20000, 0x0)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f00000001c0)={0x7, 0x100})
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000200)={0xfffffffffffffd55, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x23, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r4 = socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r5=>0xffffffffffffffff})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
close(r6)
splice(r5, 0x0, r6, 0x0, 0x10003, 0x0)
ioctl$EVIOCGABS3F(r5, 0x8018457f, &(0x7f00000005c0)=""/181)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @multicast2}}}, &(0x7f0000000180)=0x90)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e20, 0xaa, @empty, 0x8000}, {0xa, 0x4e24, 0x7fffffff, @dev={0xfe, 0x80, [], 0xf}, 0x6}, 0x8000, [0x8, 0x1, 0x84, 0xf5, 0x7, 0x5, 0x0, 0x3]}, 0x5c)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

[ 1560.182290][T11720] radio-si470x 2-1:0.128: DeviceID=0x69f7 ChipID=0xba81
[ 1560.222120][T11720] radio-si470x 2-1:0.128: software version 105, hardware version 247
20:27:15 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x40085511, &(0x7f00000000c0))
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000bc0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x81}, {0x6}]}, 0x10)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000100)={0x400000100002f, {0x0, 0x2, 0xdeba, 0x8000}})
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000100)={0x400000100002f, {0x0, 0x0, 0xdeba}})
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f00000002c0)={{}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r3, 0x5501)
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x18)
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000002c0)={{}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r2, 0x5501)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$PIO_UNIMAPCLR(r5, 0x4b68, &(0x7f0000000ac0)={0x1, 0x0, 0x2})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = fcntl$dupfd(r6, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000100)=<r8=>0x0)
fcntl$getown(r2, 0x9)
fcntl$lock(r2, 0x24, &(0x7f0000000140)={0x7, 0x2, 0x5604968e, 0x2bf790ec, r8})
r9 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x272, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x40, 0x70, 0x0, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x1, 0x2, 0xe3, {0x9, 0x21, 0x40, 0x4, 0x1, {0x22, 0x3a2}}, {{{0x9, 0x5, 0x81, 0x3, 0x1c7, 0x7, 0x3f, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x2e, 0x7f, 0xff, 0x9}}]}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x300, 0x7, 0x80, 0x81, 0x10, 0x1}, 0xf, &(0x7f0000000200)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x4, 0x0, 0x0, 0x57, 0xc9f0}]}, 0x8, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xc8c3}}, {0x1002, &(0x7f0000000c00)=@string={0x1002, 0x3, "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"}}, {0x1002, &(0x7f0000001c40)=@string={0x1002, 0x3, "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"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x414}}, {0xf2, &(0x7f0000000380)=@string={0xf2, 0x3, "5b6ad123141ce9878cc082b198113eeefb466fb4d24dde93e21f482d586894c7c0366b2109f21ccb2908daab78340da0108173e9f1d8a9d884a97588c2cbf127aa74512f07b1efa786b3a1340b0749e0994d020de2df57767edf4928091d893b2709ffbac869305f03e17b49ced91a3af69e1f75962b95ac3c0930542b719406eaa9c99fe027dae98e763180e874fa2a644ae957b07f6ac98addb00c1adb96716ad461bb0eebdfad89ebbde93fc979ecf4a2d991d59dafcf3d8a443da9bf30e9080de2d0fe5ef25154e03a02e5c5c28d357e28d039997433ad3b26b18223988b66be33b0d23ec0b6ed20899ae167ad0a"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x413}}, {0xb7, &(0x7f00000004c0)=@string={0xb7, 0x3, "b24cde3261d7f50c67a2b0c322cac455fb6a4b1140391b22dd7da9f2ad511ae196deebd2decbe72921e95dfd2deb7617ef7b0d3774c7945c780f7f3b462e97d169286c66f374e9b0b845fcc57b05a88abe27ec3c4a06d692dd837c22da728e9827661c6737ffad9fcbe0cbc46731466f8eb3b7b8eec677c1f9447812d63ae4adb5f1023e07c436219bde493fd756042b430c07f52618a55d8742f9f6633d56bcf870ccb4c1b577765c0950b88dbe276e8fa9385afe"}}, {0x6d, &(0x7f0000000580)=@string={0x6d, 0x3, "f9593968fb81b5f6df3717e084500084b0f7fcf1c48974c2be2c1241816fe973f30a698d33cbf8b0a3026898e92bff0a2010bf16202086bb5ce760a2b8a2c378dda238762dbb1ec06774f6e702fb07eab9e1f4b088da6d6e7b155e630a7e5308189ed6b436bbd5fa0a87b9"}}]})
syz_usb_control_io$hid(r9, &(0x7f0000000800)={0x24, &(0x7f0000000680)={0x60, 0x21, 0xad, {0xad, 0x21, "9b300b5a64a0f437b5cff1020b64f2d6092bdcf26fbd77f73472e863e0fda73135bdea8158cea9932ca671a8b6f19f65aa6733114abf775b5632451c539e2da9574a508f9de71c4b7faefde2e2023794dd0043bf592d2510df1845a90a8db6f2175cff79b305d7f81cd08cf68c8ef4e89ee9f0f7f0047716955a037a833ee8a72f0b9d709699c6c29525555aba346389996bddfdfec5b95151d62370761bdb8da82dcdb9c9ed30c0182c2a"}}, &(0x7f0000000740)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x860}}, &(0x7f0000000780)={0x0, 0x22, 0x18, {[@global=@item_012={0x1, 0x1, 0x6, 'W'}, @global=@item_4={0x3, 0x1, 0x6, "387dd20d"}, @local=@item_4={0x3, 0x2, 0xa, "080030ee"}, @main=@item_012={0x0, 0x0, 0xa}, @global, @main=@item_012={0x1, 0x0, 0xa, "f6"}, @local=@item_4={0x3, 0x2, 0x0, "32cf1570"}, @local=@item_012={0x2, 0x2, 0x2, "16d0"}]}}, &(0x7f00000007c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x9, 0x1, {0x22, 0xaca}}}}, &(0x7f0000000a80)={0x2c, &(0x7f0000000840)={0xa0, 0x14, 0xe6, "eba3e0e9cc47c84e2660e44db7c449caef359256263d5c6606b19b5a95ce61400aaa1e9013140b76f2613e7ec375d2ace8c6941984c9c8feee075232f8c0e7bea1a04122fff363697908b1ce5b2d82185e0d6baf1643f9ce5b4e0250d9767b2c234e52b5880ce74e9f32463ac47d1992ef0103c01688f7be4ebf5bb3e3ad5810c5d0e256d8be89b27c824a7d22a8d8a36d454dd9b20a72901ea7742c38af0f8e7aca3036c92d0df8fdd8c1317e68b50f593f18107332dc298690bc48554d62d5dcd7297cc6b7548a542e7004c4f201c79ada476733727d5f9c4ef1e63591fe412d5cda2565d0"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000009c0)={0x20, 0x1, 0x3c, "f0a43eb48601935a48cf520d4f0a54ac53e34c7d8768a4677500b7cf0cf0725c29bf20b5c184c69dae976189402a04d700adc2743abcb05d368ba129"}, &(0x7f0000000a40)={0x20, 0x3, 0x1, 0x80}})

[ 1560.272216][T11720] radio-si470x 2-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1560.280979][T11720] radio-si470x 2-1:0.128: submitting int urb failed (-90)
[ 1560.334722][T11720] radio-si470x 2-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1560.344064][T11720] radio-si470x: probe of 2-1:0.128 failed with error -22
[ 1560.355584][ T5898] input: syz0 as /devices/virtual/input/input1514
[ 1560.375371][T11720] usb 2-1: USB disconnect, device number 26
[ 1560.375408][ T5898] input: syz0 as /devices/virtual/input/input1513
[ 1560.581935][T11712] usb 6-1: new high-speed USB device number 30 using dummy_hcd
20:27:15 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x7fffffff, 0x240880)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e23, 0x2, @mcast1, 0x53}}, 0x0, 0xffff, 0x0, "9e17e26837c573c65b9f3407f0129c24bda6dae2ce40d902501fd938bd490f2c270b096f954b1cfa4b7dc6e25fd23ecde846d604f0b7ac4593dd9939128d2184bbef0a91664a6a91d3bd8e15fcd5b2ec"}, 0xd8)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000100)={0x400000100002f, {0x0, 0x0, 0xdeba}})
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000002c0)={{}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r2, 0x5501)
r3 = fcntl$dupfd(r2, 0x406, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
r4 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x1, 0x602)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000340)={0x0, @bt={0x401, 0x9, 0x0, 0x3, 0x4, 0x6, 0x8, 0xfff, 0x3f, 0x5, 0xe76, 0x1, 0x0, 0xffffff00, 0x12, 0x4}})
ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f00000000c0)={0x875fdbea1d280f23})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

20:27:15 executing program 3:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)=ANY=[@ANYBLOB="120100001e95cd10cf12117108480000000109021b0001002004000904800001030000000705840b0000000000"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000170a07031dfffd942367ede3b9a3484409000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={<r2=>0x0, 0x6, 0xff}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000080)=r2, 0x4)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

20:27:15 executing program 2:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x20000, 0x0)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r4=>0xffffffffffffffff})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
close(r5)
ioctl$EVIOCGABS3F(r4, 0x8018457f, &(0x7f00000005c0)=""/181)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

[ 1560.671974][T10207] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[ 1560.692616][ T8851] usb 4-1: USB disconnect, device number 88
[ 1560.749809][ T5907] input: syz0 as /devices/virtual/input/input1515
[ 1560.782167][T11720] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[ 1560.841917][T11712] usb 6-1: Using ep0 maxpacket: 16
[ 1560.854489][ T5907] input: syz0 as /devices/virtual/input/input1516
20:27:15 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400202)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3)

[ 1560.912036][T10207] usb 1-1: Using ep0 maxpacket: 32
[ 1560.984305][T11712] usb 6-1: config 0 has an invalid interface number: 128 but max is 0
[ 1560.992188][T11836] usb 3-1: new high-speed USB device number 81 using dummy_hcd
[ 1560.992768][T11712] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1561.010526][T11712] usb 6-1: config 0 has no interface number 0
[ 1561.016762][T11712] usb 6-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
20:27:16 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x406, r0)
getsockopt$inet6_dccp_int(r1, 0x21, 0x4, &(0x7f0000000000), &(0x7f0000000080)=0x4)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

[ 1561.027978][T11712] usb 6-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1561.037393][T11712] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1561.049678][T11712] usb 6-1: config 0 descriptor??
[ 1561.098262][T11720] usb 2-1: Using ep0 maxpacket: 16
[ 1561.117538][T10207] usb 1-1: config 1 interface 0 altsetting 8 endpoint 0x2 has an invalid bInterval 127, changing to 10
[ 1561.129158][T10207] usb 1-1: config 1 interface 0 has no altsetting 0
20:27:16 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6(0xa, 0x5, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @multicast2}}}, &(0x7f0000000180)=0x90)
ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000200)=0x7ff)
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000170a07031dfffd942367ede3b9a3484409000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000080)={<r4=>0x0, @in6={{0xa, 0x4e24, 0xffffffff, @loopback, 0xe7}}, [0x7fff, 0x7, 0xfffffffffffff271, 0x100000001, 0x100, 0x80000000, 0x1ff, 0x3, 0xfffffffffffffffb, 0xf42, 0x400, 0x777ae274, 0x0, 0x7f, 0x81]}, &(0x7f0000000000)=0x100)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3f9e2a07}, &(0x7f00000001c0)=0x8)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

[ 1561.162029][ T8851] usb 4-1: new high-speed USB device number 89 using dummy_hcd
20:27:16 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getuid()
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setrlimit(0x1e, &(0x7f0000000080)={0x3ff, 0x2007ffffffd})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x132, 0xffffffffffffffff, 0x0)

[ 1561.232355][T11720] usb 2-1: config 0 has an invalid interface number: 128 but max is 0
[ 1561.240672][T11720] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1561.251354][T11720] usb 2-1: config 0 has no interface number 0
[ 1561.254546][T11836] usb 3-1: Using ep0 maxpacket: 16
[ 1561.257576][T11720] usb 2-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1561.273794][T11720] usb 2-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
20:27:16 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xc8404, 0x0)
r2 = dup3(r0, r0, 0x80000)
io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000080)=r2, 0x1)
r3 = fcntl$dupfd(r0, 0x0, r0)
fcntl$getflags(r0, 0x408)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

[ 1561.282948][T11720] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1561.312639][T11712] radio-si470x 6-1:0.128: DeviceID=0x6af7 ChipID=0xba81
[ 1561.324665][T11720] usb 2-1: config 0 descriptor??
[ 1561.382741][T11836] usb 3-1: config 0 has an invalid interface number: 128 but max is 0
[ 1561.391133][T11836] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1561.401511][T11836] usb 3-1: config 0 has no interface number 0
[ 1561.407892][T11836] usb 3-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1561.419095][T11836] usb 3-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1561.428374][T11836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1561.440799][ T8851] usb 4-1: Using ep0 maxpacket: 16
[ 1561.454389][T11836] usb 3-1: config 0 descriptor??
20:27:16 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x7fffffff, 0xffffffff, 0x1ff, 0x2000000, 0xfffffffd, 0x3}})
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3)
ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000))
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000002c0)={{}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r2, 0x5501)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = dup(r3)
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="390000001300090417feb1ae7aa77cf40000ff3f2200000000000000000000001900040043010000000000000000e91ed838d2fd0000000100", 0x39}], 0x1)
r5 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r5, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002400)=""/191, 0xbf}}], 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r2, 0x0)

[ 1561.542290][T11712] radio-si470x 6-1:0.128: software version 106, hardware version 247
[ 1561.562116][ T8851] usb 4-1: config 0 has an invalid interface number: 128 but max is 0
[ 1561.567134][ T5941] input: syz0 as /devices/virtual/input/input1517
[ 1561.570572][ T8851] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1561.587332][ T8851] usb 4-1: config 0 has no interface number 0
[ 1561.594806][ T8851] usb 4-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1561.602478][T11720] radio-si470x 2-1:0.128: DeviceID=0x6cf7 ChipID=0xba81
[ 1561.606091][ T8851] usb 4-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1561.622062][ T8851] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1561.635167][ T8851] usb 4-1: config 0 descriptor??
[ 1561.713814][T11836] radio-si470x 3-1:0.128: DeviceID=0xbd55 ChipID=0xb681
[ 1561.763394][T11712] radio-si470x 6-1:0.128: submitting int urb failed (-90)
[ 1561.792100][T10207] usb 1-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice= 0.40
[ 1561.801360][T10207] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1561.809850][T10207] usb 1-1: SerialNumber: Д
[ 1561.812099][T11720] radio-si470x 2-1:0.128: software version 108, hardware version 247
[ 1561.931971][T11836] radio-si470x 3-1:0.128: software version 189, hardware version 85
[ 1561.982057][T11712] radio-si470x 6-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1561.991243][T11712] radio-si470x: probe of 6-1:0.128 failed with error -22
[ 1562.001531][T11712] usb 6-1: USB disconnect, device number 30
[ 1562.022282][T11720] radio-si470x 2-1:0.128: submitting int urb failed (-90)
[ 1562.152294][T11836] radio-si470x 3-1:0.128: submitting int urb failed (-90)
[ 1562.396166][T10207] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input1518
[ 1562.413230][T10207] usb 1-1: USB disconnect, device number 60
[ 1562.472474][T11720] radio-si470x 2-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1562.481444][T11720] radio-si470x: probe of 2-1:0.128 failed with error -22
[ 1562.516088][T11720] usb 2-1: USB disconnect, device number 27
[ 1562.592432][T11836] radio-si470x 3-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1562.601303][T11836] radio-si470x: probe of 3-1:0.128 failed with error -22
[ 1562.614456][T11836] usb 3-1: USB disconnect, device number 81
[ 1563.221996][T11836] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[ 1563.461883][T11836] usb 2-1: Using ep0 maxpacket: 16
[ 1563.591943][T11836] usb 2-1: config 0 has an invalid interface number: 128 but max is 0
[ 1563.600571][T11836] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1563.610874][T11836] usb 2-1: config 0 has no interface number 0
[ 1563.617134][T11836] usb 2-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1563.628354][T11836] usb 2-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1563.637529][T11836] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1563.647036][T11836] usb 2-1: config 0 descriptor??
[ 1563.812286][ T8851] usb 4-1: string descriptor 0 read error: -71
[ 1563.841941][ T8851] radio-si470x 4-1:0.128: si470x_get_report: usb_control_msg returned -71
[ 1563.850809][ T8851] radio-si470x: probe of 4-1:0.128 failed with error -5
[ 1563.860824][ T8851] usb 4-1: USB disconnect, device number 89
20:27:19 executing program 1:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x5, 0x3f, 0x1e54, <r1=>0x0}, &(0x7f0000000040)=0x10)
r2 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)="a691b8e0a5d3a77eadeebe0d92ced1057539b24d1f455f64d7737849490a2f7c843fbdc3c1ebc389cbf8a69b", 0x2c}], 0x1}, 0x4000040)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xc}}}, 0x20, 0x6}, 0xfffffffffffffdb4)
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000170a07031dfffd942367ede3b9a3484409000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
getsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000240), &(0x7f0000000280)=0x4)
recvfrom$inet(0xffffffffffffffff, &(0x7f0000000180)=""/63, 0x3f, 0x40, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

20:27:19 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000100)={0x400000100002f, {0x0, 0x0, 0xdeba}})
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000002c0)={{}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r1, 0x5501)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

20:27:19 executing program 5:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x0, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0xc1, @string={0xc1, 0x3, "3a3c5a98a0b88f20dab28f43fd604a180bf5c40802c641ed238502ea05de14099c5dfa19c61d2715c179a8913d43848ebb6058f0ae47cea480ef4ae3d1bd7724bc870bcd80db1746d211f5f7dde4bd2f33e5a634f6174cf4dab428a4bdd5141e1cdfd7535edf28bbf44e35cb9180ea022e265108d6db9ab408e8b86c601dc9baf360878fefb4286f933f037b53d6c51bf10ba2a82424f4cf64d7a43f8235463a4e3651ce704859e92aa583ee3327735693aa9147f8b908c3d665302cff8ef3"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x20000, 0x0)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f00000001c0)={0x7, 0x100})
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000200)={0xfffffffffffffd55, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x23, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r4 = socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r5=>0xffffffffffffffff})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
close(r6)
splice(r5, 0x0, r6, 0x0, 0x10003, 0x0)
ioctl$EVIOCGABS3F(r5, 0x8018457f, &(0x7f00000005c0)=""/181)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @multicast2}}}, &(0x7f0000000180)=0x90)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e20, 0xaa, @empty, 0x8000}, {0xa, 0x4e24, 0x7fffffff, @dev={0xfe, 0x80, [], 0xf}, 0x6}, 0x8000, [0x8, 0x1, 0x84, 0xf5, 0x7, 0x5, 0x0, 0x3]}, 0x5c)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

[ 1563.912182][T11836] radio-si470x 2-1:0.128: DeviceID=0xb155 ChipID=0xb681
20:27:19 executing program 2:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x20000, 0x0)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r4=>0xffffffffffffffff})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
close(r5)
ioctl$EVIOCGABS3F(r4, 0x8018457f, &(0x7f00000005c0)=""/181)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

20:27:19 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
mremap(&(0x7f0000558000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil)
pipe(&(0x7f0000001300)={<r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
splice(r1, 0x0, r2, 0x0, 0x10003, 0x0)
accept4$alg(r1, 0x0, 0x0, 0x800)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = gettid()
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000013000)={0x1, 0x10000007f, 0xa, 0x1000000000000008}, 0x1c)
sendmmsg$unix(r3, &(0x7f0000004f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=[@cred={{0x1c, 0x1, 0x2, {r4}}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [r5]}}], 0x48}], 0xfd, 0x0)
getpid()
r6 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000170a07031dfffd942367ede3b9a3484409000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000000))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
r7 = gettid()
bpf$MAP_CREATE(0x0, &(0x7f0000013000)={0x1, 0x10000007f, 0xa, 0x1000000000000008}, 0x1c)
r8 = syz_open_procfs(r7, &(0x7f0000000440)='sched\x00')
sendfile(r0, r8, &(0x7f0000000040)=0x100000, 0x8001)

20:27:19 executing program 3:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0)
ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000100)={0x400000100002f, {0x0, 0x0, 0xdeba}})
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000002c0)={{}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r1, 0x5501)
ioctl$UI_DEV_CREATE(r1, 0x5501)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

[ 1563.994812][T11836] radio-si470x 2-1:0.128: si470x_get_report: usb_control_msg returned -71
[ 1564.003509][T11836] radio-si470x 2-1:0.128: si470x_get_scratch: si470x_get_report returned -71
[ 1564.012979][T11836] radio-si470x: probe of 2-1:0.128 failed with error -5
[ 1564.067126][ T6064] input: syz0 as /devices/virtual/input/input1519
[ 1564.115363][T11836] usb 2-1: USB disconnect, device number 28
20:27:19 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x4000, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x1, @link_local={0x8}}, @IFLA_LINKINFO={0x14, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x4}}}]}, 0x40}}, 0x0)

[ 1564.227219][ T6064] input: syz0 as /devices/virtual/input/input1520
20:27:19 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200, 0x0)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x10000, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
read$hidraw(r1, &(0x7f0000000080)=""/133, 0x85)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

[ 1564.301833][T11720] usb 3-1: new high-speed USB device number 82 using dummy_hcd
20:27:19 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000001300)={<r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
close(r3)
splice(r2, 0x0, r3, 0x0, 0x10003, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x8)

[ 1564.382128][T10207] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[ 1564.422195][ T8851] usb 4-1: new high-speed USB device number 90 using dummy_hcd
20:27:19 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000100)={0x400000100002f, {0x0, 0x0, 0xdeba}})
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000002c0)={{}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r2, 0x5501)
write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[@ANYRES32], 0xfffffffffffffef9)
sendfile(r0, r1, &(0x7f0000000000), 0xffff)
fcntl$addseals(r1, 0x409, 0x8)
ftruncate(r1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
dup3(r0, r1, 0x0)

[ 1564.485887][T11836] usb 2-1: new high-speed USB device number 29 using dummy_hcd
20:27:19 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
r2 = creat(&(0x7f0000000000)='./file0\x00', 0xe7)
bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfc, 0x20820200}, 0xc)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

