{0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r4 = syz_open_dev$hidraw(&(0x7f0000001300)='/dev/hidraw#\x00', 0x0, 0x41) r5 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5e, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80284504, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000012c0)={0x80, 0x5, 0x830c, 0x2, "09738855f8bbb430744feb4e216baa45df434c8d892fdaf6966ac4a3dd6a9e7f"}) write$hidraw(r4, &(0x7f0000002d80)="961e782da136c24bc08d302972a62ecfe3cbeead1c954c7742868c42011a331f2e92dc729b41d125c492e95d9516199064d5c77956e7f4086d533f1446cfffce26ec03d6452313cdd5acfede0cb2cfc5b7677939c7f836c19d839d27e54abd54ee564a34f9ddce5aba0e4cfcc8ae4871522b2854d636453bd4b9579fac970fd342f7a2c9fa881d442e2e61bcbcb73c0f2f2e8b6c075face514675ba4aff91d01148ee7a619061990cb32807e7dabb1a73a1dba70f62308537c75ef78178017ae1120d4ed", 0xc4) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000080)) syz_open_dev$hidraw(0x0, 0x0, 0x0) 00:56:12 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000004043556e0040000000000109022400010000000009040000010301000009210000000122050009058103"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000440)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r1, &(0x7f00000005c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 00:56:12 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/urandom\x00', 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r0 = openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, r0, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000080)=@random={'btrfs.', '{+.{,%&,\x00'}) dup(0xffffffffffffffff) r1 = creat(&(0x7f0000000040)='./file1\x00', 0x0) ioctl(r1, 0x6681, 0x0) 00:56:12 executing program 3: [ 1921.117787][T21857] usb 6-1: new high-speed USB device number 57 using dummy_hcd 00:56:12 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000004043556e0040000000000109022400010000000009040000010301000009210000000122050009058103"], 0x0) syz_usb_disconnect(r0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000d80)={0x2c, 0x0, &(0x7f0000000c80)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) [ 1921.189796][ T2484] usb 1-1: new high-speed USB device number 102 using dummy_hcd 00:56:12 executing program 2: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) [ 1921.538612][T21857] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1921.550711][T21857] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1921.562749][T21857] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1921.573153][T21857] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1921.582125][ T2484] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1921.599532][T21857] usb 6-1: config 0 descriptor?? [ 1921.607771][ T2484] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1921.627691][ T2484] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 00:56:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}]}}}]}, 0x3c}}, 0x0) [ 1921.629560][ T23] usb 4-1: new high-speed USB device number 126 using dummy_hcd 00:56:12 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) vmsplice(r1, &(0x7f00000000c0)=[{}, {0x0}], 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x4008000) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, 0x0, 0x90) splice(r0, 0x0, r3, 0x0, 0x30007, 0x0) [ 1921.689456][ T2484] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1921.720082][ T2484] usb 1-1: config 0 descriptor?? 00:56:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x74, r1, 0x409, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @private0}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g='\xf4M\xa3g\xa8\x8e\xe6VO\x02\x02\x11Eg\'\b/\\\xeb\xee\x8b\x1b\xf5\xebs74\x1bE\x9b9\"'}]}]}]}, 0x74}}, 0x0) 00:56:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x74, r1, 0x409, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @private0}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g='\xf4M\xa3g\xa8\x8e\xe6VO\x02\x02\x11Eg\'\b/\\\xeb\xee\x8b\x1b\xf5\xebs74\x1bE\x9b9\"'}]}]}]}, 0x74}}, 0x0) 00:56:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}]}}}]}, 0x3c}}, 0x0) [ 1922.028552][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1922.067890][ T2484] usbhid 1-1:0.0: can't add hid device: -71 00:56:13 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000040)) [ 1922.075727][ T2484] usbhid: probe of 1-1:0.0 failed with error -71 [ 1922.097652][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1922.110460][ T4627] udc-core: couldn't find an available UDC or it's busy [ 1922.127583][ T23] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 1922.143103][ T2484] usb 1-1: USB disconnect, device number 102 [ 1922.149918][ T4627] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1922.154055][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1922.196324][ T23] usb 4-1: config 0 descriptor?? [ 1922.458901][T21857] keytouch 0003:0926:3333.025C: fixing up Keytouch IEC report descriptor [ 1922.489304][T21857] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.025C/input/input557 [ 1922.547731][ T23] usbhid 4-1:0.0: can't add hid device: -71 [ 1922.553839][ T23] usbhid: probe of 4-1:0.0 failed with error -71 [ 1922.572387][ T2484] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1922.591793][T21857] keytouch 0003:0926:3333.025C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1922.596831][ T23] usb 4-1: USB disconnect, device number 126 [ 1922.690869][T21857] usb 6-1: USB disconnect, device number 57 [ 1923.037649][ T2484] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1923.048975][ T2484] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1923.059376][ T2484] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 1923.069000][ T2484] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1923.081700][ T2484] usb 1-1: config 0 descriptor?? [ 1923.237577][ T23] usb 4-1: new high-speed USB device number 127 using dummy_hcd 00:56:14 executing program 1: [ 1923.598155][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1923.609395][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1923.620544][ T23] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 1923.630348][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1923.645134][ T23] usb 4-1: config 0 descriptor?? [ 1924.204508][ T2484] uclogic 0003:5543:006E.025D: failed retrieving string descriptor #200: -71 [ 1924.213484][ T2484] uclogic 0003:5543:006E.025D: failed retrieving pen parameters: -71 [ 1924.228444][ T2484] uclogic 0003:5543:006E.025D: failed probing pen v2 parameters: -71 [ 1924.236714][ T2484] uclogic 0003:5543:006E.025D: failed probing parameters: -71 [ 1924.251436][ T2484] uclogic: probe of 0003:5543:006E.025D failed with error -71 [ 1924.263010][ T2484] usb 1-1: USB disconnect, device number 103 [ 1924.587562][ T23] uclogic 0003:5543:006E.025E: failed retrieving Huion firmware version: -71 [ 1924.596626][ T23] uclogic 0003:5543:006E.025E: failed probing parameters: -71 [ 1924.605030][ T23] uclogic: probe of 0003:5543:006E.025E failed with error -71 [ 1924.616260][ T23] usb 4-1: USB disconnect, device number 127 00:56:15 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) vmsplice(r1, &(0x7f00000000c0)=[{}, {0x0}], 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x4008000) splice(r0, 0x0, r3, 0x0, 0x30007, 0x0) 00:56:15 executing program 2: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:56:16 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)={0x40, 0x0, 0x2e, {0x2e, 0x5, "2648f7be311be28e381acfa4ed14d8562969866bdab65e5d4220d683e10a03c2a3cd510e8ac901ff8db0bf5d"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x7fffff9, 0xf007, 0x1, [0xc0f0, 0x1fe00c0]}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x0, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x43}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) r3 = syz_open_dev$evdev(&(0x7f0000001200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000001280)={0x1f, 0x1, &(0x7f0000001240)="7f"}) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af4566f3c7347185913f6185b306e694b7c75ea187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e4"], &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "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"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r4 = syz_open_dev$hidraw(&(0x7f0000001300)='/dev/hidraw#\x00', 0x0, 0x41) r5 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5e, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80284504, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000012c0)={0x80, 0x5, 0x830c, 0x2, "09738855f8bbb430744feb4e216baa45df434c8d892fdaf6966ac4a3dd6a9e7f"}) write$hidraw(r4, &(0x7f0000002d80)="961e782da136c24bc08d302972a62ecfe3cbeead1c954c7742868c42011a331f2e92dc729b41d125c492e95d9516199064d5c77956e7f4086d533f1446cfffce26ec03d6452313cdd5acfede0cb2cfc5b7677939c7f836c19d839d27e54abd54ee564a34f9ddce5aba0e4cfcc8ae4871522b2854d636453bd4b9579fac970fd342f7a2c9fa881d442e2e61bcbcb73c0f2f2e8b6c075face514675ba4aff91d01148ee7a619061990cb32807e7dabb1a73a1dba70f62308537c75ef78178017ae1120d4ed", 0xc4) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000080)) syz_open_dev$hidraw(0x0, 0x0, 0x0) [ 1925.017431][ T2522] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1925.337487][ T2484] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1925.378594][ T2522] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1925.389886][ T2522] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1925.400141][ T2522] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1925.409831][ T2522] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1925.422964][ T2522] usb 6-1: config 0 descriptor?? [ 1925.722318][ T2484] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1925.733697][ T2484] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1925.748942][ T2484] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 1925.763883][ T2484] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1925.775497][ T2484] usb 4-1: config 0 descriptor?? 00:56:17 executing program 3: 00:56:17 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000004043556e0040000000000109022400010000000009040000010301000009210000000122050009058103"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000440)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r1, &(0x7f00000005c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 00:56:17 executing program 2: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:56:17 executing program 1: 00:56:17 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) vmsplice(r1, &(0x7f00000000c0)=[{}, {0x0}], 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x30007, 0x0) [ 1925.890335][ T4776] udc-core: couldn't find an available UDC or it's busy [ 1925.903493][ T4776] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 00:56:17 executing program 3: 00:56:17 executing program 1: [ 1925.968553][ T2484] usbhid 4-1:0.0: can't add hid device: -71 [ 1925.975061][ T2484] usbhid: probe of 4-1:0.0 failed with error -71 00:56:17 executing program 3: [ 1926.030845][ T2484] usb 4-1: USB disconnect, device number 2 00:56:17 executing program 3: 00:56:17 executing program 1: 00:56:17 executing program 3: [ 1926.217350][ T9901] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1926.250324][ T2522] keytouch 0003:0926:3333.025F: fixing up Keytouch IEC report descriptor [ 1926.267136][ T2522] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.025F/input/input558 [ 1926.370416][ T2522] keytouch 0003:0926:3333.025F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1926.458995][ T2522] usb 6-1: USB disconnect, device number 58 [ 1926.608153][ T9901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1926.627379][ T9901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1926.673818][ T9901] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 1926.689315][ T9901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1926.712119][ T9901] usb 1-1: config 0 descriptor?? 00:56:18 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)={0x40, 0x0, 0x2e, {0x2e, 0x5, "2648f7be311be28e381acfa4ed14d8562969866bdab65e5d4220d683e10a03c2a3cd510e8ac901ff8db0bf5d"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x7fffff9, 0xf007, 0x1, [0xc0f0, 0x1fe00c0]}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x0, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x43}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) r3 = syz_open_dev$evdev(&(0x7f0000001200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000001280)={0x1f, 0x1, &(0x7f0000001240)="7f"}) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af4566f3c7347185913f6185b306e694b7c75ea187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af1"], &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "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"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r4 = syz_open_dev$hidraw(&(0x7f0000001300)='/dev/hidraw#\x00', 0x0, 0x41) r5 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5e, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80284504, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000012c0)={0x80, 0x5, 0x830c, 0x2, "09738855f8bbb430744feb4e216baa45df434c8d892fdaf6966ac4a3dd6a9e7f"}) write$hidraw(r4, &(0x7f0000002d80)="961e782da136c24bc08d302972a62ecfe3cbeead1c954c7742868c42011a331f2e92dc729b41d125c492e95d9516199064d5c77956e7f4086d533f1446cfffce26ec03d6452313cdd5acfede0cb2cfc5b7677939c7f836c19d839d27e54abd54ee564a34f9ddce5aba0e4cfcc8ae4871522b2854d636453bd4b9579fac970fd342f7a2c9fa881d442e2e61bcbcb73c0f2f2e8b6c075face514675ba4aff91d01148ee7a619061990cb32807e7dabb1a73a1dba70f62308537c75ef78178017ae1120d4ed", 0xc4) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000080)) syz_open_dev$hidraw(0x0, 0x0, 0x0) 00:56:18 executing program 3: [ 1927.067407][ T9901] usbhid 1-1:0.0: can't add hid device: -71 [ 1927.073687][ T9901] usbhid: probe of 1-1:0.0 failed with error -71 [ 1927.087627][ T9901] usb 1-1: USB disconnect, device number 104 [ 1927.417352][ T2522] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1927.587365][ T9901] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1927.778585][ T2522] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1927.793592][ T2522] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1927.804186][ T2522] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1927.817831][ T2522] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1927.835642][ T2522] usb 6-1: config 0 descriptor?? [ 1927.987606][ T9901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1927.999065][ T9901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1928.011751][ T9901] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 1928.022672][ T9901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1928.040877][ T9901] usb 1-1: config 0 descriptor?? [ 1928.299419][ T4868] udc-core: couldn't find an available UDC or it's busy [ 1928.306463][ T4868] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1928.598338][ T2522] keytouch 0003:0926:3333.0261: fixing up Keytouch IEC report descriptor [ 1928.617586][ T2522] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0261/input/input559 [ 1928.716603][ T2522] keytouch 0003:0926:3333.0261: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1928.827733][ T2484] usb 6-1: USB disconnect, device number 59 [ 1929.167284][ T9901] uclogic 0003:5543:006E.0260: failed retrieving string descriptor #200: -71 [ 1929.176251][ T9901] uclogic 0003:5543:006E.0260: failed retrieving pen parameters: -71 [ 1929.202623][ T9901] uclogic 0003:5543:006E.0260: failed probing pen v2 parameters: -71 [ 1929.217145][ T9901] uclogic 0003:5543:006E.0260: failed probing parameters: -71 [ 1929.224780][ T9901] uclogic: probe of 0003:5543:006E.0260 failed with error -71 [ 1929.234969][ T9901] usb 1-1: USB disconnect, device number 105 00:56:20 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) vmsplice(r1, &(0x7f00000000c0)=[{}, {0x0}], 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x30007, 0x0) 00:56:20 executing program 1: 00:56:20 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:56:20 executing program 3: 00:56:20 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)={0x40, 0x0, 0x2e, {0x2e, 0x5, "2648f7be311be28e381acfa4ed14d8562969866bdab65e5d4220d683e10a03c2a3cd510e8ac901ff8db0bf5d"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x7fffff9, 0xf007, 0x1, [0xc0f0, 0x1fe00c0]}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x0, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x43}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) r3 = syz_open_dev$evdev(&(0x7f0000001200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000001280)={0x1f, 0x1, &(0x7f0000001240)="7f"}) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af4566f3c7347185913f6185b306e694b7c75ea187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af1"], &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "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"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r4 = syz_open_dev$hidraw(&(0x7f0000001300)='/dev/hidraw#\x00', 0x0, 0x41) r5 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5e, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80284504, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000012c0)={0x80, 0x5, 0x830c, 0x2, "09738855f8bbb430744feb4e216baa45df434c8d892fdaf6966ac4a3dd6a9e7f"}) write$hidraw(r4, &(0x7f0000002d80)="961e782da136c24bc08d302972a62ecfe3cbeead1c954c7742868c42011a331f2e92dc729b41d125c492e95d9516199064d5c77956e7f4086d533f1446cfffce26ec03d6452313cdd5acfede0cb2cfc5b7677939c7f836c19d839d27e54abd54ee564a34f9ddce5aba0e4cfcc8ae4871522b2854d636453bd4b9579fac970fd342f7a2c9fa881d442e2e61bcbcb73c0f2f2e8b6c075face514675ba4aff91d01148ee7a619061990cb32807e7dabb1a73a1dba70f62308537c75ef78178017ae1120d4ed", 0xc4) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000080)) syz_open_dev$hidraw(0x0, 0x0, 0x0) 00:56:21 executing program 0: 00:56:21 executing program 3: 00:56:21 executing program 1: 00:56:21 executing program 0: 00:56:21 executing program 0: 00:56:21 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:56:21 executing program 3: [ 1930.037109][ T2484] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1930.457182][ T2484] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1930.468391][ T2484] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1930.480377][ T2484] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1930.489879][ T2484] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1930.499675][ T2484] usb 6-1: config 0 descriptor?? 00:56:21 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) vmsplice(r1, &(0x7f00000000c0)=[{}, {0x0}], 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x30007, 0x0) 00:56:21 executing program 1: 00:56:21 executing program 0: 00:56:21 executing program 3: [ 1930.971562][ T4938] udc-core: couldn't find an available UDC or it's busy [ 1930.978847][ T4938] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1931.308475][ T2484] keytouch 0003:0926:3333.0262: fixing up Keytouch IEC report descriptor [ 1931.325253][ T2484] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0262/input/input560 [ 1931.413630][ T2484] keytouch 0003:0926:3333.0262: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1931.524216][ T23] usb 6-1: USB disconnect, device number 60 00:56:23 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)={0x40, 0x0, 0x2e, {0x2e, 0x5, "2648f7be311be28e381acfa4ed14d8562969866bdab65e5d4220d683e10a03c2a3cd510e8ac901ff8db0bf5d"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x7fffff9, 0xf007, 0x1, [0xc0f0, 0x1fe00c0]}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x0, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x43}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) r3 = syz_open_dev$evdev(&(0x7f0000001200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000001280)={0x1f, 0x1, &(0x7f0000001240)="7f"}) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af4566f3c7347185913f6185b306e694b7c75ea187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af1"], &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "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"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r4 = syz_open_dev$hidraw(&(0x7f0000001300)='/dev/hidraw#\x00', 0x0, 0x41) r5 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5e, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80284504, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000012c0)={0x80, 0x5, 0x830c, 0x2, "09738855f8bbb430744feb4e216baa45df434c8d892fdaf6966ac4a3dd6a9e7f"}) write$hidraw(r4, &(0x7f0000002d80)="961e782da136c24bc08d302972a62ecfe3cbeead1c954c7742868c42011a331f2e92dc729b41d125c492e95d9516199064d5c77956e7f4086d533f1446cfffce26ec03d6452313cdd5acfede0cb2cfc5b7677939c7f836c19d839d27e54abd54ee564a34f9ddce5aba0e4cfcc8ae4871522b2854d636453bd4b9579fac970fd342f7a2c9fa881d442e2e61bcbcb73c0f2f2e8b6c075face514675ba4aff91d01148ee7a619061990cb32807e7dabb1a73a1dba70f62308537c75ef78178017ae1120d4ed", 0xc4) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000080)) syz_open_dev$hidraw(0x0, 0x0, 0x0) 00:56:23 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:56:23 executing program 1: 00:56:23 executing program 0: 00:56:23 executing program 3: 00:56:23 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) vmsplice(r1, &(0x7f00000000c0)=[{}, {0x0}], 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x30007, 0x0) 00:56:23 executing program 1: 00:56:23 executing program 3: 00:56:23 executing program 0: 00:56:23 executing program 3: 00:56:23 executing program 1: 00:56:23 executing program 0: [ 1932.610487][ T23] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1932.977159][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1932.989776][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1933.001007][ T23] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1933.010610][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1933.023580][ T23] usb 6-1: config 0 descriptor?? [ 1933.489251][ T5018] udc-core: couldn't find an available UDC or it's busy [ 1933.496255][ T5018] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1933.808348][ T23] keytouch 0003:0926:3333.0263: fixing up Keytouch IEC report descriptor [ 1933.819598][ T23] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0263/input/input561 [ 1933.910139][ T23] keytouch 0003:0926:3333.0263: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1934.023436][ T2484] usb 6-1: USB disconnect, device number 61 00:56:25 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810300000000003cf57187b312525b631dda1ea9b142bd891381f1343366ade89a08e1cf0f98b5ef41723da4a9166d9587c13a27b926deaedfc0e23540aa2a491d0041c82c1cef6b12b15b8ebb95144b567cc87d36c55c6f74ee455f0f16bee8885271686a58a13ecf239365a8d86391a25ea859d07bf8ae8d27bbeb4858431b95a08406c74bb0603bf8a56ab62c448e925fe31569b9611da91b0c4276ca64e90781a2a1703ac2f8a285d9fb645e9937824ed2c6690971ea801f840920a87e5ebebed4e972d8b98666bcaf88424b834db21281a7be5ebe3c6063381d34877d8f1b0ef4267b16c536a3f9aa577cc9953ca2048ca44d1baaff811ec5b965b92f04553fb17d2b1546ef30e4413de6c57aa334d2948f1189aef576773dec278c51fb0c4483db3387d09415f654f31ab1b20fd95df5a8031340f6"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)={0x40, 0x0, 0x2e, {0x2e, 0x5, "2648f7be311be28e381acfa4ed14d8562969866bdab65e5d4220d683e10a03c2a3cd510e8ac901ff8db0bf5d"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x7fffff9, 0xf007, 0x1, [0xc0f0, 0x1fe00c0]}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x0, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x43}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) r3 = syz_open_dev$evdev(&(0x7f0000001200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000001280)={0x1f, 0x1, &(0x7f0000001240)="7f"}) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af4566f3c7347185913f6185b306e694b7c75ea187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], 0x0, &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "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"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r4 = syz_open_dev$hidraw(&(0x7f0000001300)='/dev/hidraw#\x00', 0x0, 0x41) r5 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5e, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80284504, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000012c0)={0x80, 0x5, 0x830c, 0x2, "09738855f8bbb430744feb4e216baa45df434c8d892fdaf6966ac4a3dd6a9e7f"}) write$hidraw(r4, &(0x7f0000002d80)="961e782da136c24bc08d302972a62ecfe3cbeead1c954c7742868c42011a331f2e92dc729b41d125c492e95d9516199064d5c77956e7f4086d533f1446cfffce26ec03d6452313cdd5acfede0cb2cfc5b7677939c7f836c19d839d27e54abd54ee564a34f9ddce5aba0e4cfcc8ae4871522b2854d636453bd4b9579fac970fd342f7a2c9fa881d442e2e61bcbcb73c0f2f2e8b6c075face514675ba4aff91d01148ee7a619061990cb32807e7dabb1a73a1dba70f62308537c75ef78178017ae1120d4ed", 0xc4) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000080)) syz_open_dev$hidraw(0x0, 0x0, 0x0) 00:56:25 executing program 1: 00:56:25 executing program 3: 00:56:25 executing program 0: 00:56:25 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:56:25 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) vmsplice(r1, &(0x7f00000000c0)=[{}, {0x0}], 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x30007, 0x0) 00:56:26 executing program 0: 00:56:26 executing program 1: 00:56:26 executing program 3: 00:56:26 executing program 0: 00:56:26 executing program 1: 00:56:26 executing program 3: [ 1935.207832][ T23] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1935.566982][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1935.584740][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1935.602830][ T23] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1935.614700][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1935.632191][ T23] usb 6-1: config 0 descriptor?? [ 1936.099277][ T5086] udc-core: couldn't find an available UDC or it's busy [ 1936.106431][ T5086] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1936.417851][ T23] keytouch 0003:0926:3333.0264: fixing up Keytouch IEC report descriptor [ 1936.429168][ T23] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0264/input/input562 [ 1936.523687][ T23] keytouch 0003:0926:3333.0264: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1936.628204][ T2484] usb 6-1: USB disconnect, device number 62 00:56:28 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)={0x40, 0x0, 0x2e, {0x2e, 0x5, "2648f7be311be28e381acfa4ed14d8562969866bdab65e5d4220d683e10a03c2a3cd510e8ac901ff8db0bf5d"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x7fffff9, 0xf007, 0x1, [0xc0f0, 0x1fe00c0]}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x0, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x43}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) r3 = syz_open_dev$evdev(&(0x7f0000001200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000001280)={0x1f, 0x1, &(0x7f0000001240)="7f"}) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af4566f3c7347185913f6185b306e694b7c75ea187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], 0x0, &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "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"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r4 = syz_open_dev$hidraw(&(0x7f0000001300)='/dev/hidraw#\x00', 0x0, 0x41) r5 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5e, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80284504, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000012c0)={0x80, 0x5, 0x830c, 0x2, "09738855f8bbb430744feb4e216baa45df434c8d892fdaf6966ac4a3dd6a9e7f"}) write$hidraw(r4, &(0x7f0000002d80)="961e782da136c24bc08d302972a62ecfe3cbeead1c954c7742868c42011a331f2e92dc729b41d125c492e95d9516199064d5c77956e7f4086d533f1446cfffce26ec03d6452313cdd5acfede0cb2cfc5b7677939c7f836c19d839d27e54abd54ee564a34f9ddce5aba0e4cfcc8ae4871522b2854d636453bd4b9579fac970fd342f7a2c9fa881d442e2e61bcbcb73c0f2f2e8b6c075face514675ba4aff91d01148ee7a619061990cb32807e7dabb1a73a1dba70f62308537c75ef78178017ae1120d4ed", 0xc4) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000080)) syz_open_dev$hidraw(0x0, 0x0, 0x0) 00:56:28 executing program 1: 00:56:28 executing program 0: 00:56:28 executing program 3: 00:56:28 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:56:28 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) vmsplice(r1, &(0x7f00000000c0)=[{}, {0x0}], 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x30007, 0x0) 00:56:28 executing program 1: 00:56:28 executing program 0: 00:56:28 executing program 3: 00:56:28 executing program 3: 00:56:28 executing program 0: 00:56:28 executing program 1: [ 1937.636969][ T2484] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1938.041818][ T2484] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1938.066628][ T2484] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1938.090881][ T2484] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1938.102373][ T2484] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1938.120067][ T2484] usb 6-1: config 0 descriptor?? [ 1938.589897][ T5148] udc-core: couldn't find an available UDC or it's busy [ 1938.597241][ T5148] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1938.909436][ T2484] keytouch 0003:0926:3333.0265: fixing up Keytouch IEC report descriptor [ 1938.932831][ T2484] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0265/input/input563 [ 1939.066017][ T2484] keytouch 0003:0926:3333.0265: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1939.146425][ T2484] usb 6-1: USB disconnect, device number 63 00:56:31 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)={0x40, 0x0, 0x2e, {0x2e, 0x5, "2648f7be311be28e381acfa4ed14d8562969866bdab65e5d4220d683e10a03c2a3cd510e8ac901ff8db0bf5d"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x7fffff9, 0xf007, 0x1, [0xc0f0, 0x1fe00c0]}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x0, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x43}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) r3 = syz_open_dev$evdev(&(0x7f0000001200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000001280)={0x1f, 0x1, &(0x7f0000001240)="7f"}) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af4566f3c7347185913f6185b306e694b7c75ea187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], 0x0, &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "fc7100269712596c1c0d58c245f9288bf191c1b2d9e0ad034268fecdcd70b64ed4c6e89a0258cbcf833bc1eb865d68be278f5a18754ff7313cb371def95e6e05f55fde7aaba59e06c4ccd15f53687551e509ff69fd40908a2437f4a01d300b0171b3ef07ee7433422f93afd890907707b2ccd358604b5cb1dd095847ec110bf1d9fbef1e51fbfccd883518ea849192df942e366f1734ddbd5fa67f1bad262fcb31ec227d1313a3ac61cc0e65f9d337948af511b90d0aa49321e1074cd4f2cfc548e655c9124ac2d67a2b54313bb70e93004f738d08844f6bf03b6b947f7ef616e0df9fb68800c72b7626d7f77c9c201f68828e4e178116b05ff954440c8db0d7"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r4 = syz_open_dev$hidraw(&(0x7f0000001300)='/dev/hidraw#\x00', 0x0, 0x41) r5 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5e, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80284504, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000012c0)={0x80, 0x5, 0x830c, 0x2, "09738855f8bbb430744feb4e216baa45df434c8d892fdaf6966ac4a3dd6a9e7f"}) write$hidraw(r4, &(0x7f0000002d80)="961e782da136c24bc08d302972a62ecfe3cbeead1c954c7742868c42011a331f2e92dc729b41d125c492e95d9516199064d5c77956e7f4086d533f1446cfffce26ec03d6452313cdd5acfede0cb2cfc5b7677939c7f836c19d839d27e54abd54ee564a34f9ddce5aba0e4cfcc8ae4871522b2854d636453bd4b9579fac970fd342f7a2c9fa881d442e2e61bcbcb73c0f2f2e8b6c075face514675ba4aff91d01148ee7a619061990cb32807e7dabb1a73a1dba70f62308537c75ef78178017ae1120d4ed", 0xc4) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000080)) syz_open_dev$hidraw(0x0, 0x0, 0x0) 00:56:31 executing program 3: 00:56:31 executing program 0: 00:56:31 executing program 1: 00:56:31 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:56:31 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) vmsplice(r1, &(0x7f00000000c0)=[{}, {0x0}], 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x30007, 0x0) 00:56:31 executing program 0: 00:56:31 executing program 3: 00:56:31 executing program 1: 00:56:31 executing program 3: 00:56:31 executing program 1: 00:56:31 executing program 0: [ 1940.206584][ T2522] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1940.587148][ T2522] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1940.598434][ T2522] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1940.608742][ T2522] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1940.618103][ T2522] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1940.629970][ T2522] usb 6-1: config 0 descriptor?? [ 1941.089288][ T5212] udc-core: couldn't find an available UDC or it's busy [ 1941.097888][ T5212] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1941.409369][ T2522] keytouch 0003:0926:3333.0266: fixing up Keytouch IEC report descriptor [ 1941.421051][ T2522] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0266/input/input564 [ 1941.513944][ T2522] keytouch 0003:0926:3333.0266: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1941.626501][ T2522] usb 6-1: USB disconnect, device number 64 00:56:33 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)={0x40, 0x0, 0x2e, {0x2e, 0x5, "2648f7be311be28e381acfa4ed14d8562969866bdab65e5d4220d683e10a03c2a3cd510e8ac901ff8db0bf5d"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x7fffff9, 0xf007, 0x1, [0xc0f0, 0x1fe00c0]}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x0, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x43}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) r3 = syz_open_dev$evdev(&(0x7f0000001200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000001280)={0x1f, 0x1, &(0x7f0000001240)="7f"}) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af4566f3c7347185913f6185b306e694b7c75ea187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f00000004c0)=ANY=[], &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "fc7100269712596c1c0d58c245f9288bf191c1b2d9e0ad034268fecdcd70b64ed4c6e89a0258cbcf833bc1eb865d68be278f5a18754ff7313cb371def95e6e05f55fde7aaba59e06c4ccd15f53687551e509ff69fd40908a2437f4a01d300b0171b3ef07ee7433422f93afd890907707b2ccd358604b5cb1dd095847ec110bf1d9fbef1e51fbfccd883518ea849192df942e366f1734ddbd5fa67f1bad262fcb31ec227d1313a3ac61cc0e65f9d337948af511b90d0aa49321e1074cd4f2cfc548e655c9124ac2d67a2b54313bb70e93004f738d08844f6bf03b6b947f7ef616e0df9fb68800c72b7626d7f77c9c201f68828e4e178116b05ff954440c8db0d7"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r4 = syz_open_dev$hidraw(&(0x7f0000001300)='/dev/hidraw#\x00', 0x0, 0x41) r5 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5e, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80284504, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000012c0)={0x80, 0x5, 0x830c, 0x2, "09738855f8bbb430744feb4e216baa45df434c8d892fdaf6966ac4a3dd6a9e7f"}) write$hidraw(r4, &(0x7f0000002d80)="961e782da136c24bc08d302972a62ecfe3cbeead1c954c7742868c42011a331f2e92dc729b41d125c492e95d9516199064d5c77956e7f4086d533f1446cfffce26ec03d6452313cdd5acfede0cb2cfc5b7677939c7f836c19d839d27e54abd54ee564a34f9ddce5aba0e4cfcc8ae4871522b2854d636453bd4b9579fac970fd342f7a2c9fa881d442e2e61bcbcb73c0f2f2e8b6c075face514675ba4aff91d01148ee7a619061990cb32807e7dabb1a73a1dba70f62308537c75ef78178017ae1120d4ed", 0xc4) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000080)) syz_open_dev$hidraw(0x0, 0x0, 0x0) 00:56:33 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:56:33 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) vmsplice(r1, &(0x7f00000000c0)=[{}, {0x0}], 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x30007, 0x0) 00:56:33 executing program 0: 00:56:33 executing program 3: 00:56:33 executing program 1: 00:56:33 executing program 3: 00:56:33 executing program 1: 00:56:33 executing program 0: 00:56:33 executing program 3: 00:56:33 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:56:33 executing program 3: [ 1942.736462][ T9903] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1943.146420][ T9903] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1943.157422][ T9903] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1943.170996][ T9903] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1943.182573][ T9903] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1943.193544][ T9903] usb 6-1: config 0 descriptor?? [ 1943.658380][ T5278] udc-core: couldn't find an available UDC or it's busy [ 1943.665674][ T5278] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1943.987388][ T9903] keytouch 0003:0926:3333.0267: fixing up Keytouch IEC report descriptor [ 1943.999176][ T9903] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0267/input/input565 [ 1944.087110][ T9903] keytouch 0003:0926:3333.0267: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1944.194116][ T9903] usb 6-1: USB disconnect, device number 65 00:56:36 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)={0x40, 0x0, 0x2e, {0x2e, 0x5, "2648f7be311be28e381acfa4ed14d8562969866bdab65e5d4220d683e10a03c2a3cd510e8ac901ff8db0bf5d"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x7fffff9, 0xf007, 0x1, [0xc0f0, 0x1fe00c0]}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x0, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x43}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) r3 = syz_open_dev$evdev(&(0x7f0000001200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000001280)={0x1f, 0x1, &(0x7f0000001240)="7f"}) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af4566f3c7347185913f6185b306e694b7c75ea187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f00000004c0)=ANY=[], &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "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"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r4 = syz_open_dev$hidraw(&(0x7f0000001300)='/dev/hidraw#\x00', 0x0, 0x41) r5 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5e, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80284504, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000012c0)={0x80, 0x5, 0x830c, 0x2, "09738855f8bbb430744feb4e216baa45df434c8d892fdaf6966ac4a3dd6a9e7f"}) write$hidraw(r4, &(0x7f0000002d80)="961e782da136c24bc08d302972a62ecfe3cbeead1c954c7742868c42011a331f2e92dc729b41d125c492e95d9516199064d5c77956e7f4086d533f1446cfffce26ec03d6452313cdd5acfede0cb2cfc5b7677939c7f836c19d839d27e54abd54ee564a34f9ddce5aba0e4cfcc8ae4871522b2854d636453bd4b9579fac970fd342f7a2c9fa881d442e2e61bcbcb73c0f2f2e8b6c075face514675ba4aff91d01148ee7a619061990cb32807e7dabb1a73a1dba70f62308537c75ef78178017ae1120d4ed", 0xc4) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000080)) syz_open_dev$hidraw(0x0, 0x0, 0x0) 00:56:36 executing program 0: 00:56:36 executing program 3: 00:56:36 executing program 1: 00:56:36 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) vmsplice(r1, &(0x7f00000000c0)=[{}, {0x0}], 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x30007, 0x0) 00:56:36 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:56:36 executing program 3: 00:56:36 executing program 1: 00:56:36 executing program 0: 00:56:36 executing program 3: 00:56:36 executing program 1: 00:56:36 executing program 0: [ 1945.286272][ T2522] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1945.646276][ T2522] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1945.657656][ T2522] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1945.669610][ T2522] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1945.679525][ T2522] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1945.692467][ T2522] usb 6-1: config 0 descriptor?? [ 1946.159288][ T5347] udc-core: couldn't find an available UDC or it's busy [ 1946.166367][ T5347] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1946.477310][ T2522] keytouch 0003:0926:3333.0268: fixing up Keytouch IEC report descriptor [ 1946.495793][ T2522] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0268/input/input566 [ 1946.581545][ T2522] keytouch 0003:0926:3333.0268: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1946.689139][ T9903] usb 6-1: USB disconnect, device number 66 00:56:38 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810300000000003cf57187b312525b631dda1ea9b142bd891381f1343366ade89a08e1cf0f98b5ef41723da4a9166d9587c13a27b926deaedfc0e23540aa2a491d0041c82c1cef6b12b15b8ebb95144b567cc87d36c55c6f74ee455f0f16bee8885271686a58a13ecf239365a8d86391a25ea859d07bf8ae8d27bbeb4858431b95a08406c74bb0603bf8a56ab62c448e925fe31569b9611da91b0c4276ca64e90781a2a1703ac2f8a285d9fb645e9937824ed2c6690971ea801f840920a87e5ebebed4e972d8b98666bcaf88424b834db21281a7be5ebe3c6063381d34877d8f1b0ef4267b16c536a3f9aa577cc9953ca2048ca44d1baaff811ec5b965b92f04553fb17d2b1546ef30e4413de6c57aa334d2948f1189aef576773dec278c51fb0c4483db3387d09415f654f31ab1b20fd95df5a8031340f6"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)={0x40, 0x0, 0x2e, {0x2e, 0x5, "2648f7be311be28e381acfa4ed14d8562969866bdab65e5d4220d683e10a03c2a3cd510e8ac901ff8db0bf5d"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x7fffff9, 0xf007, 0x1, [0xc0f0, 0x1fe00c0]}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x0, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x43}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) r3 = syz_open_dev$evdev(&(0x7f0000001200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000001280)={0x1f, 0x1, &(0x7f0000001240)="7f"}) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af4566f3c7347185913f6185b306e694b7c75ea187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f00000004c0)=ANY=[], &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "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"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r4 = syz_open_dev$hidraw(&(0x7f0000001300)='/dev/hidraw#\x00', 0x0, 0x41) r5 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5e, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80284504, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000012c0)={0x80, 0x5, 0x830c, 0x2, "09738855f8bbb430744feb4e216baa45df434c8d892fdaf6966ac4a3dd6a9e7f"}) write$hidraw(r4, &(0x7f0000002d80)="961e782da136c24bc08d302972a62ecfe3cbeead1c954c7742868c42011a331f2e92dc729b41d125c492e95d9516199064d5c77956e7f4086d533f1446cfffce26ec03d6452313cdd5acfede0cb2cfc5b7677939c7f836c19d839d27e54abd54ee564a34f9ddce5aba0e4cfcc8ae4871522b2854d636453bd4b9579fac970fd342f7a2c9fa881d442e2e61bcbcb73c0f2f2e8b6c075face514675ba4aff91d01148ee7a619061990cb32807e7dabb1a73a1dba70f62308537c75ef78178017ae1120d4ed", 0xc4) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000080)) syz_open_dev$hidraw(0x0, 0x0, 0x0) 00:56:38 executing program 3: 00:56:38 executing program 0: 00:56:38 executing program 1: 00:56:38 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x30007, 0x0) 00:56:38 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:56:38 executing program 3: 00:56:38 executing program 1: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000001180)='threaded\x00', 0xfc9a) sync_file_range(r0, 0x0, 0x0, 0x2) 00:56:38 executing program 0: sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@remote, @in=@initdev}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30}, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000200)) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\trus\xac\x84cusgrVex:De', 0x0) keyctl$chown(0x6, 0x0, 0x0, 0x0) 00:56:38 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/timer\x00', 0x0) clone(0x200183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000300)={0x3ff}, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 00:56:38 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e"], 0x109) 00:56:38 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uhid\x00', 0x802, 0x0) splice(r0, 0x0, r2, 0x0, 0x81420000a77, 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0x78) [ 1947.742107][T21857] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1947.775138][ T5432] UHID_CREATE from different security context by process 3859 (syz-executor.0), this is not allowed. [ 1948.166245][T21857] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1948.183041][T21857] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1948.194721][T21857] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1948.229475][T21857] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1948.250306][T21857] usb 6-1: config 0 descriptor?? [ 1948.738054][ T5412] udc-core: couldn't find an available UDC or it's busy [ 1948.746697][ T5412] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1949.069515][T21857] keytouch 0003:0926:3333.0269: fixing up Keytouch IEC report descriptor [ 1949.081676][T21857] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0269/input/input567 [ 1949.162242][T21857] keytouch 0003:0926:3333.0269: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1949.287019][T21857] usb 6-1: USB disconnect, device number 67 00:56:41 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)={0x40, 0x0, 0x2e, {0x2e, 0x5, "2648f7be311be28e381acfa4ed14d8562969866bdab65e5d4220d683e10a03c2a3cd510e8ac901ff8db0bf5d"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x7fffff9, 0xf007, 0x1, [0xc0f0, 0x1fe00c0]}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x0, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x43}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) r3 = syz_open_dev$evdev(&(0x7f0000001200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000001280)={0x1f, 0x1, &(0x7f0000001240)="7f"}) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af4566f3c7347185913f6185b306e694b7c75ea187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f00000004c0)=ANY=[@ANYBLOB], &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "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"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r4 = syz_open_dev$hidraw(&(0x7f0000001300)='/dev/hidraw#\x00', 0x0, 0x41) r5 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5e, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80284504, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000012c0)={0x80, 0x5, 0x830c, 0x2, "09738855f8bbb430744feb4e216baa45df434c8d892fdaf6966ac4a3dd6a9e7f"}) write$hidraw(r4, &(0x7f0000002d80)="961e782da136c24bc08d302972a62ecfe3cbeead1c954c7742868c42011a331f2e92dc729b41d125c492e95d9516199064d5c77956e7f4086d533f1446cfffce26ec03d6452313cdd5acfede0cb2cfc5b7677939c7f836c19d839d27e54abd54ee564a34f9ddce5aba0e4cfcc8ae4871522b2854d636453bd4b9579fac970fd342f7a2c9fa881d442e2e61bcbcb73c0f2f2e8b6c075face514675ba4aff91d01148ee7a619061990cb32807e7dabb1a73a1dba70f62308537c75ef78178017ae1120d4ed", 0xc4) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000080)) syz_open_dev$hidraw(0x0, 0x0, 0x0) 00:56:41 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(r0, &(0x7f0000002700)=[{&(0x7f0000000240)=""/54, 0x36}], 0x1, 0xa8dc) 00:56:41 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGRAB(r0, 0x80084502, 0x0) 00:56:41 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x30007, 0x0) 00:56:41 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:56:41 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc337e0036e7405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479", 0x34}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:56:41 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/ashmem\x00', 0x0, 0x0) dup2(r0, r1) [ 1950.023642][ T5506] ptrace attach of "/root/syz-executor.3"[5504] was attempted by "/root/syz-executor.3"[5506] 00:56:41 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000080)=@lang_id={0x4}}, {0x76, &(0x7f00000000c0)=@string={0x76, 0x3, "866dfee34d8ab45deb6a161a74833c0651074b1b15f9fd32c6fc0a8e17d4d411c91b90dc8e8abd09d1e661c1841602c6b6c2644b5eee994790e51070d5d23d8f4092632075bafcf8b20ef736dc9e3b0f8bc1bade92f0c0ed286fcd1c2f9e400648d4a605bf4d3f506a1422a6a94029fa1757b1df"}}]}) 00:56:41 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet6_udp(0xa, 0x2, 0x0) read(r1, &(0x7f0000000040)=""/15, 0xf) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x40) 00:56:41 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0) [ 1950.296087][ T23] usb 6-1: new high-speed USB device number 68 using dummy_hcd 00:56:41 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:56:41 executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) umount2(&(0x7f0000000240)='./file0\x00', 0x5) [ 1950.426387][ T5524] ptrace attach of "/root/syz-executor.0"[5522] was attempted by "/root/syz-executor.0"[5524] [ 1950.615912][ T2522] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1950.706852][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1950.725964][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1950.756272][ T23] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1950.775891][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1950.807384][ T23] usb 6-1: config 0 descriptor?? [ 1950.875917][ T2522] usb 2-1: Using ep0 maxpacket: 16 [ 1951.000027][ T2522] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1951.166013][ T2522] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1951.175107][ T2522] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1951.189037][ T2522] usb 2-1: Product: syz [ 1951.193253][ T2522] usb 2-1: Manufacturer: 涆詍嶴櫫ᨖ荴ؼݑᭋ洛㋽ﳆ踊퐗ᇔᯉ誎ঽ셡ᚄ옂슶䭤䞙瀐틕輽鉀⁣멵າ㛷黜༻솋漨᳍鸯ـ푈֦䶿倿ᑪ꘢䂩﨩圗 [ 1951.217080][ T2522] usb 2-1: SerialNumber: syz [ 1951.267187][ T2522] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 1951.268948][ T5508] udc-core: couldn't find an available UDC or it's busy [ 1951.288271][ T5508] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1951.470254][T15019] usb 2-1: USB disconnect, device number 118 [ 1951.607227][ T23] keytouch 0003:0926:3333.026A: fixing up Keytouch IEC report descriptor [ 1951.619010][ T23] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.026A/input/input568 [ 1951.711153][ T23] keytouch 0003:0926:3333.026A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1951.823912][ T23] usb 6-1: USB disconnect, device number 68 [ 1952.245825][T15019] usb 2-1: new high-speed USB device number 119 using dummy_hcd 00:56:43 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000180)="a45849dc08a6971e7738d4b76304e7386cfc47fb1809edb001be5b26da215f0fee24fa3555ecc450938b77ac2b538318c428dbd689099c614093465b103bbbbd2567c75a602a2f15f3774f4eb5b7536214e35c3807b193ed2de1ad68eef4d34148646db8feb79615386eeeaae58e0e4c550f0600000006f8ab") ptrace$cont(0x20, r0, 0x0, 0x0) 00:56:43 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x552}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8, 0x0, 0x4000}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000005780)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{0x0}], 0x1, &(0x7f0000000b00)=""/137, 0x89}}, {{0x0, 0x0, &(0x7f0000002000)}, 0x1f}, {{&(0x7f0000003c40)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000003e40)=""/184, 0xb8}, 0x8}, {{&(0x7f0000005400)=@tipc=@id, 0x80, 0x0}, 0x7ff}], 0x4, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@remote, @in=@initdev}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000140)=0xe8) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x10000000) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fstat(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000004040)=ANY=[@ANYBLOB="02000000010005000000000002", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\b', @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0xee00, @ANYBLOB="a6440100", @ANYRES32=r4, @ANYBLOB="10000200000000002000060000000000"], 0x74, 0x2) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\trus\xac\x84cusgrVex:De', 0x0) keyctl$chown(0x6, 0x0, 0x0, 0x0) 00:56:43 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x30007, 0x0) 00:56:43 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:56:43 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)={0x40, 0x0, 0x2e, {0x2e, 0x5, "2648f7be311be28e381acfa4ed14d8562969866bdab65e5d4220d683e10a03c2a3cd510e8ac901ff8db0bf5d"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x7fffff9, 0xf007, 0x1, [0xc0f0, 0x1fe00c0]}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x0, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x43}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) r3 = syz_open_dev$evdev(&(0x7f0000001200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000001280)={0x1f, 0x1, &(0x7f0000001240)="7f"}) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af4566f3c7347185913f6185b306e694b7c75ea187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f00000004c0)=ANY=[@ANYBLOB], &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "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"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r4 = syz_open_dev$hidraw(&(0x7f0000001300)='/dev/hidraw#\x00', 0x0, 0x41) r5 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5e, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80284504, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000012c0)={0x80, 0x5, 0x830c, 0x2, "09738855f8bbb430744feb4e216baa45df434c8d892fdaf6966ac4a3dd6a9e7f"}) write$hidraw(r4, &(0x7f0000002d80)="961e782da136c24bc08d302972a62ecfe3cbeead1c954c7742868c42011a331f2e92dc729b41d125c492e95d9516199064d5c77956e7f4086d533f1446cfffce26ec03d6452313cdd5acfede0cb2cfc5b7677939c7f836c19d839d27e54abd54ee564a34f9ddce5aba0e4cfcc8ae4871522b2854d636453bd4b9579fac970fd342f7a2c9fa881d442e2e61bcbcb73c0f2f2e8b6c075face514675ba4aff91d01148ee7a619061990cb32807e7dabb1a73a1dba70f62308537c75ef78178017ae1120d4ed", 0xc4) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000080)) syz_open_dev$hidraw(0x0, 0x0, 0x0) [ 1952.495776][T15019] usb 2-1: Using ep0 maxpacket: 16 00:56:43 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VT_RELDISP(r1, 0x5605) pkey_mprotect(&(0x7f0000ff1000/0x3000)=nil, 0x3000, 0x1000000, 0xffffffffffffffff) msync(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x6) [ 1952.563469][ T5598] ptrace attach of "/root/syz-executor.0"[5596] was attempted by "/root/syz-executor.0"[5598] [ 1952.616780][T15019] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 00:56:44 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/full\x00', 0x0, 0x0) bind$pptp(r2, 0x0, 0x0) [ 1952.876006][T15019] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1952.885124][T15019] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1952.953560][T15019] usb 2-1: Product: syz [ 1952.965993][T15019] usb 2-1: Manufacturer: 涆詍嶴櫫ᨖ荴ؼݑᭋ洛㋽ﳆ踊퐗ᇔᯉ誎ঽ셡ᚄ옂슶䭤䞙瀐틕輽鉀⁣멵າ㛷黜༻솋漨᳍鸯ـ푈֦䶿倿ᑪ꘢䂩﨩圗 [ 1952.986676][ T2484] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1953.055796][T15019] usb 2-1: SerialNumber: syz [ 1953.116928][T15019] cdc_ether: probe of 2-1:1.0 failed with error -22 00:56:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e0000001ac1415"], 0x5000) 00:56:44 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) tkill(r4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 00:56:44 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read(r0, &(0x7f0000000400)=""/4096, 0x1000) 00:56:44 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) [ 1953.253012][T15019] usb 2-1: USB disconnect, device number 119 00:56:44 executing program 0: unshare(0x20000400) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) [ 1953.366515][ T2484] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1953.387832][ T2484] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 00:56:44 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1}, 0x0) tkill(0x0, 0x1) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 1953.442706][ T2484] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1953.505352][ T2484] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1953.543473][ T2484] usb 6-1: config 0 descriptor?? 