[ 1564.534949][ T6285] input: syz0 as /devices/virtual/input/input1521
[ 1564.571850][T11720] usb 3-1: Using ep0 maxpacket: 16
[ 1564.637289][T10207] usb 6-1: Using ep0 maxpacket: 16
[ 1564.662134][ T8851] usb 4-1: Using ep0 maxpacket: 16
[ 1564.712030][T11720] usb 3-1: config 0 has an invalid interface number: 128 but max is 0
[ 1564.720338][T11720] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1564.730844][T11720] usb 3-1: config 0 has no interface number 0
[ 1564.733636][T11836] usb 2-1: Using ep0 maxpacket: 16
[ 1564.737120][T11720] usb 3-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1564.753375][T11720] usb 3-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1564.762580][T11720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1564.762917][T10207] usb 6-1: config 0 has an invalid interface number: 128 but max is 0
[ 1564.779078][T10207] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1564.789578][T10207] usb 6-1: config 0 has no interface number 0
[ 1564.795901][T10207] usb 6-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
20:27:19 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00')
r3 = syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x0, 0x2)
r4 = socket$inet6(0xa, 0x5, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @multicast2}}}, &(0x7f0000000180)=0x90)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r7=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000000)={r7}, &(0x7f00000000c0)=0x14)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000340)={<r8=>r7, 0xa7, "e28dafeaa6921b738c435445ace86ac5bfbf4a8982b1ab5e04204bff3690c434b4e576e8d4ef35e7cb05fae9580b70b161a4a7116f3765a87f232303ba0acd465d9112749604fd09db819b9daf9e8d9a307618e90e35dc3b5333e8843b5ab160c7f443b851add0bd5da656877bba11c1d3bc53b87fdc06e9ba98b4fba29284cdba951c56304cd879116fcc5c7a4dcddd970c3bc580779b0b15af814f33221811d320b5769f412d"}, &(0x7f0000000200)=0xaf)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000240)=@assoc_value={r8, 0xffff}, 0x8)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r2, 0x8, 0x70bd28, 0x25dfdbfd, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4000)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r9 = socket$inet6(0xa, 0x5, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @multicast2}}}, &(0x7f0000000180)=0x90)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
r11 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r12=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r10, 0x84, 0x1, &(0x7f0000000000)={r12}, &(0x7f00000000c0)=0x14)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000440)={r12, @in={{0x2, 0x4e20, @empty}}, 0x4, 0xc33, 0xba75, 0x20, 0x4}, &(0x7f0000000500)=0x98)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
r13 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r13, 0x401c5504, &(0x7f0000000100)={0x400000100002f, {0x0, 0x0, 0xdeba, 0x80, 0xff}})
ioctl$UI_SET_EVBIT(r13, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(r13, 0x405c5503, &(0x7f00000002c0)={{}, 'syz0\x00'})
ioctl$GIO_SCRNMAP(r3, 0x4b40, &(0x7f0000000400)=""/32)
ioctl$UI_DEV_CREATE(r13, 0x5501)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000007, 0x4000010, r13, 0x0)

[ 1564.807129][T10207] usb 6-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1564.816342][T10207] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1564.816850][T11720] usb 3-1: config 0 descriptor??
[ 1564.866139][ T6394] input: syz0 as /devices/virtual/input/input1522
[ 1564.873388][ T8851] usb 4-1: config 0 has an invalid interface number: 128 but max is 0
[ 1564.881770][ T8851] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1564.892004][ T8851] usb 4-1: config 0 has no interface number 0
[ 1564.898202][ T8851] usb 4-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1564.909469][ T8851] usb 4-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1564.918651][ T8851] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1564.948182][T10207] usb 6-1: config 0 descriptor??
[ 1564.960377][ T8851] usb 4-1: config 0 descriptor??
[ 1564.972213][T11836] usb 2-1: config 0 has an invalid interface number: 128 but max is 0
[ 1564.980506][T11836] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1564.991251][T11836] usb 2-1: config 0 has no interface number 0
[ 1564.997506][T11836] usb 2-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1565.008748][T11836] usb 2-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1565.017954][T11836] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1565.060247][T11836] usb 2-1: config 0 descriptor??
[ 1565.072234][T11720] radio-si470x 3-1:0.128: DeviceID=0x66f7 ChipID=0xba81
[ 1565.232893][T10207] radio-si470x 6-1:0.128: DeviceID=0xb355 ChipID=0xb681
[ 1565.252076][ T8851] radio-si470x 4-1:0.128: DeviceID=0x0000 ChipID=0x0000
[ 1565.259140][ T8851] radio-si470x 4-1:0.128: This driver is known to work with firmware version 12,
[ 1565.268430][ T8851] radio-si470x 4-1:0.128: but the device has firmware version 0.
[ 1565.282194][T11720] radio-si470x 3-1:0.128: software version 102, hardware version 247
[ 1565.323809][T11836] radio-si470x 2-1:0.128: DeviceID=0xb355 ChipID=0xb681
[ 1565.452097][T10207] radio-si470x 6-1:0.128: software version 179, hardware version 85
[ 1565.472036][ T8851] radio-si470x 4-1:0.128: software version 0, hardware version 0
[ 1565.479864][ T8851] radio-si470x 4-1:0.128: This driver is known to work with hardware version 1,
[ 1565.489217][ T8851] radio-si470x 4-1:0.128: but the device has hardware version 0.
[ 1565.497111][ T8851] radio-si470x 4-1:0.128: If you have some trouble using this driver,
[ 1565.505422][ T8851] radio-si470x 4-1:0.128: please report to V4L ML at linux-media@vger.kernel.org
[ 1565.522111][T11720] radio-si470x 3-1:0.128: submitting int urb failed (-90)
[ 1565.542023][T11836] radio-si470x 2-1:0.128: software version 179, hardware version 85
[ 1565.673855][T10207] radio-si470x 6-1:0.128: submitting int urb failed (-90)
[ 1565.691002][ T6065] input: syz0 as /devices/virtual/input/input1523
[ 1565.752261][ T8851] radio-si470x 4-1:0.128: submitting int urb failed (-90)
[ 1565.762391][T11836] radio-si470x 2-1:0.128: submitting int urb failed (-90)
[ 1565.891997][T10207] radio-si470x 6-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1565.900984][T10207] radio-si470x: probe of 6-1:0.128 failed with error -22
[ 1565.932360][T10207] usb 6-1: USB disconnect, device number 31
[ 1565.944083][T11720] radio-si470x 3-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1565.953696][T11720] radio-si470x: probe of 3-1:0.128 failed with error -22
[ 1565.983278][T11720] usb 3-1: USB disconnect, device number 82
[ 1566.202057][T11836] radio-si470x 2-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1566.211079][T11836] radio-si470x: probe of 2-1:0.128 failed with error -22
[ 1566.221396][T11836] usb 2-1: USB disconnect, device number 29
[ 1566.412233][ T8851] radio-si470x 4-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1566.421360][ T8851] radio-si470x: probe of 4-1:0.128 failed with error -22
[ 1566.434252][ T8851] usb 4-1: USB disconnect, device number 90
[ 1566.951913][ T8851] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[ 1567.191878][ T8851] usb 2-1: Using ep0 maxpacket: 16
[ 1567.211928][T11836] usb 4-1: new high-speed USB device number 91 using dummy_hcd
[ 1567.311953][ T8851] usb 2-1: config 0 has an invalid interface number: 128 but max is 0
[ 1567.320236][ T8851] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1567.330552][ T8851] usb 2-1: config 0 has no interface number 0
[ 1567.336843][ T8851] usb 2-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1567.348345][ T8851] usb 2-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1567.357541][ T8851] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1567.367249][ T8851] usb 2-1: config 0 descriptor??
[ 1567.484910][T11836] usb 4-1: Using ep0 maxpacket: 16
[ 1567.602133][T11836] usb 4-1: config 0 has an invalid interface number: 128 but max is 0
[ 1567.610473][T11836] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1567.620786][T11836] usb 4-1: config 0 has no interface number 0
[ 1567.627037][T11836] usb 4-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1567.638311][T11836] usb 4-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
20:27:22 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
pipe(&(0x7f0000001300)={<r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
close(r3)
splice(r2, 0x0, r3, 0x0, 0x10003, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x0, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = gettid()
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000013000)={0x1, 0x10000007f, 0xa, 0x1000000000000008}, 0x1c)
sendmmsg$unix(r7, &(0x7f0000004f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=[@cred={{0x1c, 0x1, 0x2, {r8}}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [r9]}}], 0x48}], 0xfd, 0x0)
fcntl$lock(r6, 0x5, &(0x7f0000000280)={0x5, 0x3, 0x8000, 0xffffffff80000001, r8})
r10 = socket$netlink(0x10, 0x3, 0x0)
r11 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00')
sendmsg$SEG6_CMD_DUMPHMAC(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)={0x14, r11, 0x1}, 0x14}}, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x201}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r11, 0x800, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x10, 0x4, [0x7, 0x5, 0x80000001]}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x5, 0xfff, 0x100, 0x5, 0x5]}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x22008000)
getsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000000), &(0x7f0000000080)=0x4)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

20:27:22 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0)
close(r0)

20:27:22 executing program 5:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x0, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0xe1, @string={0xe1, 0x3, "3a3c5a98a0b88f20dab28f43fd604a180bf5c40802c641ed238502ea05de14099c5dfa19c61d2715c179a8913d43848ebb6058f0ae47cea480ef4ae3d1bd7724bc870bcd80db1746d211f5f7dde4bd2f33e5a634f6174cf4dab428a4bdd5141e1cdfd7535edf28bbf44e35cb9180ea022e265108d6db9ab408e8b86c601dc9baf360878fefb4286f933f037b53d6c51bf10ba2a82424f4cf64d7a43f8235463a4e3651ce704859e92aa583ee3327735693aa9147f8b908c3d665302cff8ef37ebcb56efae4f83bc51fa46f6295b1622a46895dded87879de64c990feb0f52a"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x20000, 0x0)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f00000001c0)={0x7, 0x100})
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000200)={0xfffffffffffffd55, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x23, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r4 = socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r5=>0xffffffffffffffff})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
close(r6)
splice(r5, 0x0, r6, 0x0, 0x10003, 0x0)
ioctl$EVIOCGABS3F(r5, 0x8018457f, &(0x7f00000005c0)=""/181)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @multicast2}}}, &(0x7f0000000180)=0x90)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e20, 0xaa, @empty, 0x8000}, {0xa, 0x4e24, 0x7fffffff, @dev={0xfe, 0x80, [], 0xf}, 0x6}, 0x8000, [0x8, 0x1, 0x84, 0xf5, 0x7, 0x5, 0x0, 0x3]}, 0x5c)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

[ 1567.647577][T11836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1567.656501][ T8851] radio-si470x 2-1:0.128: DeviceID=0x4af4 ChipID=0x8180
[ 1567.664351][T11836] usb 4-1: config 0 descriptor??
20:27:22 executing program 2:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x20000, 0x0)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r4=>0xffffffffffffffff})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
close(r5)
ioctl$EVIOCGABS3F(r4, 0x8018457f, &(0x7f00000005c0)=""/181)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

[ 1567.711951][ T8851] radio-si470x 2-1:0.128: si470x_get_report: usb_control_msg returned -71
[ 1567.720552][ T8851] radio-si470x 2-1:0.128: si470x_get_scratch: si470x_get_report returned -71
[ 1567.729867][ T8851] radio-si470x: probe of 2-1:0.128 failed with error -5
20:27:22 executing program 1:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001e95cd10cf12117108480000000109021b0001000000000904800001030000000705840b0000000000d4e49e3409a73c998f6455d9c914b2ffc539d224ec4fb2e2f0deb648ae8551bdee973fbeea0dba164357f4608ff0086446ba57a955fc14001000007f3160ce9305c38a40aafd7ffa0d56eebd3cf44c1bd18ca6e09f593f29da2bffcf4e352e2f1da524c4055186da16e5f5ece8228df8fb7d68ed0a4ff6290a34c9a94fefebc61ca6f058c4febce85afb0f8a0f438e3f2cb1bc8062b9161de8ff29992d72b4f9475a85035389d328708b2913"], 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x0, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000000)={0x0, 0x0, 0x18, "7b88ec0a940056a81b1eff0300000000000041461e4804d0c9945f82f14d9bf862ee"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

[ 1567.800813][ T8851] usb 2-1: USB disconnect, device number 30
20:27:23 executing program 3:
r0 = syz_usb_connect(0x3, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xb7, 0x45, 0x64, 0x10, 0x2304, 0x210, 0x4c94, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xe6, 0x0, 0x1, 0xaf, 0x9e, 0xf9, 0x0, [], [{{0x7, 0x5, 0x84, 0xb, 0x1d9}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x440080, 0x0)
ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000100)={0x22, 0x5, 0xffff, 0x100, 0xa1b, 0x401})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1080, 0x89)
ioctl$RTC_PLL_GET(r2, 0x80207011, &(0x7f0000000040))

20:27:23 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000100)={0x400000100002f, {0x0, 0x0, 0xdeba}})
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000002c0)={{}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r2, 0x5501)
socket$unix(0x1, 0x4, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000080)="08c1fdfbb733fda626a395b421f539e7903655813f3217c6902fee39e92abf72ab01d49ad91d377af90433448973380d8479368b6cd486dded34bace96a448147d59c9d7ca33b8835a616ab2072043025208fb097b2c2eb6d05060ac141284f642a2508722fbf6fefc1ba8f6327dd5243cb5cbfbdee651d536acf9006b5c1d4cfa91909511a74085790550ea2669b699bac002a0c70a15324bc4c313fd7ed7cc0cb53bc89be2a31fb3b511d408013a08020dc05037f9848d", 0xb8}, {&(0x7f0000000140)="be69ae123ecd4ad2405869e8184eb6ce82cbd7c0950324382402ec743f37912a64fc34eb5f134e918d25e6c079eec7f9a2ed99623993654b9a632656e906b18e6bc2fc6e03daf5687398008f0ddd38d77086e48940a80d58155d91d55fe99bcdbfdd3a1bcd0b268a97eeddb995398f003c0a8cbff19209957fc35c79033d", 0x7e}, {&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000011c0)="c5bcad23b116cdf5e870f951cc54a2648cd76de4678814148513685e5295d032d33f3908c396c4dd5013c25e1e224f5599baf2c8e95439182794243f9f05e87d2dab8cd311e2be2a02509a4d00e51907af4d9fde64b7f0cbf3e37e1de7e05b4d95a1ebdaeb", 0x65}], 0x4, 0xa)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

20:27:23 executing program 0:
r0 = socket(0x1, 0x1, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0xfffffffffffffe4f)
gettid()
timer_create(0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000700)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000700000004000000a8040000400100008002000040010000c0030000c0030000c003000004000000", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00'/64], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00040010000000000000000000000000000000000000000000000000a8350006d616e676c650000000000000000000000000000000000000000000d000000000000000000000000000000000000aaaaaaaaaabb00000000000000000000e0000001ac14140f08000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000e800006a7b784d66ca7da316c95cf8804919e60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c65000000000000000000000000000000000000000000000000aaaaaaaaaaaa09000000000000000000aaaaaaaaaabb00000000000000000000e00000010000000818000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000e0ff0000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c650000000000000000000000000000000000000000000000000180c200000000000000000000000000aaaaaaaaaa2100000000000000000000e0000002ac1414aa080000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80000000000000000000000000000000000000000000000000028000000000000000000000000000000000000000000000000000000ff000000feffffff00000000f79f158518056c289649b9c832bc8b465b7352cf95e4228819cf14ec9fca4ca2c72717bd41c8d1d5b32c384e372c5da42095e78abca3747e15553e583daf551e4d9d8433710a41728478a6ba73dbe51d19a792b2c84cb7559b47cc2a15a1171d9696c2d538bab6a4c9a35a42e8f9b9f97d5ca46102b76098946999c4c3966b2f7622cdadbe7a21917a4ad7f8ef3efdb0afa2901d9915dff29b6546db89f27be809892403e36774cc5824a4015202247d8059b9835000"/1372], 0x4f8)

[ 1567.942401][T11836] radio-si470x 4-1:0.128: DeviceID=0x45f4 ChipID=0x8180
[ 1567.982580][T11836] radio-si470x 4-1:0.128: si470x_get_report: usb_control_msg returned -71
[ 1567.991291][T11836] radio-si470x 4-1:0.128: si470x_get_scratch: si470x_get_report returned -71
[ 1568.001325][T11836] radio-si470x: probe of 4-1:0.128 failed with error -5
[ 1568.032165][T11720] usb 3-1: new high-speed USB device number 83 using dummy_hcd
[ 1568.044381][ T6525] input: syz0 as /devices/virtual/input/input1524
[ 1568.071352][T11836] usb 4-1: USB disconnect, device number 91
[ 1568.082439][T10207] usb 6-1: new high-speed USB device number 32 using dummy_hcd
20:27:23 executing program 0:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
pipe(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
close(r3)
write$cgroup_int(r2, &(0x7f0000000080), 0x12)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00')
splice(r1, 0x0, r3, 0x0, 0x1ac, 0x0)

[ 1568.158510][ T6525] input: syz0 as /devices/virtual/input/input1525
20:27:23 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
pipe2(&(0x7f0000000000), 0x180800)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

[ 1568.232420][ T8851] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[ 1568.302076][T11720] usb 3-1: Using ep0 maxpacket: 16
[ 1568.325399][T10207] usb 6-1: Using ep0 maxpacket: 16
20:27:23 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x80, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='dctcp-reno\x00', 0xb)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000001300)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f0000000000)='md5sumloposix_acl_access*.\x00', 0x1b)

20:27:23 executing program 0:
socket$alg(0x26, 0x5, 0x0)
r0 = creat(&(0x7f0000000100)='./file0\x00', 0x20005d)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c4600800000000000000000000002000600ca3f8bca0000000038000000000000f7ffffffffffff1f000200000000000000b500000001000000000000000000ff7f0000000005000000000000010000000000000000310ff3eec1b0000c085355be8847c22e30f56282002c95723f068fe42d2796cc"], 0x78)
close(r0)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r2)
splice(r1, 0x0, r2, 0x0, 0x10000, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000000)={0x7, 0x4d, 0x2}, 0x7)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc00e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mlockall(0x2)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
uselib(&(0x7f00000000c0)='./file0\x00')

[ 1568.442586][T11720] usb 3-1: config 0 has an invalid interface number: 128 but max is 0
[ 1568.445331][T10207] usb 6-1: config 0 has an invalid interface number: 128 but max is 0
[ 1568.450948][T11720] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1568.459116][T10207] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1568.469256][T11720] usb 3-1: config 0 has no interface number 0
[ 1568.479370][T10207] usb 6-1: config 0 has no interface number 0
[ 1568.479465][T10207] usb 6-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1568.486285][T11720] usb 3-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1568.492422][T10207] usb 6-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1568.503480][T11720] usb 3-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1568.514524][T10207] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1568.523553][T11720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1568.553661][T11836] usb 4-1: new high-speed USB device number 92 using dummy_hcd
[ 1568.556392][T11720] usb 3-1: config 0 descriptor??
[ 1568.561446][ T8851] usb 2-1: Using ep0 maxpacket: 16
[ 1568.573517][T10207] usb 6-1: config 0 descriptor??
20:27:23 executing program 0:
r0 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)={0x0, 0x7, 0x4, 0x0, {0x0, 0x7530}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6623c7ac"}, 0x0, 0x0, @offset, 0x4})
creat(0x0, 0x0)

[ 1568.692434][ T8851] usb 2-1: config 0 has an invalid interface number: 128 but max is 0
[ 1568.700879][ T8851] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1568.711146][ T8851] usb 2-1: config 0 has no interface number 0
[ 1568.717377][ T8851] usb 2-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1568.728613][ T8851] usb 2-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1568.737809][ T8851] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1568.749169][ T8851] usb 2-1: config 0 descriptor??
20:27:23 executing program 0:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
pipe(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
close(r3)
write$cgroup_int(r2, &(0x7f0000000000), 0xffffff10)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00')
splice(r1, 0x0, r3, 0x0, 0x1ac, 0x0)

[ 1568.792379][T11836] usb 4-1: Using ep0 maxpacket: 16
[ 1568.822337][T10207] radio-si470x 6-1:0.128: DeviceID=0xb255 ChipID=0xb681
[ 1568.853418][T11720] radio-si470x 3-1:0.128: DeviceID=0x65f7 ChipID=0xba81
[ 1568.912296][T11836] usb 4-1: config 0 has an invalid interface number: 230 but max is 0
[ 1568.920622][T11836] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1568.931121][T11836] usb 4-1: config 0 has no interface number 0
[ 1568.937381][T11836] usb 4-1: config 0 interface 230 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1568.948717][T11836] usb 4-1: New USB device found, idVendor=2304, idProduct=0210, bcdDevice=4c.94
[ 1568.957910][T11836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1568.967713][T11836] usb 4-1: config 0 descriptor??
[ 1569.002478][ T8851] radio-si470x 2-1:0.128: DeviceID=0xbf55 ChipID=0xb681
[ 1569.016669][T11836] usbvision_probe: Pinnacle Studio PCTV USB (PAL) FM V2 found
[ 1569.024885][T11836] usbvision 4-1:0.230: interface 230 is invalid, max is 0
[ 1569.042052][T10207] radio-si470x 6-1:0.128: software version 178, hardware version 85
[ 1569.063189][T11720] radio-si470x 3-1:0.128: software version 101, hardware version 247
[ 1569.272486][T11720] radio-si470x 3-1:0.128: submitting int urb failed (-90)
[ 1569.282439][T10207] radio-si470x 6-1:0.128: submitting int urb failed (-90)
[ 1569.493047][T10207] radio-si470x 6-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1569.502240][T10207] radio-si470x: probe of 6-1:0.128 failed with error -22
[ 1569.513183][T10207] usb 6-1: USB disconnect, device number 32
[ 1569.532971][ T8851] radio-si470x 2-1:0.128: si470x_get_report: usb_control_msg returned -110
[ 1569.541623][ T8851] radio-si470x 2-1:0.128: si470x_get_scratch: si470x_get_report returned -110
[ 1569.551137][ T8851] radio-si470x: probe of 2-1:0.128 failed with error -5
[ 1569.711998][T11720] radio-si470x 3-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1569.721096][T11720] radio-si470x: probe of 3-1:0.128 failed with error -22
[ 1569.737343][T11720] usb 3-1: USB disconnect, device number 83
20:27:25 executing program 0:
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
sched_getscheduler(0x0)

20:27:25 executing program 2:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x20000, 0x0)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0xfffffffffffffd55, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x0, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r4=>0xffffffffffffffff})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
close(r5)
ioctl$EVIOCGABS3F(r4, 0x8018457f, &(0x7f00000005c0)=""/181)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

[ 1570.511915][T11720] usb 3-1: new high-speed USB device number 84 using dummy_hcd
[ 1570.751936][T11720] usb 3-1: Using ep0 maxpacket: 16
20:27:25 executing program 1:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, &(0x7f0000000040))

[ 1570.860014][T10207] usb 2-1: USB disconnect, device number 31
[ 1570.873352][T11720] usb 3-1: config 0 has an invalid interface number: 128 but max is 0
[ 1570.882255][T11720] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1570.892523][T11720] usb 3-1: config 0 has no interface number 0
[ 1570.898719][T11720] usb 3-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1570.911046][T11720] usb 3-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1570.920238][T11720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1570.952567][T11720] usb 3-1: config 0 descriptor??
[ 1571.212050][T11720] radio-si470x 3-1:0.128: DeviceID=0x66f7 ChipID=0xba81
[ 1571.321873][T10207] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[ 1571.422070][T11720] radio-si470x 3-1:0.128: software version 102, hardware version 247
[ 1571.572171][T10207] usb 2-1: Using ep0 maxpacket: 16
[ 1571.642126][T11720] radio-si470x 3-1:0.128: submitting int urb failed (-90)
[ 1571.702359][T10207] usb 2-1: config 0 has an invalid interface number: 128 but max is 0
[ 1571.710747][T10207] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1571.721016][T10207] usb 2-1: config 0 has no interface number 0
[ 1571.727231][T10207] usb 2-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1571.738433][T10207] usb 2-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1571.747567][T10207] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1571.756966][T10207] usb 2-1: config 0 descriptor??
20:27:27 executing program 3:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000000)=ANY=[@ANYBLOB="0000008852feb27754f17942c5a244e16b6b365e00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000170a07031dfffd942367ede3b9a3484409000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x8c000)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080)=r2, 0x4)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