00:56:45 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='\n'], 0x109) 00:56:45 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) vmsplice(r1, &(0x7f00000000c0)=[{}, {0x0}], 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x30007, 0x0) 00:56:45 executing program 0: unshare(0x20000400) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) [ 1954.058964][ T5604] udc-core: couldn't find an available UDC or it's busy [ 1954.093158][ T5604] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1954.436748][ T2484] keytouch 0003:0926:3333.026B: fixing up Keytouch IEC report descriptor [ 1954.455470][ T2484] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.026B/input/input569 [ 1954.571042][ T2484] keytouch 0003:0926:3333.026B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1954.666457][ T2522] usb 6-1: USB disconnect, device number 69 00:56:46 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)={0x40, 0x0, 0x2e, {0x2e, 0x5, "2648f7be311be28e381acfa4ed14d8562969866bdab65e5d4220d683e10a03c2a3cd510e8ac901ff8db0bf5d"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x7fffff9, 0xf007, 0x1, [0xc0f0, 0x1fe00c0]}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x0, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x43}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) r3 = syz_open_dev$evdev(&(0x7f0000001200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000001280)={0x1f, 0x1, &(0x7f0000001240)="7f"}) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af4566f3c7347185913f6185b306e694b7c75ea187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f00000004c0)=ANY=[@ANYBLOB], &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "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"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r4 = syz_open_dev$hidraw(&(0x7f0000001300)='/dev/hidraw#\x00', 0x0, 0x41) r5 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5e, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80284504, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000012c0)={0x80, 0x5, 0x830c, 0x2, "09738855f8bbb430744feb4e216baa45df434c8d892fdaf6966ac4a3dd6a9e7f"}) write$hidraw(r4, &(0x7f0000002d80)="961e782da136c24bc08d302972a62ecfe3cbeead1c954c7742868c42011a331f2e92dc729b41d125c492e95d9516199064d5c77956e7f4086d533f1446cfffce26ec03d6452313cdd5acfede0cb2cfc5b7677939c7f836c19d839d27e54abd54ee564a34f9ddce5aba0e4cfcc8ae4871522b2854d636453bd4b9579fac970fd342f7a2c9fa881d442e2e61bcbcb73c0f2f2e8b6c075face514675ba4aff91d01148ee7a619061990cb32807e7dabb1a73a1dba70f62308537c75ef78178017ae1120d4ed", 0xc4) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000080)) syz_open_dev$hidraw(0x0, 0x0, 0x0) 00:56:46 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) vmsplice(r1, &(0x7f00000000c0)=[{}, {0x0}], 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x30007, 0x0) 00:56:46 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:56:46 executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x552}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8, 0x0, 0x4000}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000005780)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{0x0}], 0x1, &(0x7f0000000b00)=""/137, 0x89}}, {{&(0x7f0000000f00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000002000)}, 0x1f}, {{&(0x7f0000003c40)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000003e40)=""/184, 0xb8}, 0x8}, {{&(0x7f0000005400)=@tipc=@id, 0x80, 0x0}, 0x7ff}], 0x4, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@remote, @in=@initdev}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000140)=0xe8) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x10000000) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fstat(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000004040)=ANY=[@ANYBLOB="02000000010005000000000002", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0xee00, @ANYRES32=r4, @ANYBLOB="10000200000000002000060000000000"], 0x74, 0x2) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\trus\xac\x84cusgrVex:De', 0x0) keyctl$chown(0x6, 0x0, 0x0, 0x0) 00:56:46 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0xff, 0xd2b, 0x1000, 0xf619, 0x0, "06483c7e01001f24"}) 00:56:46 executing program 3: syz_emit_ethernet(0x56, &(0x7f0000000140)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0xb, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev, {[@noop, @timestamp_prespec={0x7, 0x14, 0xb, 0x3, 0x0, [{@dev}, {@broadcast}]}]}}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast2=0x7f000001}}}}}}, 0x0) 00:56:46 executing program 3: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 00:56:46 executing program 0: syz_emit_ethernet(0x56, &(0x7f0000000140)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0xb, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev, {[@noop, @timestamp_prespec={0x44, 0x14, 0xb, 0x3, 0x0, [{@dev}, {@broadcast}]}]}}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast2=0x7f000001}}}}}}, 0x0) 00:56:46 executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x552}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8, 0x0, 0x4000}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000005780)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{0x0}], 0x1, &(0x7f0000000b00)=""/137, 0x89}}, {{&(0x7f0000000f00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000002000)}, 0x1f}, {{&(0x7f0000003c40)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000003e40)=""/184, 0xb8}, 0x8}, {{&(0x7f0000005400)=@tipc=@id, 0x80, 0x0}, 0x7ff}], 0x4, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@remote, @in=@initdev}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000140)=0xe8) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x10000000) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fstat(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000004040)=ANY=[@ANYBLOB="02000000010005000000000002", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0xee00, @ANYRES32=r4, @ANYBLOB="10000200000000002000060000000000"], 0x74, 0x2) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\trus\xac\x84cusgrVex:De', 0x0) keyctl$chown(0x6, 0x0, 0x0, 0x0) 00:56:46 executing program 0: signalfd(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffdd8) 00:56:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast1, @local}, 0x5000) 00:56:47 executing program 0: r0 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="73797a746e6c31000000000000000400", @ANYRES32=0x0, @ANYBLOB="004007a0000000040000000145270054006600000904907800000000e0"]}) [ 1955.776305][ T2522] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1956.176887][ T2522] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1956.205688][ T2522] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1956.205726][ T2522] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1956.226930][ T2522] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1956.238721][ T2522] usb 6-1: config 0 descriptor?? [ 1956.697625][ T5715] udc-core: couldn't find an available UDC or it's busy [ 1956.704703][ T5715] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1957.016558][ T2522] keytouch 0003:0926:3333.026C: fixing up Keytouch IEC report descriptor [ 1957.028280][ T2522] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.026C/input/input570 [ 1957.136183][ T2522] keytouch 0003:0926:3333.026C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1957.233555][ T2522] usb 6-1: USB disconnect, device number 70 00:56:49 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)={0x40, 0x0, 0x2e, {0x2e, 0x5, "2648f7be311be28e381acfa4ed14d8562969866bdab65e5d4220d683e10a03c2a3cd510e8ac901ff8db0bf5d"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x7fffff9, 0xf007, 0x1, [0xc0f0, 0x1fe00c0]}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x0, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x43}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) r3 = syz_open_dev$evdev(&(0x7f0000001200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000001280)={0x1f, 0x1, &(0x7f0000001240)="7f"}) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af4566f3c7347185913f6185b306e694b7c75ea187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f00000004c0)=ANY=[@ANYBLOB="00030400000204030a08b5f4dff5abf62516eefff03b833aaa9a42d8867ada37523214452bbee48a8a4d9667d7fed8e8861b64a47306fb6bcdaf49e1b5639c28c347f81e8fec9b9e5e0adae6664083da44404259382a14f5521d78ff7450eedbe2736c2e5f03f829f560da68281354432a40e6b19e9fd8a6fdb13d66f9"], &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "fc7100269712596c1c0d58c245f9288bf191c1b2d9e0ad034268fecdcd70b64ed4c6e89a0258cbcf833bc1eb865d68be278f5a18754ff7313cb371def95e6e05f55fde7aaba59e06c4ccd15f53687551e509ff69fd40908a2437f4a01d300b0171b3ef07ee7433422f93afd890907707b2ccd358604b5cb1dd095847ec110bf1d9fbef1e51fbfccd883518ea849192df942e366f1734ddbd5fa67f1bad262fcb31ec227d1313a3ac61cc0e65f9d337948af511b90d0aa49321e1074cd4f2cfc548e655c9124ac2d67a2b54313bb70e93004f738d08844f6bf03b6b947f7ef616e0df9fb68800c72b7626d7f77c9c201f68828e4e178116b05ff954440c8db0d7"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r4 = syz_open_dev$hidraw(&(0x7f0000001300)='/dev/hidraw#\x00', 0x0, 0x41) r5 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5e, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80284504, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000012c0)={0x80, 0x5, 0x830c, 0x2, "09738855f8bbb430744feb4e216baa45df434c8d892fdaf6966ac4a3dd6a9e7f"}) write$hidraw(r4, &(0x7f0000002d80)="961e782da136c24bc08d302972a62ecfe3cbeead1c954c7742868c42011a331f2e92dc729b41d125c492e95d9516199064d5c77956e7f4086d533f1446cfffce26ec03d6452313cdd5acfede0cb2cfc5b7677939c7f836c19d839d27e54abd54ee564a34f9ddce5aba0e4cfcc8ae4871522b2854d636453bd4b9579fac970fd342f7a2c9fa881d442e2e61bcbcb73c0f2f2e8b6c075face514675ba4aff91d01148ee7a619061990cb32807e7dabb1a73a1dba70f62308537c75ef78178017ae1120d4ed", 0xc4) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000080)) syz_open_dev$hidraw(0x0, 0x0, 0x0) 00:56:49 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGRAB(r0, 0x80044501, 0x0) 00:56:49 executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x552}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8, 0x0, 0x4000}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000005780)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{0x0}], 0x1, &(0x7f0000000b00)=""/137, 0x89}}, {{&(0x7f0000000f00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000002000)}, 0x1f}, {{&(0x7f0000003c40)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000003e40)=""/184, 0xb8}, 0x8}, {{&(0x7f0000005400)=@tipc=@id, 0x80, 0x0}, 0x7ff}], 0x4, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@remote, @in=@initdev}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000140)=0xe8) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x10000000) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fstat(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000004040)=ANY=[@ANYBLOB="02000000010005000000000002", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0xee00, @ANYRES32=r4, @ANYBLOB="10000200000000002000060000000000"], 0x74, 0x2) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\trus\xac\x84cusgrVex:De', 0x0) keyctl$chown(0x6, 0x0, 0x0, 0x0) 00:56:49 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000019540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc0, 0xc0, 0x9, [@union={0x0, 0x8, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @const, @struct={0x0, 0x5, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0xe1}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:56:49 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:56:49 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) vmsplice(r1, &(0x7f00000000c0)=[{}, {0x0}], 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x30007, 0x0) [ 1957.976946][ T5798] ptrace attach of "/root/syz-executor.0"[5796] was attempted by "/root/syz-executor.0"[5798] 00:56:49 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x200000000801, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [], [0xc]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000180)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x11]}, 0x45c) 00:56:49 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGRAB(r0, 0x40044591, 0x0) 00:56:49 executing program 3: syz_emit_ethernet(0x56, &(0x7f0000000140)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0xb, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev, {[@noop, @timestamp_prespec={0x44, 0xe, 0xb, 0x3, 0x0, [{@dev}, {@broadcast}]}]}}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast2=0x7f000001}}}}}}, 0x0) [ 1958.245478][ T2484] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1958.254007][ T5814] input: syz1 as /devices/virtual/input/input571 00:56:49 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r3, 0x540b, 0x2) 00:56:49 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:56:49 executing program 1: unshare(0x20000400) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) [ 1958.421511][ T5826] input: syz1 as /devices/virtual/input/input572 [ 1958.636588][ T2484] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1958.665833][ T2484] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1958.707262][ T2484] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1958.781474][ T2484] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1958.824309][ T2484] usb 6-1: config 0 descriptor?? [ 1959.328037][ T5799] udc-core: couldn't find an available UDC or it's busy [ 1959.335042][ T5799] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1959.649457][ T2484] keytouch 0003:0926:3333.026D: fixing up Keytouch IEC report descriptor [ 1959.660303][ T2484] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.026D/input/input573 [ 1959.740753][ T2484] keytouch 0003:0926:3333.026D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1959.863990][T15019] usb 6-1: USB disconnect, device number 71 00:56:51 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0xb1, 0x46, 0xe1, 0x8, 0x83a, 0xb512, 0xf34c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x45, 0xd2, 0x45, 0x8}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x19, &(0x7f0000000080)={0x5, 0xf, 0x19, 0x1, [@generic={0x14, 0x10, 0xa, "f306a8edfac0cbbe121ba8a1423f2a5ab5"}]}}) r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 00:56:51 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) preadv(r1, &(0x7f00000022c0)=[{0x0}, {&(0x7f0000001240)=""/99, 0x63}], 0x2, 0x0) dup2(r1, r0) 00:56:51 executing program 1: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102387, 0x18ff3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:56:51 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) vmsplice(r1, &(0x7f00000000c0)=[{}, {0x0}], 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x30007, 0x0) 00:56:51 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:56:51 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)={0x40, 0x0, 0x2e, {0x2e, 0x5, "2648f7be311be28e381acfa4ed14d8562969866bdab65e5d4220d683e10a03c2a3cd510e8ac901ff8db0bf5d"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x7fffff9, 0xf007, 0x1, [0xc0f0, 0x1fe00c0]}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x0, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x43}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) r3 = syz_open_dev$evdev(&(0x7f0000001200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000001280)={0x1f, 0x1, &(0x7f0000001240)="7f"}) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af4566f3c7347185913f6185b306e694b7c75ea187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f00000004c0)=ANY=[@ANYBLOB="00030400000204030a08b5f4dff5abf62516eefff03b833aaa9a42d8867ada37523214452bbee48a8a4d9667d7fed8e8861b64a47306fb6bcdaf49e1b5639c28c347f81e8fec9b9e5e0adae6664083da44404259382a14f5521d78ff7450eedbe2736c2e5f03f829f560da68281354432a40e6b19e9fd8a6fdb13d66f9"], &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "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"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r4 = syz_open_dev$hidraw(&(0x7f0000001300)='/dev/hidraw#\x00', 0x0, 0x41) r5 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5e, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80284504, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000012c0)={0x80, 0x5, 0x830c, 0x2, "09738855f8bbb430744feb4e216baa45df434c8d892fdaf6966ac4a3dd6a9e7f"}) write$hidraw(r4, &(0x7f0000002d80)="961e782da136c24bc08d302972a62ecfe3cbeead1c954c7742868c42011a331f2e92dc729b41d125c492e95d9516199064d5c77956e7f4086d533f1446cfffce26ec03d6452313cdd5acfede0cb2cfc5b7677939c7f836c19d839d27e54abd54ee564a34f9ddce5aba0e4cfcc8ae4871522b2854d636453bd4b9579fac970fd342f7a2c9fa881d442e2e61bcbcb73c0f2f2e8b6c075face514675ba4aff91d01148ee7a619061990cb32807e7dabb1a73a1dba70f62308537c75ef78178017ae1120d4ed", 0xc4) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000080)) syz_open_dev$hidraw(0x0, 0x0, 0x0) 00:56:51 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) [ 1960.618649][ T5903] ptrace attach of "/root/syz-executor.1"[5902] was attempted by "/root/syz-executor.1"[5903] 00:56:52 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x9, 0x0, 0xfff7, 0x0, 0x0, "0100"}) [ 1960.875429][T15019] usb 4-1: new high-speed USB device number 3 using dummy_hcd 00:56:52 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[], 0x65) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1960.925523][ T2522] usb 6-1: new high-speed USB device number 72 using dummy_hcd 00:56:52 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0) 00:56:52 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) [ 1961.115358][T15019] usb 4-1: Using ep0 maxpacket: 8 00:56:52 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000040)=ANY=[@ANYBLOB="12010102020000102505a1a44000010203010902440001010000000901"], &(0x7f0000000000)={0x0, 0x0, 0x23, 0x0}) [ 1961.296443][ T2522] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1961.325886][ T2522] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1961.353956][ T2522] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1961.380218][ T2522] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1961.404464][ T2522] usb 6-1: config 0 descriptor?? [ 1961.476176][T15019] usb 4-1: New USB device found, idVendor=083a, idProduct=b512, bcdDevice=f3.4c [ 1961.500591][T15019] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1961.525471][T15019] usb 4-1: Product: syz [ 1961.529788][T15019] usb 4-1: Manufacturer: syz [ 1961.534479][T15019] usb 4-1: SerialNumber: syz [ 1961.540661][ T2536] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1961.592842][T15019] usb 4-1: config 0 descriptor?? [ 1961.805383][ T2536] usb 2-1: Using ep0 maxpacket: 16 [ 1961.884445][T15019] usb 4-1: USB disconnect, device number 3 [ 1961.892233][ T5907] udc-core: couldn't find an available UDC or it's busy [ 1961.901900][ T5907] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1961.967369][ T2536] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1962.055909][ T2536] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1962.072760][ T2536] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1962.096243][ T2536] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1962.266254][ T2522] keytouch 0003:0926:3333.026E: fixing up Keytouch IEC report descriptor [ 1962.275815][ T2536] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1962.284909][ T2536] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1962.302627][ T2522] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.026E/input/input574 [ 1962.315479][ T2536] usb 2-1: Product: syz [ 1962.319727][ T2536] usb 2-1: Manufacturer: syz [ 1962.324363][ T2536] usb 2-1: SerialNumber: syz [ 1962.405623][ T2522] keytouch 0003:0926:3333.026E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1962.486058][ T2522] usb 6-1: USB disconnect, device number 72 [ 1962.574117][ T2536] usb 2-1: USB disconnect, device number 120 [ 1962.615359][ T2484] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1962.875158][ T2484] usb 4-1: Using ep0 maxpacket: 8 [ 1963.285306][ T2484] usb 4-1: New USB device found, idVendor=083a, idProduct=b512, bcdDevice=f3.4c [ 1963.294913][ T2484] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1963.303788][ T2484] usb 4-1: Product: syz [ 1963.308517][ T2484] usb 4-1: Manufacturer: syz [ 1963.313401][ T2484] usb 4-1: SerialNumber: syz [ 1963.323452][ T2484] usb 4-1: config 0 descriptor?? [ 1963.346803][ T2522] usb 2-1: new high-speed USB device number 121 using dummy_hcd 00:56:54 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) syz_usb_connect(0x3, 0x3a, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x74, 0x1, 0x5b, 0x20, 0x1b3d, 0x1c5, 0x1c68, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x99, 0x87, 0x54, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0x4}]}}]}}]}}]}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 00:56:54 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) vmsplice(r1, &(0x7f00000000c0)=[{}, {0x0}], 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x30007, 0x0) 00:56:54 executing program 0: r0 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r0, 0xd01c4813, 0x0) 00:56:54 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:56:54 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)={0x40, 0x0, 0x2e, {0x2e, 0x5, "2648f7be311be28e381acfa4ed14d8562969866bdab65e5d4220d683e10a03c2a3cd510e8ac901ff8db0bf5d"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x7fffff9, 0xf007, 0x1, [0xc0f0, 0x1fe00c0]}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x0, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x43}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) r3 = syz_open_dev$evdev(&(0x7f0000001200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000001280)={0x1f, 0x1, &(0x7f0000001240)="7f"}) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af4566f3c7347185913f6185b306e694b7c75ea187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f00000004c0)=ANY=[@ANYBLOB="00030400000204030a08b5f4dff5abf62516eefff03b833aaa9a42d8867ada37523214452bbee48a8a4d9667d7fed8e8861b64a47306fb6bcdaf49e1b5639c28c347f81e8fec9b9e5e0adae6664083da44404259382a14f5521d78ff7450eedbe2736c2e5f03f829f560da68281354432a40e6b19e9fd8a6fdb13d66f9"], &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "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"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r4 = syz_open_dev$hidraw(&(0x7f0000001300)='/dev/hidraw#\x00', 0x0, 0x41) r5 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5e, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80284504, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000012c0)={0x80, 0x5, 0x830c, 0x2, "09738855f8bbb430744feb4e216baa45df434c8d892fdaf6966ac4a3dd6a9e7f"}) write$hidraw(r4, &(0x7f0000002d80)="961e782da136c24bc08d302972a62ecfe3cbeead1c954c7742868c42011a331f2e92dc729b41d125c492e95d9516199064d5c77956e7f4086d533f1446cfffce26ec03d6452313cdd5acfede0cb2cfc5b7677939c7f836c19d839d27e54abd54ee564a34f9ddce5aba0e4cfcc8ae4871522b2854d636453bd4b9579fac970fd342f7a2c9fa881d442e2e61bcbcb73c0f2f2e8b6c075face514675ba4aff91d01148ee7a619061990cb32807e7dabb1a73a1dba70f62308537c75ef78178017ae1120d4ed", 0xc4) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000080)) syz_open_dev$hidraw(0x0, 0x0, 0x0) [ 1963.590847][ T2522] usb 2-1: Using ep0 maxpacket: 16 [ 1963.605343][ T2484] usb 4-1: USB disconnect, device number 4 00:56:54 executing program 0: r0 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="73797a746e6c31000000000000000400", @ANYRES32=0x0, @ANYBLOB="004007a0000010040000000145271054006600000904907800000000e03f"]}) 00:56:55 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) [ 1963.759425][ T2522] usb 2-1: unable to get BOS descriptor or descriptor too short 00:56:55 executing program 0: unshare(0x20000400) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) recvmsg(r0, 0x0, 0x0) [ 1963.846103][ T2522] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1963.854871][ T2522] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1963.885366][ T2522] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 00:56:55 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102020000102505a1a440000102030109024400010100000009040100000206000005244f"], &(0x7f0000000740)={0x0, 0x0, 0x23, 0x0}) [ 1963.951167][ T2536] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1964.046059][ T2522] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1964.055235][ T2522] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1964.064310][ T2522] usb 2-1: Product: syz [ 1964.071521][ T2522] usb 2-1: Manufacturer: syz [ 1964.084602][ T2522] usb 2-1: SerialNumber: syz [ 1964.095114][ T2484] usb 4-1: new high-speed USB device number 5 using dummy_hcd 00:56:55 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x97, 0xbc, 0x8b, 0x20, 0x19d2, 0xff8e, 0x8bde, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x80, 0xf5a8f50d72140f69, 0x400}}]}}]}}]}}, 0x0) [ 1964.236191][T15019] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1964.269664][ T2522] usb 2-1: USB disconnect, device number 121 [ 1964.315898][ T2536] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1964.345279][ T2536] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1964.362237][ T2536] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1964.375219][ T2484] usb 4-1: Using ep0 maxpacket: 32 [ 1964.381935][ T2536] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1964.404807][ T2536] usb 6-1: config 0 descriptor?? 00:56:55 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) vmsplice(r1, &(0x7f00000000c0)=[{}, {0x0}], 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x30007, 0x0) [ 1964.475165][T15019] usb 1-1: Using ep0 maxpacket: 16 [ 1964.505770][ T2484] usb 4-1: config 0 has an invalid interface descriptor of length 2, skipping [ 1964.526287][ T2484] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1964.555362][ T2484] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping 00:56:55 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) [ 1964.635984][T15019] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1964.726769][T15019] usb 1-1: config 1 has an invalid interface number: 1 but max is 0 [ 1964.734839][T15019] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1964.746382][ T2522] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1964.761408][T15019] usb 1-1: config 1 has no interface number 0 [ 1964.776170][ T2484] usb 4-1: New USB device found, idVendor=1b3d, idProduct=01c5, bcdDevice=1c.68 [ 1964.793840][ T2484] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1964.814281][ T2484] usb 4-1: Product: syz [ 1964.825541][ T2484] usb 4-1: Manufacturer: syz [ 1964.837933][ T2484] usb 4-1: SerialNumber: syz [ 1964.860613][ T2484] usb 4-1: config 0 descriptor?? [ 1964.876150][ T6010] udc-core: couldn't find an available UDC or it's busy [ 1964.906827][ T6010] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1964.927236][ T2484] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 1964.946238][T15019] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1964.964773][ T2484] usb 4-1: Detected FT-X [ 1964.964891][T15019] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1965.015470][ T2522] usb 2-1: Using ep0 maxpacket: 32 [ 1965.083408][T15019] usb 1-1: Product: syz [ 1965.088852][T15019] usb 1-1: Manufacturer: syz [ 1965.105082][T15019] usb 1-1: SerialNumber: syz [ 1965.136065][ T2522] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1965.149397][T15019] usb 1-1: bad CDC descriptors [ 1965.155443][ T2484] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1965.185642][ T2484] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1965.200771][ T2484] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1965.226511][ T2536] keytouch 0003:0926:3333.026F: fixing up Keytouch IEC report descriptor [ 1965.239166][ T2484] usb 4-1: USB disconnect, device number 5 [ 1965.253333][ T2536] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.026F/input/input575 [ 1965.287094][ T2484] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1965.341126][ T2484] ftdi_sio 4-1:0.0: device disconnected [ 1965.365938][ T2522] usb 2-1: New USB device found, idVendor=19d2, idProduct=ff8e, bcdDevice=8b.de [ 1965.391283][T21857] usb 1-1: USB disconnect, device number 106 [ 1965.408536][ T2536] keytouch 0003:0926:3333.026F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1965.455782][ T2522] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1965.534477][ T2522] usb 2-1: Product: syz [ 1965.540667][ T2536] usb 6-1: USB disconnect, device number 73 [ 1965.563316][ T2522] usb 2-1: Manufacturer: syz [ 1965.585215][ T2522] usb 2-1: SerialNumber: syz [ 1965.605779][ T2522] usb 2-1: config 0 descriptor?? [ 1965.646484][ T2522] option 2-1:0.0: GSM modem (1-port) converter detected 00:56:57 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0xb1, 0x46, 0xe1, 0x8, 0x83a, 0xb512, 0xf34c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x45, 0xd2, 0x45, 0x8}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x2d, &(0x7f0000000080)={0x5, 0xf, 0x2d, 0x1, [@generic={0x28, 0x10, 0xa, "f306a8edfac0cbbe121ba8a1423f2a5ab522ec6622e418b340eaff95be15ce9dc31934c227"}]}}) r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 00:56:57 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:56:57 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) vmsplice(r1, &(0x7f00000000c0)=[{}, {0x0}], 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x30007, 0x0) [ 1965.851669][ T2484] usb 2-1: USB disconnect, device number 122 [ 1965.878767][ T2484] option 2-1:0.0: device disconnected 00:56:57 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)={0x40, 0x0, 0x2e, {0x2e, 0x5, "2648f7be311be28e381acfa4ed14d8562969866bdab65e5d4220d683e10a03c2a3cd510e8ac901ff8db0bf5d"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x7fffff9, 0xf007, 0x1, [0xc0f0, 0x1fe00c0]}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x0, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x43}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) r3 = syz_open_dev$evdev(&(0x7f0000001200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000001280)={0x1f, 0x1, &(0x7f0000001240)="7f"}) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af4566f3c7347185913f6185b306e694b7c75ea187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f00000004c0)=ANY=[@ANYBLOB="00030400000204030a08b5f4dff5abf62516eefff03b833aaa9a42d8867ada37523214452bbee48a8a4d9667d7fed8e8861b64a47306fb6bcdaf49e1b5639c28c347f81e8fec9b9e5e0adae6664083da44404259382a14f5521d78ff7450eedbe2736c2e5f03f829f560da68281354432a40e6b19e9fd8a6fdb13d66f91b58b8563c2cc4e5438d1e3c61487fd4eb83c5db960ac76404b1e962bd616962af6c335d15d0ad947a2321bf0bfa15f6a2b8a6354a95267eb37d4e60d62540"], &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "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"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r4 = syz_open_dev$hidraw(&(0x7f0000001300)='/dev/hidraw#\x00', 0x0, 0x41) r5 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5e, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80284504, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000012c0)={0x80, 0x5, 0x830c, 0x2, "09738855f8bbb430744feb4e216baa45df434c8d892fdaf6966ac4a3dd6a9e7f"}) write$hidraw(r4, &(0x7f0000002d80)="961e782da136c24bc08d302972a62ecfe3cbeead1c954c7742868c42011a331f2e92dc729b41d125c492e95d9516199064d5c77956e7f4086d533f1446cfffce26ec03d6452313cdd5acfede0cb2cfc5b7677939c7f836c19d839d27e54abd54ee564a34f9ddce5aba0e4cfcc8ae4871522b2854d636453bd4b9579fac970fd342f7a2c9fa881d442e2e61bcbcb73c0f2f2e8b6c075face514675ba4aff91d01148ee7a619061990cb32807e7dabb1a73a1dba70f62308537c75ef78178017ae1120d4ed", 0xc4) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000080)) syz_open_dev$hidraw(0x0, 0x0, 0x0) [ 1966.135079][ T2522] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1966.205030][T15019] usb 4-1: new high-speed USB device number 6 using dummy_hcd 00:56:57 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) [ 1966.385877][ T2522] usb 1-1: Using ep0 maxpacket: 16 [ 1966.457093][T15019] usb 4-1: Using ep0 maxpacket: 8 00:56:57 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) vmsplice(r1, &(0x7f00000000c0)=[{}, {0x0}], 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x30007, 0x0) [ 1966.546338][ T2522] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1966.576305][ T2536] usb 6-1: new high-speed USB device number 74 using dummy_hcd 00:56:57 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) [ 1966.630772][ T2522] usb 1-1: config 1 has an invalid interface number: 1 but max is 0 [ 1966.640111][ T6043] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1966.659818][ T2522] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1966.686077][ T2522] usb 1-1: config 1 has no interface number 0 [ 1966.845105][T15019] usb 4-1: New USB device found, idVendor=083a, idProduct=b512, bcdDevice=f3.4c [ 1966.854463][ T2522] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1966.865205][T15019] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1966.873931][ T2522] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1966.886473][T15019] usb 4-1: Product: syz [ 1966.891713][ T2522] usb 1-1: Product: syz [ 1966.899289][ T2522] usb 1-1: Manufacturer: syz [ 1966.904464][T15019] usb 4-1: Manufacturer: syz [ 1966.911246][ T2522] usb 1-1: SerialNumber: syz [ 1966.917721][ T6043] usb 2-1: Using ep0 maxpacket: 32 [ 1966.927155][T15019] usb 4-1: SerialNumber: syz [ 1966.943532][T15019] usb 4-1: config 0 descriptor?? [ 1966.978998][ T2536] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1967.005430][ T2536] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 00:56:58 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x24004fe9, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x4eb2) [ 1967.035965][ T6043] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1967.055004][ T2522] usb 1-1: can't set config #1, error -71 [ 1967.075114][ T2522] usb 1-1: USB disconnect, device number 107 [ 1967.083400][ T2536] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1967.132701][ T2536] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1967.188435][ T2536] usb 6-1: config 0 descriptor?? [ 1967.240235][T15019] usb 4-1: USB disconnect, device number 6 [ 1967.265806][ T6043] usb 2-1: New USB device found, idVendor=19d2, idProduct=ff8e, bcdDevice=8b.de 00:56:58 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) [ 1967.287025][ T6043] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1967.312815][ T6043] usb 2-1: Product: syz [ 1967.318856][ T6043] usb 2-1: Manufacturer: syz [ 1967.337434][ T6043] usb 2-1: SerialNumber: syz [ 1967.353910][ T6043] usb 2-1: config 0 descriptor?? 