20:27:27 executing program 5:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x0, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0xe1, @string={0xe1, 0x3, "3a3c5a98a0b88f20dab28f43fd604a180bf5c40802c641ed238502ea05de14099c5dfa19c61d2715c179a8913d43848ebb6058f0ae47cea480ef4ae3d1bd7724bc870bcd80db1746d211f5f7dde4bd2f33e5a634f6174cf4dab428a4bdd5141e1cdfd7535edf28bbf44e35cb9180ea022e265108d6db9ab408e8b86c601dc9baf360878fefb4286f933f037b53d6c51bf10ba2a82424f4cf64d7a43f8235463a4e3651ce704859e92aa583ee3327735693aa9147f8b908c3d665302cff8ef37ebcb56efae4f83bc51fa46f6295b1622a46895dded87879de64c990feb0f52a"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x20000, 0x0)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f00000001c0)={0x7, 0x100})
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000200)={0xfffffffffffffd55, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x23, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r4 = socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r5=>0xffffffffffffffff})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
close(r6)
splice(r5, 0x0, r6, 0x0, 0x10003, 0x0)
ioctl$EVIOCGABS3F(r5, 0x8018457f, &(0x7f00000005c0)=""/181)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @multicast2}}}, &(0x7f0000000180)=0x90)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e20, 0xaa, @empty, 0x8000}, {0xa, 0x4e24, 0x7fffffff, @dev={0xfe, 0x80, [], 0xf}, 0x6}, 0x8000, [0x8, 0x1, 0x84, 0xf5, 0x7, 0x5, 0x0, 0x3]}, 0x5c)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

20:27:27 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet(0x10, 0x3, 0xc)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000000100)={0x400000100002f, {0x0, 0x0, 0xdeba}})
ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f00000002c0)={{}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r4, 0x5501)
signalfd4(r4, &(0x7f0000000140)={0x9}, 0x8, 0x800)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000170a07031dfffd942367ede3b9a3484409000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
bind(r3, &(0x7f00000000c0)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e23, 0x5}}, 0xffffffffffffff16)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

20:27:27 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071")
ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000080)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'})
ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000040)={'bond0\x00\xe1Hm\x00!!\x0f\xdb\x00', @ifru_names='bond_slave_1\x00\x06\x00'})

[ 1571.964192][T11712] usb 4-1: USB disconnect, device number 92
[ 1572.015559][ T7071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1572.031249][T11774] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 1572.045152][T10207] radio-si470x 2-1:0.128: DeviceID=0xb355 ChipID=0xb681
[ 1572.068458][ T7075] input: syz0 as /devices/virtual/input/input1526
[ 1572.082297][T11720] radio-si470x 3-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1572.091309][T11720] radio-si470x: probe of 3-1:0.128 failed with error -22
[ 1572.110996][ T7071] bond0: (slave bond_slave_1): Releasing backup interface
[ 1572.121137][T11720] usb 3-1: USB disconnect, device number 84
[ 1572.174244][ T7080] input: syz0 as /devices/virtual/input/input1527
20:27:27 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000100)={0x400000100002f, {0x0, 0x0, 0xdeba}})
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000002c0)={{}, 'syz0\x00'})
r2 = socket$inet6(0xa, 0x5, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @multicast2}}}, &(0x7f0000000180)=0x90)
setsockopt$inet6_udp_int(r2, 0x11, 0x0, &(0x7f0000000000), 0x4)
ioctl$UI_DEV_CREATE(r1, 0x5501)
r3 = timerfd_create(0x5, 0x800)
r4 = fcntl$dupfd(r3, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

[ 1572.262172][T10207] radio-si470x 2-1:0.128: software version 179, hardware version 85
[ 1572.342291][ T7148] input: syz0 as /devices/virtual/input/input1528
[ 1572.344720][ T8851] usb 6-1: new high-speed USB device number 33 using dummy_hcd
20:27:27 executing program 0:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0)
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
io_setup(0x1, &(0x7f0000000080)=<r1=>0x0)
io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x4, 0x1, 0x0, r0, &(0x7f0000000000), 0x20000}])
syz_genetlink_get_family_id$ipvs(0x0)
sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)

[ 1572.415883][ T7186] input: syz0 as /devices/virtual/input/input1529
[ 1572.452159][T11712] usb 4-1: new high-speed USB device number 93 using dummy_hcd
[ 1572.473843][T10207] radio-si470x 2-1:0.128: submitting int urb failed (-90)
20:27:27 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='|wt\x1f\xac\xd3+\xba|Am\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000100)={0x400000100002f, {0x0, 0x0, 0xdeba}})
fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x2)
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000002c0)={{}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r2, 0x5501)
r3 = fcntl$dupfd(0xffffffffffffffff, 0xe09, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setrlimit(0x2, &(0x7f0000000000)={0x1fffffc, 0x20080000000})
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000000100)={0x400000100002f, {0x0, 0x0, 0xdeba}})
ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3)
ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000180))
ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f00000002c0)={{}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r4, 0x5501)
ioctl$UI_DEV_DESTROY(r4, 0x5502)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)
r5 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x1, 0x2)
setsockopt$RXRPC_SECURITY_KEY(r5, 0x110, 0x1, &(0x7f00000001c0)='vmnet1)\x00', 0x8)
ioctl$DRM_IOCTL_SET_MASTER(r5, 0x641e)

20:27:27 executing program 2:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x20000, 0x0)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0xfffffffffffffd55, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x0, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r4=>0xffffffffffffffff})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
close(r5)
ioctl$EVIOCGABS3F(r4, 0x8018457f, &(0x7f00000005c0)=""/181)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

[ 1572.612750][ T8851] usb 6-1: Using ep0 maxpacket: 16
[ 1572.665628][ T7291] input: syz0 as /devices/virtual/input/input1530
[ 1572.701845][T11712] usb 4-1: Using ep0 maxpacket: 16
[ 1572.742497][ T8851] usb 6-1: config 0 has an invalid interface number: 128 but max is 0
[ 1572.750921][ T8851] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1572.761572][ T8851] usb 6-1: config 0 has no interface number 0
[ 1572.767820][ T8851] usb 6-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1572.779023][ T8851] usb 6-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
20:27:27 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x100000000000001, 0x0)
bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r1, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
connect(r2, &(0x7f0000000000)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x43)
connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
r3 = gettid()
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000044000))
clock_gettime(0x0, &(0x7f0000000140)={0x0, <r4=>0x0})
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, r4+10000000}}, 0x0)
tkill(r3, 0x101000000000016)

20:27:27 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
read$alg(r1, &(0x7f0000000080)=""/94, 0x5e)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
read$char_usb(r1, &(0x7f0000000100)=""/4096, 0x1000)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

[ 1572.788238][ T8851] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1572.800683][ T8851] usb 6-1: config 0 descriptor??
[ 1572.822509][T11712] usb 4-1: config 0 has an invalid interface number: 128 but max is 0
[ 1572.830906][T11712] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1572.841238][T11712] usb 4-1: config 0 has no interface number 0
[ 1572.847816][T11712] usb 4-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1572.859080][T11712] usb 4-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1572.868270][T11712] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1572.937768][T11712] usb 4-1: config 0 descriptor??
[ 1572.953136][T10207] radio-si470x 2-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1572.962903][T10207] radio-si470x: probe of 2-1:0.128 failed with error -22
[ 1572.972935][ T8852] usb 3-1: new high-speed USB device number 85 using dummy_hcd
20:27:28 executing program 4:
r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2)
getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000080)={'broute\x00'}, &(0x7f0000000100)=0x78)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000140)={0x73, @loopback, 0x4e24, 0x4, 'lblcr\x00', 0x32, 0x80, 0xd}, 0x2c)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000100)={0x400000100002f, {0x0, 0x0, 0xdeba}})
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f00000002c0)={{}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r3, 0x5501)
sendfile(r3, r2, 0x0, 0xfff)
mmap(&(0x7f0000552000/0x1000)=nil, 0x1000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

[ 1573.004699][T10207] usb 2-1: USB disconnect, device number 32
[ 1573.062313][ T8851] radio-si470x 6-1:0.128: DeviceID=0x0000 ChipID=0x0000
[ 1573.069429][ T8851] radio-si470x 6-1:0.128: This driver is known to work with firmware version 12,
[ 1573.078706][ T8851] radio-si470x 6-1:0.128: but the device has firmware version 0.
[ 1573.132232][ T7409] input: syz0 as /devices/virtual/input/input1532
[ 1573.202288][T11712] radio-si470x 4-1:0.128: DeviceID=0x69f7 ChipID=0xba81
[ 1573.242226][ T8852] usb 3-1: Using ep0 maxpacket: 16
[ 1573.312176][ T8851] radio-si470x 6-1:0.128: software version 0, hardware version 0
[ 1573.320038][ T8851] radio-si470x 6-1:0.128: This driver is known to work with hardware version 1,
[ 1573.329295][ T8851] radio-si470x 6-1:0.128: but the device has hardware version 0.
[ 1573.337293][ T8851] radio-si470x 6-1:0.128: If you have some trouble using this driver,
[ 1573.345582][ T8851] radio-si470x 6-1:0.128: please report to V4L ML at linux-media@vger.kernel.org
[ 1573.392092][ T8852] usb 3-1: config 0 has an invalid interface number: 128 but max is 0
[ 1573.400369][ T8852] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1573.410722][ T8852] usb 3-1: config 0 has no interface number 0
[ 1573.416917][ T8852] usb 3-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1573.428127][ T8852] usb 3-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1573.437285][ T8852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1573.439430][ T8852] usb 3-1: config 0 descriptor??
[ 1573.450950][T11712] radio-si470x 4-1:0.128: software version 105, hardware version 247
[ 1573.532128][ T8851] radio-si470x 6-1:0.128: submitting int urb failed (-90)
[ 1573.672073][T11712] radio-si470x 4-1:0.128: submitting int urb failed (-90)
[ 1573.692122][ T8852] radio-si470x 3-1:0.128: DeviceID=0x41f4 ChipID=0x8180
[ 1573.721823][T11720] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[ 1573.762162][ T8851] radio-si470x 6-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1573.771153][ T8851] radio-si470x: probe of 6-1:0.128 failed with error -22
[ 1573.782561][ T8851] usb 6-1: USB disconnect, device number 33
[ 1573.912105][ T8852] radio-si470x 3-1:0.128: software version 65, hardware version 244
[ 1573.961872][T11720] usb 2-1: Using ep0 maxpacket: 16
[ 1574.081945][T11720] usb 2-1: config 0 has an invalid interface number: 128 but max is 0
[ 1574.090297][T11720] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1574.100716][T11720] usb 2-1: config 0 has no interface number 0
[ 1574.106970][T11720] usb 2-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1574.118244][T11720] usb 2-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1574.127478][T11720] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1574.137389][T11720] usb 2-1: config 0 descriptor??
[ 1574.142180][ T8852] radio-si470x 3-1:0.128: submitting int urb failed (-90)
20:27:29 executing program 0:
syz_open_dev$evdev(0x0, 0x1, 0x40)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x23, 0x6}, 0x2, 0x7ff, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept$inet6(0xffffffffffffff9c, 0x0, 0x0)
r0 = getpid()
r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x200000002)
setpgid(r0, 0x0)
ftruncate(r1, 0x8200)
getpgrp(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000000c0))
r4 = inotify_init1(0x0)
fcntl$setown(r4, 0x8, 0xffffffffffffffff)
fcntl$getownex(r4, 0x10, &(0x7f0000000100)={0x0, <r5=>0x0})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x4, @tid=r5}, 0x0)
r6 = inotify_init1(0x0)
fcntl$setown(r6, 0x8, 0xffffffffffffffff)
fcntl$getownex(r6, 0x10, &(0x7f0000000100)={0x0, <r7=>0x0})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x4, @tid=r7}, 0x0)
rt_tgsigqueueinfo(r7, r5, 0x1, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x80000000012, 0xffffffffffffffff, 0x0)
lstat(0x0, 0x0)
readlink(&(0x7f0000000100)='./bus\x00', 0x0, 0x0)
removexattr(0x0, 0x0)
getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
r8 = socket$inet6(0xa, 0x400000000001, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r9 = dup(r8)
setsockopt$inet6_tcp_int(r9, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4)
setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f0000000200)=0x806, 0x204)
bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
socket$inet(0x10, 0x2, 0x0)
r10 = socket(0x200400000010, 0x3, 0x0)
write(r10, &(0x7f0000000280), 0x0)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
r12 = dup2(r11, r11)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
sendto$inet6(r8, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)

[ 1574.402172][T11720] radio-si470x 2-1:0.128: DeviceID=0x66f7 ChipID=0xba81
[ 1574.409498][T11712] radio-si470x 4-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1574.418645][T11712] radio-si470x: probe of 4-1:0.128 failed with error -22
[ 1574.434070][T11712] usb 4-1: USB disconnect, device number 93
[ 1574.443383][T11720] radio-si470x 2-1:0.128: software version 102, hardware version 247
[ 1574.482103][T11720] radio-si470x 2-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1574.490762][T11720] radio-si470x 2-1:0.128: submitting int urb failed (-90)
[ 1574.522514][T11720] radio-si470x 2-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1574.531569][T11720] radio-si470x: probe of 2-1:0.128 failed with error -22
[ 1574.554760][T11720] usb 2-1: USB disconnect, device number 33
[ 1574.572447][ T8852] radio-si470x 3-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1574.581536][ T8852] radio-si470x: probe of 3-1:0.128 failed with error -22
[ 1574.600956][ T8852] usb 3-1: USB disconnect, device number 85
[ 1575.151904][ T8852] usb 4-1: new high-speed USB device number 94 using dummy_hcd
[ 1575.401993][ T8852] usb 4-1: Using ep0 maxpacket: 16
[ 1575.522037][ T8852] usb 4-1: config 0 has an invalid interface number: 128 but max is 0
[ 1575.530293][ T8852] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1575.540578][ T8852] usb 4-1: config 0 has no interface number 0
[ 1575.546761][ T8852] usb 4-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1575.557943][ T8852] usb 4-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1575.567168][ T8852] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1575.576687][ T8852] usb 4-1: config 0 descriptor??
[ 1575.832004][ T8852] radio-si470x 4-1:0.128: DeviceID=0xbb55 ChipID=0xb681
[ 1575.872033][ T8852] radio-si470x 4-1:0.128: software version 187, hardware version 85
20:27:30 executing program 5:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x0, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0xe1, @string={0xe1, 0x3, "3a3c5a98a0b88f20dab28f43fd604a180bf5c40802c641ed238502ea05de14099c5dfa19c61d2715c179a8913d43848ebb6058f0ae47cea480ef4ae3d1bd7724bc870bcd80db1746d211f5f7dde4bd2f33e5a634f6174cf4dab428a4bdd5141e1cdfd7535edf28bbf44e35cb9180ea022e265108d6db9ab408e8b86c601dc9baf360878fefb4286f933f037b53d6c51bf10ba2a82424f4cf64d7a43f8235463a4e3651ce704859e92aa583ee3327735693aa9147f8b908c3d665302cff8ef37ebcb56efae4f83bc51fa46f6295b1622a46895dded87879de64c990feb0f52a"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x20000, 0x0)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f00000001c0)={0x7, 0x100})
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000200)={0xfffffffffffffd55, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x23, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r4 = socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r5=>0xffffffffffffffff})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
close(r6)
splice(r5, 0x0, r6, 0x0, 0x10003, 0x0)
ioctl$EVIOCGABS3F(r5, 0x8018457f, &(0x7f00000005c0)=""/181)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @multicast2}}}, &(0x7f0000000180)=0x90)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e20, 0xaa, @empty, 0x8000}, {0xa, 0x4e24, 0x7fffffff, @dev={0xfe, 0x80, [], 0xf}, 0x6}, 0x8000, [0x8, 0x1, 0x84, 0xf5, 0x7, 0x5, 0x0, 0x3]}, 0x5c)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

20:27:30 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
pipe(&(0x7f0000001300)={<r4=>0xffffffffffffffff})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
close(r5)
splice(r4, 0x0, r5, 0x0, 0x10003, 0x0)
r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r6, 0x401c5504, &(0x7f0000000100)={0x400000100002f, {0x0, 0x0, 0xdeba}})
ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f00000002c0)={{}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r6, 0x5501)
fsetxattr$security_capability(r6, &(0x7f0000000080)='security.capability\x00', &(0x7f00000000c0)=@v1={0x1000000, [{0x6}]}, 0xc, 0x2)
ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000000)={0x1, r4, 0x1})

20:27:30 executing program 1:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x4, 0x541240)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$CAPI_REGISTER(r3, 0x400c4301, &(0x7f0000000340)={0x5, 0x1f, 0x80})
getsockname$tipc(r1, &(0x7f0000000040)=@id, &(0x7f00000000c0)=0x10)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000000100)={0x400000100002f, {0x0, 0x0, 0xdeba}})
ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f00000002c0)={{}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r4, 0x5501)
getresuid(&(0x7f0000000200)=<r5=>0x0, &(0x7f0000000240), &(0x7f0000000280))
r6 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000170a07031dfffd942367ede3b9a3484409000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r7 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r7, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000170a07031dfffd942367ede3b9a3484409000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
listen(r7, 0x1006)
fsetxattr$security_capability(r4, &(0x7f00000001c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x80, 0x33b}, {0x1, 0x8a73}], r5}, 0x18, 0x4)
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x809000, 0x0)
getsockname$tipc(r8, &(0x7f0000000140), &(0x7f0000000180)=0x10)

20:27:30 executing program 0:
creat(&(0x7f0000000100)='./bus\x00', 0x0)

20:27:31 executing program 2:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x20000, 0x0)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0xfffffffffffffd55, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x0, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r4=>0xffffffffffffffff})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
close(r5)
ioctl$EVIOCGABS3F(r4, 0x8018457f, &(0x7f00000005c0)=""/181)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

20:27:31 executing program 3:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001d40)='/dev/vga_arbiter\x00', 0x80, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x0, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000440)={0x2c, &(0x7f0000000180)={0x118f3ac745879508, 0x5, 0xe9, {0xe9, 0x139d8a02f87bf726, "1eb6fecd8434e133e2ac7880e46d437b05cd802cbe07794ecfc87e0e2fa20cee24d2f2a71c1dc408e04e611b1c1db04dd58640cb4e2da512f4017c6979dfe0210d68aaea3fe50a817585dc62828b1853e6a2a469880620dde33a37d1d3149a525b7c3eaad904149bcc3c052927a213102ed503509c915c5cd660ae9a4dcb66dfeb28d3bc5f6e2240357b6d7051df499ef29f0aedd765ff603ab5da8f2089303aa0ec6d04cbc5207202f0ee002d1f3466c027311df97b5569113e98ec9a884a6aa0282258a3bcbade8697a01684f7d2b831eeb734f512c7c5138aba2f856f8a931ede83b5f2d6a0"}}, &(0x7f00000009c0)={0x0, 0x3, 0x1002, @string={0x1002, 0x3, "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"}}, &(0x7f0000000040)={0x0, 0xf, 0x59, {0x5, 0xf, 0x59, 0x6, [@ssp_cap={0x10, 0x10, 0xa, 0x81, 0x1, 0xd2, 0xd775e5c1c062351a, 0x6, [0x3f00]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x6, 0x81, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xc, 0x7, 0x1}, @ssp_cap={0x14, 0x10, 0xa, 0x3f, 0x2, 0x9, 0x787, 0x133e, [0xf, 0xc0]}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "45ea4ad0859701a05ed9b9576ddf3228"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x1, 0x4, 0x2, 0xb02d, 0xc}]}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x0, 0x9c, 0x3, "108b3d72", "ade9c0b0"}}, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x29, 0x72, 0x80, 0x9, 0x74, 0x40, 0x5}}}, &(0x7f0000001c80)={0xac, &(0x7f00000005c0)={0x0, 0x14, 0xe5, "27f427f13ff1ba44accfd715217b82c7b32ad68104c473da6966256975006306075ef934b96874fd3fbeeef98c4475555a6779bf47b091e48d3539ed1515519cc1f33a82f5c0ee2e44d5a0072c296ea8797e8c6eec4bed7cf10a8d32eb1eca04186d4b3c0f9642e972ad841ae62f0fcd7ad730b81009231997a34548c4d9fda4d9b989303ce5bc71afc0e3486267fb45b8b51a26f36b6abed527248471eed4de48903d1408211a07fb8da0337468d66f2e29f3c1cb3f40adf804f3c5892f267caeeb7085564b29de3ba6c1d3acb1570988394758b3d0da86c9838097824e972191d75ef53e"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x72}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000700)={0x20, 0x81, 0x1, "f1"}, &(0x7f0000000740)={0x20, 0x82, 0x3, "a85e0b"}, &(0x7f0000000780)={0x20, 0x83, 0x2, "873f"}, &(0x7f00000007c0)={0x20, 0x84, 0x2, "8b41"}, &(0x7f0000000800)={0x20, 0x85, 0xff38, "db1058"}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000880)={0x20, 0x0, 0x4, {0xc0, 0x8b0bf10b6198186d}}, &(0x7f00000008c0)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000001a00)={0x40, 0x9, 0x1}, &(0x7f0000001a40)={0x40, 0xb, 0x2, "ff42"}, &(0x7f0000001a80)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000001ac0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000001b00)={0x40, 0x17, 0x6, @random="26a4fea5401a"}, &(0x7f0000001b40)={0x40, 0x19, 0x2, "32d0"}, &(0x7f0000001b80)={0x40, 0x1a, 0x2, 0x1ff}, &(0x7f0000001bc0)={0x40, 0x1c, 0x1, 0xc0}, &(0x7f0000001c00)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000001c40)={0x40, 0x21, 0x1, 0x4}})
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x800, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f00000000c0)={0x800, 0x7fffffff, 0x0, 'queue1\x00'})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

[ 1575.914088][ T8852] radio-si470x 4-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1575.922834][ T8852] radio-si470x 4-1:0.128: submitting int urb failed (-90)
20:27:31 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x20})

[ 1576.004351][ T8852] radio-si470x 4-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1576.013573][ T8852] radio-si470x: probe of 4-1:0.128 failed with error -22
[ 1576.032947][ T7434] input: syz0 as /devices/virtual/input/input1533
[ 1576.088847][ T8852] usb 4-1: USB disconnect, device number 94
[ 1576.150138][ T7436] input: syz0 as /devices/virtual/input/input1534
20:27:31 executing program 4:
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x402501, 0x0)
ioctl$KVM_CHECK_EXTENSION_VM(r0, 0xae03, 0x80)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x202a81, 0x0)
ioctl$KDSETLED(r1, 0x4b32, 0x300000000)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
pipe(&(0x7f0000001300)={<r3=>0xffffffffffffffff})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
splice(r3, 0x0, r4, 0x0, 0x10003, 0x0)
ioctl$DRM_IOCTL_SET_VERSION(r3, 0xc0106407, &(0x7f00000000c0)={0x1, 0x76, 0x8, 0x1})
r5 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

[ 1576.263540][T11720] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[ 1576.264863][ T8851] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[ 1576.271930][T11712] usb 3-1: new high-speed USB device number 86 using dummy_hcd
20:27:31 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
write(r0, &(0x7f0000001880)="2600000013003ff1eb14c1f8030322ff001000e313000000093903680000000005000300124b", 0x26)

20:27:31 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$KVM_GET_NESTED_STATE(r1, 0xc080aebe, &(0x7f0000000080)={0x0, 0x0, 0x2080})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xffffffffffffffb5, 0x2)
preadv(r1, &(0x7f0000002400)=[{&(0x7f0000002100)=""/51, 0x33}, {&(0x7f0000002140)=""/222, 0xde}, {&(0x7f0000002240)=""/184, 0xb8}, {&(0x7f0000002300)=""/254, 0xfe}], 0x153, 0x0)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

[ 1576.382199][ T7545] : renamed from caif0
20:27:31 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)
ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x1)

[ 1576.433313][ T7545] device  entered promiscuous mode
[ 1576.438800][ T7545] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[ 1576.472282][ T8852] usb 4-1: new high-speed USB device number 95 using dummy_hcd
[ 1576.512127][ T8851] usb 6-1: Using ep0 maxpacket: 16
20:27:31 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x406, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000040)=0x8, 0x1)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r1, &(0x7f0000000080)="a1854dace58bbbcb4a765785e6e2682eac8f6507511c9478d5598ab576d1243c688a3be30b058befa21942a05d81582e2fcb3b50f180d231870a791dc8e32b038f48a9257afaf89fb6efe7e60d3d118d905777a9547b9eb65bbaf1fac45325833238da114a9ba355b717935f015dd2dd093dac17ae261cbd64fbf7b2428ffc9e565e9a4c7f5abaeee22084f98e25b941baad9396ffb0617a0a71dec422d6594ee9fc750e6e9dfb4a9fd1c4456c453662880c7ad41aee7fd5688162ff90a4b9c1a8b1c47dd3386118c80c1b80a992e9e2aa7ed073b1bdf10ac6e9aeea62230d4b94efec1fc17d8668209e65f1b21426363279cd02a29230f995170677d270dae43c62517a18d1fe30cf6bb4e674b476f9f4dd89f902bdde523a1e2516335e47b57e8ef0471ce5a8ae16472a70bacb568181c756be042f2aaff85d20e3d88ca0449ed9966f92e968c651cceaa887278be1330bea08f6ff431da3f980942b2a326a431392849c9f69a4a1466bc4365a25ee914dda5a52e93e814642e4915a18a6a0a6bd674ee289df7d54bad5520dac7c4e850fae6bb00bb633a537b5de6c6c7207ffeca6fa05b67a207dc1e8117b62eb39803f423d4576de9a1f59a6cd24715111879059260ddce7d831227baf0ec179300ce439b71e3d1c96de7f061ca8c33a8a00a3da3c5e481003235885928d06f3f5e7702cffac40c88aa633634f64dead410ff268981b9287c5efa84f96af043b15d85d1634dbec595939e12040182c26e68a2f59272446ab667c7e0676d2ac50b50ad89eb996537c4457de937664311830894f66717adf55977986a7a91a9380a514b7dcb6cba4438f7bd286f8a17c292c6681b7d093b2cb8d94fb7f66769359def9a91ae4a031183ffe2cfce2965b978d79cd31e660ded9e09b89e34112b346d66ce10d59ceb4ba6688cdd89d3539b00b972f352866a9aa6d238d1dc31b7efa025f7695fa75a46dd5da6fbbad64a1e61e725b518dd9e9cc95b2b3b9a82af74e5a4f34a8074c2a9a4cd329d5be3f0a60d08ea631b811d82bfeb7627894416105f5389339d9ecc0c21b74011ca869e754dcf15d7f9b9da88a685b6a78cf959b40354d8ac782869a68f04751a7e03a69c6e3c69ddbea6d3c0421665462c9d3020fd0655ba20be41650724f2a68699ae0f7e4a5f7f85f361cbc9ce2bccf468a8b674baa57520804abd9eaaf7ffe7919f477bd076631f587c9d413fb30b9fbac17761e09ef7bba8d710405abb912b3c4bd49d76de9f037ca48e02e86289db6adecdc1955d08b35168a8dd13ebc6cbbceb3f8e5b00251a042377b0c32727660c4c01ae41681372c28a9c74e66a32149ee4ee83d16f1fa329adf490f1c4634f2088a8f786c4db6a376176b13d7964414c0d197f417b7838a912ba8ef07a87be26bbb59e6df3d12e1c3c80cd1366d40e500b46804e1de8d3f9067e040dc5d12980b5421d51c349ac5117b43aac102379d40e6adc8c5a7b0d45f6e739912c301b6a2b49ad3c8ff54fa278ad3e3a06d710a8d0e8c0f743f970153f51973cad5bdf5708dd5df55d1f6a5a0fea662d0460c342537cc773d12ef6d9b8c71c893fe15ae7e550a501b1e9b0de1e0230df41b71d128d2fe004e6217a00039d88084b230e55f157254b00ba2868b478d370d1a9e01e7c61d6669bb4106156b220757e565874e4f590d9c8cb81c4486c7f6deb96a17ddeeec8066ce52cbdef3365b49e60a97dd472de2e630d59a63b21e473c1828ca4d9f1709459d3416824ff8079cbad857c707a703d62510513e4b9230bce046b01b1bc6f0151466788b6d35305e54305c63fbb6c87b77d803e3fe3cbbb0980a7739f17393316dc174aede11f55d7baa62948f40fdfc6daefdfff9bb46c3e78140c00285287af9b766d353898a451901b36b9204c4a2ae1984c116108e75e77d26ddc56ac73dd46d934e2a6702cd4815a1cf656d190104957608037cb81a3bde50174538d0eef6080849e601896256e544d337a3645bf16efcb650ac27abec1ccac557fa174ba96bd9a347e370f4dd61298c4f11c8bdbcc346b2ef56d186565e7f7cc60c6073ce8240e51999c22797b4172f530cf670e188e03ce2f9e2155c99ce55271f9acbd768a0e343e1a56fd9cfd6b72ab96cd9d1d34aa0102036c30975a60abfec570627c55388b958c5a233400b713500dd724d408f2152bc9bd4809e1eaa4c39cdb976a972e22d0e5801e48a1201c96adfe0e711388b1af1e88ca18f6b342c8358b47ff84028a7e8c2ee3ecaecfb1ae965668cdb7a2ee024bff886ff0267d497e5a230edaaeba256eceb887f887bfe9a87fcd8997e0f91d4280504e656887d2d33c0b2d9f5e57b9d8f7b1bf18105b11801cf42f130921cc9a2f7d3607353604618a3f2f2c1f1d0c476fc68e28c589b374fe9424e0bd84aaab4b60011866058c64edaad2a5fd223b7eacf9c04ddd48617277f0edb642008278dde9869dcea2e535a598882881a14637d954541f9e4c87bcfa56e5df3e7707beec00edbb79cd49022281bd8e8b6c217781b2991c4f564cd88e4bf4309d950b0367f0d4b1df95eb666acc4181f8358ae0582de187b65d82e1ffe8f110c2501744a702aafd8b219d2af7d14fe938783228ea365f95772dc30597dc5d1378cbbd7a5a234efe508c20afe7acd0567e86310831329e362fe1e9c125d7b33d1a9275e0685f6ffb87aee91ccf4be4c485d208732a3b0677ae5c97a29a06fb0d8eea0c26076fd5cb2848bda93fa86a9c4841ca70fbcf886cc065724e8c6bd76b4d7025e395d7a8fbf51c262752356d69d363f4d77fccba2e1eccd72c753702333624edbd226aeec1c230d56051e8817244b22928ae4c4dd3d148e92af4bc78439d9c63c0e6ab1100651dee0c7791147003bcae070cb22376806ad9c4edfec618ad70d949dce7aa80e8a02c5405667ff28237312d7ce34257a700654274834a555027c3ac3621cad6da28472faf6662ff45006a6e323400066026c85ac80505f9ea4a8b9e697190c03175e33368142195af0e4807ad9e340611b08a07d4bbb5c27baa4ffe503b1478eaf37eb568806ed16feb78060eb10090182e4ce72b406f6d7624e0913d3331b9ca668212fa999afd87fd763b09f41e958cd6df0411fd601d7a4a9dba096bbfbeea19d3dc718b36862572eee4ac1dc020abdec495f4dbcd5e62e0a68527ce3222a5e1900337a2c6508aeffdd57ee1830f2ce3c0e26480fb8aa4114c5895d4537309d5aa736a13e8976099e3c39774c3e68a1892dc90ac81c204be57f9770dda898c1ccfb77fb094b33ad8ff76439d3587d94a229444e32cb20314a00f170381110a9c460aeb0cabdbf6a65facf08a31691351e541868545a1665ccf567f2fff79c3b938faec759381561bb20d50f29dd0267e4e718f5c44cf2aaa11bff88240039bfd26e4c4263dadf7f68aa81c31b2dad66dd56e9e5991313177201f18a9ae8bb1a55944b86b29a7e5b85dcac78cd8b8d78d6c29ff47ad03c93577d06e58e27f11ad76b6a0e253de93ab52cefc9791ef90c3db09a434c851189b5357440c1957df94eb93e1d99043206b53c0c02e45d07f3d943a1a32a0454a8705f54544acbb47da8cf09adf1d33dc6e9248182e4113e87c2436df318f3607868d79ab3070b902a04fe5120e0655260985d7c6313be946633944ee81f3cad8288621e1326f07b8aeba747cc65571643c3d4e5b54d75259e3b73ac7535039785a674658018aa677015e5cd29b05595e1463cc1892a67fd49d8e26e9a29e31022f658ef4fb83768042d243e7ff5ed7065bd79e933ad9f713f14fab681e7b9dc5cb92b0c9e7189d032d8d74d50158e6419be5625318a00eb28a001159be6513e26156b74c584d0a2ecac0d44e20dd4c12014d256e925f043f9bb55b7256a4cf78d3a9a30a11007cd30f79339a1316283c80a16208449c21862c7c16d44147167810fc9103f1d8004701508ec3b5303842c0c21fe953da398216eeaeedfaec878e6a189bb3c7ed2b2dbc58a5b215c7a4a8f67b29977b611c87c74634b0df5c6935dc8eada5f853e1dae67670f7b4e27ebad5fe050364319beb79912f0578510992b084d322aed7d137f457114ebfeab0d35c2e0ebb1bf814cf09edfef9646d1a07b60ddad9e32c328c94550de77e55d909f1a5a92c3a736cc0a2d7173704a151fba66aee92144bd4835a0c2aa803fa72342568933b0b403beee87f140a1aa2cf4300f25492428273b7fb74ec96ed4fbb3f947ea7a9da2863887d4c402092f007f623b135a7aea5faf156807971b0049cb5f37bc5e4ccebe6eaa87e179d3b5447af6cafba0ba6c05dd6df613471fdf92cced5dbb42ddcbabf8da33b4fd670b8f97dba912078dbc2fbd708dd8f8131d98032d129053345a77def08c5fcda8a66d0400c4dbf25b0c340b1736b281e51228cd499ad5ecbebc8c31f6f1090a397fa3d05c0cb4349b02f7976786a2bfe12bc2d6825089cf173c2b05d6c2b3652dde5f23760d5c93f2bc4fab51efefffd0fb983138d9dd41c05cc6295b5d9438fdb493df1901386db8b322c1b7b2753ed9c76159e38f4c633697695c84a84c38df84d62ccab6bb0a4c5b1b73d3d4551bf0f7400e3b6dd0ae738b2671146225e9f351e41ea952373a33d40b8b65ab1244f8f79f663cdb254607195b9ec3101e897ed4dca5858a445acfd59ef04782d5318f62195d384def2d2bba582d7d6e0bae2e701eb9e258d281c7ae6d98a4e777970b3cccafabadfffb2d7dff2979c544fe636014263dc74332633c27a8d684c601fe0b2a360f16e45f3c1e2496d3d8a3f795567aaadd12ab150a3fc0fd47ffde445d3d03cfdc7e0b49723e9a19055175826eaaa3a8770c0bc64ee9ef07cb611ed4c2a828ee8b28a7d34a0485cc1fb43afdf5978ff6fa22b33cc6fe7a7591c36c0f86259f403ff9526fb0d172da5acaa2ccc3e9608c6130c17751b4abe8a2f5bd37378b920cefaaa26dc9cda70c11b3c4eb61c197bc6f191a6ee036b4efb764409dce50e2843903e4fae169a016b8d71f828f0e1659cdeac4468bc561903f86ba9fc925f81efc0fbef50ed2938d7838c277dcbb564a6c5e96145553f6d8e5cc3879832a231800ccd36f244ee7f46c69ea80c60bbb2febbe0879e58c2d1591805d60feac2c745ef9268f0022abd230b7fe99b6428521000ab79ecc41fb928ce620c2d627236708995589e0b6379b30fcfd4550edd4df78ef859906a2fc0ba6de4a899f07add0bb085f4020c6c8e0932b2fc67b2fad28b2661b03e07e109c02d2361f0f1e64d890cf0f72f8533070679acda68f2af5fc4df32eee71a869da61fd8984f785bfe3ddea00d8b37cba81ab555bea1596af08194b3e95291879f8fb01b294e6faf3cf954c5adbcba7600f4d4c9c3d51622ffb8671709dae042a58c82e15f84af067f9e8194efbdef421e5388cbe9a249f52c2d5b8190b502a466761cd53b36e1cc991b73c0d0aa07bc40a3a0ab52bcb6848cd6a380606442fd94da07eaee2776572f70b10050f93412bf025b00adb35db52b1ffa254f5649f13f25506e98dfbd0a0be6ef038e359256f790097954e33f5e105c0da1a1c384d4fdc83a79308811d9d808d77eab21606cb75d0ebdcade9b32deb98fe3ac37d486e9f64592c2dd1a565bc3f97c657210514e375a5c9cb768ac841eb3be41ab1b950787045df2be493f9d27a583da12d0cc16e2cd67ff82e9b2e37f0e8b04ec2a38385e3c9291e933e853a31c11e899aafe499ad36fea82c75f0edf2498820d9451df1d2ba5b23", &(0x7f0000001080)=""/162, 0x4}, 0x20)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x12, 0xffffffffffffffff, 0x0)

[ 1576.541943][T11720] usb 2-1: Using ep0 maxpacket: 16
[ 1576.547581][T11712] usb 3-1: Using ep0 maxpacket: 16
[ 1576.633320][ T8851] usb 6-1: config 0 has an invalid interface number: 128 but max is 0
[ 1576.641696][ T8851] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1576.652382][ T8851] usb 6-1: config 0 has no interface number 0
[ 1576.658608][ T8851] usb 6-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1576.669893][ T8851] usb 6-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1576.679086][ T8851] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1576.682305][T11720] usb 2-1: config 0 has an invalid interface number: 128 but max is 0
[ 1576.695749][T11720] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1576.705993][T11720] usb 2-1: config 0 has no interface number 0
[ 1576.712204][T11720] usb 2-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1576.723398][T11720] usb 2-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1576.732606][T11720] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1576.742006][ T8852] usb 4-1: Using ep0 maxpacket: 16
[ 1576.748506][ T8851] usb 6-1: config 0 descriptor??
[ 1576.751933][T11712] usb 3-1: config 0 has an invalid interface number: 128 but max is 0
[ 1576.761948][T11712] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1576.772182][T11712] usb 3-1: config 0 has no interface number 0
[ 1576.778350][T11712] usb 3-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1576.789641][T11712] usb 3-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1576.798808][T11712] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1576.842158][T11720] usb 2-1: config 0 descriptor??
[ 1576.848269][T11712] usb 3-1: config 0 descriptor??
[ 1576.862069][ T8852] usb 4-1: config 0 has an invalid interface number: 128 but max is 0
[ 1576.870426][ T8852] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1576.880795][ T8852] usb 4-1: config 0 has no interface number 0
[ 1576.887075][ T8852] usb 4-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1576.898340][ T8852] usb 4-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1576.907596][ T8852] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1576.930202][ T8852] usb 4-1: config 0 descriptor??
[ 1577.012155][ T8851] radio-si470x 6-1:0.128: DeviceID=0xb255 ChipID=0xb681
[ 1577.132130][T11720] radio-si470x 2-1:0.128: DeviceID=0x6ff7 ChipID=0xba81
[ 1577.139358][T11712] radio-si470x 3-1:0.128: DeviceID=0x67f7 ChipID=0xba81
[ 1577.192127][ T8852] radio-si470x 4-1:0.128: DeviceID=0xb055 ChipID=0xb681
[ 1577.232019][ T8851] radio-si470x 6-1:0.128: software version 178, hardware version 85
[ 1577.340274][ T7427] input: syz0 as /devices/virtual/input/input1535
[ 1577.364151][T11712] radio-si470x 3-1:0.128: software version 103, hardware version 247
[ 1577.373073][T11720] radio-si470x 2-1:0.128: software version 111, hardware version 247
[ 1577.402057][ T8852] radio-si470x 4-1:0.128: software version 176, hardware version 85
[ 1577.442087][ T8851] radio-si470x 6-1:0.128: submitting int urb failed (-90)
[ 1577.572112][T11712] radio-si470x 3-1:0.128: submitting int urb failed (-90)
[ 1577.592019][T11720] radio-si470x 2-1:0.128: submitting int urb failed (-90)
[ 1577.622188][ T8852] radio-si470x 4-1:0.128: submitting int urb failed (-90)
[ 1577.652068][ T8851] radio-si470x 6-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1577.661016][ T8851] radio-si470x: probe of 6-1:0.128 failed with error -22
[ 1577.672385][ T8851] usb 6-1: USB disconnect, device number 34
[ 1578.012086][T11712] radio-si470x 3-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1578.021159][T11712] radio-si470x: probe of 3-1:0.128 failed with error -22
[ 1578.034035][T11720] radio-si470x 2-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1578.043243][T11720] radio-si470x: probe of 2-1:0.128 failed with error -22
[ 1578.054657][T11712] usb 3-1: USB disconnect, device number 86
[ 1578.068835][T11720] usb 2-1: USB disconnect, device number 34
20:27:33 executing program 5:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x0, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0xf1, @string={0xf1, 0x3, "3a3c5a98a0b88f20dab28f43fd604a180bf5c40802c641ed238502ea05de14099c5dfa19c61d2715c179a8913d43848ebb6058f0ae47cea480ef4ae3d1bd7724bc870bcd80db1746d211f5f7dde4bd2f33e5a634f6174cf4dab428a4bdd5141e1cdfd7535edf28bbf44e35cb9180ea022e265108d6db9ab408e8b86c601dc9baf360878fefb4286f933f037b53d6c51bf10ba2a82424f4cf64d7a43f8235463a4e3651ce704859e92aa583ee3327735693aa9147f8b908c3d665302cff8ef37ebcb56efae4f83bc51fa46f6295b1622a46895dded87879de64c990feb0f52a533e44a8d7c9ef25ea0f8e90ff09ab06"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x20000, 0x0)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f00000001c0)={0x7, 0x100})
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000200)={0xfffffffffffffd55, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x23, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r4 = socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r5=>0xffffffffffffffff})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
close(r6)
splice(r5, 0x0, r6, 0x0, 0x10003, 0x0)
ioctl$EVIOCGABS3F(r5, 0x8018457f, &(0x7f00000005c0)=""/181)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @multicast2}}}, &(0x7f0000000180)=0x90)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e20, 0xaa, @empty, 0x8000}, {0xa, 0x4e24, 0x7fffffff, @dev={0xfe, 0x80, [], 0xf}, 0x6}, 0x8000, [0x8, 0x1, 0x84, 0xf5, 0x7, 0x5, 0x0, 0x3]}, 0x5c)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

20:27:33 executing program 0:
r0 = socket$inet6(0xa, 0x401000000801, 0x0)
close(r0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
ftruncate(r1, 0x2007fff)
sendfile(r0, r1, 0x0, 0x8000fffffffe)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x401000000801, 0x0)
close(r2)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
creat(&(0x7f0000000100)='./bus\x00', 0x0)

[ 1578.262177][ T8852] radio-si470x 4-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1578.271351][ T8852] radio-si470x: probe of 4-1:0.128 failed with error -22
[ 1578.289773][ T8852] usb 4-1: USB disconnect, device number 95
[ 1578.471915][ T8851] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[ 1578.721945][ T8851] usb 6-1: Using ep0 maxpacket: 16
[ 1578.841932][T11712] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[ 1578.842012][ T8851] usb 6-1: config 0 has an invalid interface number: 128 but max is 0
[ 1578.857909][ T8851] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1578.868146][ T8851] usb 6-1: config 0 has no interface number 0
[ 1578.874347][ T8851] usb 6-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1578.885542][ T8851] usb 6-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1578.894711][ T8851] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1578.905538][ T8851] usb 6-1: config 0 descriptor??
[ 1579.051931][ T8852] usb 4-1: new high-speed USB device number 96 using dummy_hcd
[ 1579.111916][T11712] usb 2-1: Using ep0 maxpacket: 16
[ 1579.162104][ T8851] radio-si470x 6-1:0.128: DeviceID=0xbd55 ChipID=0xb681
[ 1579.242048][T11712] usb 2-1: config 0 has an invalid interface number: 128 but max is 0
[ 1579.250393][T11712] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1579.260799][T11712] usb 2-1: config 0 has no interface number 0
[ 1579.267070][T11712] usb 2-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1579.278293][T11712] usb 2-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1579.287473][T11712] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1579.296845][T11712] usb 2-1: config 0 descriptor??
[ 1579.311944][ T8852] usb 4-1: Using ep0 maxpacket: 16
[ 1579.372245][ T8851] radio-si470x 6-1:0.128: software version 189, hardware version 85
[ 1579.432129][ T8852] usb 4-1: config 0 has an invalid interface number: 128 but max is 0
[ 1579.440439][ T8852] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1579.450766][ T8852] usb 4-1: config 0 has no interface number 0
[ 1579.456974][ T8852] usb 4-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1579.468162][ T8852] usb 4-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1579.477397][ T8852] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1579.487031][ T8852] usb 4-1: config 0 descriptor??
20:27:34 executing program 1:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)=ANY=[@ANYBLOB="120100001e95cd10cf12959db0d911710848000000010931ab0000000000000904800001030000000705840b00"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

20:27:34 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
r2 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000170a07031dfffd942367ede3b9a3484409000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
getsockopt$inet_dccp_int(r2, 0x21, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0x4)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000001300)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
ioctl$SG_GET_KEEP_ORPHAN(r3, 0x2288, &(0x7f00000000c0))

20:27:34 executing program 0:
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x218}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x400000000000002, 0x0)

[ 1579.593920][T11712] radio-si470x 2-1:0.128: si470x_get_report: usb_control_msg returned -71
[ 1579.603503][T11712] radio-si470x: probe of 2-1:0.128 failed with error -5
[ 1579.627072][T11712] usb 2-1: USB disconnect, device number 35
[ 1579.632958][ T8851] radio-si470x 6-1:0.128: submitting int urb failed (-90)
20:27:34 executing program 2:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x20000, 0x0)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2, 0x23}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r4=>0xffffffffffffffff})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
close(r5)
ioctl$EVIOCGABS3F(r4, 0x8018457f, &(0x7f00000005c0)=""/181)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