00:56:58 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1967.385356][ T6043] usb 2-1: can't set config #0, error -71 [ 1967.408984][ T6043] usb 2-1: USB disconnect, device number 123 00:56:58 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e8}, 0x20c49a) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[], 0x1000001bd) 00:56:58 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) vmsplice(r1, &(0x7f00000000c0)=[{}, {0x0}], 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x30007, 0x0) [ 1967.668548][ T6144] udc-core: couldn't find an available UDC or it's busy [ 1967.681425][ T6144] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1967.975037][ T6043] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1968.066594][ T2536] keytouch 0003:0926:3333.0270: fixing up Keytouch IEC report descriptor [ 1968.097211][ T2536] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0270/input/input576 [ 1968.191676][ T2536] keytouch 0003:0926:3333.0270: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1968.227144][ T6043] usb 4-1: Using ep0 maxpacket: 8 [ 1968.287490][ T2536] usb 6-1: USB disconnect, device number 74 [ 1968.585029][ T6043] usb 4-1: New USB device found, idVendor=083a, idProduct=b512, bcdDevice=f3.4c [ 1968.604828][ T6043] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1968.612992][ T6043] usb 4-1: Product: syz [ 1968.634771][ T6043] usb 4-1: Manufacturer: syz [ 1968.640203][ T6043] usb 4-1: SerialNumber: syz [ 1968.665737][ T6043] usb 4-1: config 0 descriptor?? 00:57:00 executing program 3: perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r0, &(0x7f0000000500), 0x37d, 0x7fffefff) 00:57:00 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:57:00 executing program 0: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) [ 1968.860907][ T6043] usb 4-1: USB disconnect, device number 7 00:57:00 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)={0x40, 0x0, 0x2e, {0x2e, 0x5, "2648f7be311be28e381acfa4ed14d8562969866bdab65e5d4220d683e10a03c2a3cd510e8ac901ff8db0bf5d"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x7fffff9, 0xf007, 0x1, [0xc0f0, 0x1fe00c0]}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x0, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x43}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) r3 = syz_open_dev$evdev(&(0x7f0000001200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000001280)={0x1f, 0x1, &(0x7f0000001240)="7f"}) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af4566f3c7347185913f6185b306e694b7c75ea187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f00000004c0)=ANY=[@ANYBLOB="00030400000204030a08b5f4dff5abf62516eefff03b833aaa9a42d8867ada37523214452bbee48a8a4d9667d7fed8e8861b64a47306fb6bcdaf49e1b5639c28c347f81e8fec9b9e5e0adae6664083da44404259382a14f5521d78ff7450eedbe2736c2e5f03f829f560da68281354432a40e6b19e9fd8a6fdb13d66f91b58b8563c2cc4e5438d1e3c61487fd4eb83c5db960ac76404b1e962bd616962af6c335d15d0ad947a2321bf0bfa15f6a2b8a6354a95267eb37d4e60d62540"], &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "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"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r4 = syz_open_dev$hidraw(&(0x7f0000001300)='/dev/hidraw#\x00', 0x0, 0x41) r5 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5e, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80284504, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000012c0)={0x80, 0x5, 0x830c, 0x2, "09738855f8bbb430744feb4e216baa45df434c8d892fdaf6966ac4a3dd6a9e7f"}) write$hidraw(r4, &(0x7f0000002d80)="961e782da136c24bc08d302972a62ecfe3cbeead1c954c7742868c42011a331f2e92dc729b41d125c492e95d9516199064d5c77956e7f4086d533f1446cfffce26ec03d6452313cdd5acfede0cb2cfc5b7677939c7f836c19d839d27e54abd54ee564a34f9ddce5aba0e4cfcc8ae4871522b2854d636453bd4b9579fac970fd342f7a2c9fa881d442e2e61bcbcb73c0f2f2e8b6c075face514675ba4aff91d01148ee7a619061990cb32807e7dabb1a73a1dba70f62308537c75ef78178017ae1120d4ed", 0xc4) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000080)) syz_open_dev$hidraw(0x0, 0x0, 0x0) 00:57:00 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) vmsplice(r1, &(0x7f00000000c0)=[{}, {0x0}], 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x30007, 0x0) 00:57:00 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x4603000000000000]}}}}, 0x108) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000140)=""/68, 0x44}, {&(0x7f00000001c0)=""/66, 0x42}], 0x2, 0x0) 00:57:00 executing program 3: 00:57:00 executing program 0: 00:57:00 executing program 0: 00:57:00 executing program 1: 00:57:00 executing program 3: 00:57:00 executing program 3: 00:57:00 executing program 1: [ 1969.434793][ T2484] usb 6-1: new high-speed USB device number 75 using dummy_hcd 00:57:00 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:57:00 executing program 0: [ 1969.839289][ T2484] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1969.850348][ T2484] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1969.860596][ T2484] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1969.870802][ T2484] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1969.885322][ T2484] usb 6-1: config 0 descriptor?? [ 1970.361402][ T6279] udc-core: couldn't find an available UDC or it's busy [ 1970.370463][ T6279] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1970.675829][ T2484] keytouch 0003:0926:3333.0271: fixing up Keytouch IEC report descriptor [ 1970.693924][ T2484] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0271/input/input577 [ 1970.795337][ T2484] keytouch 0003:0926:3333.0271: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1970.883006][ T6043] usb 6-1: USB disconnect, device number 75 00:57:02 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)={0x40, 0x0, 0x2e, {0x2e, 0x5, "2648f7be311be28e381acfa4ed14d8562969866bdab65e5d4220d683e10a03c2a3cd510e8ac901ff8db0bf5d"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x7fffff9, 0xf007, 0x1, [0xc0f0, 0x1fe00c0]}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x0, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x43}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) r3 = syz_open_dev$evdev(&(0x7f0000001200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000001280)={0x1f, 0x1, &(0x7f0000001240)="7f"}) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af4566f3c7347185913f6185b306e694b7c75ea187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f00000004c0)=ANY=[@ANYBLOB="00030400000204030a08b5f4dff5abf62516eefff03b833aaa9a42d8867ada37523214452bbee48a8a4d9667d7fed8e8861b64a47306fb6bcdaf49e1b5639c28c347f81e8fec9b9e5e0adae6664083da44404259382a14f5521d78ff7450eedbe2736c2e5f03f829f560da68281354432a40e6b19e9fd8a6fdb13d66f91b58b8563c2cc4e5438d1e3c61487fd4eb83c5db960ac76404b1e962bd616962af6c335d15d0ad947a2321bf0bfa15f6a2b8a6354a95267eb37d4e60d62540"], &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "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"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r4 = syz_open_dev$hidraw(&(0x7f0000001300)='/dev/hidraw#\x00', 0x0, 0x41) r5 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5e, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80284504, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000012c0)={0x80, 0x5, 0x830c, 0x2, "09738855f8bbb430744feb4e216baa45df434c8d892fdaf6966ac4a3dd6a9e7f"}) write$hidraw(r4, &(0x7f0000002d80)="961e782da136c24bc08d302972a62ecfe3cbeead1c954c7742868c42011a331f2e92dc729b41d125c492e95d9516199064d5c77956e7f4086d533f1446cfffce26ec03d6452313cdd5acfede0cb2cfc5b7677939c7f836c19d839d27e54abd54ee564a34f9ddce5aba0e4cfcc8ae4871522b2854d636453bd4b9579fac970fd342f7a2c9fa881d442e2e61bcbcb73c0f2f2e8b6c075face514675ba4aff91d01148ee7a619061990cb32807e7dabb1a73a1dba70f62308537c75ef78178017ae1120d4ed", 0xc4) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000080)) syz_open_dev$hidraw(0x0, 0x0, 0x0) 00:57:02 executing program 1: 00:57:02 executing program 0: 00:57:02 executing program 3: 00:57:02 executing program 4: write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{}, {0x0}], 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x30007, 0x0) 00:57:02 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:57:02 executing program 1: 00:57:02 executing program 3: 00:57:02 executing program 4: write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{}, {0x0}], 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x30007, 0x0) 00:57:03 executing program 0: 00:57:03 executing program 1: 00:57:03 executing program 3: [ 1971.974988][ T9903] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1972.349116][ T9903] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1972.360586][ T9903] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1972.374147][ T9903] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1972.385299][ T9903] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1972.409936][ T9903] usb 6-1: config 0 descriptor?? [ 1972.896799][ T6351] udc-core: couldn't find an available UDC or it's busy [ 1972.903799][ T6351] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1973.215697][ T9903] keytouch 0003:0926:3333.0272: fixing up Keytouch IEC report descriptor [ 1973.233775][ T9903] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0272/input/input578 [ 1973.320082][ T9903] keytouch 0003:0926:3333.0272: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1973.422893][ T9903] usb 6-1: USB disconnect, device number 76 00:57:05 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)={0x40, 0x0, 0x2e, {0x2e, 0x5, "2648f7be311be28e381acfa4ed14d8562969866bdab65e5d4220d683e10a03c2a3cd510e8ac901ff8db0bf5d"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x7fffff9, 0xf007, 0x1, [0xc0f0, 0x1fe00c0]}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x0, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x43}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) r3 = syz_open_dev$evdev(&(0x7f0000001200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000001280)={0x1f, 0x1, &(0x7f0000001240)="7f"}) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af4566f3c7347185913f6185b306e694b7c75ea187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f00000004c0)=ANY=[@ANYBLOB="00030400000204030a08b5f4dff5abf62516eefff03b833aaa9a42d8867ada37523214452bbee48a8a4d9667d7fed8e8861b64a47306fb6bcdaf49e1b5639c28c347f81e8fec9b9e5e0adae6664083da44404259382a14f5521d78ff7450eedbe2736c2e5f03f829f560da68281354432a40e6b19e9fd8a6fdb13d66f91b58b8563c2cc4e5438d1e3c61487fd4eb83c5db960ac76404b1e962bd616962af6c335d15d0ad947a2321bf0bfa15f6a2b8a6354a95267eb37d4e60d625405870bcd52fea4a7c1f4b67be28add47f384793e16201ee7d616e30a637f81c"], &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "fc7100269712596c1c0d58c245f9288bf191c1b2d9e0ad034268fecdcd70b64ed4c6e89a0258cbcf833bc1eb865d68be278f5a18754ff7313cb371def95e6e05f55fde7aaba59e06c4ccd15f53687551e509ff69fd40908a2437f4a01d300b0171b3ef07ee7433422f93afd890907707b2ccd358604b5cb1dd095847ec110bf1d9fbef1e51fbfccd883518ea849192df942e366f1734ddbd5fa67f1bad262fcb31ec227d1313a3ac61cc0e65f9d337948af511b90d0aa49321e1074cd4f2cfc548e655c9124ac2d67a2b54313bb70e93004f738d08844f6bf03b6b947f7ef616e0df9fb68800c72b7626d7f77c9c201f68828e4e178116b05ff954440c8db0d7"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r4 = syz_open_dev$hidraw(&(0x7f0000001300)='/dev/hidraw#\x00', 0x0, 0x41) r5 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5e, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80284504, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000012c0)={0x80, 0x5, 0x830c, 0x2, "09738855f8bbb430744feb4e216baa45df434c8d892fdaf6966ac4a3dd6a9e7f"}) write$hidraw(r4, &(0x7f0000002d80)="961e782da136c24bc08d302972a62ecfe3cbeead1c954c7742868c42011a331f2e92dc729b41d125c492e95d9516199064d5c77956e7f4086d533f1446cfffce26ec03d6452313cdd5acfede0cb2cfc5b7677939c7f836c19d839d27e54abd54ee564a34f9ddce5aba0e4cfcc8ae4871522b2854d636453bd4b9579fac970fd342f7a2c9fa881d442e2e61bcbcb73c0f2f2e8b6c075face514675ba4aff91d01148ee7a619061990cb32807e7dabb1a73a1dba70f62308537c75ef78178017ae1120d4ed", 0xc4) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000080)) syz_open_dev$hidraw(0x0, 0x0, 0x0) 00:57:05 executing program 1: 00:57:05 executing program 4: write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{}, {0x0}], 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x30007, 0x0) 00:57:05 executing program 3: 00:57:05 executing program 0: 00:57:05 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:57:05 executing program 0: 00:57:05 executing program 1: 00:57:05 executing program 3: 00:57:05 executing program 4: pipe(0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{}, {0x0}], 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x30007, 0x0) 00:57:05 executing program 3: 00:57:05 executing program 0: [ 1974.534518][ T2484] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1974.955479][ T2484] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1974.966710][ T2484] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1974.978859][ T2484] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1974.988645][ T2484] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1974.998892][ T2484] usb 6-1: config 0 descriptor?? [ 1975.467769][ T6417] udc-core: couldn't find an available UDC or it's busy [ 1975.474846][ T6417] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1975.795491][ T2484] keytouch 0003:0926:3333.0273: fixing up Keytouch IEC report descriptor [ 1975.808337][ T2484] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0273/input/input579 [ 1975.890813][ T2484] keytouch 0003:0926:3333.0273: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1976.006596][ T2522] usb 6-1: USB disconnect, device number 77 00:57:07 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)={0x40, 0x0, 0x2e, {0x2e, 0x5, "2648f7be311be28e381acfa4ed14d8562969866bdab65e5d4220d683e10a03c2a3cd510e8ac901ff8db0bf5d"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x7fffff9, 0xf007, 0x1, [0xc0f0, 0x1fe00c0]}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x0, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x43}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) r3 = syz_open_dev$evdev(&(0x7f0000001200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000001280)={0x1f, 0x1, &(0x7f0000001240)="7f"}) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af4566f3c7347185913f6185b306e694b7c75ea187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f00000004c0)=ANY=[@ANYBLOB="00030400000204030a08b5f4dff5abf62516eefff03b833aaa9a42d8867ada37523214452bbee48a8a4d9667d7fed8e8861b64a47306fb6bcdaf49e1b5639c28c347f81e8fec9b9e5e0adae6664083da44404259382a14f5521d78ff7450eedbe2736c2e5f03f829f560da68281354432a40e6b19e9fd8a6fdb13d66f91b58b8563c2cc4e5438d1e3c61487fd4eb83c5db960ac76404b1e962bd616962af6c335d15d0ad947a2321bf0bfa15f6a2b8a6354a95267eb37d4e60d625405870bcd52fea4a7c1f4b67be28add47f384793e16201ee7d616e30a637f81c"], &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "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"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r4 = syz_open_dev$hidraw(&(0x7f0000001300)='/dev/hidraw#\x00', 0x0, 0x41) r5 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5e, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80284504, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000012c0)={0x80, 0x5, 0x830c, 0x2, "09738855f8bbb430744feb4e216baa45df434c8d892fdaf6966ac4a3dd6a9e7f"}) write$hidraw(r4, &(0x7f0000002d80)="961e782da136c24bc08d302972a62ecfe3cbeead1c954c7742868c42011a331f2e92dc729b41d125c492e95d9516199064d5c77956e7f4086d533f1446cfffce26ec03d6452313cdd5acfede0cb2cfc5b7677939c7f836c19d839d27e54abd54ee564a34f9ddce5aba0e4cfcc8ae4871522b2854d636453bd4b9579fac970fd342f7a2c9fa881d442e2e61bcbcb73c0f2f2e8b6c075face514675ba4aff91d01148ee7a619061990cb32807e7dabb1a73a1dba70f62308537c75ef78178017ae1120d4ed", 0xc4) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000080)) syz_open_dev$hidraw(0x0, 0x0, 0x0) 00:57:07 executing program 1: 00:57:07 executing program 3: 00:57:07 executing program 4: pipe(0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{}, {0x0}], 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x30007, 0x0) 00:57:07 executing program 0: 00:57:07 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:57:08 executing program 3: 00:57:08 executing program 4: pipe(0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{}, {0x0}], 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x30007, 0x0) 00:57:08 executing program 0: 00:57:08 executing program 1: 00:57:08 executing program 3: 00:57:08 executing program 0: [ 1977.064443][T21857] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1977.515143][T21857] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1977.526122][T21857] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1977.537481][T21857] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1977.546915][T21857] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1977.562618][T21857] usb 6-1: config 0 descriptor?? [ 1978.028295][ T6482] udc-core: couldn't find an available UDC or it's busy [ 1978.035318][ T6482] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1978.345591][T21857] keytouch 0003:0926:3333.0274: fixing up Keytouch IEC report descriptor [ 1978.363962][T21857] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0274/input/input580 [ 1978.466016][T21857] keytouch 0003:0926:3333.0274: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1978.569269][T21857] usb 6-1: USB disconnect, device number 78 00:57:10 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)={0x40, 0x0, 0x2e, {0x2e, 0x5, "2648f7be311be28e381acfa4ed14d8562969866bdab65e5d4220d683e10a03c2a3cd510e8ac901ff8db0bf5d"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x7fffff9, 0xf007, 0x1, [0xc0f0, 0x1fe00c0]}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x0, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x43}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) r3 = syz_open_dev$evdev(&(0x7f0000001200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000001280)={0x1f, 0x1, &(0x7f0000001240)="7f"}) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af4566f3c7347185913f6185b306e694b7c75ea187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f00000004c0)=ANY=[@ANYBLOB="00030400000204030a08b5f4dff5abf62516eefff03b833aaa9a42d8867ada37523214452bbee48a8a4d9667d7fed8e8861b64a47306fb6bcdaf49e1b5639c28c347f81e8fec9b9e5e0adae6664083da44404259382a14f5521d78ff7450eedbe2736c2e5f03f829f560da68281354432a40e6b19e9fd8a6fdb13d66f91b58b8563c2cc4e5438d1e3c61487fd4eb83c5db960ac76404b1e962bd616962af6c335d15d0ad947a2321bf0bfa15f6a2b8a6354a95267eb37d4e60d625405870bcd52fea4a7c1f4b67be28add47f384793e16201ee7d616e30a637f81c"], &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "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"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r4 = syz_open_dev$hidraw(&(0x7f0000001300)='/dev/hidraw#\x00', 0x0, 0x41) r5 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5e, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80284504, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000012c0)={0x80, 0x5, 0x830c, 0x2, "09738855f8bbb430744feb4e216baa45df434c8d892fdaf6966ac4a3dd6a9e7f"}) write$hidraw(r4, &(0x7f0000002d80)="961e782da136c24bc08d302972a62ecfe3cbeead1c954c7742868c42011a331f2e92dc729b41d125c492e95d9516199064d5c77956e7f4086d533f1446cfffce26ec03d6452313cdd5acfede0cb2cfc5b7677939c7f836c19d839d27e54abd54ee564a34f9ddce5aba0e4cfcc8ae4871522b2854d636453bd4b9579fac970fd342f7a2c9fa881d442e2e61bcbcb73c0f2f2e8b6c075face514675ba4aff91d01148ee7a619061990cb32807e7dabb1a73a1dba70f62308537c75ef78178017ae1120d4ed", 0xc4) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000080)) syz_open_dev$hidraw(0x0, 0x0, 0x0) 00:57:10 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) vmsplice(r1, &(0x7f00000000c0)=[{}, {0x0}], 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x30007, 0x0) 00:57:10 executing program 3: 00:57:10 executing program 1: 00:57:10 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:57:10 executing program 0: 00:57:10 executing program 1: 00:57:10 executing program 0: openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) 00:57:10 executing program 3: 00:57:10 executing program 3: 00:57:10 executing program 1: 00:57:10 executing program 0: [ 1979.634527][ T6043] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1980.014264][ T6043] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1980.025424][ T6043] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1980.037772][ T6043] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1980.048528][ T6043] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1980.058163][ T6043] usb 6-1: config 0 descriptor?? [ 1980.526337][ T6552] udc-core: couldn't find an available UDC or it's busy [ 1980.533685][ T6552] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1980.845213][ T6043] keytouch 0003:0926:3333.0275: fixing up Keytouch IEC report descriptor [ 1980.873176][ T6043] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0275/input/input581 [ 1980.961225][ T6043] keytouch 0003:0926:3333.0275: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1981.057207][ T2484] usb 6-1: USB disconnect, device number 79 00:57:13 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)={0x40, 0x0, 0x2e, {0x2e, 0x5, "2648f7be311be28e381acfa4ed14d8562969866bdab65e5d4220d683e10a03c2a3cd510e8ac901ff8db0bf5d"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x7fffff9, 0xf007, 0x1, [0xc0f0, 0x1fe00c0]}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x0, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x43}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) r3 = syz_open_dev$evdev(&(0x7f0000001200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000001280)={0x1f, 0x1, &(0x7f0000001240)="7f"}) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af4566f3c7347185913f6185b306e694b7c75ea187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f00000004c0)=ANY=[@ANYBLOB="00030400000204030a08b5f4dff5abf62516eefff03b833aaa9a42d8867ada37523214452bbee48a8a4d9667d7fed8e8861b64a47306fb6bcdaf49e1b5639c28c347f81e8fec9b9e5e0adae6664083da44404259382a14f5521d78ff7450eedbe2736c2e5f03f829f560da68281354432a40e6b19e9fd8a6fdb13d66f91b58b8563c2cc4e5438d1e3c61487fd4eb83c5db960ac76404b1e962bd616962af6c335d15d0ad947a2321bf0bfa15f6a2b8a6354a95267eb37d4e60d625405870bcd52fea4a7c1f4b67be28add47f384793e16201ee7d616e30a637f81cf50ca924959d5782e6ca9e83972cb688"], &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "fc7100269712596c1c0d58c245f9288bf191c1b2d9e0ad034268fecdcd70b64ed4c6e89a0258cbcf833bc1eb865d68be278f5a18754ff7313cb371def95e6e05f55fde7aaba59e06c4ccd15f53687551e509ff69fd40908a2437f4a01d300b0171b3ef07ee7433422f93afd890907707b2ccd358604b5cb1dd095847ec110bf1d9fbef1e51fbfccd883518ea849192df942e366f1734ddbd5fa67f1bad262fcb31ec227d1313a3ac61cc0e65f9d337948af511b90d0aa49321e1074cd4f2cfc548e655c9124ac2d67a2b54313bb70e93004f738d08844f6bf03b6b947f7ef616e0df9fb68800c72b7626d7f77c9c201f68828e4e178116b05ff954440c8db0d7"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r4 = syz_open_dev$hidraw(&(0x7f0000001300)='/dev/hidraw#\x00', 0x0, 0x41) r5 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5e, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80284504, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000012c0)={0x80, 0x5, 0x830c, 0x2, "09738855f8bbb430744feb4e216baa45df434c8d892fdaf6966ac4a3dd6a9e7f"}) write$hidraw(r4, &(0x7f0000002d80)="961e782da136c24bc08d302972a62ecfe3cbeead1c954c7742868c42011a331f2e92dc729b41d125c492e95d9516199064d5c77956e7f4086d533f1446cfffce26ec03d6452313cdd5acfede0cb2cfc5b7677939c7f836c19d839d27e54abd54ee564a34f9ddce5aba0e4cfcc8ae4871522b2854d636453bd4b9579fac970fd342f7a2c9fa881d442e2e61bcbcb73c0f2f2e8b6c075face514675ba4aff91d01148ee7a619061990cb32807e7dabb1a73a1dba70f62308537c75ef78178017ae1120d4ed", 0xc4) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000080)) syz_open_dev$hidraw(0x0, 0x0, 0x0) 00:57:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x2c}, {0x6, 0x0, 0x0, 0x7fffffff}]}) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) 00:57:13 executing program 3: 00:57:13 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000000)="ff02040000eeff0000000000000000000000000000020205", 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 00:57:13 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:57:13 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) vmsplice(r1, &(0x7f00000000c0)=[{}, {0x0}], 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x30007, 0x0) 00:57:13 executing program 3: socket(0x0, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000000040)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) 00:57:13 executing program 0: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 00:57:13 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x11, 0x0, 0x3, 0x8, 0xc0000080]}) [ 1982.184187][ T2484] usb 6-1: new high-speed USB device number 80 using dummy_hcd 00:57:13 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc0407008b65d8b4ac2ca35c66", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="9a2600002e", 0x5}, {&(0x7f0000000140)="5531f5e79d1230ddde98e2", 0xb}], 0x2, 0x0, 0x0, 0x1a0}}], 0x1, 0x0) 00:57:13 executing program 1: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYRES64], 0x1c2) socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, 0x0) unshare(0x40000000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="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"/585], 0x70}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="72d4506620a0c98977848feb349bf593d490f5f822d742a17143a311a388832119ec29ee127cc07fc6e98aa7c60382acff70fd9c93d9ac50978b48c3c764f41092340a2e554e4347f809e060562e"], 0x2c}, 0x1, 0x0, 0x0, 0x10000004}, 0x10040804) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video0\x00', 0x2, 0x0) 00:57:13 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) [ 1982.445031][ C1] sd 0:0:1:0: [sg0] tag#4318 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1982.456332][ C1] sd 0:0:1:0: [sg0] tag#4318 CDB: Test Unit Ready [ 1982.463002][ C1] sd 0:0:1:0: [sg0] tag#4318 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1982.473447][ C1] sd 0:0:1:0: [sg0] tag#4318 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1982.483375][ C1] sd 0:0:1:0: [sg0] tag#4318 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1982.493422][ C1] sd 0:0:1:0: [sg0] tag#4318 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1982.503239][ C1] sd 0:0:1:0: [sg0] tag#4318 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1982.513317][ C1] sd 0:0:1:0: [sg0] tag#4318 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1982.523360][ C1] sd 0:0:1:0: [sg0] tag#4318 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1982.533616][ C1] sd 0:0:1:0: [sg0] tag#4318 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1982.543517][ C1] sd 0:0:1:0: [sg0] tag#4318 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1982.553449][ C1] sd 0:0:1:0: [sg0] tag#4318 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1982.563663][ C1] sd 0:0:1:0: [sg0] tag#4318 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1982.564945][ T2484] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1982.573731][ C1] sd 0:0:1:0: [sg0] tag#4318 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1982.595138][ C1] sd 0:0:1:0: [sg0] tag#4318 CDB[c0]: 00 00 00 00 00 00 00 00 [ 1982.627564][ T6649] IPVS: ftp: loaded support on port[0] = 21 [ 1982.734669][ T2484] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1982.808112][ T2484] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1982.855146][ T2484] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1982.891442][ T2484] usb 6-1: config 0 descriptor?? [ 1983.146311][ C1] sd 0:0:1:0: [sg0] tag#4319 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1983.157366][ C1] sd 0:0:1:0: [sg0] tag#4319 CDB: Test Unit Ready [ 1983.164375][ C1] sd 0:0:1:0: [sg0] tag#4319 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1983.174177][ C1] sd 0:0:1:0: [sg0] tag#4319 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1983.183905][ C1] sd 0:0:1:0: [sg0] tag#4319 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1983.194012][ C1] sd 0:0:1:0: [sg0] tag#4319 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1983.204168][ C1] sd 0:0:1:0: [sg0] tag#4319 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1983.213786][ C1] sd 0:0:1:0: [sg0] tag#4319 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1983.223567][ C1] sd 0:0:1:0: [sg0] tag#4319 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1983.233656][ C1] sd 0:0:1:0: [sg0] tag#4319 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1983.244323][ C1] sd 0:0:1:0: [sg0] tag#4319 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1983.254673][ C1] sd 0:0:1:0: [sg0] tag#4319 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1983.264715][ C1] sd 0:0:1:0: [sg0] tag#4319 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1983.274931][ C1] sd 0:0:1:0: [sg0] tag#4319 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1983.284980][ C1] sd 0:0:1:0: [sg0] tag#4319 CDB[c0]: 00 00 00 00 00 00 00 00 [ 1983.337047][ T6649] IPVS: ftp: loaded support on port[0] = 21 [ 1983.379654][ T6620] udc-core: couldn't find an available UDC or it's busy [ 1983.420045][ T6620] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1983.714076][T24176] tipc: TX() has been purged, node left! [ 1983.745616][ T2484] keytouch 0003:0926:3333.0276: fixing up Keytouch IEC report descriptor [ 1983.758514][ T2484] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0276/input/input582 [ 1983.850227][ T2484] keytouch 0003:0926:3333.0276: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1983.967493][ T2484] usb 6-1: USB disconnect, device number 80 00:57:15 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)={0x40, 