[ 1579.752379][ T8852] radio-si470x 4-1:0.128: DeviceID=0xb855 ChipID=0xb681
[ 1579.792003][ T8852] radio-si470x 4-1:0.128: si470x_get_report: usb_control_msg returned -71
20:27:34 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1a55eb7b6a2c15197200000000ff7ff3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071")
r1 = socket(0x11, 0x80002, 0x0)
setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4)
setsockopt(r1, 0x107, 0xd, &(0x7f0000001000), 0xc5)

[ 1579.800612][ T8852] radio-si470x 4-1:0.128: si470x_get_scratch: si470x_get_report returned -71
[ 1579.809979][ T8852] radio-si470x: probe of 4-1:0.128 failed with error -5
20:27:34 executing program 3:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
r1 = socket$inet6(0xa, 0x5, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @multicast2}}}, &(0x7f0000000180)=0x90)
setsockopt$inet6_int(r1, 0x29, 0xf6, &(0x7f0000000000)=0x100, 0x4)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x100, 0x0)
r2 = socket$inet6(0xa, 0x5, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @multicast2}}}, &(0x7f0000000180)=0x90)
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000170a07031dfffd942367ede3b9a3484409000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
getsockname(r3, &(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000240)=0x80)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

[ 1579.852312][ T8851] radio-si470x 6-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1579.861397][ T8851] radio-si470x: probe of 6-1:0.128 failed with error -22
[ 1579.892587][ T8851] usb 6-1: USB disconnect, device number 35
[ 1579.903343][ T8852] usb 4-1: USB disconnect, device number 96
20:27:35 executing program 0:
r0 = socket$inet(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x4e20}, 0x10)
recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x4000000000000ac, 0x43, 0x0)
recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

20:27:35 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d381860, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fd\x00')
getdents(r0, &(0x7f00000000c0)=""/31, 0x77c)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

[ 1580.091885][T11712] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[ 1580.132416][T11720] usb 3-1: new high-speed USB device number 87 using dummy_hcd
20:27:35 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000bfdfdc)={0x20, 0x0, 0x10000001, 0x800000001, 0x0, 0x0, {}, [@nested={0xc, 0x2, [@typed={0x8, 0x1, @ipv4=@multicast2}]}]}, 0x20}}, 0x0)

[ 1580.236259][ T8194] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1580.246002][ T8194] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
20:27:35 executing program 0:
ftruncate(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000bfdfdc)={0x20, 0x0, 0x10000001, 0x800000001, 0x0, 0x0, {}, [@nested={0xc, 0x2, [@typed={0x8, 0x1, @ipv4=@multicast2}]}]}, 0x20}}, 0x0)

20:27:35 executing program 5:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x0, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0xf1, @string={0xf1, 0x3, "3a3c5a98a0b88f20dab28f43fd604a180bf5c40802c641ed238502ea05de14099c5dfa19c61d2715c179a8913d43848ebb6058f0ae47cea480ef4ae3d1bd7724bc870bcd80db1746d211f5f7dde4bd2f33e5a634f6174cf4dab428a4bdd5141e1cdfd7535edf28bbf44e35cb9180ea022e265108d6db9ab408e8b86c601dc9baf360878fefb4286f933f037b53d6c51bf10ba2a82424f4cf64d7a43f8235463a4e3651ce704859e92aa583ee3327735693aa9147f8b908c3d665302cff8ef37ebcb56efae4f83bc51fa46f6295b1622a46895dded87879de64c990feb0f52a533e44a8d7c9ef25ea0f8e90ff09ab06"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x20000, 0x0)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f00000001c0)={0x7, 0x100})
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000200)={0xfffffffffffffd55, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x23, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "3a3c5a98a0b88f20dab28f43fd604a180bf5c40802c641ed238502ea05de14099c5dfa19c61d2715c179a8913d43848ebb6058f0ae47cea480ef4ae3d1bd7724bc870bcd80db1746d211f5f7dde4bd2f33e5a634f6174cf4dab428a4bdd5141e1cdfd7535edf28bbf44e35cb9180ea022e265108d6db9ab408e8b86c601dc9baf360878fefb4286f933f037b53d6c51bf10ba2a82424f4cf64d7a43f8235463a4e3651ce704859e92aa583ee3327735693aa9147f8b908c3d665302cff8ef37ebcb56efae4f83bc51fa46f6295b1622a46895dded87879de64c990feb0f52a533e44a8d7c9ef25ea0f8e90ff09ab06f93e605e04f9f5ac3102bcefe10a31"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r4 = socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r5=>0xffffffffffffffff})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
close(r6)
splice(r5, 0x0, r6, 0x0, 0x10003, 0x0)
ioctl$EVIOCGABS3F(r5, 0x8018457f, &(0x7f00000005c0)=""/181)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @multicast2}}}, &(0x7f0000000180)=0x90)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e20, 0xaa, @empty, 0x8000}, {0xa, 0x4e24, 0x7fffffff, @dev={0xfe, 0x80, [], 0xf}, 0x6}, 0x8000, [0x8, 0x1, 0x84, 0xf5, 0x7, 0x5, 0x0, 0x3]}, 0x5c)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

[ 1580.293721][ T8852] usb 4-1: new high-speed USB device number 97 using dummy_hcd
[ 1580.332081][T11712] usb 2-1: Using ep0 maxpacket: 16
[ 1580.372839][T11712] usb 2-1: too many configurations: 72, using maximum allowed: 8
[ 1580.381454][T11720] usb 3-1: Using ep0 maxpacket: 16
[ 1580.387471][ T8296] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1580.397093][ T8296] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
20:27:35 executing program 4:
pipe(&(0x7f0000001300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
splice(r0, 0x0, r2, 0x0, 0x10003, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000140)={0x101ff, 0x0, 0x5b0152b9a69084dd, 0x2000, &(0x7f000040f000/0x2000)=nil})
ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000000)={0x7fff, 0x400})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000080)={{0x7, 0x3}, 'port1\x00', 0x80, 0x80000, 0x6, 0x1, 0x80, 0x9, 0xffffffff, 0x0, 0x0, 0x1ff})
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3000005, 0x32, 0xffffffffffffffff, 0x0)

[ 1580.495177][T11712] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 1580.503009][T11712] usb 2-1: can't read configurations, error -61
[ 1580.511153][T11720] usb 3-1: config 0 has an invalid interface number: 128 but max is 0
[ 1580.519611][T11720] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1580.529842][T11720] usb 3-1: config 0 has no interface number 0
[ 1580.536166][T11720] usb 3-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1580.547705][T11720] usb 3-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1580.556940][T11720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1580.563700][ T8852] usb 4-1: Using ep0 maxpacket: 16
[ 1580.568384][T11720] usb 3-1: config 0 descriptor??
[ 1580.682846][ T8852] usb 4-1: config 0 has an invalid interface number: 128 but max is 0
[ 1580.691160][ T8852] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1580.701675][ T8852] usb 4-1: config 0 has no interface number 0
[ 1580.707968][ T8852] usb 4-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1580.719178][ T8852] usb 4-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1580.719227][T11712] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[ 1580.719428][T11774] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[ 1580.728396][ T8852] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1580.759464][ T8852] usb 4-1: config 0 descriptor??
[ 1580.832132][T11720] radio-si470x 3-1:0.128: DeviceID=0x6af7 ChipID=0xba81
[ 1580.971948][T11712] usb 2-1: Using ep0 maxpacket: 16
[ 1580.991949][T11774] usb 6-1: Using ep0 maxpacket: 16
[ 1581.012191][T11712] usb 2-1: too many configurations: 72, using maximum allowed: 8
[ 1581.032003][ T8852] radio-si470x 4-1:0.128: DeviceID=0xb455 ChipID=0xb681
[ 1581.052249][T11720] radio-si470x 3-1:0.128: software version 106, hardware version 247
[ 1581.112051][T11774] usb 6-1: config 0 has an invalid interface number: 128 but max is 0
[ 1581.120407][T11774] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1581.130803][T11774] usb 6-1: config 0 has no interface number 0
[ 1581.137192][T11774] usb 6-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1581.148486][T11774] usb 6-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1581.157685][T11774] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1581.166589][T11712] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 1581.174419][T11712] usb 2-1: can't read configurations, error -61
[ 1581.180942][T11712] usb usb2-port1: attempt power cycle
[ 1581.187462][T11774] usb 6-1: config 0 descriptor??
[ 1581.243734][ T8852] radio-si470x 4-1:0.128: software version 180, hardware version 85
[ 1581.282014][T11720] radio-si470x 3-1:0.128: submitting int urb failed (-90)
[ 1581.452042][T11774] radio-si470x 6-1:0.128: DeviceID=0x6ef7 ChipID=0xba81
[ 1581.452062][ T8852] radio-si470x 4-1:0.128: submitting int urb failed (-90)
[ 1581.672281][T11774] radio-si470x 6-1:0.128: software version 110, hardware version 247
[ 1581.721995][T11720] radio-si470x 3-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1581.731080][T11720] radio-si470x: probe of 3-1:0.128 failed with error -22
[ 1581.743377][T11720] usb 3-1: USB disconnect, device number 87
[ 1581.882066][T11774] radio-si470x 6-1:0.128: submitting int urb failed (-90)
[ 1581.891931][T11712] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[ 1582.102057][ T8852] radio-si470x 4-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1582.102076][T11774] radio-si470x 6-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1582.102650][T11774] radio-si470x: probe of 6-1:0.128 failed with error -22
[ 1582.111132][ T8852] radio-si470x: probe of 4-1:0.128 failed with error -22
[ 1582.134301][T11774] usb 6-1: USB disconnect, device number 36
[ 1582.140835][ T8852] usb 4-1: USB disconnect, device number 97
[ 1582.151939][T11712] usb 2-1: Using ep0 maxpacket: 16
[ 1582.192415][T11712] usb 2-1: too many configurations: 72, using maximum allowed: 8
[ 1582.312096][T11712] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 1582.319744][T11712] usb 2-1: can't read configurations, error -61
[ 1582.471892][T11712] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[ 1582.711864][T11712] usb 2-1: Using ep0 maxpacket: 16
20:27:37 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$CAPI_NCCI_GETUNIT(0xffffffffffffffff, 0x80044327, &(0x7f0000000000)=0x9b)
setrlimit(0x2, &(0x7f0000000080)={0x9, 0x20080000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

20:27:37 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc00}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x4}]}, 0x2c}}, 0x0)

20:27:37 executing program 2:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x20000, 0x0)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2, 0x23}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r4=>0xffffffffffffffff})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
close(r5)
ioctl$EVIOCGABS3F(r4, 0x8018457f, &(0x7f00000005c0)=""/181)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

20:27:37 executing program 5:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x0, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0xf1, @string={0xf1, 0x3, "3a3c5a98a0b88f20dab28f43fd604a180bf5c40802c641ed238502ea05de14099c5dfa19c61d2715c179a8913d43848ebb6058f0ae47cea480ef4ae3d1bd7724bc870bcd80db1746d211f5f7dde4bd2f33e5a634f6174cf4dab428a4bdd5141e1cdfd7535edf28bbf44e35cb9180ea022e265108d6db9ab408e8b86c601dc9baf360878fefb4286f933f037b53d6c51bf10ba2a82424f4cf64d7a43f8235463a4e3651ce704859e92aa583ee3327735693aa9147f8b908c3d665302cff8ef37ebcb56efae4f83bc51fa46f6295b1622a46895dded87879de64c990feb0f52a533e44a8d7c9ef25ea0f8e90ff09ab06"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x20000, 0x0)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f00000001c0)={0x7, 0x100})
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000200)={0xfffffffffffffd55, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x23, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r4 = socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r5=>0xffffffffffffffff})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
close(r6)
splice(r5, 0x0, r6, 0x0, 0x10003, 0x0)
ioctl$EVIOCGABS3F(r5, 0x8018457f, &(0x7f00000005c0)=""/181)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @multicast2}}}, &(0x7f0000000180)=0x90)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e20, 0xaa, @empty, 0x8000}, {0xa, 0x4e24, 0x7fffffff, @dev={0xfe, 0x80, [], 0xf}, 0x6}, 0x8000, [0x8, 0x1, 0x84, 0xf5, 0x7, 0x5, 0x0, 0x3]}, 0x5c)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

[ 1582.752149][T11712] usb 2-1: too many configurations: 72, using maximum allowed: 8
[ 1582.852068][T11712] usb 2-1: unable to read config index 0 descriptor/start: -71
[ 1582.859757][T11712] usb 2-1: can't read configurations, error -71
[ 1582.881988][ T8852] usb 4-1: new high-speed USB device number 98 using dummy_hcd
[ 1582.910063][T11712] usb usb2-port1: unable to enumerate USB device
20:27:38 executing program 1:
r0 = syz_usb_connect(0x0, 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="121400001e240a9eec1ce298d5480000000109021b0001000000000904800001030000000705840b0000000000"], 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000170a07031dfffd942367ede3b9a3484409000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000100)={0x0, {{0x2, 0x4e21, @loopback}}, 0x0, 0x3, [{{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e23, @local}}, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}}]}, 0x210)
ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f0000000000)=0x3)
connect$rds(r2, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000000100)={0x400000100002f, {0x0, 0x0, 0xdeba}})
ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f00000002c0)={{}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r4, 0x5501)
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000380)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r5, 0x401c5504, &(0x7f0000000100)={0x400000100002f, {0x0, 0x0, 0xdeba}})
ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f00000002c0)={{}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r5, 0x5501)
r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r6, 0x401c5504, &(0x7f0000000100)={0x400000100002f, {0x0, 0x0, 0xdeba}})
ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f00000002c0)={{}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r6, 0x5501)
r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r7, 0x401c5504, &(0x7f0000000100)={0x400000100002f, {0x0, 0x0, 0xdeba}})
ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f00000002c0)={{}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r7, 0x5501)
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r8, 0x401c5504, &(0x7f0000000100)={0x400000100002f, {0x0, 0x0, 0xdeba}})
ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f00000002c0)={{}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r8, 0x5501)
r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r9, 0x401c5504, &(0x7f0000000100)={0x400000100002f, {0x0, 0x0, 0xdeba}})
ioctl$UI_SET_EVBIT(r9, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f00000002c0)={{}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r9, 0x5501)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r10, 0x401c5504, &(0x7f0000000100)={0x400000100002f, {0x0, 0x0, 0xdeba}})
ioctl$UI_SET_EVBIT(r10, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(r10, 0x405c5503, &(0x7f00000002c0)={{}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r10, 0x5501)
r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r11, 0x401c5504, &(0x7f0000000100)={0x400000100002f, {0x0, 0x0, 0xdeba}})
ioctl$UI_SET_EVBIT(r11, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(r11, 0x405c5503, &(0x7f00000002c0)={{}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r11, 0x5501)
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
r14 = fcntl$dupfd(r13, 0x0, r13)
ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r14, 0xc040564b, &(0x7f0000000080)={0x3, 0x0, 0x201a, 0x7, 0x20, {0x2, 0x8}, 0x1})
r15 = fcntl$dupfd(r12, 0x0, r12)
ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200)
ioctl$IMSETDEVNAME(r15, 0x80184947, &(0x7f00000000c0)={0x9, 'syz0\x00'})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

[ 1583.102304][T11774] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[ 1583.111858][ T8851] usb 3-1: new high-speed USB device number 88 using dummy_hcd
[ 1583.132051][ T8852] usb 4-1: Using ep0 maxpacket: 16
[ 1583.243644][ T8423] input: syz0 as /devices/virtual/input/input1536
[ 1583.262334][ T8852] usb 4-1: config 0 has an invalid interface number: 128 but max is 0
[ 1583.270630][ T8852] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1583.281006][ T8852] usb 4-1: config 0 has no interface number 0
[ 1583.287272][ T8852] usb 4-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1583.298497][ T8852] usb 4-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1583.307664][ T8852] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1583.341988][T11774] usb 6-1: Using ep0 maxpacket: 16
[ 1583.360306][ T8423] input: syz0 as /devices/virtual/input/input1537
[ 1583.425454][ T8424] input: syz0 as /devices/virtual/input/input1538
[ 1583.441939][ T8851] usb 3-1: Using ep0 maxpacket: 16
[ 1583.472473][T11774] usb 6-1: config 0 has an invalid interface number: 128 but max is 0
[ 1583.474699][ T8852] usb 4-1: config 0 descriptor??
[ 1583.480865][T11774] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1583.496334][T11774] usb 6-1: config 0 has no interface number 0
[ 1583.502632][T11774] usb 6-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1583.513873][T11774] usb 6-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1583.523127][T11774] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1583.567668][ T8851] usb 3-1: config 0 has an invalid interface number: 128 but max is 0
[ 1583.569507][ T8423] input: syz0 as /devices/virtual/input/input1539
[ 1583.576085][ T8851] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1583.592717][ T8851] usb 3-1: config 0 has no interface number 0
[ 1583.598902][ T8851] usb 3-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1583.610141][ T8851] usb 3-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1583.619327][ T8851] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1583.642908][ T8852] radio-si470x 4-1:0.128: si470x_get_report: usb_control_msg returned -32
[ 1583.652142][ T8852] radio-si470x: probe of 4-1:0.128 failed with error -5
[ 1583.666260][T11774] usb 6-1: config 0 descriptor??
[ 1583.708897][ T8423] input: syz0 as /devices/virtual/input/input1540
[ 1583.717203][ T8852] usb 4-1: USB disconnect, device number 98
20:27:38 executing program 3:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0xac, &(0x7f0000000180)={0x40, 0x7, 0xfffffffffffffcd3, "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"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
pipe(&(0x7f0000001300)={<r3=>0xffffffffffffffff})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
splice(r3, 0x0, r4, 0x0, 0x10003, 0x0)
readlinkat(r3, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)=""/205, 0xcd)
ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f0000000000)={0xc021, 0x3})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

[ 1583.807982][ T8424] input: syz0 as /devices/virtual/input/input1541
[ 1583.857439][ T8851] usb 3-1: config 0 descriptor??
[ 1583.901754][ T8428] input: syz0 as /devices/virtual/input/input1542
[ 1583.922221][T11774] radio-si470x 6-1:0.128: DeviceID=0x60f7 ChipID=0xba81
[ 1584.010284][ T8423] input: syz0 as /devices/virtual/input/input1543
[ 1584.134088][ T8851] radio-si470x 3-1:0.128: DeviceID=0xb855 ChipID=0xb681
[ 1584.142131][T11774] radio-si470x 6-1:0.128: software version 96, hardware version 247
[ 1584.341912][ T8852] usb 4-1: new high-speed USB device number 99 using dummy_hcd
[ 1584.352364][ T8851] radio-si470x 3-1:0.128: software version 184, hardware version 85
[ 1584.362121][T11774] radio-si470x 6-1:0.128: submitting int urb failed (-90)
[ 1584.582037][T11774] radio-si470x 6-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1584.582842][ T8851] radio-si470x 3-1:0.128: submitting int urb failed (-90)
[ 1584.591046][T11774] radio-si470x: probe of 6-1:0.128 failed with error -22
[ 1584.599103][ T8852] usb 4-1: Using ep0 maxpacket: 16
[ 1584.642104][T11774] usb 6-1: USB disconnect, device number 37
[ 1584.734284][ T8852] usb 4-1: config 0 has an invalid interface number: 128 but max is 0
[ 1584.742719][ T8852] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1584.753028][ T8852] usb 4-1: config 0 has no interface number 0
[ 1584.759220][ T8852] usb 4-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1584.770784][ T8852] usb 4-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1584.780184][ T8852] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1584.790003][ T8852] usb 4-1: config 0 descriptor??
[ 1585.043019][ T8851] radio-si470x 3-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1585.052183][ T8851] radio-si470x: probe of 3-1:0.128 failed with error -22
[ 1585.062426][ T8852] radio-si470x 4-1:0.128: DeviceID=0x45f4 ChipID=0x8180
20:27:40 executing program 5:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x0, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0xf9, @string={0xf9, 0x3, "3a3c5a98a0b88f20dab28f43fd604a180bf5c40802c641ed238502ea05de14099c5dfa19c61d2715c179a8913d43848ebb6058f0ae47cea480ef4ae3d1bd7724bc870bcd80db1746d211f5f7dde4bd2f33e5a634f6174cf4dab428a4bdd5141e1cdfd7535edf28bbf44e35cb9180ea022e265108d6db9ab408e8b86c601dc9baf360878fefb4286f933f037b53d6c51bf10ba2a82424f4cf64d7a43f8235463a4e3651ce704859e92aa583ee3327735693aa9147f8b908c3d665302cff8ef37ebcb56efae4f83bc51fa46f6295b1622a46895dded87879de64c990feb0f52a533e44a8d7c9ef25ea0f8e90ff09ab06f93e605e04f9f5ac"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x20000, 0x0)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f00000001c0)={0x7, 0x100})
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000200)={0xfffffffffffffd55, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x23, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "3a3c5a98a0b88f20dab28f43fd604a180bf5c40802c641ed238502ea05de14099c5dfa19c61d2715c179a8913d43848ebb6058f0ae47cea480ef4ae3d1bd7724bc870bcd80db1746d211f5f7dde4bd2f33e5a634f6174cf4dab428a4bdd5141e1cdfd7535edf28bbf44e35cb9180ea022e265108d6db9ab408e8b86c601dc9baf360878fefb4286f933f037b53d6c51bf10ba2a82424f4cf64d7a43f8235463a4e3651ce704859e92aa583ee3327735693aa9147f8b908c3d665302cff8ef37ebcb56efae4f83bc51fa46f6295b1622a46895dded87879de64c990feb0f52a533e44a8d7c9ef25ea0f8e90ff09ab06f93e605e04f9f5ac3102bcefe10a31"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r4 = socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r5=>0xffffffffffffffff})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
close(r6)
splice(r5, 0x0, r6, 0x0, 0x10003, 0x0)
ioctl$EVIOCGABS3F(r5, 0x8018457f, &(0x7f00000005c0)=""/181)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @multicast2}}}, &(0x7f0000000180)=0x90)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e20, 0xaa, @empty, 0x8000}, {0xa, 0x4e24, 0x7fffffff, @dev={0xfe, 0x80, [], 0xf}, 0x6}, 0x8000, [0x8, 0x1, 0x84, 0xf5, 0x7, 0x5, 0x0, 0x3]}, 0x5c)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

[ 1585.094937][ T8851] usb 3-1: USB disconnect, device number 88
[ 1585.282293][ T8852] radio-si470x 4-1:0.128: software version 69, hardware version 244
[ 1585.472080][T11712] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[ 1585.512302][ T8852] radio-si470x 4-1:0.128: submitting int urb failed (-90)
20:27:40 executing program 2:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x20000, 0x0)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2, 0x23}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "3a3c5a98a0b88f20dab28f43fd604a180bf5c40802c641ed238502ea05de14099c5dfa19c61d2715c179a8913d43848ebb6058f0ae47cea480ef4ae3d1bd7724bc870bcd80db1746d211f5f7dde4bd2f33e5a634f6174cf4dab428a4bdd5141e1cdfd7535edf28bbf44e35cb9180ea022e265108d6db9ab408e8b86c601dc9baf360878fefb4286f933f037b53d6c51bf10ba2a82424f4cf64d7a43f8235463a4e3651ce704859e92aa583ee3327735693aa9147f8b908c3d665302cff8ef37ebcb56efae4f83bc51fa46f6295b1622a46895dded87879de64c990feb0f52a533e44a8d7c9ef25ea0f8e90ff09ab06f93e605e04f9f5ac3102bcefe10a31"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r4=>0xffffffffffffffff})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
close(r5)
ioctl$EVIOCGABS3F(r4, 0x8018457f, &(0x7f00000005c0)=""/181)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