0x0, 0x2e, {0x2e, 0x5, "2648f7be311be28e381acfa4ed14d8562969866bdab65e5d4220d683e10a03c2a3cd510e8ac901ff8db0bf5d"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x7fffff9, 0xf007, 0x1, [0xc0f0, 0x1fe00c0]}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x0, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x43}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) r3 = syz_open_dev$evdev(&(0x7f0000001200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000001280)={0x1f, 0x1, &(0x7f0000001240)="7f"}) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af4566f3c7347185913f6185b306e694b7c75ea187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f00000004c0)=ANY=[@ANYBLOB="00030400000204030a08b5f4dff5abf62516eefff03b833aaa9a42d8867ada37523214452bbee48a8a4d9667d7fed8e8861b64a47306fb6bcdaf49e1b5639c28c347f81e8fec9b9e5e0adae6664083da44404259382a14f5521d78ff7450eedbe2736c2e5f03f829f560da68281354432a40e6b19e9fd8a6fdb13d66f91b58b8563c2cc4e5438d1e3c61487fd4eb83c5db960ac76404b1e962bd616962af6c335d15d0ad947a2321bf0bfa15f6a2b8a6354a95267eb37d4e60d625405870bcd52fea4a7c1f4b67be28add47f384793e16201ee7d616e30a637f81cf50ca924959d5782e6ca9e83972cb688"], &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "fc7100269712596c1c0d58c245f9288bf191c1b2d9e0ad034268fecdcd70b64ed4c6e89a0258cbcf833bc1eb865d68be278f5a18754ff7313cb371def95e6e05f55fde7aaba59e06c4ccd15f53687551e509ff69fd40908a2437f4a01d300b0171b3ef07ee7433422f93afd890907707b2ccd358604b5cb1dd095847ec110bf1d9fbef1e51fbfccd883518ea849192df942e366f1734ddbd5fa67f1bad262fcb31ec227d1313a3ac61cc0e65f9d337948af511b90d0aa49321e1074cd4f2cfc548e655c9124ac2d67a2b54313bb70e93004f738d08844f6bf03b6b947f7ef616e0df9fb68800c72b7626d7f77c9c201f68828e4e178116b05ff954440c8db0d7"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r4 = syz_open_dev$hidraw(&(0x7f0000001300)='/dev/hidraw#\x00', 0x0, 0x41) r5 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5e, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80284504, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000012c0)={0x80, 0x5, 0x830c, 0x2, "09738855f8bbb430744feb4e216baa45df434c8d892fdaf6966ac4a3dd6a9e7f"}) write$hidraw(r4, &(0x7f0000002d80)="961e782da136c24bc08d302972a62ecfe3cbeead1c954c7742868c42011a331f2e92dc729b41d125c492e95d9516199064d5c77956e7f4086d533f1446cfffce26ec03d6452313cdd5acfede0cb2cfc5b7677939c7f836c19d839d27e54abd54ee564a34f9ddce5aba0e4cfcc8ae4871522b2854d636453bd4b9579fac970fd342f7a2c9fa881d442e2e61bcbcb73c0f2f2e8b6c075face514675ba4aff91d01148ee7a619061990cb32807e7dabb1a73a1dba70f62308537c75ef78178017ae1120d4ed", 0xc4) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000080)) syz_open_dev$hidraw(0x0, 0x0, 0x0) 00:57:15 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) vmsplice(r1, &(0x7f00000000c0)=[{}, {0x0}], 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x30007, 0x0) 00:57:15 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)={0x1c, r3, 0x21, 0x0, 0x0, {}, [@NL80211_ATTR_IE_PROBE_RESP={0x5, 0x7f, 'm'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c1}, 0x0) 00:57:15 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x99) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, 0x0) r1 = socket(0x10, 0x0, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r1, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) 00:57:15 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:57:15 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {0x2d}, {0x6, 0x0, 0x0, 0x7fffffff}]}) 00:57:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x2d}, {0x6, 0x0, 0x0, 0x7fffffff}]}) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 1984.815319][ T29] audit: type=1800 audit(1595638636.105:60): pid=6773 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16119 res=0 00:57:16 executing program 3: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0xff9c, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="06000000", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000040)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x10, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000) [ 1984.996371][ T29] audit: type=1800 audit(1595638636.285:61): pid=6779 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16119 res=0 00:57:16 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000680)={0x423, 0x0, "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"}, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0ee8679b4d29f69b334a", 0xff8d}], 0x1) [ 1985.064010][ T2484] usb 6-1: new high-speed USB device number 81 using dummy_hcd 00:57:16 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {0x4}, {0x6}]}) 00:57:16 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)) msgsnd(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="ce"], 0x1, 0x0) msgrcv(0x0, 0x0, 0x0, 0x3, 0x2000) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000580)={{0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) [ 1985.249530][ T29] audit: type=1326 audit(1595638636.535:62): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=6788 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45f03a code=0x0 [ 1985.474011][ T2484] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 00:57:16 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, 0x0, 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) vmsplice(r1, &(0x7f00000000c0)=[{}, {0x0}], 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x30007, 0x0) [ 1985.474031][ T2484] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1985.474063][ T2484] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1985.474079][ T2484] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1985.475706][ T2484] usb 6-1: config 0 descriptor?? [ 1985.926881][ T6776] udc-core: couldn't find an available UDC or it's busy [ 1985.926906][ T6776] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1986.042172][ T29] audit: type=1326 audit(1595638637.325:63): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=6788 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45f03a code=0x0 [ 1986.215070][ T2484] keytouch 0003:0926:3333.0277: fixing up Keytouch IEC report descriptor [ 1986.217458][ T2484] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0277/input/input583 [ 1986.293982][ T2484] keytouch 0003:0926:3333.0277: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1986.444243][ T2484] usb 6-1: USB disconnect, device number 81 00:57:18 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r0, 0x0, 0xfb7d, 0x1c5a000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001840)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfd14) fallocate(r0, 0x100000003, 0x0, 0x28120001) 00:57:18 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:57:18 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, 0x0, 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) vmsplice(r1, &(0x7f00000000c0)=[{}, {0x0}], 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x30007, 0x0) 00:57:18 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{}, {0x24}, {0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) 00:57:18 executing program 0: pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0\x00') r0 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x6040, 0x0) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x48f5ade13c961614}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc)=0x8) r2 = getpid() write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000900)=ANY=[@ANYBLOB="7f454c464009617f07000000000000000200030006000000ed01000000000000400000000000000044000000000000000000000004003800010000081f00090000000060080000000600000000000000010000000d0000000300000000000000080000000000000005000000000000000200000000000000060000000600000003000000000000000900000000000000ff0f0000000000000500000000000000b62e000000000000f8ffffffffffffff58f047242f30daa80d3f33053f7fc4ee7224cf567d5f2234f984fe24b9b1b4df18e65cd0cbf9593992d27d3bf3bad0ffdba7586a8dec3aaa1b92a69096b3c6885befbe189a99f2721ce41e922cb03f9b86a50000dc6c48fac032d2734399f9b4332ff0f64712022721688a36ac933758f62e3cde5430f0cf919f4be80abb08451c773aa9c5bb8f787e5f40830fd825df8971bf73ee8cad16786eaf4d446c6a9fbfc063cf6224a3c9924f90d9840720019cd596b1c0fe3d7f425729ac6e5ba8c4990f96e0e943d7b23a625b71533e4e0e418b38e644d1f137bdf9b126661475b4200d690ec0416b9414a0b8e29d644b4d804701da5c44f81e45c89368000000000000e3fb00000000000000000000000000f9ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc8601ac859e5b1b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000059d900"/892], 0x5ac) ioctl$CAPI_REGISTER(0xffffffffffffffff, 0x400c4301, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000540)="d85ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a05000000000000000000000010008107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637a51d482394f2181e31ff307a2ace003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d3", 0xc0, r4) add_key$user(&(0x7f0000000700)='user\x00', &(0x7f0000000740)={'syz'}, &(0x7f00000002c0)='\"', 0x1, r4) keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r3}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={'digest_null-generic\x00'}}) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000180)={0x0, 0xdc}, &(0x7f00000001c0)={'enc=', 'raw', ' hash=', {'sha224-avx2\x00'}}, &(0x7f00000003c0)="e5f965ee10ba483d48d8bb4e5967a2b0a287eb5063237cd458d2a6bc71b4297dafc1623eded22f6f580f4b57f0f56af0b000f835e40bb03f8420d031c6cae1fb1d9be41505dc9d9bc5361e120ac711f2251b5b4c4a40fe4575f39834e9dadae59398808b2c0df4102504268cd5934a2af573999ba8c6334bbe1cd95eca002632b00232e7cc264f729c8f1ca70e73024b82336fc892a3b30ddfb053aa671657a938e2bee3f2ad36472e326cdd79b059ac5aee2ff1cee842f5598ebf7b8ba386743fdfd12f6e2bb3efa87321c0d829ac87c34e3c9d75ddf86fd0c1c009", 0x0) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) 00:57:18 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)={0x40, 0x0, 0x2e, {0x2e, 0x5, "2648f7be311be28e381acfa4ed14d8562969866bdab65e5d4220d683e10a03c2a3cd510e8ac901ff8db0bf5d"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x7fffff9, 0xf007, 0x1, [0xc0f0, 0x1fe00c0]}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x0, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x43}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) r3 = syz_open_dev$evdev(&(0x7f0000001200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000001280)={0x1f, 0x1, &(0x7f0000001240)="7f"}) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af4566f3c7347185913f6185b306e694b7c75ea187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f00000004c0)=ANY=[@ANYBLOB="00030400000204030a08b5f4dff5abf62516eefff03b833aaa9a42d8867ada37523214452bbee48a8a4d9667d7fed8e8861b64a47306fb6bcdaf49e1b5639c28c347f81e8fec9b9e5e0adae6664083da44404259382a14f5521d78ff7450eedbe2736c2e5f03f829f560da68281354432a40e6b19e9fd8a6fdb13d66f91b58b8563c2cc4e5438d1e3c61487fd4eb83c5db960ac76404b1e962bd616962af6c335d15d0ad947a2321bf0bfa15f6a2b8a6354a95267eb37d4e60d625405870bcd52fea4a7c1f4b67be28add47f384793e16201ee7d616e30a637f81cf50ca924959d5782e6ca9e83972cb688"], &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "fc7100269712596c1c0d58c245f9288bf191c1b2d9e0ad034268fecdcd70b64ed4c6e89a0258cbcf833bc1eb865d68be278f5a18754ff7313cb371def95e6e05f55fde7aaba59e06c4ccd15f53687551e509ff69fd40908a2437f4a01d300b0171b3ef07ee7433422f93afd890907707b2ccd358604b5cb1dd095847ec110bf1d9fbef1e51fbfccd883518ea849192df942e366f1734ddbd5fa67f1bad262fcb31ec227d1313a3ac61cc0e65f9d337948af511b90d0aa49321e1074cd4f2cfc548e655c9124ac2d67a2b54313bb70e93004f738d08844f6bf03b6b947f7ef616e0df9fb68800c72b7626d7f77c9c201f68828e4e178116b05ff954440c8db0d7"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r4 = syz_open_dev$hidraw(&(0x7f0000001300)='/dev/hidraw#\x00', 0x0, 0x41) r5 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5e, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80284504, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000012c0)={0x80, 0x5, 0x830c, 0x2, "09738855f8bbb430744feb4e216baa45df434c8d892fdaf6966ac4a3dd6a9e7f"}) write$hidraw(r4, &(0x7f0000002d80)="961e782da136c24bc08d302972a62ecfe3cbeead1c954c7742868c42011a331f2e92dc729b41d125c492e95d9516199064d5c77956e7f4086d533f1446cfffce26ec03d6452313cdd5acfede0cb2cfc5b7677939c7f836c19d839d27e54abd54ee564a34f9ddce5aba0e4cfcc8ae4871522b2854d636453bd4b9579fac970fd342f7a2c9fa881d442e2e61bcbcb73c0f2f2e8b6c075face514675ba4aff91d01148ee7a619061990cb32807e7dabb1a73a1dba70f62308537c75ef78178017ae1120d4ed", 0xc4) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000080)) syz_open_dev$hidraw(0x0, 0x0, 0x0) 00:57:18 executing program 1: 00:57:18 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, 0x0, 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) vmsplice(r1, &(0x7f00000000c0)=[{}, {0x0}], 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x30007, 0x0) [ 1987.293690][T24176] tipc: TX() has been purged, node left! 00:57:18 executing program 1: 00:57:18 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) vmsplice(r1, &(0x7f00000000c0)=[{}, {0x0}], 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x30007, 0x0) 00:57:18 executing program 3: [ 1987.533738][ T2522] usb 6-1: new high-speed USB device number 82 using dummy_hcd 00:57:19 executing program 1: 00:57:19 executing program 3: 00:57:19 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:57:19 executing program 1: [ 1987.924618][ T2522] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 00:57:19 executing program 3: [ 1987.982848][ T2522] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1988.022493][ T2522] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1988.055641][ T2522] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1988.097879][ T2522] usb 6-1: config 0 descriptor?? [ 1988.596406][ T6864] udc-core: couldn't find an available UDC or it's busy [ 1988.603448][ T6864] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 00:57:19 executing program 0: [ 1988.965131][ T2522] keytouch 0003:0926:3333.0278: fixing up Keytouch IEC report descriptor [ 1988.993372][ T2522] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0278/input/input584 [ 1989.114261][ T2522] keytouch 0003:0926:3333.0278: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1989.185374][ T2522] usb 6-1: USB disconnect, device number 82 00:57:21 executing program 3: 00:57:21 executing program 1: 00:57:21 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:57:21 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) vmsplice(r1, &(0x7f00000000c0)=[{}, {0x0}], 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x30007, 0x0) 00:57:21 executing program 0: 00:57:21 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)={0x40, 0x0, 0x2e, {0x2e, 0x5, "2648f7be311be28e381acfa4ed14d8562969866bdab65e5d4220d683e10a03c2a3cd510e8ac901ff8db0bf5d"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x7fffff9, 0xf007, 0x1, [0xc0f0, 0x1fe00c0]}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x0, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x43}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) r3 = syz_open_dev$evdev(&(0x7f0000001200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000001280)={0x1f, 0x1, &(0x7f0000001240)="7f"}) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af4566f3c7347185913f6185b306e694b7c75ea187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f00000004c0)=ANY=[@ANYBLOB="00030400000204030a08b5f4dff5abf62516eefff03b833aaa9a42d8867ada37523214452bbee48a8a4d9667d7fed8e8861b64a47306fb6bcdaf49e1b5639c28c347f81e8fec9b9e5e0adae6664083da44404259382a14f5521d78ff7450eedbe2736c2e5f03f829f560da68281354432a40e6b19e9fd8a6fdb13d66f91b58b8563c2cc4e5438d1e3c61487fd4eb83c5db960ac76404b1e962bd616962af6c335d15d0ad947a2321bf0bfa15f6a2b8a6354a95267eb37d4e60d625405870bcd52fea4a7c1f4b67be28add47f384793e16201ee7d616e30a637f81cf50ca924959d5782e6ca9e83972cb688ef0f92931041ffaf"], &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "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"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r4 = syz_open_dev$hidraw(&(0x7f0000001300)='/dev/hidraw#\x00', 0x0, 0x41) r5 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5e, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80284504, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000012c0)={0x80, 0x5, 0x830c, 0x2, "09738855f8bbb430744feb4e216baa45df434c8d892fdaf6966ac4a3dd6a9e7f"}) write$hidraw(r4, &(0x7f0000002d80)="961e782da136c24bc08d302972a62ecfe3cbeead1c954c7742868c42011a331f2e92dc729b41d125c492e95d9516199064d5c77956e7f4086d533f1446cfffce26ec03d6452313cdd5acfede0cb2cfc5b7677939c7f836c19d839d27e54abd54ee564a34f9ddce5aba0e4cfcc8ae4871522b2854d636453bd4b9579fac970fd342f7a2c9fa881d442e2e61bcbcb73c0f2f2e8b6c075face514675ba4aff91d01148ee7a619061990cb32807e7dabb1a73a1dba70f62308537c75ef78178017ae1120d4ed", 0xc4) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000080)) syz_open_dev$hidraw(0x0, 0x0, 0x0) 00:57:21 executing program 3: 00:57:21 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000003c0)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) mkdir(&(0x7f0000000200)='./file0/file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x2001040, 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) umount2(0x0, 0x0) 00:57:21 executing program 0: 00:57:21 executing program 3: 00:57:21 executing program 0: 00:57:21 executing program 1: [ 1990.343646][ T2484] usb 6-1: new high-speed USB device number 83 using dummy_hcd 00:57:21 executing program 0: 00:57:21 executing program 1: 00:57:21 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) [ 1990.717711][ T2484] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 00:57:22 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) vmsplice(r1, &(0x7f00000000c0)=[{}, {0x0}], 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x30007, 0x0) 00:57:22 executing program 3: [ 1990.801415][ T2484] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1990.870175][ T2484] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1990.929157][ T2484] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1990.980949][ T2484] usb 6-1: config 0 descriptor?? [ 1991.476813][ T6948] udc-core: couldn't find an available UDC or it's busy [ 1991.484145][ T6948] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1991.834796][ T2484] keytouch 0003:0926:3333.0279: fixing up Keytouch IEC report descriptor [ 1991.849709][ T2484] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0279/input/input585 [ 1991.959622][ T2484] keytouch 0003:0926:3333.0279: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1992.047000][ T2484] usb 6-1: USB disconnect, device number 83 00:57:24 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)={0x40, 0x0, 0x2e, {0x2e, 0x5, "2648f7be311be28e381acfa4ed14d8562969866bdab65e5d4220d683e10a03c2a3cd510e8ac901ff8db0bf5d"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x7fffff9, 0xf007, 0x1, [0xc0f0, 0x1fe00c0]}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x0, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x43}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) r3 = syz_open_dev$evdev(&(0x7f0000001200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000001280)={0x1f, 0x1, &(0x7f0000001240)="7f"}) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af4566f3c7347185913f6185b306e694b7c75ea187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f00000004c0)=ANY=[@ANYBLOB="00030400000204030a08b5f4dff5abf62516eefff03b833aaa9a42d8867ada37523214452bbee48a8a4d9667d7fed8e8861b64a47306fb6bcdaf49e1b5639c28c347f81e8fec9b9e5e0adae6664083da44404259382a14f5521d78ff7450eedbe2736c2e5f03f829f560da68281354432a40e6b19e9fd8a6fdb13d66f91b58b8563c2cc4e5438d1e3c61487fd4eb83c5db960ac76404b1e962bd616962af6c335d15d0ad947a2321bf0bfa15f6a2b8a6354a95267eb37d4e60d625405870bcd52fea4a7c1f4b67be28add47f384793e16201ee7d616e30a637f81cf50ca924959d5782e6ca9e83972cb688ef0f92931041ffaf"], &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "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"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r4 = syz_open_dev$hidraw(&(0x7f0000001300)='/dev/hidraw#\x00', 0x0, 0x41) r5 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5e, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80284504, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000012c0)={0x80, 0x5, 0x830c, 0x2, "09738855f8bbb430744feb4e216baa45df434c8d892fdaf6966ac4a3dd6a9e7f"}) write$hidraw(r4, &(0x7f0000002d80)="961e782da136c24bc08d302972a62ecfe3cbeead1c954c7742868c42011a331f2e92dc729b41d125c492e95d9516199064d5c77956e7f4086d533f1446cfffce26ec03d6452313cdd5acfede0cb2cfc5b7677939c7f836c19d839d27e54abd54ee564a34f9ddce5aba0e4cfcc8ae4871522b2854d636453bd4b9579fac970fd342f7a2c9fa881d442e2e61bcbcb73c0f2f2e8b6c075face514675ba4aff91d01148ee7a619061990cb32807e7dabb1a73a1dba70f62308537c75ef78178017ae1120d4ed", 0xc4) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000080)) syz_open_dev$hidraw(0x0, 0x0, 0x0) 00:57:24 executing program 0: 00:57:24 executing program 1: 00:57:24 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:57:24 executing program 3: 00:57:24 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) vmsplice(r1, &(0x7f00000000c0)=[{}, {0x0}], 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x30007, 0x0) 00:57:24 executing program 1: 00:57:24 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r3, 0x1}, 0x34}}, 0x0) 00:57:24 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000800ac1e0001000000000000000000000000fe8000000000000000000000000000aa00000000000000000a0003"], 0x13c}}, 0x0) 00:57:24 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc08c5334, &(0x7f0000000200)) [ 1993.004374][ T7039] __nla_validate_parse: 4 callbacks suppressed [ 1993.004408][ T7039] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. 00:57:24 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0100001b0001000000000000000800ac1e0001000000000000000000000000fe8000000000000000000000000000aa00000000000000000a000000dd000000", @ANYRESHEX], 0x13c}}, 0x0) [ 1993.128223][ T7041] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1993.173429][ T2522] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1993.237949][ T7046] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.3'. 00:57:24 executing program 0: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="700000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800b000100697036746e6c000030000280050009"], 0x70}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 1993.355738][ T7050] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1993.366838][ T7050] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1993.401352][ T7051] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1993.411043][ T7051] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1993.544229][ T2522] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1993.559404][ T2522] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1993.571434][ T2522] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1993.580937][ T2522] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1993.595964][ T2522] usb 6-1: config 0 descriptor?? [ 1994.057929][ T7033] udc-core: couldn't find an available UDC or it's busy [ 1994.065126][ T7033] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1994.374783][ T2522] keytouch 0003:0926:3333.027A: fixing up Keytouch IEC report descriptor [ 1994.389041][ T2522] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.027A/input/input586 [ 1994.474700][ T2522] keytouch 0003:0926:3333.027A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1994.581711][ T2484] usb 6-1: USB disconnect, device number 84 00:57:26 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)={0x40, 0x0, 0x2e, {0x2e, 0x5, "2648f7be311be28e381acfa4ed14d8562969866bdab65e5d4220d683e10a03c2a3cd510e8ac901ff8db0bf5d"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x7fffff9, 0xf007, 0x1, [0xc0f0, 0x1fe00c0]}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x0, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x43}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) r3 = syz_open_dev$evdev(&(0x7f0000001200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000001280)={0x1f, 0x1, &(0x7f0000001240)="7f"}) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af4566f3c7347185913f6185b306e694b7c75ea187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f00000004c0)=ANY=[@ANYBLOB="00030400000204030a08b5f4dff5abf62516eefff03b833aaa9a42d8867ada37523214452bbee48a8a4d9667d7fed8e8861b64a47306fb6bcdaf49e1b5639c28c347f81e8fec9b9e5e0adae6664083da44404259382a14f5521d78ff7450eedbe2736c2e5f03f829f560da68281354432a40e6b19e9fd8a6fdb13d66f91b58b8563c2cc4e5438d1e3c61487fd4eb83c5db960ac76404b1e962bd616962af6c335d15d0ad947a2321bf0bfa15f6a2b8a6354a95267eb37d4e60d625405870bcd52fea4a7c1f4b67be28add47f384793e16201ee7d616e30a637f81cf50ca924959d5782e6ca9e83972cb688ef0f92931041ffaf"], &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "fc7100269712596c1c0d58c245f9288bf191c1b2d9e0ad034268fecdcd70b64ed4c6e89a0258cbcf833bc1eb865d68be278f5a18754ff7313cb371def95e6e05f55fde7aaba59e06c4ccd15f53687551e509ff69fd40908a2437f4a01d300b0171b3ef07ee7433422f93afd890907707b2ccd358604b5cb1dd095847ec110bf1d9fbef1e51fbfccd883518ea849192df942e366f1734ddbd5fa67f1bad262fcb31ec227d1313a3ac61cc0e65f9d337948af511b90d0aa49321e1074cd4f2cfc548e655c9124ac2d67a2b54313bb70e93004f738d08844f6bf03b6b947f7ef616e0df9fb68800c72b7626d7f77c9c201f68828e4e178116b05ff954440c8db0d7"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r4 = syz_open_dev$hidraw(&(0x7f0000001300)='/dev/hidraw#\x00', 0x0, 0x41) r5 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5e, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80284504, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000012c0)={0x80, 0x5, 0x830c, 0x2, "09738855f8bbb430744feb4e216baa45df434c8d892fdaf6966ac4a3dd6a9e7f"}) write$hidraw(r4, &(0x7f0000002d80)="961e782da136c24bc08d302972a62ecfe3cbeead1c954c7742868c42011a331f2e92dc729b41d125c492e95d9516199064d5c77956e7f4086d533f1446cfffce26ec03d6452313cdd5acfede0cb2cfc5b7677939c7f836c19d839d27e54abd54ee564a34f9ddce5aba0e4cfcc8ae4871522b2854d636453bd4b9579fac970fd342f7a2c9fa881d442e2e61bcbcb73c0f2f2e8b6c075face514675ba4aff91d01148ee7a619061990cb32807e7dabb1a73a1dba70f62308537c75ef78178017ae1120d4ed", 0xc4) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000080)) syz_open_dev$hidraw(0x0, 0x0, 0x0) 00:57:26 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:57:26 executing program 1: syz_usb_connect(0x0, 0x2f, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x75, 0xc9, 0x14, 0x20, 0x17ef, 0x304f, 0x565a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0xf2, 0x85, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0x5}]}}]}}]}}]}}, 0x0) 00:57:26 executing program 3: unshare(0x20400) r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0505510, 0x0) 00:57:26 executing program 0: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) alarm(0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:57:26 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) vmsplice(r1, &(0x7f00000000c0)=[{}, {0x0}], 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x30007, 0x0) 00:57:26 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/time_for_children\x00') 00:57:26 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0100001b0001000000000000000800ac1e0001000000000000000000000000fe8000000200000000000000000000aa00000000000000000a"], 0x13c}}, 0x0) [ 1995.601986][ T7120] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.3'. 