[ 1585.722103][T11712] usb 6-1: Using ep0 maxpacket: 16
[ 1585.764028][ T8417] device  left promiscuous mode
[ 1585.854223][T11712] usb 6-1: config 0 has an invalid interface number: 128 but max is 0
[ 1585.862630][T11712] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1585.872906][T11712] usb 6-1: config 0 has no interface number 0
[ 1585.879099][T11712] usb 6-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1585.890280][T11712] usb 6-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1585.899436][T11712] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1585.912761][T11712] usb 6-1: config 0 descriptor??
[ 1585.981905][T10207] usb 3-1: new high-speed USB device number 89 using dummy_hcd
[ 1586.183969][T11712] radio-si470x 6-1:0.128: DeviceID=0x6af7 ChipID=0xba81
[ 1586.221829][T10207] usb 3-1: Using ep0 maxpacket: 16
[ 1586.342055][T10207] usb 3-1: config 0 has an invalid interface number: 128 but max is 0
[ 1586.350309][T10207] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1586.360601][T10207] usb 3-1: config 0 has no interface number 0
[ 1586.366780][T10207] usb 3-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1586.378184][T10207] usb 3-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1586.387373][T10207] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1586.398283][T10207] usb 3-1: config 0 descriptor??
[ 1586.403834][T11712] radio-si470x 6-1:0.128: software version 106, hardware version 247
[ 1586.511983][ T8852] radio-si470x 4-1:0.128: si470x_set_report: usb_control_msg returned -110
[ 1586.520885][ T8852] radio-si470x: probe of 4-1:0.128 failed with error -22
[ 1586.622107][T11712] radio-si470x 6-1:0.128: submitting int urb failed (-90)
[ 1586.662458][T10207] radio-si470x 3-1:0.128: DeviceID=0x84d4 ChipID=0x5380
[ 1586.852172][T11712] radio-si470x 6-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1586.861373][T11712] radio-si470x: probe of 6-1:0.128 failed with error -22
[ 1586.882039][T10207] radio-si470x 3-1:0.128: software version 132, hardware version 212
[ 1586.891037][T11712] usb 6-1: USB disconnect, device number 38
[ 1587.102086][T10207] radio-si470x 3-1:0.128: submitting int urb failed (-90)
20:27:42 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f0000000080)={0x42, 0x3, 0x0, {0x0, 0x21, 0x0, '/proc/sys/net/ipv4/vs/sync_ports\x00'}}, 0x42)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

20:27:42 executing program 5:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x0, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0xf9, @string={0xf9, 0x3, "3a3c5a98a0b88f20dab28f43fd604a180bf5c40802c641ed238502ea05de14099c5dfa19c61d2715c179a8913d43848ebb6058f0ae47cea480ef4ae3d1bd7724bc870bcd80db1746d211f5f7dde4bd2f33e5a634f6174cf4dab428a4bdd5141e1cdfd7535edf28bbf44e35cb9180ea022e265108d6db9ab408e8b86c601dc9baf360878fefb4286f933f037b53d6c51bf10ba2a82424f4cf64d7a43f8235463a4e3651ce704859e92aa583ee3327735693aa9147f8b908c3d665302cff8ef37ebcb56efae4f83bc51fa46f6295b1622a46895dded87879de64c990feb0f52a533e44a8d7c9ef25ea0f8e90ff09ab06f93e605e04f9f5ac"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x20000, 0x0)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f00000001c0)={0x7, 0x100})
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000200)={0xfffffffffffffd55, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x23, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r4 = socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r5=>0xffffffffffffffff})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
close(r6)
splice(r5, 0x0, r6, 0x0, 0x10003, 0x0)
ioctl$EVIOCGABS3F(r5, 0x8018457f, &(0x7f00000005c0)=""/181)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @multicast2}}}, &(0x7f0000000180)=0x90)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e20, 0xaa, @empty, 0x8000}, {0xa, 0x4e24, 0x7fffffff, @dev={0xfe, 0x80, [], 0xf}, 0x6}, 0x8000, [0x8, 0x1, 0x84, 0xf5, 0x7, 0x5, 0x0, 0x3]}, 0x5c)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

20:27:42 executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x40, 0xa9, 0xa37, 0x1, 0x1}, 0x2c)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="f8ff000000000000f9a8f700028000008500001f04ffffe495"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x2c}], &(0x7f0000000140)='GPL\x00', 0x41, 0xffc4, &(0x7f00000004c0)=""/167}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="ba58d6fcaccb7ffce16e1bcfe23b", 0x0, 0x319}, 0x28)

[ 1587.393771][T11774] usb 4-1: USB disconnect, device number 99
20:27:42 executing program 3:
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000900)={0xfffffffffffffe5a, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000000800843553130000000000001090224000100000000090400000903000fbae600000921000000012229000905810300000000008ada469ef7f726b3b36252b4fa9a7fbc7751188d91929c1e72b5a69627fd01c53dd3855377ff5fa87abf"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x0, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "3a3c5a98a0b88f20dab28f43fd604a180bf5c40802c641ed238502ea05de14099c5dfa19c61d2715c179a8913d43848ebb6058f0ae47cea480ef4ae3d1bd7724bc870bcd80db1746d211f5f7dde4bd2f33e5a634f6174cf4dab428a4bdd5141e1cdfd7535edf28bbf44e35cb9180ea022e265108d6db9ab408e8b86c601dc9baf360878fefb4286f933f037b53d6c51bf10ba2a82424f4cf64d7a43f8235463a4e3651ce704859e92aa583ee3327735693aa9147f8b908c3d665302cff8ef37ebcb56efae4f83bc51fa46f6295b1622a46895dded87879de64c990feb0f52a533e44a8d7c9ef25ea0f8e90ff09ab06f93e605e04f9f5ac3102bcefe10a31"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x100102, 0x0)
r2 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3f, 0x8000)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={r2, 0x4, 0xfffff800, r3})
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000000100)={0x400000100002f, {0x0, 0x0, 0xdeba}})
ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f00000002c0)={{}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r4, 0x5501)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f00000000c0)=@v2={0x2, @aes128, 0x2, [], "95cf9d7305aeaed90a5c477c290bca2f"})
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x10000, 0x0)

[ 1587.532251][T10207] radio-si470x 3-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1587.541369][T10207] radio-si470x: probe of 3-1:0.128 failed with error -22
[ 1587.590503][T10207] usb 3-1: USB disconnect, device number 89
20:27:42 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6(0xa, 0x5, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @multicast2}}}, &(0x7f0000000180)=0x90)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e21, 0xe7, @dev={0xfe, 0x80, [], 0x17}, 0x2}, {0xa, 0x4e23, 0x68ad, @ipv4={[], [], @multicast1}, 0x8}, 0x8, [0x4, 0x5, 0x5, 0xfffffa7f, 0x4, 0x6, 0x8, 0xef26]}, 0x5c)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000000)={0x10001, 0x2, 0x9, 0x2, 0x800, 0x4})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

20:27:42 executing program 0:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$9p(r0, &(0x7f0000000200)='L', 0x1)

[ 1587.747317][T11720] usb 6-1: new high-speed USB device number 39 using dummy_hcd
20:27:42 executing program 4:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000100)={0x400000100002f, {0x0, 0x0, 0xdeba}})
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
pipe2(&(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x800)
ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000080))
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000002c0)={{}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r2 = socket$unix(0x1, 0x2, 0x0)
r3 = fcntl$dupfd(r0, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

20:27:42 executing program 1:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x100, 0x0)
ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000040)={{0x0, 0x1}, 0x0, 0x5, 0xb8, 0x3826, &(0x7f00000000c0)="3b6cd7e97feab231a9caadbb77c4f0531a3f4d200dd8e958af4c8c6f47b7e0f2bcc2d57063b656c46f517a94e8d577cf7c0cbcd71e4d7dc16eafb6333ffab1a9fc6147422199328f0e184e112d7a5ddd78b860a2e709258651a5e281d8a1d9d942553471aad35be2d97c379604c6297758a1b7425c5fab94506032ad605221b7b649a99e7c3979aed005669c7a0b4f9d9f85aebce60771ea6ebdc3c77451676e489dd772678753b4809a3e630a1bdd91f0ec152d77052f76"})
syz_usb_control_io(r0, 0x0, 0x0)

20:27:42 executing program 0:
close(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
ftruncate(r0, 0x2007fff)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x401000000801, 0x0)
close(0xffffffffffffffff)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
sendfile(r1, r2, 0x0, 0x8000fffffffe)
creat(&(0x7f0000000100)='./bus\x00', 0x0)

[ 1587.900055][ T8772] input: syz0 as /devices/virtual/input/input1544
20:27:43 executing program 0:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmdt(0x0)

[ 1588.001581][T11774] usb 4-1: new high-speed USB device number 100 using dummy_hcd
[ 1588.009978][T11720] usb 6-1: Using ep0 maxpacket: 16
[ 1588.034418][ T8772] input: syz0 as /devices/virtual/input/input1545
20:27:43 executing program 2:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x20000, 0x0)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x16, {0x16, 0x23, "0c53a260298b58b1743f7f0f72a48fc93cedee42"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r4=>0xffffffffffffffff})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
close(r5)
ioctl$EVIOCGABS3F(r4, 0x8018457f, &(0x7f00000005c0)=""/181)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

20:27:43 executing program 0:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff10)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00')
splice(r0, 0x0, r2, 0x0, 0x1ac, 0x0)

[ 1588.134244][T11720] usb 6-1: config 0 has an invalid interface number: 128 but max is 0
[ 1588.142617][T11720] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1588.152906][T11720] usb 6-1: config 0 has no interface number 0
[ 1588.159090][T11720] usb 6-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1588.170342][T11720] usb 6-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
20:27:43 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
pipe(&(0x7f0000001300)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000000))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

[ 1588.179526][T11720] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1588.192116][T10207] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[ 1588.212868][T11720] usb 6-1: config 0 descriptor??
[ 1588.244048][T11774] usb 4-1: Using ep0 maxpacket: 8
[ 1588.365843][T11774] usb 4-1: config 0 has an invalid descriptor of length 230, skipping remainder of the config
[ 1588.376353][T11774] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[ 1588.389470][T11774] usb 4-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00
[ 1588.389765][ T8851] usb 3-1: new high-speed USB device number 90 using dummy_hcd
[ 1588.398649][T11774] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1588.405240][T11774] usb 4-1: config 0 descriptor??
[ 1588.461933][T10207] usb 2-1: Using ep0 maxpacket: 16
[ 1588.472144][T11720] radio-si470x 6-1:0.128: DeviceID=0x63f7 ChipID=0xba81
[ 1588.582008][T10207] usb 2-1: config 0 has an invalid interface number: 128 but max is 0
[ 1588.590444][T10207] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1588.600735][T10207] usb 2-1: config 0 has no interface number 0
[ 1588.606943][T10207] usb 2-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1588.618135][T10207] usb 2-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1588.627298][T10207] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1588.636837][T10207] usb 2-1: config 0 descriptor??
[ 1588.682207][T11720] radio-si470x 6-1:0.128: software version 99, hardware version 247
[ 1588.682563][ T8851] usb 3-1: Using ep0 maxpacket: 16
[ 1588.823794][ T8851] usb 3-1: config 0 has an invalid interface number: 128 but max is 0
[ 1588.832215][ T8851] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1588.842510][ T8851] usb 3-1: config 0 has no interface number 0
[ 1588.848666][ T8851] usb 3-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1588.859845][ T8851] usb 3-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1588.869041][ T8851] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1588.879958][ T8851] usb 3-1: config 0 descriptor??
[ 1588.902352][T10207] radio-si470x 2-1:0.128: DeviceID=0x8dd4 ChipID=0x5380
[ 1588.912522][T11720] radio-si470x 6-1:0.128: submitting int urb failed (-90)
[ 1589.112063][T10207] radio-si470x 2-1:0.128: software version 141, hardware version 212
[ 1589.132080][T11720] radio-si470x 6-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1589.132101][ T8851] radio-si470x 3-1:0.128: DeviceID=0x0000 ChipID=0x0000
[ 1589.132145][ T8851] radio-si470x 3-1:0.128: This driver is known to work with firmware version 12,
[ 1589.141220][T11720] radio-si470x: probe of 6-1:0.128 failed with error -22
[ 1589.148041][ T8851] radio-si470x 3-1:0.128: but the device has firmware version 0.
[ 1589.174798][T11720] usb 6-1: USB disconnect, device number 39
[ 1589.332095][T10207] radio-si470x 2-1:0.128: submitting int urb failed (-90)
[ 1589.371995][ T8851] radio-si470x 3-1:0.128: software version 0, hardware version 0
[ 1589.379903][ T8851] radio-si470x 3-1:0.128: This driver is known to work with hardware version 1,
[ 1589.389145][ T8851] radio-si470x 3-1:0.128: but the device has hardware version 0.
[ 1589.396968][ T8851] radio-si470x 3-1:0.128: If you have some trouble using this driver,
[ 1589.397002][ T8851] radio-si470x 3-1:0.128: please report to V4L ML at linux-media@vger.kernel.org
20:27:44 executing program 5:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x0, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0xf9, @string={0xf9, 0x3, "3a3c5a98a0b88f20dab28f43fd604a180bf5c40802c641ed238502ea05de14099c5dfa19c61d2715c179a8913d43848ebb6058f0ae47cea480ef4ae3d1bd7724bc870bcd80db1746d211f5f7dde4bd2f33e5a634f6174cf4dab428a4bdd5141e1cdfd7535edf28bbf44e35cb9180ea022e265108d6db9ab408e8b86c601dc9baf360878fefb4286f933f037b53d6c51bf10ba2a82424f4cf64d7a43f8235463a4e3651ce704859e92aa583ee3327735693aa9147f8b908c3d665302cff8ef37ebcb56efae4f83bc51fa46f6295b1622a46895dded87879de64c990feb0f52a533e44a8d7c9ef25ea0f8e90ff09ab06f93e605e04f9f5ac"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x20000, 0x0)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f00000001c0)={0x7, 0x100})
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000200)={0xfffffffffffffd55, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x23, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r4 = socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r5=>0xffffffffffffffff})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
close(r6)
splice(r5, 0x0, r6, 0x0, 0x10003, 0x0)
ioctl$EVIOCGABS3F(r5, 0x8018457f, &(0x7f00000005c0)=""/181)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @multicast2}}}, &(0x7f0000000180)=0x90)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e20, 0xaa, @empty, 0x8000}, {0xa, 0x4e24, 0x7fffffff, @dev={0xfe, 0x80, [], 0xf}, 0x6}, 0x8000, [0x8, 0x1, 0x84, 0xf5, 0x7, 0x5, 0x0, 0x3]}, 0x5c)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

20:27:44 executing program 0:
mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
set_robust_list(&(0x7f0000000140)={&(0x7f0000000040)}, 0x18)
bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x4182)
r1 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805)
clock_gettime(0x8e83c45269354d31, &(0x7f0000000400))
openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0xde000, 0x0)
sendfile(r0, r0, 0x0, 0x0)
socket$inet6(0xa, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
r3 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000680)='d', 0x1}], 0x1, 0x4081806)
sendfile(r2, r3, 0x0, 0x20020102000007)
fcntl$setstatus(r2, 0x4, 0x2800)

[ 1589.592072][ T8851] radio-si470x 3-1:0.128: submitting int urb failed (-90)
[ 1589.772334][T10207] radio-si470x 2-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1589.781469][T10207] radio-si470x: probe of 2-1:0.128 failed with error -22
[ 1589.796358][T10207] usb 2-1: USB disconnect, device number 40
[ 1589.971952][T11720] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[ 1590.022103][ T8851] radio-si470x 3-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1590.030993][ T8851] radio-si470x: probe of 3-1:0.128 failed with error -22
[ 1590.043869][ T8851] usb 3-1: USB disconnect, device number 90
[ 1590.063744][ T9006] input: syz0 as /devices/virtual/input/input1546
[ 1590.211791][T11720] usb 6-1: Using ep0 maxpacket: 16
[ 1590.331958][T11720] usb 6-1: config 0 has an invalid interface number: 128 but max is 0
[ 1590.340325][T11720] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1590.350645][T11720] usb 6-1: config 0 has no interface number 0
[ 1590.356897][T11720] usb 6-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1590.368289][T11720] usb 6-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1590.377468][T11720] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1590.389705][T11720] usb 6-1: config 0 descriptor??
[ 1590.532028][T11712] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[ 1590.652129][T11720] radio-si470x 6-1:0.128: DeviceID=0x60f7 ChipID=0xba81
[ 1590.772084][T11712] usb 2-1: Using ep0 maxpacket: 16
[ 1590.872378][T11720] radio-si470x 6-1:0.128: software version 96, hardware version 247
[ 1590.892239][T11712] usb 2-1: config 0 has an invalid interface number: 128 but max is 0
[ 1590.900595][T11712] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1590.910923][T11712] usb 2-1: config 0 has no interface number 0
[ 1590.917166][T11712] usb 2-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1590.928489][T11712] usb 2-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1590.937736][T11712] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1590.947264][T11712] usb 2-1: config 0 descriptor??
20:27:46 executing program 3:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x310)
write$P9_RRENAME(r1, &(0x7f0000000040)={0x7, 0x15, 0x1}, 0x7)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

20:27:46 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x406, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400203)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x5, 0x400)
r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00')
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x21000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="080028bd7000fddbdf2501000000000000000b0059c34265001462726f61646361739e2d6c696e6b0000"], 0x30}}, 0x1801)
ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f0000000080)={0x6, 0xffffffdb, 0xa9, 0x10001, 0x885, 0x8})
unlink(&(0x7f00000000c0)='./file0\x00')
setsockopt$inet_dccp_int(r3, 0x21, 0x6, &(0x7f0000000180)=0x2, 0x4)
mmap(&(0x7f00000ab000/0x1000)=nil, 0x1000, 0x1000000, 0x4010, 0xffffffffffffffff, 0x3)

20:27:46 executing program 0:
ftruncate(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000bfdfdc)={0x20, 0x0, 0x10000001, 0x800000001, 0x0, 0x0, {}, [@nested={0xc, 0x2, [@typed={0x8, 0x1, @ipv4=@multicast2}]}]}, 0x20}}, 0x0)

20:27:46 executing program 2:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x20000, 0x0)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x16, {0x16, 0x23, "0c53a260298b58b1743f7f0f72a48fc93cedee42"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "3a3c5a98a0b88f20dab28f43fd604a180bf5c40802c641ed238502ea05de14099c5dfa19c61d2715c179a8913d43848ebb6058f0ae47cea480ef4ae3d1bd7724bc870bcd80db1746d211f5f7dde4bd2f33e5a634f6174cf4dab428a4bdd5141e1cdfd7535edf28bbf44e35cb9180ea022e265108d6db9ab408e8b86c601dc9baf360878fefb4286f933f037b53d6c51bf10ba2a82424f4cf64d7a43f8235463a4e3651ce704859e92aa583ee3327735693aa9147f8b908c3d665302cff8ef37ebcb56efae4f83bc51fa46f6295b1622a46895dded87879de64c990feb0f52a533e44a8d7c9ef25ea0f8e90ff09ab06f93e605e04f9f5ac3102bcefe10a31"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r4=>0xffffffffffffffff})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
close(r5)
ioctl$EVIOCGABS3F(r4, 0x8018457f, &(0x7f00000005c0)=""/181)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

[ 1591.092766][T11720] radio-si470x 6-1:0.128: submitting int urb failed (-90)
[ 1591.162363][T11774] usb 4-1: string descriptor 0 read error: -71
[ 1591.173475][T11774] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[ 1591.200203][ T9013] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1591.209672][ T9013] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1591.219406][T11712] radio-si470x 2-1:0.128: DeviceID=0x6ef7 ChipID=0xba81
[ 1591.242903][T11774] usb 4-1: USB disconnect, device number 100
[ 1591.314946][T11720] radio-si470x 6-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1591.324072][T11720] radio-si470x: probe of 6-1:0.128 failed with error -22
[ 1591.341158][T11712] radio-si470x 2-1:0.128: si470x_get_report: usb_control_msg returned -71
[ 1591.350219][T11712] radio-si470x 2-1:0.128: si470x_get_scratch: si470x_get_report returned -71
20:27:46 executing program 1:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000100)={0x400000100002f, {0x0, 0x0, 0xdeba}})
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000002c0)={{}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r1, 0x5501)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000100)={0x400000100002f, {0x0, 0x0, 0xdeba}})
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000002c0)={{}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r2, 0x5501)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000100)={0x400000100002f, {0x0, 0x0, 0xdeba}})
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f00000002c0)={{}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r3, 0x5501)
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xefd5c197, &(0x7f00000001c0)=ANY=[@ANYRES16=r3, @ANYRES64=r2, @ANYPTR=&(0x7f0000000340)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYRESHEX=0x0, @ANYRESOCT], @ANYRES32=r1, @ANYBLOB="99e5f0fc03580faf2d9b9372210d4d77afcb1e811eee3380f19b46088176bcd569a0ca08ae04206f7d319baa02e393"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

[ 1591.359537][T11712] radio-si470x: probe of 2-1:0.128 failed with error -5
[ 1591.407300][T11720] usb 6-1: USB disconnect, device number 40
[ 1591.451514][T11712] usb 2-1: USB disconnect, device number 41
[ 1591.462110][ T8851] usb 3-1: new high-speed USB device number 91 using dummy_hcd
20:27:46 executing program 0:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0)
ptrace$pokeuser(0x6, 0x0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000d000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="b9fc0a00000f32b9800200000f3266ba2000b000ee9af80000000901b9c70a00000f320fc77698360f01c8650f2169660fc772ae650fc769b2", 0x39}], 0x1, 0x0, 0x0, 0xfecb)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f0000000180)={0x13, 0x10, 0xfa00, {&(0x7f0000000200), r6}}, 0x18)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000004cb]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

20:27:46 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
pipe(&(0x7f0000000000))
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000100)={0x400000100002f, {0x0, 0x0, 0xdeba}})
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000002c0)={{}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r2, 0x5501)
perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x70, 0x44, 0xff, 0x3, 0x3, 0x0, 0x8, 0x8, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x244c, 0x7, @perf_config_ext={0x7, 0x20}, 0x1400, 0x2, 0xfff, 0x1, 0x8, 0x4}, r1, 0xa, r1, 0x4)
socket$inet_smc(0x2b, 0x1, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000100)={0x400000100002f, {0x0, 0x0, 0xdeba}})
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f00000002c0)={{}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r3, 0x5501)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000000100)={0x400000100002f, {0x0, 0x0, 0xdeba}})
ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f00000002c0)={{}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r4, 0x5501)
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r5, 0x401c5504, &(0x7f0000000100)={0x400000100002f, {0x0, 0x0, 0xdeba}})
ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f00000002c0)={{}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r5, 0x5501)
r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0)
write$UHID_CREATE(r6, &(0x7f0000000300)={0x0, 'syz1\x00', 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00y\b\x8c\xfa3\x90\xc8\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00K\xf7\xa42\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x009\x10wP\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x11c)
read(r6, 0x0, 0xffffff1a)
socket$can_raw(0x1d, 0x3, 0x1)