00:57:26 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x4004510d, 0x0) 00:57:27 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x0, 0x0, @dev}}, 0x0, 0x8, 0x40}, 0xd8) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) [ 1995.663414][ T2522] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1995.693873][ T9901] usb 6-1: new high-speed USB device number 85 using dummy_hcd 00:57:27 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:57:27 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x40045109, 0x0) [ 1995.923853][ T2522] usb 2-1: Using ep0 maxpacket: 32 [ 1996.044041][ T2522] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1996.083825][ T2522] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping [ 1996.084027][ T9901] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1996.116847][ T9901] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1996.129514][ T2522] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1996.151933][ T9901] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1996.171971][ T9901] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1996.215973][ T9901] usb 6-1: config 0 descriptor?? [ 1996.317446][ T2522] usb 2-1: New USB device found, idVendor=17ef, idProduct=304f, bcdDevice=56.5a [ 1996.326649][ T2522] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1996.336693][ T2522] usb 2-1: Product: syz [ 1996.340911][ T2522] usb 2-1: Manufacturer: syz [ 1996.347283][ T2522] usb 2-1: SerialNumber: syz [ 1996.352899][ T2522] usb 2-1: config 0 descriptor?? [ 1996.623345][ T2522] r8152 2-1:0.0: Unknown version 0x0000 [ 1996.638781][ T2522] usb 2-1: USB disconnect, device number 124 [ 1996.685895][ T7111] udc-core: couldn't find an available UDC or it's busy [ 1996.700885][ T7111] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1997.034609][ T9901] keytouch 0003:0926:3333.027B: fixing up Keytouch IEC report descriptor [ 1997.046766][ T9901] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.027B/input/input587 [ 1997.131021][ T9901] keytouch 0003:0926:3333.027B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1997.252606][ T9901] usb 6-1: USB disconnect, device number 85 [ 1997.383472][ T2522] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1997.633071][ T2522] usb 2-1: Using ep0 maxpacket: 32 [ 1997.753196][ T2522] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1997.765550][ T2522] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping [ 1997.779595][ T2522] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 00:57:29 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)={0x40, 0x0, 0x2e, {0x2e, 0x5, "2648f7be311be28e381acfa4ed14d8562969866bdab65e5d4220d683e10a03c2a3cd510e8ac901ff8db0bf5d"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x7fffff9, 0xf007, 0x1, [0xc0f0, 0x1fe00c0]}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x0, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x43}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) r3 = syz_open_dev$evdev(&(0x7f0000001200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000001280)={0x1f, 0x1, &(0x7f0000001240)="7f"}) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af4566f3c7347185913f6185b306e694b7c75ea187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f00000004c0)=ANY=[@ANYBLOB="00030400000204030a08b5f4dff5abf62516eefff03b833aaa9a42d8867ada37523214452bbee48a8a4d9667d7fed8e8861b64a47306fb6bcdaf49e1b5639c28c347f81e8fec9b9e5e0adae6664083da44404259382a14f5521d78ff7450eedbe2736c2e5f03f829f560da68281354432a40e6b19e9fd8a6fdb13d66f91b58b8563c2cc4e5438d1e3c61487fd4eb83c5db960ac76404b1e962bd616962af6c335d15d0ad947a2321bf0bfa15f6a2b8a6354a95267eb37d4e60d625405870bcd52fea4a7c1f4b67be28add47f384793e16201ee7d616e30a637f81cf50ca924959d5782e6ca9e83972cb688ef0f92931041ffaf636beb6a"], &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "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"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r4 = syz_open_dev$hidraw(&(0x7f0000001300)='/dev/hidraw#\x00', 0x0, 0x41) r5 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5e, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80284504, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000012c0)={0x80, 0x5, 0x830c, 0x2, "09738855f8bbb430744feb4e216baa45df434c8d892fdaf6966ac4a3dd6a9e7f"}) write$hidraw(r4, &(0x7f0000002d80)="961e782da136c24bc08d302972a62ecfe3cbeead1c954c7742868c42011a331f2e92dc729b41d125c492e95d9516199064d5c77956e7f4086d533f1446cfffce26ec03d6452313cdd5acfede0cb2cfc5b7677939c7f836c19d839d27e54abd54ee564a34f9ddce5aba0e4cfcc8ae4871522b2854d636453bd4b9579fac970fd342f7a2c9fa881d442e2e61bcbcb73c0f2f2e8b6c075face514675ba4aff91d01148ee7a619061990cb32807e7dabb1a73a1dba70f62308537c75ef78178017ae1120d4ed", 0xc4) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000080)) syz_open_dev$hidraw(0x0, 0x0, 0x0) 00:57:29 executing program 3: unshare(0x20400) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x5427, 0x0) [ 1997.953825][ T2522] usb 2-1: New USB device found, idVendor=17ef, idProduct=304f, bcdDevice=56.5a [ 1997.968656][ T2522] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1997.988254][ T2522] usb 2-1: Product: syz [ 1997.992519][ T2522] usb 2-1: Manufacturer: syz [ 1998.013040][ T2522] usb 2-1: SerialNumber: syz [ 1998.028057][ T2522] usb 2-1: config 0 descriptor?? 00:57:29 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0100001b0001000000000000000800ac1e0001000000000000000000000000fe8000000000000000000000000000aa00000000000000000a"], 0x13c}}, 0x0) 00:57:29 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x0, 0x0, @dev}}, 0x0, 0x8, 0x40}, 0xd8) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 00:57:29 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) vmsplice(r1, &(0x7f00000000c0)=[{}, {0x0}], 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x30007, 0x0) 00:57:29 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:57:29 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc337e0036e7405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e995fa0ee772fecd6d2f30a7518ce2ab6c2adaf81dcfc6afd983f79e6516f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad6142134b62f11e931", 0x82}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 1998.300879][ T2522] r8152 2-1:0.0: Unknown version 0x0000 [ 1998.311403][ T6043] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1998.342570][ T2522] usb 2-1: USB disconnect, device number 125 00:57:29 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x0, 0x0, @dev}}, 0x0, 0x8, 0x40}, 0xd8) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) [ 1998.471475][ T7224] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.1'. 00:57:29 executing program 1: ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f00000003c0)) pipe(&(0x7f0000000100)) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x18100, 0x0) pipe(&(0x7f0000000040)) write$tun(0xffffffffffffffff, 0x0, 0x7e) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, &(0x7f0000000280)='trusted.overlay.origin\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x0) openat$vhost_vsock(0xffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x60, 0x10, 0x401, 0xd00, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TOS={0x5}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e20}]}}}, @IFLA_MASTER={0x8}, @IFLA_MASTER={0x8}]}, 0x60}}, 0x0) 00:57:29 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x0, 0x0, @dev}}, 0x0, 0x8, 0x40}, 0xd8) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) [ 1998.693900][ T6043] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1998.723612][ T6043] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1998.760568][ T6043] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1998.795421][ T6043] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1998.827457][ T6043] usb 6-1: config 0 descriptor?? 00:57:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5, 0x9, 0xb9}]}}}]}, 0x3c}}, 0x0) 00:57:30 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{}, {0x0}], 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x30007, 0x0) [ 1999.306691][ T7196] udc-core: couldn't find an available UDC or it's busy [ 1999.318681][ T7196] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1999.644085][ T6043] keytouch 0003:0926:3333.027C: fixing up Keytouch IEC report descriptor [ 1999.661992][ T6043] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.027C/input/input588 [ 1999.775859][ T6043] keytouch 0003:0926:3333.027C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1999.857690][T21857] usb 6-1: USB disconnect, device number 86 00:57:31 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)={0x40, 0x0, 0x2e, {0x2e, 0x5, "2648f7be311be28e381acfa4ed14d8562969866bdab65e5d4220d683e10a03c2a3cd510e8ac901ff8db0bf5d"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x7fffff9, 0xf007, 0x1, [0xc0f0, 0x1fe00c0]}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x0, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x43}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) r3 = syz_open_dev$evdev(&(0x7f0000001200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000001280)={0x1f, 0x1, &(0x7f0000001240)="7f"}) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af4566f3c7347185913f6185b306e694b7c75ea187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f00000004c0)=ANY=[@ANYBLOB="00030400000204030a08b5f4dff5abf62516eefff03b833aaa9a42d8867ada37523214452bbee48a8a4d9667d7fed8e8861b64a47306fb6bcdaf49e1b5639c28c347f81e8fec9b9e5e0adae6664083da44404259382a14f5521d78ff7450eedbe2736c2e5f03f829f560da68281354432a40e6b19e9fd8a6fdb13d66f91b58b8563c2cc4e5438d1e3c61487fd4eb83c5db960ac76404b1e962bd616962af6c335d15d0ad947a2321bf0bfa15f6a2b8a6354a95267eb37d4e60d625405870bcd52fea4a7c1f4b67be28add47f384793e16201ee7d616e30a637f81cf50ca924959d5782e6ca9e83972cb688ef0f92931041ffaf636beb6a"], &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "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"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r4 = syz_open_dev$hidraw(&(0x7f0000001300)='/dev/hidraw#\x00', 0x0, 0x41) r5 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5e, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80284504, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000012c0)={0x80, 0x5, 0x830c, 0x2, "09738855f8bbb430744feb4e216baa45df434c8d892fdaf6966ac4a3dd6a9e7f"}) write$hidraw(r4, &(0x7f0000002d80)="961e782da136c24bc08d302972a62ecfe3cbeead1c954c7742868c42011a331f2e92dc729b41d125c492e95d9516199064d5c77956e7f4086d533f1446cfffce26ec03d6452313cdd5acfede0cb2cfc5b7677939c7f836c19d839d27e54abd54ee564a34f9ddce5aba0e4cfcc8ae4871522b2854d636453bd4b9579fac970fd342f7a2c9fa881d442e2e61bcbcb73c0f2f2e8b6c075face514675ba4aff91d01148ee7a619061990cb32807e7dabb1a73a1dba70f62308537c75ef78178017ae1120d4ed", 0xc4) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000080)) syz_open_dev$hidraw(0x0, 0x0, 0x0) 00:57:31 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:57:31 executing program 1: ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f00000003c0)) pipe(&(0x7f0000000100)) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x18100, 0x0) pipe(&(0x7f0000000040)) write$tun(0xffffffffffffffff, 0x0, 0x7e) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, &(0x7f0000000280)='trusted.overlay.origin\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x0) openat$vhost_vsock(0xffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x60, 0x10, 0x401, 0xd00, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TOS={0x5}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e20}]}}}, @IFLA_MASTER={0x8}, @IFLA_MASTER={0x8}]}, 0x60}}, 0x0) 00:57:31 executing program 0: unshare(0x20400) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) fcntl$setflags(r0, 0x2, 0x1) 00:57:31 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x30007, 0x0) 00:57:32 executing program 0: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ipvlan1\x00'}) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) [ 2000.952994][T15019] usb 6-1: new high-speed USB device number 87 using dummy_hcd 00:57:32 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@spectator='spectator'}, {@hostdata={'hostdata', 0x3d, 'ethtool\x00'}}]}) 00:57:32 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000800ac1e0001000000000000000000000000fe8000000001000000000000000000aa00000000000000000a"], 0x13c}}, 0x0) 00:57:32 executing program 0: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ipvlan1\x00'}) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) 00:57:32 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) [ 2001.332314][T15019] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2001.365664][T15019] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 00:57:32 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x30007, 0x0) [ 2001.395474][ T7317] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2001.422547][T15019] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2001.451790][ T7319] gfs2: not a GFS2 filesystem 00:57:32 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5e, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80284504, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) [ 2001.477100][ T7321] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2001.494669][T15019] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2001.516616][T15019] usb 6-1: config 0 descriptor?? [ 2001.540514][ T7319] gfs2: not a GFS2 filesystem [ 2001.812974][ T6043] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 2001.985557][ T7304] udc-core: couldn't find an available UDC or it's busy [ 2001.992593][ T7304] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2002.172999][ T6043] usb 1-1: config 0 has no interfaces? [ 2002.178909][ T6043] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2002.196185][ T6043] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2002.209861][ T6043] usb 1-1: config 0 descriptor?? [ 2002.284097][T15019] keytouch 0003:0926:3333.027D: fixing up Keytouch IEC report descriptor [ 2002.297203][T15019] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.027D/input/input589 [ 2002.388292][T15019] keytouch 0003:0926:3333.027D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 2002.491736][T15019] usb 6-1: USB disconnect, device number 87 00:57:34 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)={0x40, 0x0, 0x2e, {0x2e, 0x5, "2648f7be311be28e381acfa4ed14d8562969866bdab65e5d4220d683e10a03c2a3cd510e8ac901ff8db0bf5d"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x7fffff9, 0xf007, 0x1, [0xc0f0, 0x1fe00c0]}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x0, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x43}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) r3 = syz_open_dev$evdev(&(0x7f0000001200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000001280)={0x1f, 0x1, &(0x7f0000001240)="7f"}) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af4566f3c7347185913f6185b306e694b7c75ea187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f00000004c0)=ANY=[@ANYBLOB="00030400000204030a08b5f4dff5abf62516eefff03b833aaa9a42d8867ada37523214452bbee48a8a4d9667d7fed8e8861b64a47306fb6bcdaf49e1b5639c28c347f81e8fec9b9e5e0adae6664083da44404259382a14f5521d78ff7450eedbe2736c2e5f03f829f560da68281354432a40e6b19e9fd8a6fdb13d66f91b58b8563c2cc4e5438d1e3c61487fd4eb83c5db960ac76404b1e962bd616962af6c335d15d0ad947a2321bf0bfa15f6a2b8a6354a95267eb37d4e60d625405870bcd52fea4a7c1f4b67be28add47f384793e16201ee7d616e30a637f81cf50ca924959d5782e6ca9e83972cb688ef0f92931041ffaf636beb6a"], &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "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"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r4 = syz_open_dev$hidraw(&(0x7f0000001300)='/dev/hidraw#\x00', 0x0, 0x41) r5 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5e, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80284504, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000012c0)={0x80, 0x5, 0x830c, 0x2, "09738855f8bbb430744feb4e216baa45df434c8d892fdaf6966ac4a3dd6a9e7f"}) write$hidraw(r4, &(0x7f0000002d80)="961e782da136c24bc08d302972a62ecfe3cbeead1c954c7742868c42011a331f2e92dc729b41d125c492e95d9516199064d5c77956e7f4086d533f1446cfffce26ec03d6452313cdd5acfede0cb2cfc5b7677939c7f836c19d839d27e54abd54ee564a34f9ddce5aba0e4cfcc8ae4871522b2854d636453bd4b9579fac970fd342f7a2c9fa881d442e2e61bcbcb73c0f2f2e8b6c075face514675ba4aff91d01148ee7a619061990cb32807e7dabb1a73a1dba70f62308537c75ef78178017ae1120d4ed", 0xc4) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000080)) syz_open_dev$hidraw(0x0, 0x0, 0x0) 00:57:34 executing program 1: socket(0x40000000015, 0x5, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000500)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) pselect6(0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 00:57:34 executing program 3: r0 = socket$inet(0x2, 0x6, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10) 00:57:34 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:57:34 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x30007, 0x0) 00:57:34 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000800ac1e0001000000000000000000000000fe8000000000000000000000000000aa00000000000000000a"], 0x13c}}, 0x0) [ 2003.505378][ T7401] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2003.539985][T21857] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 2003.560202][ T7402] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. 00:57:34 executing program 1: unshare(0x20400) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x40085112, 0x0) 00:57:35 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:57:35 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)=ANY=[@ANYBLOB="3c010000190001000000000000000800ac1e0001000000000000000000000000fe8000000000000000000000000000aa00000000fffffffc0a"], 0x13c}}, 0x0) [ 2003.923556][T21857] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2003.936500][ T7412] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. 00:57:35 executing program 1: unshare(0x20400) r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0x40405515, 0x0) [ 2004.032821][T21857] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 00:57:35 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x30007, 0x0) [ 2004.091430][T21857] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2004.164728][T21857] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2004.257708][T21857] usb 6-1: config 0 descriptor?? 00:57:35 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x404c534a, &(0x7f0000000200)={{0x0, 0x7f}, 0x0, 0xfffffefe}) [ 2004.557811][ T2484] usb 1-1: USB disconnect, device number 108 [ 2004.768486][ T7396] udc-core: couldn't find an available UDC or it's busy [ 2004.776526][ T7396] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2005.113881][T21857] keytouch 0003:0926:3333.027E: fixing up Keytouch IEC report descriptor [ 2005.133314][T21857] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.027E/input/input590 [ 2005.233077][T21857] keytouch 0003:0926:3333.027E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 2005.325354][ T6043] usb 6-1: USB disconnect, device number 88 00:57:37 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)={0x40, 0x0, 0x2e, {0x2e, 0x5, "2648f7be311be28e381acfa4ed14d8562969866bdab65e5d4220d683e10a03c2a3cd510e8ac901ff8db0bf5d"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x7fffff9, 0xf007, 0x1, [0xc0f0, 0x1fe00c0]}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x0, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x43}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) r3 = syz_open_dev$evdev(&(0x7f0000001200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000001280)={0x1f, 0x1, &(0x7f0000001240)="7f"}) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af4566f3c7347185913f6185b306e694b7c75ea187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f00000004c0)=ANY=[@ANYBLOB="00030400000204030a08b5f4dff5abf62516eefff03b833aaa9a42d8867ada37523214452bbee48a8a4d9667d7fed8e8861b64a47306fb6bcdaf49e1b5639c28c347f81e8fec9b9e5e0adae6664083da44404259382a14f5521d78ff7450eedbe2736c2e5f03f829f560da68281354432a40e6b19e9fd8a6fdb13d66f91b58b8563c2cc4e5438d1e3c61487fd4eb83c5db960ac76404b1e962bd616962af6c335d15d0ad947a2321bf0bfa15f6a2b8a6354a95267eb37d4e60d625405870bcd52fea4a7c1f4b67be28add47f384793e16201ee7d616e30a637f81cf50ca924959d5782e6ca9e83972cb688ef0f92931041ffaf636beb6a44ca"], &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "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"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r4 = syz_open_dev$hidraw(&(0x7f0000001300)='/dev/hidraw#\x00', 0x0, 0x41) r5 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5e, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80284504, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000012c0)={0x80, 0x5, 0x830c, 0x2, "09738855f8bbb430744feb4e216baa45df434c8d892fdaf6966ac4a3dd6a9e7f"}) write$hidraw(r4, &(0x7f0000002d80)="961e782da136c24bc08d302972a62ecfe3cbeead1c954c7742868c42011a331f2e92dc729b41d125c492e95d9516199064d5c77956e7f4086d533f1446cfffce26ec03d6452313cdd5acfede0cb2cfc5b7677939c7f836c19d839d27e54abd54ee564a34f9ddce5aba0e4cfcc8ae4871522b2854d636453bd4b9579fac970fd342f7a2c9fa881d442e2e61bcbcb73c0f2f2e8b6c075face514675ba4aff91d01148ee7a619061990cb32807e7dabb1a73a1dba70f62308537c75ef78178017ae1120d4ed", 0xc4) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000080)) syz_open_dev$hidraw(0x0, 0x0, 0x0) 00:57:37 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x30007, 0x0) 00:57:37 executing program 3: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x182) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x8, 0x80, 0xf8, 0x33, 0x0, 0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x420, 0x0, 0x80e, 0x0, 0x0, 0x8, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r3 = memfd_create(&(0x7f0000000380)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14uc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc97\xf8I\xc5\x83/\xf5\xe6E\x05\xaa\x82\xdc\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4\xa7\x98\x1c\x9f\xce\xeb\'\xbc.\x9az\xe3\x9ch\xa5>!\xeb\xde\x86\x17\x1a\xff\xeddk\x06l\x1eC\t\x88>\xcdr\xe2\x8e\xa0\xfc\xfc\xf1q\xe3\xff', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) socket$bt_rfcomm(0x1f, 0x0, 0x3) sendfile(r0, r0, 0x0, 0x0) 00:57:37 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)=ANY=[@ANYBLOB="3c010000190001000000000000000800ac1e0001000000000000000030000000fe8000000000000000000000000000aa00000000000000000a"], 0x13c}}, 0x0) 00:57:37 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:57:37 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x13, 0x17, 0x0, &(0x7f0000000180)}) [ 2006.026215][ T7488] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. 00:57:37 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000800ac1e0001000000000000000000000000fe8000000000000000000000000000aa00000000000000000a000000dd000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008400050020010000000000000000000000000002000000003200000002000000ff020000000000000000000000000001063500000100000000000000000000000000000000000000000000000000000000000000000000003c00000002"], 0x13c}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000800ac1e0001000000000000000000000000fe8000000000000000000000000000aa00000000000000000a000000dd000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008400050020010000000000000000000000000002000000003200000002000000ff020000000000000000000000000001063500000100000000000000000000000000000000000000000000000000000000000000000000003c00000002"], 0x13c}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000800ac1e0001000000000000000000000000fe8000000000000000000000000000aa00000000000000000a000000dd000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008400050020010000000000000000000000000002000000003200000002000000ff020000000000000000000000000001063500000100000000000000000000000000000000000000000000000000000000000000000000003c00000002"], 0x13c}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000800ac1e0001000000000000000000000000fe8000000000000000000000000000aa00000000000000000a000000dd000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008400050020010000000000000000000000000002000000003200000002000000ff020000000000000000000000000001063500000100000000000000000000000000000000000000000000000000000000000000000000003c00000002"], 0x13c}}, 0x0) 00:57:37 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc293, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 00:57:37 executing program 1: fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000080)=@v3, 0x18, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x7fff}, 0x0) 00:57:37 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) 00:57:37 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x1a0201, 0x0) ioctl$TCSETSF(r0, 0x5100, 0x0) [ 2006.462698][T21857] usb 6-1: new high-speed USB device number 89 using dummy_hcd 00:57:37 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c010000190001000000000000000800ac1e0001000000000000007d00000000fe8000000000000000000000000000aa00000000000000000a000000dd0000008a2fa456f8dc141d3378fc5d3bcd175131cdfa34fc0420f6a01a855c0b7e12460a975b664f3610cafb6b9939fc21f2a3cb3ef4ee680d8aa6793415bca301067314059448927739dfa8eb3b0518c5c8b64b96d418c4dc0811d262a2dcae251193ec41fa66ec47850b6edcff8375da2e110fe390d8"], 0x13c}}, 0x0) [ 2006.612626][ T2522] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 2006.624377][ T7516] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2006.853345][T21857] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2006.871485][T21857] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2006.903041][T21857] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2006.912391][T21857] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2006.944821][T21857] usb 6-1: config 0 descriptor?? [ 2006.983333][ T2522] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2007.002300][ T2522] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2007.019818][ T2522] usb 4-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.40 [ 2007.059501][ T2522] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2007.081908][ T2522] usb 4-1: config 0 descriptor?? [ 2007.395262][ T7495] udc-core: couldn't find an available UDC or it's busy [ 2007.402282][ T7495] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2007.422803][ T2522] usbhid 4-1:0.0: can't add hid device: -71 [ 2007.429045][ T2522] usbhid: probe of 4-1:0.0 failed with error -71 [ 2007.437901][ T2522] usb 4-1: USB disconnect, device number 8 [ 2007.713656][T21857] keytouch 0003:0926:3333.027F: fixing up Keytouch IEC report descriptor [ 2007.732636][T21857] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.027F/input/input591 [ 2007.837157][T21857] keytouch 0003:0926:3333.027F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 2007.920502][T21857] usb 6-1: USB disconnect, device number 89 [ 2008.102458][ T9903] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 2008.492568][ T9903] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2008.503734][ T9903] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2008.515487][ T9903] usb 4-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.40 [ 2008.525499][ T9903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2008.535171][ T9903] usb 4-1: config 0 descriptor?? 00:57:39 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)={0x40, 0x0, 0x2e, {0x2e, 0x5, "2648f7be311be28e381acfa4ed14d8562969866bdab65e5d4220d683e10a03c2a3cd510e8ac901ff8db0bf5d"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x7fffff9, 0xf007, 0x1, [0xc0f0, 0x1fe00c0]}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x0, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x43}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) r3 = syz_open_dev$evdev(&(0x7f0000001200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000001280)={0x1f, 0x1, &(0x7f0000001240)="7f"}) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af4566f3c7347185913f6185b306e694b7c75ea187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f00000004c0)=ANY=[@ANYBLOB="00030400000204030a08b5f4dff5abf62516eefff03b833aaa9a42d8867ada37523214452bbee48a8a4d9667d7fed8e8861b64a47306fb6bcdaf49e1b5639c28c347f81e8fec9b9e5e0adae6664083da44404259382a14f5521d78ff7450eedbe2736c2e5f03f829f560da68281354432a40e6b19e9fd8a6fdb13d66f91b58b8563c2cc4e5438d1e3c61487fd4eb83c5db960ac76404b1e962bd616962af6c335d15d0ad947a2321bf0bfa15f6a2b8a6354a95267eb37d4e60d625405870bcd52fea4a7c1f4b67be28add47f384793e16201ee7d616e30a637f81cf50ca924959d5782e6ca9e83972cb688ef0f92931041ffaf636beb6a44ca"], &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "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"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r4 = syz_open_dev$hidraw(&(0x7f0000001300)='/dev/hidraw#\x00', 0x0, 0x41) r5 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5e, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80284504, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000012c0)={0x80, 0x5, 0x830c, 0x2, "09738855f8bbb430744feb4e216baa45df434c8d892fdaf6966ac4a3dd6a9e7f"}) write$hidraw(r4, &(0x7f0000002d80)="961e782da136c24bc08d302972a62ecfe3cbeead1c954c7742868c42011a331f2e92dc729b41d125c492e95d9516199064d5c77956e7f4086d533f1446cfffce26ec03d6452313cdd5acfede0cb2cfc5b7677939c7f836c19d839d27e54abd54ee564a34f9ddce5aba0e4cfcc8ae4871522b2854d636453bd4b9579fac970fd342f7a2c9fa881d442e2e61bcbcb73c0f2f2e8b6c075face514675ba4aff91d01148ee7a619061990cb32807e7dabb1a73a1dba70f62308537c75ef78178017ae1120d4ed", 0xc4) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000080)) syz_open_dev$hidraw(0x0, 0x0, 0x0) 00:57:39 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$erofs(&(0x7f0000000140)='erofs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='noacl']) 00:57:39 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c010000190001000000000000000800ac1e0001000000000000000000000000fe8000000000000000000000000000aa00000000000000000a000000dd000000", @ANYRES32=0x0, @ANYRESHEX], 0x13c}}, 0x0) 00:57:39 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:57:39 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x30007, 0x0) [ 2008.657870][ T7581] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. 00:57:40 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) shutdown(r0, 0x0) read(r0, &(0x7f0000000100)=""/252, 0xfc) 00:57:40 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)={0x0, 0xf, 0x15, {0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0xff, 0x1, 0x7fffff9, 0x0, 0x1, [0x0]}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, 0x0}, 0x0) r2 = syz_open_dev$evdev(0x0, 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) syz_open_dev$evdev(&(0x7f0000001200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5e, 0x0) ioctl$EVIOCSKEYCODE_V2(r3, 0x80284504, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) 00:57:40 executing program 3: unshare(0x20400) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x5441, 0x0) 00:57:40 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) shutdown(r0, 0x0) read(r0, &(0x7f0000000100)=""/252, 0xfc) [ 2008.882630][ T9903] usbhid 4-1:0.0: can't add hid device: -71 [ 2008.890330][ T9903] usbhid: probe of 4-1:0.0 failed with error -71 [ 2008.942621][ T2484] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 2008.984163][ T9903] usb 4-1: USB disconnect, device number 9 00:57:40 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) shutdown(r0, 0x0) read(r0, &(0x7f0000000100)=""/252, 0xfc) 00:57:40 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000800ac1e0001000000000000000000000000fe8000000001000000000000000000aa00000000000000000a"], 0x13c}}, 0x0) [ 2009.242864][T15019] usb 2-1: new high-speed USB device number 126 using dummy_hcd 00:57:40 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) shutdown(r0, 0x0) read(r0, &(0x7f0000000100)=""/252, 0xfc) [ 2009.334841][ T2484] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2009.361047][ T7619] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2009.370267][ T2484] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2009.402615][ T2484] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2009.421495][ T2484] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2009.435247][ T2484] usb 6-1: config 0 descriptor?? [ 2009.633178][T15019] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2009.672822][T15019] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2009.691086][T15019] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2009.701953][T15019] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2009.743606][T15019] usb 2-1: config 0 descriptor?? [ 2009.913656][ T7585] udc-core: couldn't find an available UDC or it's busy [ 2009.920887][ T7585] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2010.253300][ T2484] keytouch 0003:0926:3333.0280: fixing up Keytouch IEC report descriptor [ 2010.273508][ T2484] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0280/input/input592 [ 2010.368552][ T2484] keytouch 0003:0926:3333.0280: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 2010.485150][ T2484] usb 6-1: USB disconnect, device number 90 [ 2010.492386][T15019] usbhid 2-1:0.0: can't add hid device: -71 [ 2010.498498][T15019] usbhid: probe of 2-1:0.0 failed with error -71 [ 2010.540549][T15019] usb 2-1: USB disconnect, device number 126 00:57:42 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810300000000003cf57187b312525b631dda1ea9b142bd891381f1343366ade89a08e1cf0f98b5ef41723da4a9166d9587c13a27b926deaedfc0e23540aa2a491d0041c82c1cef6b12b15b8ebb95144b567cc87d36c55c6f74ee455f0f16bee8885271686a58a13ecf239365a8d86391a25ea859d07bf8ae8d27bbeb4858431b95a08406c74bb0603bf8a56ab62c448e925fe31569b9611da91b0c4276ca64e90781a2a1703ac2f8a285d9fb645e9937824ed2c6690971ea801f840920a87e5ebebed4e972d8b98666bcaf88424b834db21281a7be5ebe3c6063381d34877d8f1b0ef4267b16c536a3f9aa577cc9953ca2048ca44d1baaff811ec5b965b92f04553fb17d2b1546ef30e4413de6c57aa334d2948f1189aef576773dec278c51fb0c4483db3387d09415f654f31ab1b20fd95df5a8031340f6"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)={0x40, 0x0, 0x2e, {0x2e, 0x5, "2648f7be311be28e381acfa4ed14d8562969866bdab65e5d4220d683e10a03c2a3cd510e8ac901ff8db0bf5d"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x7fffff9, 0xf007, 0x1, [0xc0f0, 0x1fe00c0]}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x0, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x43}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) r3 = syz_open_dev$evdev(&(0x7f0000001200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000001280)={0x1f, 0x1, &(0x7f0000001240)="7f"}) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af4566f3c7347185913f6185b306e694b7c75ea187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f00000004c0)=ANY=[@ANYBLOB="00030400000204030a08b5f4dff5abf62516eefff03b833aaa9a42d8867ada37523214452bbee48a8a4d9667d7fed8e8861b64a47306fb6bcdaf49e1b5639c28c347f81e8fec9b9e5e0adae6664083da44404259382a14f5521d78ff7450eedbe2736c2e5f03f829f560da68281354432a40e6b19e9fd8a6fdb13d66f91b58b8563c2cc4e5438d1e3c61487fd4eb83c5db960ac76404b1e962bd616962af6c335d15d0ad947a2321bf0bfa15f6a2b8a6354a95267eb37d4e60d625405870bcd52fea4a7c1f4b67be28add47f384793e16201ee7d616e30a637f81cf50ca924959d5782e6ca9e83972cb688ef0f92931041ffaf636beb6a44ca"], &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "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"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r4 = syz_open_dev$hidraw(&(0x7f0000001300)='/dev/hidraw#\x00', 0x0, 0x41) r5 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5e, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80284504, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000012c0)={0x80, 0x5, 0x830c, 0x2, "09738855f8bbb430744feb4e216baa45df434c8d892fdaf6966ac4a3dd6a9e7f"}) write$hidraw(r4, &(0x7f0000002d80)="961e782da136c24bc08d302972a62ecfe3cbeead1c954c7742868c42011a331f2e92dc729b41d125c492e95d9516199064d5c77956e7f4086d533f1446cfffce26ec03d6452313cdd5acfede0cb2cfc5b7677939c7f836c19d839d27e54abd54ee564a34f9ddce5aba0e4cfcc8ae4871522b2854d636453bd4b9579fac970fd342f7a2c9fa881d442e2e61bcbcb73c0f2f2e8b6c075face514675ba4aff91d01148ee7a619061990cb32807e7dabb1a73a1dba70f62308537c75ef78178017ae1120d4ed", 0xc4) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000080)) syz_open_dev$hidraw(0x0, 0x0, 0x0) 00:57:42 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x30007, 0x0) 00:57:42 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:57:42 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) read(r0, &(0x7f0000000100)=""/252, 0xfc) 00:57:42 executing program 3: unshare(0x20400) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r0, 0x0, 0x2, 0x0) 00:57:42 executing program 3: unshare(0x20400) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r0, 0x0, 0x2, 0x0) [ 2011.252196][ T2484] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 2011.512427][T15019] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 2011.652934][ T2484] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2011.664728][ T2484] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2011.676209][ T2484] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2011.697527][ T2484] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2011.720020][ T2484] usb 2-1: config 0 descriptor?? [ 2011.882979][T15019] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2011.894059][T15019] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2011.904528][T15019] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 00:57:43 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000002380)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=[@prinfo={0x18, 0x84, 0x5, {0x2}}], 0x18}], 0x1, 0x0) 00:57:43 executing program 3: unshare(0x20400) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r0, 0x0, 0x2, 0x0) 00:57:43 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) [ 2011.925895][T15019] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2011.949418][T15019] usb 6-1: config 0 descriptor?? 00:57:43 executing program 3: unshare(0x20400) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r0, 0x0, 0x2, 0x0) 00:57:43 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) read(r0, &(0x7f0000000100)=""/252, 0xfc) [ 2012.042285][ T2484] usbhid 2-1:0.0: can't add hid device: -71 [ 2012.048745][ T2484] usbhid: probe of 2-1:0.0 failed with error -71 00:57:43 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x30007, 0x0) [ 2012.122256][ T2484] usb 2-1: USB disconnect, device number 127 [ 2012.425108][ T7690] udc-core: couldn't find an available UDC or it's busy [ 2012.451812][ T7690] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2012.783488][T15019] keytouch 0003:0926:3333.0281: fixing up Keytouch IEC report descriptor [ 2012.813342][T15019] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0281/input/input593 [ 2012.915549][T15019] keytouch 0003:0926:3333.0281: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 2013.002551][ T2484] usb 6-1: USB disconnect, device number 91 00:57:44 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810300000000003cf57187b312525b631dda1ea9b142bd891381f1343366ade89a08e1cf0f98b5ef41723da4a9166d9587c13a27b926deaedfc0e23540aa2a491d0041c82c1cef6b12b15b8ebb95144b567cc87d36c55c6f74ee455f0f16bee8885271686a58a13ecf239365a8d86391a25ea859d07bf8ae8d27bbeb4858431b95a08406c74bb0603bf8a56ab62c448e925fe31569b9611da91b0c4276ca64e90781a2a1703ac2f8a285d9fb645e9937824ed2c6690971ea801f840920a87e5ebebed4e972d8b98666bcaf88424b834db21281a7be5ebe3c6063381d34877d8f1b0ef4267b16c536a3f9aa577cc9953ca2048ca44d1baaff811ec5b965b92f04553fb17d2b1546ef30e4413de6c57aa334d2948f1189aef576773dec278c51fb0c4483db3387d09415f654f31ab1b20fd95df5a8031340f6"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)={0x40, 0x0, 0x2e, {0x2e, 0x5, "2648f7be311be28e381acfa4ed14d8562969866bdab65e5d4220d683e10a03c2a3cd510e8ac901ff8db0bf5d"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x7fffff9, 0xf007, 0x1, [0xc0f0, 0x1fe00c0]}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x0, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x43}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) r3 = syz_open_dev$evdev(&(0x7f0000001200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000001280)={0x1f, 0x1, &(0x7f0000001240)="7f"}) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af4566f3c7347185913f6185b306e694b7c75ea187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "fc7100269712596c1c0d58c245f9288bf191c1b2d9e0ad034268fecdcd70b64ed4c6e89a0258cbcf833bc1eb865d68be278f5a18754ff7313cb371def95e6e05f55fde7aaba59e06c4ccd15f53687551e509ff69fd40908a2437f4a01d300b0171b3ef07ee7433422f93afd890907707b2ccd358604b5cb1dd095847ec110bf1d9fbef1e51fbfccd883518ea849192df942e366f1734ddbd5fa67f1bad262fcb31ec227d1313a3ac61cc0e65f9d337948af511b90d0aa49321e1074cd4f2cfc548e655c9124ac2d67a2b54313bb70e93004f738d08844f6bf03b6b947f7ef616e0df9fb68800c72b7626d7f77c9c201f68828e4e178116b05ff954440c8db0d7"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r4 = syz_open_dev$hidraw(&(0x7f0000001300)='/dev/hidraw#\x00', 0x0, 0x41) r5 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5e, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80284504, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000012c0)={0x80, 0x5, 0x830c, 0x2, "09738855f8bbb430744feb4e216baa45df434c8d892fdaf6966ac4a3dd6a9e7f"}) write$hidraw(r4, &(0x7f0000002d80)="961e782da136c24bc08d302972a62ecfe3cbeead1c954c7742868c42011a331f2e92dc729b41d125c492e95d9516199064d5c77956e7f4086d533f1446cfffce26ec03d6452313cdd5acfede0cb2cfc5b7677939c7f836c19d839d27e54abd54ee564a34f9ddce5aba0e4cfcc8ae4871522b2854d636453bd4b9579fac970fd342f7a2c9fa881d442e2e61bcbcb73c0f2f2e8b6c075face514675ba4aff91d01148ee7a619061990cb32807e7dabb1a73a1dba70f62308537c75ef78178017ae1120d4ed", 0xc4) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000080)) syz_open_dev$hidraw(0x0, 0x0, 0x0) 00:57:44 executing program 3: unshare(0x20400) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x2, 0x0) 00:57:44 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000002380)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=[@prinfo={0x18, 0x84, 0x5, {0x2}}], 0x18}], 0x1, 0x0) 00:57:44 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x30007, 0x0) 00:57:44 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r1) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:57:44 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) read(r0, &(0x7f0000000100)=""/252, 0xfc) 00:57:45 executing program 3: unshare(0x20400) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x2, 0x0) 00:57:45 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000002380)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=[@prinfo={0x18, 0x84, 0x5, {0x2}}], 0x18}], 0x1, 0x0) 00:57:45 executing program 3: unshare(0x20400) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x2, 0x0) 00:57:45 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000002380)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=[@prinfo={0x18, 0x84, 0x5, {0x2}}], 0x18}], 0x1, 0x0) 00:57:45 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r0, 0x0, 0x2, 0x0) [ 2014.091889][ T2522] usb 6-1: new high-speed USB device number 92 using dummy_hcd 00:57:45 executing program 1: socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002380)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=[@prinfo={0x18, 0x84, 0x5, {0x2}}], 0x18}], 0x1, 0x0) [ 2014.472750][ T2522] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2014.492686][ T2522] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2014.513423][ T2522] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2014.541117][ T2522] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2014.573878][ T2522] usb 6-1: config 0 descriptor?? [ 2015.053960][ T7779] udc-core: couldn't find an available UDC or it's busy [ 2015.060989][ T7779] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2015.373201][ T2522] keytouch 0003:0926:3333.0282: fixing up Keytouch IEC report descriptor [ 2015.384251][ T2522] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0282/input/input594 [ 2015.479031][ T2522] keytouch 0003:0926:3333.0282: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 2015.593873][ T9903] usb 6-1: USB disconnect, device number 92 00:57:47 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)={0x40, 0x0, 0x2e, {0x2e, 0x5, "2648f7be311be28e381acfa4ed14d8562969866bdab65e5d4220d683e10a03c2a3cd510e8ac901ff8db0bf5d"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x7fffff9, 0xf007, 0x1, [0xc0f0, 0x1fe00c0]}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x0, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x43}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) r3 = syz_open_dev$evdev(&(0x7f0000001200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000001280)={0x1f, 0x1, &(0x7f0000001240)="7f"}) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af4566f3c7347185913f6185b306e694b7c75ea187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "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"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r4 = syz_open_dev$hidraw(&(0x7f0000001300)='/dev/hidraw#\x00', 0x0, 0x41) r5 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5e, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80284504, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000012c0)={0x80, 0x5, 0x830c, 0x2, "09738855f8bbb430744feb4e216baa45df434c8d892fdaf6966ac4a3dd6a9e7f"}) write$hidraw(r4, &(0x7f0000002d80)="961e782da136c24bc08d302972a62ecfe3cbeead1c954c7742868c42011a331f2e92dc729b41d125c492e95d9516199064d5c77956e7f4086d533f1446cfffce26ec03d6452313cdd5acfede0cb2cfc5b7677939c7f836c19d839d27e54abd54ee564a34f9ddce5aba0e4cfcc8ae4871522b2854d636453bd4b9579fac970fd342f7a2c9fa881d442e2e61bcbcb73c0f2f2e8b6c075face514675ba4aff91d01148ee7a619061990cb32807e7dabb1a73a1dba70f62308537c75ef78178017ae1120d4ed", 0xc4) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000080)) syz_open_dev$hidraw(0x0, 0x0, 0x0) 00:57:47 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r1) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:57:47 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r0, 0x0, 0x2, 0x0) 00:57:47 executing program 1: socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002380)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=[@prinfo={0x18, 0x84, 0x5, {0x2}}], 0x18}], 0x1, 0x0) 00:57:47 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x30007, 0x0) 00:57:47 executing program 0: shutdown(0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f0000000100)=""/252, 0xfc) 00:57:47 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r0, 0x0, 0x2, 0x0) 00:57:47 executing program 1: socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002380)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=[@prinfo={0x18, 0x84, 0x5, {0x2}}], 0x18}], 0x1, 0x0) 00:57:47 executing program 0: shutdown(0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f0000000100)=""/252, 0xfc) 00:57:47 executing program 3: unshare(0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r0, 0x0, 0x2, 0x0) 00:57:47 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000002380)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=[@prinfo={0x18, 0x84, 0x5, {0x2}}], 0x18}], 0x1, 0x0) [ 2016.602070][ T9903] usb 6-1: new high-speed USB device number 93 using dummy_hcd 00:57:47 executing program 0: shutdown(0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f0000000100)=""/252, 0xfc) [ 2016.991569][ T9903] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2017.002869][ T9903] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2017.015969][ T9903] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2017.027163][ T9903] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2017.037769][ T9903] usb 6-1: config 0 descriptor?? [ 2017.504400][ T7856] udc-core: couldn't find an available UDC or it's busy [ 2017.512045][ T7856] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2017.832756][ T9903] keytouch 0003:0926:3333.0283: fixing up Keytouch IEC report descriptor [ 2017.843988][ T9903] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0283/input/input595 [ 2017.936603][ T9903] keytouch 0003:0926:3333.0283: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 2018.029894][ T2522] usb 6-1: USB disconnect, device number 93 00:57:49 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)={0x40, 0x0, 0x2e, {0x2e, 0x5, "2648f7be311be28e381acfa4ed14d8562969866bdab65e5d4220d683e10a03c2a3cd510e8ac901ff8db0bf5d"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x7fffff9, 0xf007, 0x1, [0xc0f0, 0x1fe00c0]}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x0, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x43}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) r3 = syz_open_dev$evdev(&(0x7f0000001200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000001280)={0x1f, 0x1, &(0x7f0000001240)="7f"}) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af4566f3c7347185913f6185b306e694b7c75ea187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "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"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r4 = syz_open_dev$hidraw(&(0x7f0000001300)='/dev/hidraw#\x00', 0x0, 0x41) r5 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5e, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80284504, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000012c0)={0x80, 0x5, 0x830c, 0x2, "09738855f8bbb430744feb4e216baa45df434c8d892fdaf6966ac4a3dd6a9e7f"}) write$hidraw(r4, &(0x7f0000002d80)="961e782da136c24bc08d302972a62ecfe3cbeead1c954c7742868c42011a331f2e92dc729b41d125c492e95d9516199064d5c77956e7f4086d533f1446cfffce26ec03d6452313cdd5acfede0cb2cfc5b7677939c7f836c19d839d27e54abd54ee564a34f9ddce5aba0e4cfcc8ae4871522b2854d636453bd4b9579fac970fd342f7a2c9fa881d442e2e61bcbcb73c0f2f2e8b6c075face514675ba4aff91d01148ee7a619061990cb32807e7dabb1a73a1dba70f62308537c75ef78178017ae1120d4ed", 0xc4) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000080)) syz_open_dev$hidraw(0x0, 0x0, 0x0) 00:57:49 executing program 3: unshare(0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r0, 0x0, 0x2, 0x0) 00:57:49 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000002380)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=[@prinfo={0x18, 0x84, 0x5, {0x2}}], 0x18}], 0x1, 0x0) 00:57:49 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) shutdown(r0, 0x0) read(r0, &(0x7f0000000100)=""/252, 0xfc) 00:57:49 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r1) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:57:49 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x30007, 0x0) 00:57:50 executing program 3: unshare(0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r0, 0x0, 0x2, 0x0) 00:57:50 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) shutdown(r0, 0x0) read(r0, &(0x7f0000000100)=""/252, 0xfc) 00:57:50 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000002380)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=[@prinfo={0x18, 0x84, 0x5, {0x2}}], 0x18}], 0x1, 0x0) 00:57:50 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = dup3(0xffffffffffffffff, r0, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000002380)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=[@prinfo={0x18, 0x84, 0x5, {0x2}}], 0x18}], 0x1, 0x0) 00:57:50 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) shutdown(r0, 0x0) read(r0, &(0x7f0000000100)=""/252, 0xfc) 00:57:50 executing program 3: unshare(0x20400) r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) waitid$P_PIDFD(0x3, r0, 0x0, 0x2, 0x0) [ 2019.071954][ T9901] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 2019.462040][ T9901] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2019.491031][ T9901] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2019.508950][ T9901] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2019.524236][ T9901] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2019.534952][ T9901] usb 6-1: config 0 descriptor?? [ 2020.004182][ T7933] udc-core: couldn't find an available UDC or it's busy [ 2020.013128][ T7933] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2020.322451][ T9901] keytouch 0003:0926:3333.0284: fixing up Keytouch IEC report descriptor [ 2020.333340][ T9901] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0284/input/input596 [ 2020.426303][ T9901] keytouch 0003:0926:3333.0284: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 2020.533885][ T6043] usb 6-1: USB disconnect, device number 94 00:57:52 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)={0x40, 0x0, 0x2e, {0x2e, 0x5, "2648f7be311be28e381acfa4ed14d8562969866bdab65e5d4220d683e10a03c2a3cd510e8ac901ff8db0bf5d"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x7fffff9, 0xf007, 0x1, [0xc0f0, 0x1fe00c0]}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x0, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x43}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) r3 = syz_open_dev$evdev(&(0x7f0000001200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000001280)={0x1f, 0x1, &(0x7f0000001240)="7f"}) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af4566f3c7347185913f6185b306e694b7c75ea187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0x0, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "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"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r4 = syz_open_dev$hidraw(&(0x7f0000001300)='/dev/hidraw#\x00', 0x0, 0x41) r5 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5e, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80284504, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000012c0)={0x80, 0x5, 0x830c, 0x2, "09738855f8bbb430744feb4e216baa45df434c8d892fdaf6966ac4a3dd6a9e7f"}) write$hidraw(r4, &(0x7f0000002d80)="961e782da136c24bc08d302972a62ecfe3cbeead1c954c7742868c42011a331f2e92dc729b41d125c492e95d9516199064d5c77956e7f4086d533f1446cfffce26ec03d6452313cdd5acfede0cb2cfc5b7677939c7f836c19d839d27e54abd54ee564a34f9ddce5aba0e4cfcc8ae4871522b2854d636453bd4b9579fac970fd342f7a2c9fa881d442e2e61bcbcb73c0f2f2e8b6c075face514675ba4aff91d01148ee7a619061990cb32807e7dabb1a73a1dba70f62308537c75ef78178017ae1120d4ed", 0xc4) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000080)) syz_open_dev$hidraw(0x0, 0x0, 0x0) 00:57:52 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) shutdown(0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000100)=""/252, 0xfc) 00:57:52 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = dup3(0xffffffffffffffff, r0, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000002380)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=[@prinfo={0x18, 0x84, 0x5, {0x2}}], 0x18}], 0x1, 0x0) 00:57:52 executing program 3: unshare(0x20400) r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) waitid$P_PIDFD(0x3, r0, 0x0, 0x2, 0x0) 00:57:52 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, 0xffffffffffffffff) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:57:52 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x30007, 0x0) 00:57:52 executing program 3: unshare(0x20400) r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) waitid$P_PIDFD(0x3, r0, 0x0, 0x2, 0x0) 00:57:52 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = dup3(0xffffffffffffffff, r0, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000002380)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=[@prinfo={0x18, 0x84, 0x5, {0x2}}], 0x18}], 0x1, 0x0) 00:57:52 executing program 1: r0 = socket$inet(0x2, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000002380)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=[@prinfo={0x18, 0x84, 0x5, {0x2}}], 0x18}], 0x1, 0x0) 00:57:52 executing program 3: unshare(0x20400) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x2, 0x0) [ 2021.581097][ T2484] usb 6-1: new high-speed USB device number 95 using dummy_hcd 00:57:53 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, 0xffffffffffffffff) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:57:53 executing program 3: unshare(0x20400) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x2, 0x0) [ 2021.951616][ T2484] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2021.976552][ T2484] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2022.017889][ T2484] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2022.105264][ T2484] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2022.179003][ T2484] usb 6-1: config 0 descriptor?? [ 2022.673846][ T8007] udc-core: couldn't find an available UDC or it's busy [ 2022.682857][ T8007] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2022.982061][ T2484] keytouch 0003:0926:3333.0285: fixing up Keytouch IEC report descriptor [ 2022.993301][ T2484] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0285/input/input597 [ 2023.096505][ T2484] keytouch 0003:0926:3333.0285: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 2023.199484][ T2484] usb 6-1: USB disconnect, device number 95 00:57:55 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)={0x40, 0x0, 0x2e, {0x2e, 0x5, "2648f7be311be28e381acfa4ed14d8562969866bdab65e5d4220d683e10a03c2a3cd510e8ac901ff8db0bf5d"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x7fffff9, 0xf007, 0x1, [0xc0f0, 0x1fe00c0]}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x0, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x43}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) r3 = syz_open_dev$evdev(&(0x7f0000001200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000001280)={0x1f, 0x1, &(0x7f0000001240)="7f"}) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af4566f3c7347185913f6185b306e694b7c75ea187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0x0, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "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"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r4 = syz_open_dev$hidraw(&(0x7f0000001300)='/dev/hidraw#\x00', 0x0, 0x41) r5 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5e, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80284504, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000012c0)={0x80, 0x5, 0x830c, 0x2, "09738855f8bbb430744feb4e216baa45df434c8d892fdaf6966ac4a3dd6a9e7f"}) write$hidraw(r4, &(0x7f0000002d80)="961e782da136c24bc08d302972a62ecfe3cbeead1c954c7742868c42011a331f2e92dc729b41d125c492e95d9516199064d5c77956e7f4086d533f1446cfffce26ec03d6452313cdd5acfede0cb2cfc5b7677939c7f836c19d839d27e54abd54ee564a34f9ddce5aba0e4cfcc8ae4871522b2854d636453bd4b9579fac970fd342f7a2c9fa881d442e2e61bcbcb73c0f2f2e8b6c075face514675ba4aff91d01148ee7a619061990cb32807e7dabb1a73a1dba70f62308537c75ef78178017ae1120d4ed", 0xc4) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000080)) syz_open_dev$hidraw(0x0, 0x0, 0x0) 00:57:55 executing program 3: unshare(0x20400) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x2, 0x0) 00:57:55 executing program 1: r0 = socket$inet(0x2, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000002380)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=[@prinfo={0x18, 0x84, 0x5, {0x2}}], 0x18}], 0x1, 0x0) 00:57:55 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x30007, 0x0) 00:57:55 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) shutdown(0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000100)=""/252, 0xfc) 00:57:55 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, 0xffffffffffffffff) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:57:55 executing program 3: unshare(0x20400) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r0, 0x0, 0x0, 0x0) 00:57:55 executing program 3: unshare(0x20400) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r0, 0x0, 0x0, 0x0) 00:57:55 executing program 1: r0 = socket$inet(0x2, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000002380)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=[@prinfo={0x18, 0x84, 0x5, {0x2}}], 0x18}], 0x1, 0x0) 00:57:55 executing program 3: unshare(0x20400) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r0, 0x0, 0x0, 0x0) 00:57:55 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) pwritev(r0, &(0x7f0000001580)=[{&(0x7f0000000040)="fc131da370eded63d3", 0x9}], 0x1, 0x0) [ 2024.240822][ T6043] usb 6-1: new high-speed USB device number 96 using dummy_hcd 00:57:55 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x0, 0x84) r2 = dup3(r0, r1, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000002380)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=[@prinfo={0x18, 0x84, 0x5, {0x2}}], 0x18}], 0x1, 0x0) [ 2024.611480][ T6043] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2024.628872][ T6043] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2024.648012][ T6043] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2024.657308][ T6043] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2024.674918][ T6043] usb 6-1: config 0 descriptor?? [ 2025.143547][ T8083] udc-core: couldn't find an available UDC or it's busy [ 2025.151623][ T8083] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2025.461791][ T6043] keytouch 0003:0926:3333.0286: fixing up Keytouch IEC report descriptor [ 2025.473920][ T6043] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0286/input/input598 [ 2025.556816][ T6043] keytouch 0003:0926:3333.0286: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 2025.679341][ T9901] usb 6-1: USB disconnect, device number 96 00:57:57 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:57:57 executing program 3: r0 = getpid() r1 = pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x0, &(0x7f0000000040)={0x11, 0x0, 0x101}, 0x0) 00:57:57 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x0, 0x84) r2 = dup3(r0, r1, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000002380)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=[@prinfo={0x18, 0x84, 0x5, {0x2}}], 0x18}], 0x1, 0x0) 00:57:57 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x30007, 0x0) 00:57:57 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) shutdown(0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000100)=""/252, 0xfc) 00:57:57 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)={0x40, 0x0, 0x2e, {0x2e, 0x5, "2648f7be311be28e381acfa4ed14d8562969866bdab65e5d4220d683e10a03c2a3cd510e8ac901ff8db0bf5d"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x7fffff9, 0xf007, 0x1, [0xc0f0, 0x1fe00c0]}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x0, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x43}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) r3 = syz_open_dev$evdev(&(0x7f0000001200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000001280)={0x1f, 