20:27:46 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={<r0=>0xffffffffffffffff})
r1 = getpid()
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cachefiles\x00', 0x0, 0x0)
ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f0000000380)=0x7e)
r3 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x4, 0xd, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x100000000, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x0, 0xfffffffffffffffe, r2, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r4, &(0x7f0000000200)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000414900000004fcff", 0x58}], 0x1)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r5, &(0x7f0000000200)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000414900000004fcff", 0x58}], 0x1)
ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000740)=ANY=[])
r6 = syz_open_procfs(0x0, &(0x7f0000000200)='net\x00')
r7 = getpgid(0x0)
lgetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d932091c8dc8619ab58d0500ce2e2f07fb07b0c2a2000000641cea6d2e6cb3a1c92012364b839ccdbe"], &(0x7f0000000440)=""/228, 0xe4)
openat$ptmx(0xffffffffffffff9c, 0x0, 0xa0001, 0x0)
getpriority(0x2, r7)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r8, 0x40045431, &(0x7f00003b9fdc))
syz_open_pts(r8, 0x0)
r9 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2f0000001c000367ffffff000d00000002000004010000003f0006c91300010023000000000000005867000000050b", 0x2f}], 0x1}, 0x0)
r10 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2f0000001c000367ffffff000d00000002000004010000003f0006c91300010023000000000000005867000000050b", 0x2f}], 0x1}, 0x0)
r11 = open(&(0x7f0000000280)='./file0\x00', 0x35d722c58cd8e023, 0x0)
close(r11)
r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r12, 0x40045431, &(0x7f00003b9fdc))
syz_open_pts(r12, 0x0)
close(r12)
r13 = socket$packet(0x11, 0x3, 0x300)
bind(r13, &(0x7f0000000080)=@generic={0x11, "0000000300000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
lsetxattr$system_posix_acl(&(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYPTR=&(0x7f0000000180)=ANY=[@ANYRESDEC=r13, @ANYPTR64=&(0x7f0000000940)=ANY=[@ANYRESOCT]], @ANYRESHEX=r0, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRES16, @ANYBLOB="36f49a41ce9f3bf7cf3be2a70263497dc5e7b59687ec9fdb6297f25028133a61eb7f794dc2ad9fe994150bc21f5321e4df1f6bc2d5e37c005152e6b9d84dcff2cb8ff1b9840ccd0638d1e270e676ce59749a175934a18975024cace20bc7d5fa3d34c629ac22434787a115213342ae59cbb6d2e3bca758fa05048992af102419a60668f5a53b3b3f217efced0bb6d98423343b9282ae99fd0771fae27d72f92e15f10d7743a878b6c3c6e92cf06e92e0c99ba775b4f73d7c7fe27e2c83128e23248641f43db3e9231b1a74b0f26f3bd3f3ffd783da480f375bad413761150dfdd371676d9541e7a5e5b56cdb298ca90d8e", @ANYRESHEX=r3, @ANYPTR64, @ANYBLOB="4621c8a77fa48a771d7659ac33c5e88b2c4b868a59ede3baf4324d325fc16f4a73"]], 0x4, 0x0)
ioctl$GIO_SCRNMAP(r6, 0x4b40, &(0x7f0000000680)=""/144)
socket$inet_udplite(0x2, 0x2, 0x88)
getxattr(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="71636c1f6465087d0b0000000000000000009bbe1cd6d33c9fa85db7756b"], 0x0, 0x7)
prctl$PR_SET_PTRACER(0x59616d61, r1)
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r14 = gettid()
r15 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="203215d80600000000000000718e14a09f537a496cdc4382fd6a72520dbd8f97c048b82e81553bd4be223d0b00100070ba00"], 0x1}}, 0x0)
ptrace$setopts(0x4206, r14, 0x0, 0x0)
tkill(r14, 0x29)
ptrace$cont(0x18, r14, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x4d})
ptrace$setregs(0xd, r15, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r14, 0x0, 0x0)

[ 1591.724045][T11774] usb 4-1: new high-speed USB device number 101 using dummy_hcd
[ 1591.726736][ T9131] input: syz0 as /devices/virtual/input/input1547
[ 1591.739189][ T8851] usb 3-1: Using ep0 maxpacket: 16
[ 1591.757978][ T9131] input: syz0 as /devices/virtual/input/input1548
20:27:46 executing program 5:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x0, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0xfd, @string={0xfd, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x20000, 0x0)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f00000001c0)={0x7, 0x100})
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000200)={0xfffffffffffffd55, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x23, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r4 = socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r5=>0xffffffffffffffff})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
close(r6)
splice(r5, 0x0, r6, 0x0, 0x10003, 0x0)
ioctl$EVIOCGABS3F(r5, 0x8018457f, &(0x7f00000005c0)=""/181)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @multicast2}}}, &(0x7f0000000180)=0x90)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e20, 0xaa, @empty, 0x8000}, {0xa, 0x4e24, 0x7fffffff, @dev={0xfe, 0x80, [], 0xf}, 0x6}, 0x8000, [0x8, 0x1, 0x84, 0xf5, 0x7, 0x5, 0x0, 0x3]}, 0x5c)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

[ 1591.862413][ T9131] input: syz0 as /devices/virtual/input/input1549
[ 1591.877316][ T8851] usb 3-1: config 0 has an invalid interface number: 128 but max is 0
[ 1591.885810][T11712] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[ 1591.893656][ T8851] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1591.903920][ T8851] usb 3-1: config 0 has no interface number 0
[ 1591.910131][ T8851] usb 3-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1591.921361][ T8851] usb 3-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1591.930550][ T8851] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1591.950420][ T9131] input: syz0 as /devices/virtual/input/input1550
[ 1591.973932][T11774] usb 4-1: Using ep0 maxpacket: 16
[ 1592.046169][T11720] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0
[ 1592.054435][T11720] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0
[ 1592.062115][T11720] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0
[ 1592.068634][ T8851] usb 3-1: config 0 descriptor??
[ 1592.069725][T11720] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0
[ 1592.082231][T11720] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0
[ 1592.089850][T11720] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0
[ 1592.097975][T11720] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0
[ 1592.105606][T11720] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0
[ 1592.113217][T11720] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0
[ 1592.120743][T11720] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0
[ 1592.128442][T11720] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0
[ 1592.174506][T11720] hid-generic 0000:0000:0000.0041: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz1
[ 1592.188976][T11774] usb 4-1: config 0 has an invalid interface number: 128 but max is 0
[ 1592.197461][T11774] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1592.208033][T11774] usb 4-1: config 0 has no interface number 0
20:27:47 executing program 0:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
pipe(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
close(r3)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080), 0x12)
write$cgroup_int(r2, &(0x7f0000000000), 0xffffff10)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00')
splice(r1, 0x0, r3, 0x0, 0x1ac, 0x0)

[ 1592.214428][T11774] usb 4-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1592.225677][T11774] usb 4-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1592.234896][T11774] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1592.243756][T11712] usb 2-1: Using ep0 maxpacket: 16
[ 1592.260165][T11774] usb 4-1: config 0 descriptor??
[ 1592.344156][ T8851] radio-si470x 3-1:0.128: DeviceID=0x87d4 ChipID=0x5380
[ 1592.346399][ T9212] input: syz0 as /devices/virtual/input/input1551
[ 1592.351407][T10207] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[ 1592.372529][T11712] usb 2-1: config 0 has an invalid interface number: 128 but max is 0
[ 1592.380876][T11712] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1592.391199][T11712] usb 2-1: config 0 has no interface number 0
[ 1592.397721][T11712] usb 2-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1592.408954][T11712] usb 2-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1592.418139][T11712] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1592.437625][ T9131] input: syz0 as /devices/virtual/input/input1552
[ 1592.456556][ T9290] input: syz0 as /devices/virtual/input/input1553
[ 1592.467856][T11712] usb 2-1: config 0 descriptor??
[ 1592.489586][ T9131] input: syz0 as /devices/virtual/input/input1554
[ 1592.522128][T11774] radio-si470x 4-1:0.128: DeviceID=0x6df7 ChipID=0xba81
[ 1592.552669][ T8851] radio-si470x 3-1:0.128: software version 135, hardware version 212
[ 1592.570530][T11720] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0
[ 1592.578357][T11720] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0
[ 1592.586014][T11720] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0
[ 1592.593619][T11720] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0
[ 1592.601142][T11720] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0
[ 1592.608764][T11720] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0
[ 1592.616409][T11720] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0
[ 1592.622036][T10207] usb 6-1: Using ep0 maxpacket: 16
[ 1592.623996][T11720] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0
[ 1592.624105][T11720] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0
[ 1592.644188][T11720] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0
[ 1592.651864][T11720] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0
20:27:47 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @dev}, 0x4}}, 0x26)
r2 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r2, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x4}}, 0x26)

[ 1592.723445][T11720] hid-generic 0000:0000:0000.0042: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz1
[ 1592.735736][T11712] radio-si470x 2-1:0.128: DeviceID=0x68f7 ChipID=0xba81
[ 1592.749088][T11774] radio-si470x 4-1:0.128: software version 109, hardware version 247
[ 1592.772366][ T8851] radio-si470x 3-1:0.128: submitting int urb failed (-90)
[ 1592.780202][T10207] usb 6-1: config 0 has an invalid interface number: 128 but max is 0
[ 1592.788587][T10207] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1592.798809][T10207] usb 6-1: config 0 has no interface number 0
[ 1592.805062][T10207] usb 6-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
20:27:47 executing program 0:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_type(r0, &(0x7f0000000100)='cgroup.type\x00', 0x2, 0x0)

[ 1592.816259][T10207] usb 6-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1592.825456][T10207] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1592.838130][T10207] usb 6-1: config 0 descriptor??
[ 1592.945573][ T9113] input: syz0 as /devices/virtual/input/input1555
[ 1592.972554][T11774] radio-si470x 4-1:0.128: submitting int urb failed (-90)
[ 1592.974286][ T9113] input: syz0 as /devices/virtual/input/input1556
[ 1593.028868][ T9530] input: syz0 as /devices/virtual/input/input1557
[ 1593.114016][T10207] radio-si470x 6-1:0.128: DeviceID=0x80d4 ChipID=0x5380
[ 1593.222310][ T8851] radio-si470x 3-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1593.231220][ T8851] radio-si470x: probe of 3-1:0.128 failed with error -22
[ 1593.246659][ T8851] usb 3-1: USB disconnect, device number 91
[ 1593.261972][T11712] radio-si470x 2-1:0.128: si470x_get_report: usb_control_msg returned -110
[ 1593.270754][T11712] radio-si470x 2-1:0.128: si470x_get_scratch: si470x_get_report returned -110
[ 1593.280285][T11712] radio-si470x: probe of 2-1:0.128 failed with error -5
[ 1593.332063][T10207] radio-si470x 6-1:0.128: software version 128, hardware version 212
[ 1593.552048][T10207] radio-si470x 6-1:0.128: submitting int urb failed (-90)
[ 1593.632060][T11774] radio-si470x 4-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1593.641127][T11774] radio-si470x: probe of 4-1:0.128 failed with error -22
[ 1593.651090][T11774] usb 4-1: USB disconnect, device number 101
[ 1593.762099][T10207] radio-si470x 6-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1593.771000][T10207] radio-si470x: probe of 6-1:0.128 failed with error -22
[ 1593.786663][T10207] usb 6-1: USB disconnect, device number 41
[ 1594.381807][T10207] usb 4-1: new high-speed USB device number 102 using dummy_hcd
[ 1594.621995][T10207] usb 4-1: Using ep0 maxpacket: 16
[ 1594.638487][ T8851] usb 2-1: USB disconnect, device number 42
[ 1594.742020][T10207] usb 4-1: config 0 has an invalid interface number: 128 but max is 0
[ 1594.750287][T10207] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1594.760604][T10207] usb 4-1: config 0 has no interface number 0
[ 1594.766803][T10207] usb 4-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1594.777999][T10207] usb 4-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1594.787268][T10207] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1594.796836][T10207] usb 4-1: config 0 descriptor??
20:27:50 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618)
dup3(r0, r1, 0x0)

20:27:50 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
pipe(&(0x7f0000001300)={<r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
close(r3)
splice(r2, 0x0, r3, 0x0, 0x10003, 0x0)
ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
mmap(&(0x7f0000cce000/0x4000)=nil, 0x4000, 0x1000000, 0x40010, r4, 0xfffffffffffffffd)

20:27:50 executing program 2:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x20000, 0x0)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x16, {0x16, 0x23, "0c53a260298b58b1743f7f0f72a48fc93cedee42"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r4=>0xffffffffffffffff})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
close(r5)
ioctl$EVIOCGABS3F(r4, 0x8018457f, &(0x7f00000005c0)=""/181)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

[ 1595.062022][T10207] radio-si470x 4-1:0.128: DeviceID=0xb255 ChipID=0xb681
[ 1595.102061][T10207] radio-si470x 4-1:0.128: software version 178, hardware version 85
20:27:50 executing program 5:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x0, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0xfd, @string={0xfd, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x20000, 0x0)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f00000001c0)={0x7, 0x100})
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000200)={0xfffffffffffffd55, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x23, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000002f80)={0x2c, 0x0, &(0x7f0000002d00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r4 = socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000001300)={<r5=>0xffffffffffffffff})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
close(r6)
splice(r5, 0x0, r6, 0x0, 0x10003, 0x0)
ioctl$EVIOCGABS3F(r5, 0x8018457f, &(0x7f00000005c0)=""/181)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @multicast2}}}, &(0x7f0000000180)=0x90)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e20, 0xaa, @empty, 0x8000}, {0xa, 0x4e24, 0x7fffffff, @dev={0xfe, 0x80, [], 0xf}, 0x6}, 0x8000, [0x8, 0x1, 0x84, 0xf5, 0x7, 0x5, 0x0, 0x3]}, 0x5c)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

20:27:50 executing program 1:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)=ANY=[@ANYBLOB="120100001e95cd10cf12117108480000000109021b0001000000000904800001030000000705840b2000000000"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

20:27:50 executing program 3:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
pipe(&(0x7f0000001300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000100)={0x400000100002f, {0x0, 0x0, 0xdeba}})
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000002c0)={{}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r2, 0x5501)
ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f00000001c0)=0x2)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000040)={r1, &(0x7f00000000c0)="32383edeb503a25f48ad984ebc9e877273ed0f377901f29cbf0befb418763f56cbc9b3ae86d5e8e3906bfed99a723188bed25f3773760277fb9cb8f412f92c495927fc14e9145ee963533a8157e66eb00a7fe7d4316f0c40cd9d57c52be32a4d88ff5a130a9f91c7a034fc541c00f74dc1e40a45433d02030c1230970eb7d9c6061530c083c1c9ea1a39c36727bee751b905fed812aeb41096aa3379e5c3c33762fa70a42653e6555fdcfe7b82e239e27eaf76ad511b9ec236a0ce12df21e1507ee141e89222a5a3f1da93914b8b81ea66a9", &(0x7f0000000000)=""/27, 0x4}, 0x20)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

[ 1595.150019][T10207] radio-si470x 4-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1595.158752][T10207] radio-si470x 4-1:0.128: submitting int urb failed (-90)
20:27:50 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xd978}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x100000000004}, 0x1c)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
connect(r0, &(0x7f00000001c0)=@in={0x2, 0x4e20, @local}, 0x80)
sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000d7, 0x0)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0)
ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000040)=0x5)

[ 1595.238189][T10207] radio-si470x 4-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1595.247412][T10207] radio-si470x: probe of 4-1:0.128 failed with error -22
[ 1595.270009][T10207] usb 4-1: USB disconnect, device number 102
20:27:50 executing program 4:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000170a07031dfffd942367ede3b9a3484409000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e20, 0x7d, @local, 0x200}, @in={0x2, 0x4e23, @empty}], 0x2c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000080)={0xb20cbb4, 0x7})
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20ncci\x00', 0x0, 0x0)
ioctl$UI_SET_KEYBIT(r3, 0x40045565, 0x240)
r4 = accept$unix(r1, &(0x7f0000000100), &(0x7f0000000180)=0x6e)
signalfd(r4, &(0x7f00000001c0)={0x2}, 0x8)
setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000000), 0x4)
openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
openat$random(0xffffffffffffff9c, &(0x7f0000000280)='/dev/urandom\x00', 0x1, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

20:27:50 executing program 0:
socket$kcm(0xa, 0x40000000002, 0x73)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x2, 0x3, 0x84)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.s\x01@\x00\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x44)
sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0xffffff7f}, 0x4d, 0x0}, 0x0)

20:27:50 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000380)=0x4, 0x4)
writev(r2, &(0x7f0000002500)=[{&(0x7f0000000140)='R', 0x1}], 0x1)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x32, 0xffffffffffffffff, 0x0)

[ 1595.464160][T11774] usb 3-1: new high-speed USB device number 92 using dummy_hcd
[ 1595.484563][T11712] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[ 1595.502743][T11720] usb 2-1: new high-speed USB device number 43 using dummy_hcd
20:27:50 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net\x00', 0x200002, 0x0)
fchdir(r0)
ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, 0x0)
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
r2 = socket(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000040)="390000001000090468fe07002b00000001000a0014000000450001070300001419001a0012000200040001000a000300"/57, 0x39}], 0x1)
getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f00000006c0)={'mangle\x00', 0xe8, "7f0863ab4b11f6cd9a3f762f68fc3d3c4d1ff90d28f284506604dd5cb6182d3cbf06cc572309d4b2fc97d918124200f1e47c05126316fff32163ccd2fa5f8981fb900e07b730a90f559872af107c157704e7ec187c89027163a501c961dd9a78c914423f7d85bfae7a9e7116a388dabfeb26eaefaf9a4dfa27ac35aca95303d502f720d7bf84dc06389f1d218a7c17820962d9129cc928300335b608b9cd62da40518d04742bd5a7c7e3da37dcde999bbd54a83540211315f2d24f7483ce16d91ea0e0edc196b57076e5fe6f8912ee4997eb21be903ccf619475b961d676f8f4c3028c05c7836d48"}, &(0x7f0000000280)=0x10c)
write$UHID_CREATE2(r1, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x1)
fchdir(r0)
openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fallocate(r1, 0x0, 0x0, 0x4003fe)
write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd)
syz_genetlink_get_family_id$tipc2(0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0)
sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x20000004)
syz_open_procfs(0x0, 0x0)
keyctl$update(0x2, 0x0, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x333, 0x0)
recvmsg(r3, &(0x7f0000000640)={&(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000000)=""/33, 0x21}, {&(0x7f0000000200)=""/76, 0x4c}, {&(0x7f0000000180)=""/42, 0x2a}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000300)=""/57, 0x39}, {&(0x7f0000000340)=""/201, 0xc9}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000000440)=""/251, 0xfb}, {&(0x7f0000000540)}], 0xa, &(0x7f0000001a00)=""/4096, 0x1000}, 0x40)
ioctl$sock_inet6_tcp_SIOCATMARK(r4, 0x8905, &(0x7f0000000680))
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x2, 0x0)
lseek(r5, 0x0, 0x4)

[ 1595.614115][ T9799] 8021q: adding VLAN 0 to HW filter on device batadv0
20:27:50 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000080)=""/4096)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x8)
setrlimit(0x2, &(0x7f0000000040)={0x1fffffc, 0x20080000000})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001180)='/dev/ptmx\x00', 0x10500, 0x0)
fsetxattr$security_ima(r3, &(0x7f00000011c0)='security.ima\x00', &(0x7f0000001200)=@v1={0x2, "870513b66d"}, 0x6, 0x1)
r4 = gettid()
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000013000)={0x1, 0x10000007f, 0xa, 0x1000000000000008}, 0x1c)
sendmmsg$unix(r2, &(0x7f0000004f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=[@cred={{0x1c, 0x1, 0x2, {r4}}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [r5]}}], 0x48}], 0xfd, 0x0)
fcntl$setownex(r0, 0xf, &(0x7f0000001080)={0x0, r4})
r6 = fsopen(&(0x7f0000000000)='jfs\x00', 0x1)
ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f00000010c0))
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000001100), &(0x7f0000001140)=0x14)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x10, r6, 0x0)

[ 1595.672355][T10207] usb 4-1: new high-speed USB device number 103 using dummy_hcd
20:27:50 executing program 0:

[ 1595.722483][T11774] usb 3-1: Using ep0 maxpacket: 16
[ 1595.733324][T11712] usb 6-1: Using ep0 maxpacket: 16
[ 1595.743974][T11720] usb 2-1: Using ep0 maxpacket: 16
[ 1595.852088][T11774] usb 3-1: config 0 has an invalid interface number: 128 but max is 0
[ 1595.860457][T11774] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1595.872198][T11774] usb 3-1: config 0 has no interface number 0
[ 1595.878409][T11774] usb 3-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1595.889649][T11774] usb 3-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1595.898836][T11774] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1595.908021][T11712] usb 6-1: config 0 has an invalid interface number: 128 but max is 0
[ 1595.916355][T11712] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1595.926625][T11712] usb 6-1: config 0 has no interface number 0
[ 1595.932880][T11712] usb 6-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
20:27:50 executing program 0:

[ 1595.944124][T11712] usb 6-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1595.944561][T10207] usb 4-1: Using ep0 maxpacket: 16
[ 1595.953289][T11712] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1595.954105][T11720] usb 2-1: config 0 has an invalid interface number: 128 but max is 0
[ 1595.975184][T11720] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1595.985421][T11720] usb 2-1: config 0 has no interface number 0
[ 1595.991674][T11720] usb 2-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1596.002946][T11720] usb 2-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1596.012178][T11720] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1596.022428][T11712] usb 6-1: config 0 descriptor??
[ 1596.037149][T11774] usb 3-1: config 0 descriptor??
[ 1596.050727][T11720] usb 2-1: config 0 descriptor??
[ 1596.084264][T10207] usb 4-1: config 0 has an invalid interface number: 128 but max is 0
[ 1596.092616][T10207] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1596.102860][T10207] usb 4-1: config 0 has no interface number 0
[ 1596.109039][T10207] usb 4-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1596.120232][T10207] usb 4-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 1596.129448][T10207] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1596.160041][T10207] usb 4-1: config 0 descriptor??
[ 1596.282073][T11712] radio-si470x 6-1:0.128: DeviceID=0x62f7 ChipID=0xba81
[ 1596.302229][T11774] radio-si470x 3-1:0.128: DeviceID=0x61f7 ChipID=0xba81
[ 1596.309533][T11720] radio-si470x 2-1:0.128: DeviceID=0x67f7 ChipID=0xba81
[ 1596.422172][T10207] radio-si470x 4-1:0.128: DeviceID=0xbe55 ChipID=0xb681
[ 1596.502149][T11712] radio-si470x 6-1:0.128: software version 98, hardware version 247
[ 1596.512246][T11720] radio-si470x 2-1:0.128: software version 103, hardware version 247
[ 1596.522243][T11774] radio-si470x 3-1:0.128: software version 97, hardware version 247
[ 1596.642084][T10207] radio-si470x 4-1:0.128: software version 190, hardware version 85
[ 1596.722070][T11712] radio-si470x 6-1:0.128: submitting int urb failed (-90)
[ 1596.743331][T11774] radio-si470x 3-1:0.128: submitting int urb failed (-90)
[ 1596.897797][ T9913] input: syz0 as /devices/virtual/input/input1558
[ 1596.912382][T10207] radio-si470x 4-1:0.128: submitting int urb failed (-90)
[ 1596.942117][T11712] radio-si470x 6-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1596.950947][T11712] radio-si470x: probe of 6-1:0.128 failed with error -22
[ 1596.963508][T11712] usb 6-1: USB disconnect, device number 42
[ 1597.171990][    C0] radio-si470x 2-1:0.128: non-zero urb status (-71)
[ 1597.179130][T11720] radio-si470x 2-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1597.188498][T11720] radio-si470x: probe of 2-1:0.128 failed with error -22
[ 1597.195841][    C0] usb 2-1:0.128: non-zero urb status (-71)
[ 1597.204741][T11774] radio-si470x 3-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 1597.213495][    C0] usb 2-1:0.128: non-zero urb status (-71)
[ 1597.219991][T11774] radio-si470x: probe of 3-1:0.128 failed with error -22
[ 1597.231740][    C0] =====================================================
[ 1597.238801][    C0] BUG: KMSAN: uninit-value in call_timer_fn+0x232/0x530
[ 1597.245735][    C0] CPU: 0 PID: 32158 Comm: udevd Not tainted 5.3.0-rc7+ #0
[ 1597.252819][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1597.262855][    C0] Call Trace:
[ 1597.266143][    C0]  <IRQ>
[ 1597.268996][    C0]  dump_stack+0x191/0x1f0
[ 1597.273327][    C0]  kmsan_report+0x13a/0x2b0
[ 1597.277844][    C0]  __msan_warning+0x73/0xe0
[ 1597.282381][    C0]  dummy_timer+0x8d3/0x6770
[ 1597.286887][    C0]  ? __msan_metadata_ptr_for_load_4+0x10/0x20
[ 1597.292954][    C0]  ? run_posix_cpu_timers+0x3a70/0x4af0
[ 1597.298492][    C0]  ? __msan_metadata_ptr_for_load_4+0x10/0x20
[ 1597.304536][    C0]  ? trigger_load_balance+0x1aa/0xd50
[ 1597.309901][    C0]  ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0
[ 1597.315777][    C0]  ? __msan_instrument_asm_store+0x98/0x150
[ 1597.321660][    C0]  ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0
[ 1597.327549][    C0]  call_timer_fn+0x232/0x530
[ 1597.332144][    C0]  ? dummy_free_streams+0x540/0x540
[ 1597.337341][    C0]  __run_timers+0xcdc/0x11a0
[ 1597.341930][    C0]  ? __msan_metadata_ptr_for_load_8+0x10/0x20
[ 1597.347978][    C0]  ? dummy_free_streams+0x540/0x540
[ 1597.353180][    C0]  ? timers_dead_cpu+0x9d0/0x9d0
[ 1597.358114][    C0]  ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0
[ 1597.363988][    C0]  run_timer_softirq+0x2d/0x50
[ 1597.368731][    C0]  ? timers_dead_cpu+0x9d0/0x9d0
[ 1597.373658][    C0]  __do_softirq+0x4a1/0x83a
[ 1597.378178][    C0]  irq_exit+0x230/0x280
[ 1597.382348][    C0]  exiting_irq+0xe/0x10
[ 1597.386505][    C0]  smp_apic_timer_interrupt+0x48/0x70
[ 1597.391892][    C0]  apic_timer_interrupt+0x2e/0x40
[ 1597.396905][    C0]  </IRQ>
[ 1597.399844][    C0] RIP: 0010:kmsan_slab_alloc+0xd5/0x120
[ 1597.405391][    C0] Code: 0a ba 01 00 00 00 e8 ba e6 ff ff 65 ff 0d 07 0f ff 7d 65 8b 05 00 0f ff 7d 85 c0 75 30 e8 53 40 38 ff 4c 89 65 c8 ff 75 c8 9d <65> 48 8b 04 25 28 00 00 00 48 3b 45 d8 75 0d 48 83 c4 18 5b 41 5c
[ 1597.424984][    C0] RSP: 0018:ffff88803843f3b0 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13
[ 1597.433391][    C0] RAX: 0000000000000000 RBX: ffff8881034f3fc0 RCX: 0000000000000011
[ 1597.441362][    C0] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffff8881034f3fc0
[ 1597.449339][    C0] RBP: ffff88803843f3e8 R08: 0000000000000002 R09: ffff88803843f1f0
[ 1597.457319][    C0] R10: 0000000000000013 R11: ffffffff8182a660 R12: 0000000000000246
[ 1597.465309][    C0] R13: ffffffffffffff00 R14: 0000000000000cc0 R15: ffff88812f819dc0
[ 1597.473291][    C0]  ? stack_trace_save+0x1b0/0x1b0
[ 1597.478321][    C0]  kmem_cache_alloc+0x8e3/0xd10
[ 1597.483162][    C0]  ? uevent_show+0x29f/0x720
[ 1597.487738][    C0]  ? __anon_vma_prepare+0xa5/0xae0
[ 1597.492846][    C0]  __anon_vma_prepare+0xa5/0xae0
[ 1597.497784][    C0]  handle_mm_fault+0x68bf/0x9ef0
[ 1597.502732][    C0]  do_user_addr_fault+0x905/0x1510
[ 1597.507860][    C0]  __do_page_fault+0x1a2/0x410
[ 1597.512617][    C0]  do_page_fault+0xbb/0x500
[ 1597.517127][    C0]  ? kmsan_unpoison_pt_regs+0x28/0x30
[ 1597.522499][    C0]  page_fault+0x4e/0x60
[ 1597.526644][    C0] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20
[ 1597.533220][    C0] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 <f3> a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4
[ 1597.552813][    C0] RSP: 0018:ffff88803843f9a0 EFLAGS: 00010206
[ 1597.558873][    C0] RAX: ffffffff849f099c RBX: ffff8881ba4309a0 RCX: 0000000000000087
[ 1597.566830][    C0] RDX: 0000000000000087 RSI: ffff88819edd8000 RDI: 00007fb66cb40000
[ 1597.574785][    C0] RBP: ffff88803843fa10 R08: 0000000000000001 R09: ffff888109aaf0e0
[ 1597.582744][    C0] R10: 0000000000000010 R11: ffffffff8253a870 R12: 0000000000000087
[ 1597.590700][    C0] R13: ffff88819edd8000 R14: ffff88803843f9a8 R15: 00007fb66cb40000
[ 1597.598668][    C0]  ? kernfs_seq_start+0x420/0x420
[ 1597.603688][    C0]  ? _copy_to_user+0xcc/0x1f0
[ 1597.608380][    C0]  ? _copy_to_user+0x113/0x1f0
[ 1597.613137][    C0]  seq_read+0x1921/0x1d90
[ 1597.617460][    C0]  ? kernfs_seq_stop+0x220/0x220
[ 1597.622408][    C0]  kernfs_fop_read+0x2c3/0x9a0
[ 1597.627171][    C0]  ? kernfs_notify_workfn+0x960/0x960
[ 1597.632534][    C0]  __vfs_read+0x1a9/0xc90
[ 1597.636861][    C0]  ? rw_verify_area+0x3a5/0x5e0
[ 1597.641708][    C0]  vfs_read+0x359/0x6f0
[ 1597.645856][    C0]  ksys_read+0x265/0x430
[ 1597.650101][    C0]  __se_sys_read+0x92/0xb0
[ 1597.654507][    C0]  __x64_sys_read+0x4a/0x70
[ 1597.658995][    C0]  do_syscall_64+0xbc/0xf0
[ 1597.663404][    C0]  entry_SYSCALL_64_after_hwframe+0x63/0xe7
[ 1597.669280][    C0] RIP: 0033:0x7fb66c241310
[ 1597.673680][    C0] Code: 73 01 c3 48 8b 0d 28 4b 2b 00 31 d2 48 29 c2 64 89 11 48 83 c8 ff eb ea 90 90 83 3d e5 a2 2b 00 00 75 10 b8 00 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 6e 8a 01 00 48 89 04 24
[ 1597.693267][    C0] RSP: 002b:00007fff2f772ed8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1597.701666][    C0] RAX: ffffffffffffffda RBX: 000000000122bc30 RCX: 00007fb66c241310
[ 1597.709627][    C0] RDX: 0000000000001000 RSI: 00007fb66cb40000 RDI: 0000000000000005
[ 1597.717599][    C0] RBP: 0000000000003fff R08: 00000000ffffffff R09: 0000000000000000
[ 1597.725558][    C0] R10: 0000000000000022 R11: 0000000000000246 R12: 000000000000000a
[ 1597.733513][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff2f7733b0
[ 1597.741481][    C0] 
[ 1597.743790][    C0] Uninit was stored to memory at:
[ 1597.748803][    C0]  kmsan_internal_chain_origin+0xd2/0x170
[ 1597.754503][    C0]  __msan_chain_origin+0x6b/0xe0
[ 1597.759427][    C0]  dummy_urb_enqueue+0x604/0xe10
[ 1597.764348][    C0]  usb_hcd_submit_urb+0x672/0x38d0
[ 1597.769445][    C0]  usb_submit_urb+0x1ef3/0x1f50
[ 1597.774279][    C0]  si470x_int_in_callback+0x3f7/0x1010
[ 1597.779723][    C0]  __usb_hcd_giveback_urb+0x4a7/0x630
[ 1597.785077][    C0]  usb_hcd_giveback_urb+0x189/0x670
[ 1597.790270][    C0]  dummy_timer+0xab0/0x6770
[ 1597.794767][    C0]  call_timer_fn+0x232/0x530
[ 1597.799346][    C0]  __run_timers+0xcdc/0x11a0
[ 1597.803926][    C0]  run_timer_softirq+0x2d/0x50
[ 1597.808677][    C0]  __do_softirq+0x4a1/0x83a
[ 1597.813166][    C0]  irq_exit+0x230/0x280
[ 1597.817319][    C0]  exiting_irq+0xe/0x10
[ 1597.821457][    C0]  smp_apic_timer_interrupt+0x48/0x70
[ 1597.826830][    C0]  apic_timer_interrupt+0x2e/0x40
[ 1597.831846][    C0]  console_unlock+0x191b/0x1cb0
[ 1597.836782][    C0]  vprintk_emit+0x45b/0x8f0
[ 1597.841298][    C0]  dev_vprintk_emit+0x940/0xb28
[ 1597.846239][    C0]  dev_printk_emit+0x1ce/0x210
[ 1597.850993][    C0]  __dev_printk+0x3af/0x460
[ 1597.855485][    C0]  _dev_warn+0x1e5/0x22a
[ 1597.859721][    C0]  si470x_set_register+0x3f9/0x410
[ 1597.864816][    C0]  si470x_start+0x27f/0x510
[ 1597.869303][    C0]  si470x_start_usb+0x753/0x930
[ 1597.874139][    C0]  si470x_usb_driver_probe+0x27d6/0x3200
[ 1597.879757][    C0]  usb_probe_interface+0xd19/0x1310
[ 1597.884952][    C0]  really_probe+0x1373/0x1dc0
[ 1597.889610][    C0]  driver_probe_device+0x1ba/0x510
[ 1597.894706][    C0]  __device_attach_driver+0x5b8/0x790
[ 1597.900068][    C0]  bus_for_each_drv+0x28e/0x3b0
[ 1597.904915][    C0]  __device_attach+0x489/0x750
[ 1597.909665][    C0]  device_initial_probe+0x4a/0x60
[ 1597.914672][    C0]  bus_probe_device+0x131/0x390
[ 1597.919515][    C0]  device_add+0x25b5/0x2df0
[ 1597.924014][    C0]  usb_set_configuration+0x309f/0x3710
[ 1597.929467][    C0]  generic_probe+0xe7/0x280
[ 1597.933959][    C0]  usb_probe_device+0x146/0x200
[ 1597.938797][    C0]  really_probe+0x1373/0x1dc0
[ 1597.943467][    C0]  driver_probe_device+0x1ba/0x510
[ 1597.948564][    C0]  __device_attach_driver+0x5b8/0x790
[ 1597.953920][    C0]  bus_for_each_drv+0x28e/0x3b0
[ 1597.958751][    C0]  __device_attach+0x489/0x750
[ 1597.963497][    C0]  device_initial_probe+0x4a/0x60
[ 1597.968503][    C0]  bus_probe_device+0x131/0x390
[ 1597.973348][    C0]  device_add+0x25b5/0x2df0
[ 1597.977834][    C0]  usb_new_device+0x23e5/0x2fb0
[ 1597.982669][    C0]  hub_event+0x581d/0x72f0
[ 1597.987067][    C0]  process_one_work+0x1572/0x1ef0
[ 1597.992072][    C0]  worker_thread+0x111b/0x2460
[ 1597.996815][    C0]  kthread+0x4b5/0x4f0
[ 1598.000870][    C0]  ret_from_fork+0x35/0x40
[ 1598.005262][    C0] 
[ 1598.007571][    C0] Uninit was created at:
[ 1598.011796][    C0]  kmsan_internal_poison_shadow+0x53/0x100
[ 1598.017582][    C0]  kmsan_slab_free+0x8d/0x100
[ 1598.022244][    C0]  kfree+0x4c1/0x2db0
[ 1598.026213][    C0]  si470x_usb_driver_probe+0xa6f/0x3200
[ 1598.031743][    C0]  usb_probe_interface+0xd19/0x1310
[ 1598.036927][    C0]  really_probe+0x1373/0x1dc0
[ 1598.042630][    C0]  driver_probe_device+0x1ba/0x510
[ 1598.047726][    C0]  __device_attach_driver+0x5b8/0x790
[ 1598.053089][    C0]  bus_for_each_drv+0x28e/0x3b0
[ 1598.057925][    C0]  __device_attach+0x489/0x750
[ 1598.062673][    C0]  device_initial_probe+0x4a/0x60
[ 1598.067680][    C0]  bus_probe_device+0x131/0x390
[ 1598.072510][    C0]  device_add+0x25b5/0x2df0
[ 1598.076997][    C0]  usb_set_configuration+0x309f/0x3710
[ 1598.082438][    C0]  generic_probe+0xe7/0x280
[ 1598.086932][    C0]  usb_probe_device+0x146/0x200
[ 1598.091769][    C0]  really_probe+0x1373/0x1dc0
[ 1598.096432][    C0]  driver_probe_device+0x1ba/0x510
[ 1598.101526][    C0]  __device_attach_driver+0x5b8/0x790
[ 1598.106886][    C0]  bus_for_each_drv+0x28e/0x3b0
[ 1598.111725][    C0]  __device_attach+0x489/0x750
[ 1598.116480][    C0]  device_initial_probe+0x4a/0x60
[ 1598.121487][    C0]  bus_probe_device+0x131/0x390
[ 1598.126319][    C0]  device_add+0x25b5/0x2df0
[ 1598.130804][    C0]  usb_new_device+0x23e5/0x2fb0
[ 1598.135639][    C0]  hub_event+0x581d/0x72f0
[ 1598.140050][    C0]  process_one_work+0x1572/0x1ef0
[ 1598.145062][    C0]  worker_thread+0x111b/0x2460
[ 1598.149807][    C0]  kthread+0x4b5/0x4f0
[ 1598.153863][    C0]  ret_from_fork+0x35/0x40
[ 1598.158255][    C0] =====================================================
[ 1598.165167][    C0] Disabling lock debugging due to kernel taint
[ 1598.171302][    C0] Kernel panic - not syncing: panic_on_warn set ...
[ 1598.177877][    C0] CPU: 0 PID: 32158 Comm: udevd Tainted: G    B             5.3.0-rc7+ #0
[ 1598.186355][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1598.196391][    C0] Call Trace:
[ 1598.199661][    C0]  <IRQ>
[ 1598.202502][    C0]  dump_stack+0x191/0x1f0
[ 1598.206838][    C0]  panic+0x3c9/0xc1e
[ 1598.210770][    C0]  kmsan_report+0x2a2/0x2b0
[ 1598.215285][    C0]  __msan_warning+0x73/0xe0
[ 1598.219782][    C0]  dummy_timer+0x8d3/0x6770
[ 1598.224285][    C0]  ? __msan_metadata_ptr_for_load_4+0x10/0x20
[ 1598.230340][    C0]  ? run_posix_cpu_timers+0x3a70/0x4af0
[ 1598.235892][    C0]  ? __msan_metadata_ptr_for_load_4+0x10/0x20
[ 1598.241953][    C0]  ? trigger_load_balance+0x1aa/0xd50
[ 1598.247339][    C0]  ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0
[ 1598.253226][    C0]  ? __msan_instrument_asm_store+0x98/0x150
[ 1598.259108][    C0]  ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0
[ 1598.264992][    C0]  call_timer_fn+0x232/0x530
[ 1598.269578][    C0]  ? dummy_free_streams+0x540/0x540
[ 1598.274767][    C0]  __run_timers+0xcdc/0x11a0
[ 1598.279345][    C0]  ? __msan_metadata_ptr_for_load_8+0x10/0x20
[ 1598.285396][    C0]  ? dummy_free_streams+0x540/0x540
[ 1598.290588][    C0]  ? timers_dead_cpu+0x9d0/0x9d0
[ 1598.295526][    C0]  ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0
[ 1598.301407][    C0]  run_timer_softirq+0x2d/0x50
[ 1598.306156][    C0]  ? timers_dead_cpu+0x9d0/0x9d0
[ 1598.311090][    C0]  __do_softirq+0x4a1/0x83a
[ 1598.315592][    C0]  irq_exit+0x230/0x280
[ 1598.319738][    C0]  exiting_irq+0xe/0x10
[ 1598.323880][    C0]  smp_apic_timer_interrupt+0x48/0x70
[ 1598.329257][    C0]  apic_timer_interrupt+0x2e/0x40
[ 1598.334291][    C0]  </IRQ>
[ 1598.337229][    C0] RIP: 0010:kmsan_slab_alloc+0xd5/0x120
[ 1598.342766][    C0] Code: 0a ba 01 00 00 00 e8 ba e6 ff ff 65 ff 0d 07 0f ff 7d 65 8b 05 00 0f ff 7d 85 c0 75 30 e8 53 40 38 ff 4c 89 65 c8 ff 75 c8 9d <65> 48 8b 04 25 28 00 00 00 48 3b 45 d8 75 0d 48 83 c4 18 5b 41 5c
[ 1598.362362][    C0] RSP: 0018:ffff88803843f3b0 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13
[ 1598.370763][    C0] RAX: 0000000000000000 RBX: ffff8881034f3fc0 RCX: 0000000000000011
[ 1598.378721][    C0] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffff8881034f3fc0
[ 1598.386689][    C0] RBP: ffff88803843f3e8 R08: 0000000000000002 R09: ffff88803843f1f0
[ 1598.394652][    C0] R10: 0000000000000013 R11: ffffffff8182a660 R12: 0000000000000246
[ 1598.402613][    C0] R13: ffffffffffffff00 R14: 0000000000000cc0 R15: ffff88812f819dc0
[ 1598.410590][    C0]  ? stack_trace_save+0x1b0/0x1b0
[ 1598.415620][    C0]  kmem_cache_alloc+0x8e3/0xd10
[ 1598.420460][    C0]  ? uevent_show+0x29f/0x720
[ 1598.425049][    C0]  ? __anon_vma_prepare+0xa5/0xae0
[ 1598.430162][    C0]  __anon_vma_prepare+0xa5/0xae0
[ 1598.435098][    C0]  handle_mm_fault+0x68bf/0x9ef0
[ 1598.440049][    C0]  do_user_addr_fault+0x905/0x1510
[ 1598.445165][    C0]  __do_page_fault+0x1a2/0x410
[ 1598.449929][    C0]  do_page_fault+0xbb/0x500
[ 1598.454426][    C0]  ? kmsan_unpoison_pt_regs+0x28/0x30
[ 1598.459793][    C0]  page_fault+0x4e/0x60
[ 1598.463938][    C0] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20
[ 1598.470510][    C0] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 <f3> a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4
[ 1598.490106][    C0] RSP: 0018:ffff88803843f9a0 EFLAGS: 00010206
[ 1598.496160][    C0] RAX: ffffffff849f099c RBX: ffff8881ba4309a0 RCX: 0000000000000087
[ 1598.504118][    C0] RDX: 0000000000000087 RSI: ffff88819edd8000 RDI: 00007fb66cb40000
[ 1598.512074][    C0] RBP: ffff88803843fa10 R08: 0000000000000001 R09: ffff888109aaf0e0
[ 1598.520030][    C0] R10: 0000000000000010 R11: ffffffff8253a870 R12: 0000000000000087
[ 1598.527984][    C0] R13: ffff88819edd8000 R14: ffff88803843f9a8 R15: 00007fb66cb40000
[ 1598.535953][    C0]  ? kernfs_seq_start+0x420/0x420
[ 1598.540966][    C0]  ? _copy_to_user+0xcc/0x1f0
[ 1598.545633][    C0]  ? _copy_to_user+0x113/0x1f0
[ 1598.550401][    C0]  seq_read+0x1921/0x1d90
[ 1598.554722][    C0]  ? kernfs_seq_stop+0x220/0x220
[ 1598.559660][    C0]  kernfs_fop_read+0x2c3/0x9a0
[ 1598.564425][    C0]  ? kernfs_notify_workfn+0x960/0x960
[ 1598.569783][    C0]  __vfs_read+0x1a9/0xc90
[ 1598.574104][    C0]  ? rw_verify_area+0x3a5/0x5e0
[ 1598.578947][    C0]  vfs_read+0x359/0x6f0
[ 1598.583098][    C0]  ksys_read+0x265/0x430
[ 1598.587336][    C0]  __se_sys_read+0x92/0xb0
[ 1598.591743][    C0]  __x64_sys_read+0x4a/0x70
[ 1598.596236][    C0]  do_syscall_64+0xbc/0xf0
[ 1598.600641][    C0]  entry_SYSCALL_64_after_hwframe+0x63/0xe7
[ 1598.606515][    C0] RIP: 0033:0x7fb66c241310
[ 1598.610932][    C0] Code: 73 01 c3 48 8b 0d 28 4b 2b 00 31 d2 48 29 c2 64 89 11 48 83 c8 ff eb ea 90 90 83 3d e5 a2 2b 00 00 75 10 b8 00 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 6e 8a 01 00 48 89 04 24
[ 1598.630520][    C0] RSP: 002b:00007fff2f772ed8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1598.638914][    C0] RAX: ffffffffffffffda RBX: 000000000122bc30 RCX: 00007fb66c241310
[ 1598.646869][    C0] RDX: 0000000000001000 RSI: 00007fb66cb40000 RDI: 0000000000000005
[ 1598.654826][    C0] RBP: 0000000000003fff R08: 00000000ffffffff R09: 0000000000000000
[ 1598.662780][    C0] R10: 0000000000000022 R11: 0000000000000246 R12: 000000000000000a
[ 1598.670750][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff2f7733b0
[ 1598.680011][    C0] Kernel Offset: disabled
[ 1598.684422][    C0] Rebooting in 86400 seconds..