0x1, &(0x7f0000001240)="7f"}) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af4566f3c7347185913f6185b306e694b7c75ea187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0x0, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "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"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r4 = syz_open_dev$hidraw(&(0x7f0000001300)='/dev/hidraw#\x00', 0x0, 0x41) r5 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5e, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80284504, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000012c0)={0x80, 0x5, 0x830c, 0x2, "09738855f8bbb430744feb4e216baa45df434c8d892fdaf6966ac4a3dd6a9e7f"}) write$hidraw(r4, &(0x7f0000002d80)="961e782da136c24bc08d302972a62ecfe3cbeead1c954c7742868c42011a331f2e92dc729b41d125c492e95d9516199064d5c77956e7f4086d533f1446cfffce26ec03d6452313cdd5acfede0cb2cfc5b7677939c7f836c19d839d27e54abd54ee564a34f9ddce5aba0e4cfcc8ae4871522b2854d636453bd4b9579fac970fd342f7a2c9fa881d442e2e61bcbcb73c0f2f2e8b6c075face514675ba4aff91d01148ee7a619061990cb32807e7dabb1a73a1dba70f62308537c75ef78178017ae1120d4ed", 0xc4) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000080)) syz_open_dev$hidraw(0x0, 0x0, 0x0) 00:57:57 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x0, 0x84) r2 = dup3(r0, r1, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000002380)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=[@prinfo={0x18, 0x84, 0x5, {0x2}}], 0x18}], 0x1, 0x0) 00:57:57 executing program 3: unshare(0x20400) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x0) 00:57:58 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x8, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000040)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d64d4d", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x5, 0x0, 0x0, 0x0, [], {0x0, 0x6, '\x00', 0x0, 0x3a, 0x0, @loopback, @mcast2, [], "39a4ef13f5cff0be"}}}}}}}, 0x0) [ 2026.760211][ T9901] usb 6-1: new high-speed USB device number 97 using dummy_hcd 00:57:58 executing program 1: socket$inet(0x2, 0x4000000805, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = dup3(0xffffffffffffffff, r0, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000002380)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=[@prinfo={0x18, 0x84, 0x5, {0x2}}], 0x18}], 0x1, 0x0) 00:57:58 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000100)={0x3a, 0x0, 'client1\x00', 0x0, "1d0f8053f450db92", "182394f76942fcb61f22eae5b2252b25baa60a38966e870cc4f030767cee2c1b"}) 00:57:58 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000100)={0x3a, 0x0, 'client1\x00', 0x0, "1d0f8053f450db92", "182394f76942fcb61f22eae5b2252b25baa60a38966e870cc4f030767cee2c1b"}) [ 2027.171059][ T9901] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2027.189105][ T9901] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 00:57:58 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000100)={0x3a, 0x0, 'client1\x00', 0x0, "1d0f8053f450db92", "182394f76942fcb61f22eae5b2252b25baa60a38966e870cc4f030767cee2c1b"}) 00:57:58 executing program 1: socket$inet(0x2, 0x4000000805, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = dup3(0xffffffffffffffff, r0, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000002380)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=[@prinfo={0x18, 0x84, 0x5, {0x2}}], 0x18}], 0x1, 0x0) 00:57:58 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) shutdown(r0, 0x0) read(0xffffffffffffffff, &(0x7f0000000100)=""/252, 0xfc) 00:57:58 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:57:58 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x30007, 0x0) [ 2027.251900][ T9901] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2027.278166][ T9901] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2027.313559][ T9901] usb 6-1: config 0 descriptor?? [ 2027.793712][ T8175] udc-core: couldn't find an available UDC or it's busy [ 2027.806549][ T8175] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2028.131195][ T9901] keytouch 0003:0926:3333.0287: fixing up Keytouch IEC report descriptor [ 2028.149603][ T9901] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0287/input/input599 [ 2028.289729][ T9901] keytouch 0003:0926:3333.0287: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 2028.352712][ T9901] usb 6-1: USB disconnect, device number 97 00:58:00 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)={0x40, 0x0, 0x2e, {0x2e, 0x5, "2648f7be311be28e381acfa4ed14d8562969866bdab65e5d4220d683e10a03c2a3cd510e8ac901ff8db0bf5d"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x7fffff9, 0xf007, 0x1, [0xc0f0, 0x1fe00c0]}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x0, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x43}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) r3 = syz_open_dev$evdev(&(0x7f0000001200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000001280)={0x1f, 0x1, &(0x7f0000001240)="7f"}) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af4566f3c7347185913f6185b306e694b7c75ea187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x0, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "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"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r4 = syz_open_dev$hidraw(&(0x7f0000001300)='/dev/hidraw#\x00', 0x0, 0x41) r5 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5e, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80284504, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000012c0)={0x80, 0x5, 0x830c, 0x2, "09738855f8bbb430744feb4e216baa45df434c8d892fdaf6966ac4a3dd6a9e7f"}) write$hidraw(r4, &(0x7f0000002d80)="961e782da136c24bc08d302972a62ecfe3cbeead1c954c7742868c42011a331f2e92dc729b41d125c492e95d9516199064d5c77956e7f4086d533f1446cfffce26ec03d6452313cdd5acfede0cb2cfc5b7677939c7f836c19d839d27e54abd54ee564a34f9ddce5aba0e4cfcc8ae4871522b2854d636453bd4b9579fac970fd342f7a2c9fa881d442e2e61bcbcb73c0f2f2e8b6c075face514675ba4aff91d01148ee7a619061990cb32807e7dabb1a73a1dba70f62308537c75ef78178017ae1120d4ed", 0xc4) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000080)) syz_open_dev$hidraw(0x0, 0x0, 0x0) 00:58:00 executing program 1: socket$inet(0x2, 0x4000000805, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = dup3(0xffffffffffffffff, r0, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000002380)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=[@prinfo={0x18, 0x84, 0x5, {0x2}}], 0x18}], 0x1, 0x0) 00:58:00 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) shutdown(r0, 0x0) read(0xffffffffffffffff, &(0x7f0000000100)=""/252, 0xfc) 00:58:00 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000100)={0x3a, 0x0, 'client1\x00', 0x0, "1d0f8053f450db92", "182394f76942fcb61f22eae5b2252b25baa60a38966e870cc4f030767cee2c1b"}) 00:58:00 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x30007, 0x0) 00:58:00 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:58:00 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r1 = dup3(r0, 0xffffffffffffffff, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000002380)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=[@prinfo={0x18, 0x84, 0x5, {0x2}}], 0x18}], 0x1, 0x0) 00:58:00 executing program 3: ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000100)={0x3a, 0x0, 'client1\x00', 0x0, "1d0f8053f450db92", "182394f76942fcb61f22eae5b2252b25baa60a38966e870cc4f030767cee2c1b"}) 00:58:00 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) shutdown(r0, 0x0) read(0xffffffffffffffff, &(0x7f0000000100)=""/252, 0xfc) 00:58:00 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r1 = dup3(r0, 0xffffffffffffffff, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000002380)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=[@prinfo={0x18, 0x84, 0x5, {0x2}}], 0x18}], 0x1, 0x0) 00:58:00 executing program 3: ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000100)={0x3a, 0x0, 'client1\x00', 0x0, "1d0f8053f450db92", "182394f76942fcb61f22eae5b2252b25baa60a38966e870cc4f030767cee2c1b"}) 00:58:00 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) shutdown(r0, 0x0) read(r0, 0x0, 0x0) [ 2029.409878][ T2484] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 2029.840707][ T2484] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2029.859575][ T2484] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2029.871965][ T2484] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2029.883105][ T2484] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2029.896744][ T2484] usb 6-1: config 0 descriptor?? [ 2030.361873][ T8266] udc-core: couldn't find an available UDC or it's busy [ 2030.369048][ T8266] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2030.690627][ T2484] keytouch 0003:0926:3333.0288: fixing up Keytouch IEC report descriptor [ 2030.701570][ T2484] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0288/input/input600 [ 2030.800918][ T2484] keytouch 0003:0926:3333.0288: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 2030.902500][ T2522] usb 6-1: USB disconnect, device number 98 00:58:02 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)={0x40, 0x0, 0x2e, {0x2e, 0x5, "2648f7be311be28e381acfa4ed14d8562969866bdab65e5d4220d683e10a03c2a3cd510e8ac901ff8db0bf5d"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x7fffff9, 0xf007, 0x1, [0xc0f0, 0x1fe00c0]}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x0, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x43}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) r3 = syz_open_dev$evdev(&(0x7f0000001200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000001280)={0x1f, 0x1, &(0x7f0000001240)="7f"}) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af4566f3c7347185913f6185b306e694b7c75ea187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x0, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "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"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r4 = syz_open_dev$hidraw(&(0x7f0000001300)='/dev/hidraw#\x00', 0x0, 0x41) r5 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5e, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80284504, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000012c0)={0x80, 0x5, 0x830c, 0x2, "09738855f8bbb430744feb4e216baa45df434c8d892fdaf6966ac4a3dd6a9e7f"}) write$hidraw(r4, &(0x7f0000002d80)="961e782da136c24bc08d302972a62ecfe3cbeead1c954c7742868c42011a331f2e92dc729b41d125c492e95d9516199064d5c77956e7f4086d533f1446cfffce26ec03d6452313cdd5acfede0cb2cfc5b7677939c7f836c19d839d27e54abd54ee564a34f9ddce5aba0e4cfcc8ae4871522b2854d636453bd4b9579fac970fd342f7a2c9fa881d442e2e61bcbcb73c0f2f2e8b6c075face514675ba4aff91d01148ee7a619061990cb32807e7dabb1a73a1dba70f62308537c75ef78178017ae1120d4ed", 0xc4) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000080)) syz_open_dev$hidraw(0x0, 0x0, 0x0) 00:58:02 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r1 = dup3(r0, 0xffffffffffffffff, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000002380)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=[@prinfo={0x18, 0x84, 0x5, {0x2}}], 0x18}], 0x1, 0x0) 00:58:02 executing program 3: ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000100)={0x3a, 0x0, 'client1\x00', 0x0, "1d0f8053f450db92", "182394f76942fcb61f22eae5b2252b25baa60a38966e870cc4f030767cee2c1b"}) 00:58:02 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) shutdown(r0, 0x0) read(r0, 0x0, 0x0) 00:58:02 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:58:02 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x30007, 0x0) 00:58:02 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) shutdown(r0, 0x0) read(r0, 0x0, 0x0) 00:58:02 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) dup3(r0, r1, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002380)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=[@prinfo={0x18, 0x84, 0x5, {0x2}}], 0x18}], 0x1, 0x0) 00:58:02 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000100)={0x3a, 0x0, 'client1\x00', 0x0, "1d0f8053f450db92", "182394f76942fcb61f22eae5b2252b25baa60a38966e870cc4f030767cee2c1b"}) 00:58:03 executing program 0: mmap(&(0x7f00006ff000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x2f806000) mmap(&(0x7f0000700000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x1e1442, 0x0) write$UHID_INPUT(r0, &(0x7f0000001440), 0xfffffc41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fadvise64(r0, 0x0, 0x0, 0x4) 00:58:03 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000100)={0x3a, 0x0, 'client1\x00', 0x0, "1d0f8053f450db92", "182394f76942fcb61f22eae5b2252b25baa60a38966e870cc4f030767cee2c1b"}) 00:58:03 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) dup3(r0, r1, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002380)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=[@prinfo={0x18, 0x84, 0x5, {0x2}}], 0x18}], 0x1, 0x0) [ 2031.969591][ T2522] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 2032.340890][ T2522] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2032.384871][ T2522] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2032.462659][ T2522] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2032.519452][ T2522] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2032.536328][ T2522] usb 6-1: config 0 descriptor?? [ 2033.003175][ T8344] udc-core: couldn't find an available UDC or it's busy [ 2033.010302][ T8344] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2033.320419][ T2522] keytouch 0003:0926:3333.0289: fixing up Keytouch IEC report descriptor [ 2033.345869][ T2522] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0289/input/input601 [ 2033.435588][ T2522] keytouch 0003:0926:3333.0289: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 2033.533588][ T2484] usb 6-1: USB disconnect, device number 99 00:58:05 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)={0x40, 0x0, 0x2e, {0x2e, 0x5, "2648f7be311be28e381acfa4ed14d8562969866bdab65e5d4220d683e10a03c2a3cd510e8ac901ff8db0bf5d"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x7fffff9, 0xf007, 0x1, [0xc0f0, 0x1fe00c0]}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x0, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x43}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) r3 = syz_open_dev$evdev(&(0x7f0000001200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000001280)={0x1f, 0x1, &(0x7f0000001240)="7f"}) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af4566f3c7347185913f6185b306e694b7c75ea187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f00000004c0)=ANY=[@ANYBLOB="00030400000204030a08b5f4dff5abf62516eefff03b833aaa9a42d8867ada37523214452bbee48a8a4d9667d7fed8e8861b64a47306fb6bcdaf49e1b5639c28c347f81e8fec9b9e5e0adae6664083da44404259382a14f5521d78ff7450eedbe2736c2e5f03f829f560da68281354432a40e6b19e9fd8a6fdb13d66f91b58b8563c2cc4e5438d1e3c61487fd4eb83c5db960ac76404b1e962bd616962af6c335d15d0ad947a2321bf0bfa15f6a2b8a6354a95267eb37d4e60d625405870bcd52fea4a7c1f4b67be28add47f384793e16201ee7d616e30a637f81cf50ca924959d5782e6ca9e83972cb688ef0f92931041ffaf636beb6a44cac5"], &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x0, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "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"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r4 = syz_open_dev$hidraw(&(0x7f0000001300)='/dev/hidraw#\x00', 0x0, 0x41) r5 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5e, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80284504, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000012c0)={0x80, 0x5, 0x830c, 0x2, "09738855f8bbb430744feb4e216baa45df434c8d892fdaf6966ac4a3dd6a9e7f"}) write$hidraw(r4, &(0x7f0000002d80)="961e782da136c24bc08d302972a62ecfe3cbeead1c954c7742868c42011a331f2e92dc729b41d125c492e95d9516199064d5c77956e7f4086d533f1446cfffce26ec03d6452313cdd5acfede0cb2cfc5b7677939c7f836c19d839d27e54abd54ee564a34f9ddce5aba0e4cfcc8ae4871522b2854d636453bd4b9579fac970fd342f7a2c9fa881d442e2e61bcbcb73c0f2f2e8b6c075face514675ba4aff91d01148ee7a619061990cb32807e7dabb1a73a1dba70f62308537c75ef78178017ae1120d4ed", 0xc4) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000080)) syz_open_dev$hidraw(0x0, 0x0, 0x0) 00:58:05 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) dup3(r0, r1, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002380)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=[@prinfo={0x18, 0x84, 0x5, {0x2}}], 0x18}], 0x1, 0x0) 00:58:05 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000100)={0x3a, 0x0, 'client1\x00', 0x0, "1d0f8053f450db92", "182394f76942fcb61f22eae5b2252b25baa60a38966e870cc4f030767cee2c1b"}) 00:58:05 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x30007, 0x0) 00:58:05 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:58:05 executing program 0: r0 = semget$private(0x0, 0x4000000009, 0x0) semop(r0, &(0x7f0000000000)=[{}], 0x1) 00:58:05 executing program 3: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000100)={0x3a, 0x0, 'client1\x00', 0x0, "1d0f8053f450db92", "182394f76942fcb61f22eae5b2252b25baa60a38966e870cc4f030767cee2c1b"}) 00:58:05 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendmmsg$inet_sctp(r2, 0x0, 0x0, 0x0) 00:58:05 executing program 0: syz_emit_ethernet(0x6e, &(0x7f0000000040)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d64d4d", 0x38, 0x3c, 0x0, @remote, @mcast2, {[], @dest_unreach={0x2, 0x0, 0x0, 0x0, [], {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @mcast2, [], "39a4ef13f5cff0be"}}}}}}}, 0x0) 00:58:05 executing program 3: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000100)={0x3a, 0x0, 'client1\x00', 0x0, "1d0f8053f450db92", "182394f76942fcb61f22eae5b2252b25baa60a38966e870cc4f030767cee2c1b"}) 00:58:05 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendmmsg$inet_sctp(r2, 0x0, 0x0, 0x0) [ 2034.589335][ T9901] usb 6-1: new high-speed USB device number 100 using dummy_hcd 00:58:05 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x8004510b, 0x0) [ 2034.979903][ T9901] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2034.990992][ T9901] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2035.005932][ T9901] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2035.016302][ T9901] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2035.029560][ T9901] usb 6-1: config 0 descriptor?? [ 2035.493202][ T8426] udc-core: couldn't find an available UDC or it's busy [ 2035.500601][ T8426] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2035.800095][ T9901] keytouch 0003:0926:3333.028A: fixing up Keytouch IEC report descriptor [ 2035.819531][ T9901] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.028A/input/input602 [ 2035.910491][ T9901] keytouch 0003:0926:3333.028A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 2036.007134][ T2522] usb 6-1: USB disconnect, device number 100 00:58:08 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)={0x40, 0x0, 0x2e, {0x2e, 0x5, "2648f7be311be28e381acfa4ed14d8562969866bdab65e5d4220d683e10a03c2a3cd510e8ac901ff8db0bf5d"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x7fffff9, 0xf007, 0x1, [0xc0f0, 0x1fe00c0]}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x0, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x43}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) r3 = syz_open_dev$evdev(&(0x7f0000001200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000001280)={0x1f, 0x1, &(0x7f0000001240)="7f"}) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af4566f3c7347185913f6185b306e694b7c75ea187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0x0, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "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"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r4 = syz_open_dev$hidraw(&(0x7f0000001300)='/dev/hidraw#\x00', 0x0, 0x41) r5 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5e, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80284504, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000012c0)={0x80, 0x5, 0x830c, 0x2, "09738855f8bbb430744feb4e216baa45df434c8d892fdaf6966ac4a3dd6a9e7f"}) write$hidraw(r4, &(0x7f0000002d80)="961e782da136c24bc08d302972a62ecfe3cbeead1c954c7742868c42011a331f2e92dc729b41d125c492e95d9516199064d5c77956e7f4086d533f1446cfffce26ec03d6452313cdd5acfede0cb2cfc5b7677939c7f836c19d839d27e54abd54ee564a34f9ddce5aba0e4cfcc8ae4871522b2854d636453bd4b9579fac970fd342f7a2c9fa881d442e2e61bcbcb73c0f2f2e8b6c075face514675ba4aff91d01148ee7a619061990cb32807e7dabb1a73a1dba70f62308537c75ef78178017ae1120d4ed", 0xc4) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000080)) syz_open_dev$hidraw(0x0, 0x0, 0x0) 00:58:08 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendmmsg$inet_sctp(r2, 0x0, 0x0, 0x0) 00:58:08 executing program 3: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000100)={0x3a, 0x0, 'client1\x00', 0x0, "1d0f8053f450db92", "182394f76942fcb61f22eae5b2252b25baa60a38966e870cc4f030767cee2c1b"}) 00:58:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x78, r1, 0x85b, 0x0, 0x0, {}, [@NL80211_ATTR_BEACON_HEAD={0x62, 0xe, "210ab2ff0d839e06c9b72ff37f2e110000816bace2774859f9d52d12f2122d3e540dbd673f36b253d869e743ee4ea82e1c705aa3a6d509194cc7f540e7cfbd70d3e575e13f7e582e3ac12585c72481b90986d3da5335210000f94f56ece4"}]}, 0x78}}, 0x0) 00:58:08 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:58:08 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x30007, 0x0) 00:58:08 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000002380), 0x0, 0x0) 00:58:08 executing program 0: unshare(0x20400) r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc1105511, 0x0) 00:58:08 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, 0x0) 00:58:08 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000002380), 0x0, 0x0) 00:58:08 executing program 0: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000002380)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x8208}}], 0x30}], 0x1, 0x0) 00:58:08 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, 0x0) [ 2037.230417][ T9901] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 2037.675368][ T9901] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2037.686934][ T9901] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2037.700160][ T9901] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2037.710570][ T9901] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2037.726025][ T9901] usb 6-1: config 0 descriptor?? [ 2038.180812][ T8506] udc-core: couldn't find an available UDC or it's busy [ 2038.187820][ T8506] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2038.500091][ T9901] keytouch 0003:0926:3333.028B: fixing up Keytouch IEC report descriptor [ 2038.512224][ T9901] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.028B/input/input603 [ 2038.603856][ T9901] keytouch 0003:0926:3333.028B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 2038.707475][ T9901] usb 6-1: USB disconnect, device number 101 00:58:10 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810300000000003cf57187b312525b631dda1ea9b142bd891381f1343366ade89a08e1cf0f98b5ef41723da4a9166d9587c13a27b926deaedfc0e23540aa2a491d0041c82c1cef6b12b15b8ebb95144b567cc87d36c55c6f74ee455f0f16bee8885271686a58a13ecf239365a8d86391a25ea859d07bf8ae8d27bbeb4858431b95a08406c74bb0603bf8a56ab62c448e925fe31569b9611da91b0c4276ca64e90781a2a1703ac2f8a285d9fb645e9937824ed2c6690971ea801f840920a87e5ebebed4e972d8b98666bcaf88424b834db21281a7be5ebe3c6063381d34877d8f1b0ef4267b16c536a3f9aa577cc9953ca2048ca44d1baaff811ec5b965b92f04553fb17d2b1546ef30e4413de6c57aa334d2948f1189aef576773dec278c51fb0c4483db3387d09415f654f31ab1b20fd95df5a8031340f6"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)={0x40, 0x0, 0x2e, {0x2e, 0x5, "2648f7be311be28e381acfa4ed14d8562969866bdab65e5d4220d683e10a03c2a3cd510e8ac901ff8db0bf5d"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x7fffff9, 0xf007, 0x1, [0xc0f0, 0x1fe00c0]}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x0, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x43}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) r3 = syz_open_dev$evdev(&(0x7f0000001200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000001280)={0x1f, 0x1, &(0x7f0000001240)="7f"}) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af4566f3c7347185913f6185b306e694b7c75ea187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0x0, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "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"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r4 = syz_open_dev$hidraw(&(0x7f0000001300)='/dev/hidraw#\x00', 0x0, 0x41) r5 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5e, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80284504, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000012c0)={0x80, 0x5, 0x830c, 0x2, "09738855f8bbb430744feb4e216baa45df434c8d892fdaf6966ac4a3dd6a9e7f"}) write$hidraw(r4, &(0x7f0000002d80)="961e782da136c24bc08d302972a62ecfe3cbeead1c954c7742868c42011a331f2e92dc729b41d125c492e95d9516199064d5c77956e7f4086d533f1446cfffce26ec03d6452313cdd5acfede0cb2cfc5b7677939c7f836c19d839d27e54abd54ee564a34f9ddce5aba0e4cfcc8ae4871522b2854d636453bd4b9579fac970fd342f7a2c9fa881d442e2e61bcbcb73c0f2f2e8b6c075face514675ba4aff91d01148ee7a619061990cb32807e7dabb1a73a1dba70f62308537c75ef78178017ae1120d4ed", 0xc4) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000080)) syz_open_dev$hidraw(0x0, 0x0, 0x0) 00:58:10 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000002380), 0x0, 0x0) 00:58:10 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) accept4(r2, 0x0, 0x0, 0x0) 00:58:10 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, 0x0) 00:58:10 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:58:10 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x30007, 0x0) 00:58:10 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000100)={0x0, 0x0, 'client1\x00', 0x0, "1d0f8053f450db92", "182394f76942fcb61f22eae5b2252b25baa60a38966e870cc4f030767cee2c1b"}) 00:58:10 executing program 0: sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[], 0xe}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000100)={r2}, 0x14) 00:58:10 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000100)={0x0, 0x0, 'client1\x00', 0x0, "1d0f8053f450db92", "182394f76942fcb61f22eae5b2252b25baa60a38966e870cc4f030767cee2c1b"}) 00:58:10 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000002380)=[{0x0, 0x0, 0x0}], 0x1, 0x0) 00:58:10 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000100)={0x0, 0x0, 'client1\x00', 0x0, "1d0f8053f450db92", "182394f76942fcb61f22eae5b2252b25baa60a38966e870cc4f030767cee2c1b"}) 00:58:11 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x100000007) mmap(&(0x7f00006ff000/0x2000)=nil, 0x2000, 0xf, 0x10, r0, 0x2f806000) mmap(&(0x7f0000700000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) socket(0x10, 0x2, 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x1e1442, 0x0) write$UHID_INPUT(r1, &(0x7f0000001440), 0xfffffc41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fadvise64(r1, 0x0, 0x0, 0x4) [ 2039.778587][ T9903] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 2040.159267][ T9903] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2040.187463][ T9903] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2040.212791][ T9903] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2040.254499][ T9903] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2040.287807][ T9903] usb 6-1: config 0 descriptor?? [ 2040.500536][ T29] audit: type=1800 audit(1595638691.790:64): pid=8600 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16115 res=0 [ 2040.771106][ T8584] udc-core: couldn't find an available UDC or it's busy [ 2040.778534][ T8584] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2041.099840][ T9903] keytouch 0003:0926:3333.028C: fixing up Keytouch IEC report descriptor [ 2041.111103][ T9903] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.028C/input/input604 [ 2041.224406][ T9903] keytouch 0003:0926:3333.028C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 2041.317012][ T2522] usb 6-1: USB disconnect, device number 102 00:58:13 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)={0x40, 0x0, 0x2e, {0x2e, 0x5, "2648f7be311be28e381acfa4ed14d8562969866bdab65e5d4220d683e10a03c2a3cd510e8ac901ff8db0bf5d"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x7fffff9, 0xf007, 0x1, [0xc0f0, 0x1fe00c0]}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x0, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x43}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) r3 = syz_open_dev$evdev(&(0x7f0000001200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000001280)={0x1f, 0x1, &(0x7f0000001240)="7f"}) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af4566f3c7347185913f6185b306e694b7c75ea187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0x0, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "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"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r4 = syz_open_dev$hidraw(&(0x7f0000001300)='/dev/hidraw#\x00', 0x0, 0x41) r5 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5e, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80284504, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000012c0)={0x80, 0x5, 0x830c, 0x2, "09738855f8bbb430744feb4e216baa45df434c8d892fdaf6966ac4a3dd6a9e7f"}) write$hidraw(r4, &(0x7f0000002d80)="961e782da136c24bc08d302972a62ecfe3cbeead1c954c7742868c42011a331f2e92dc729b41d125c492e95d9516199064d5c77956e7f4086d533f1446cfffce26ec03d6452313cdd5acfede0cb2cfc5b7677939c7f836c19d839d27e54abd54ee564a34f9ddce5aba0e4cfcc8ae4871522b2854d636453bd4b9579fac970fd342f7a2c9fa881d442e2e61bcbcb73c0f2f2e8b6c075face514675ba4aff91d01148ee7a619061990cb32807e7dabb1a73a1dba70f62308537c75ef78178017ae1120d4ed", 0xc4) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000080)) syz_open_dev$hidraw(0x0, 0x0, 0x0) 00:58:13 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000002380)=[{0x0, 0x0, 0x0}], 0x1, 0x0) 00:58:13 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:58:13 executing program 3: unshare(0x20400) r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc00455d0, 0x0) 00:58:13 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x30007, 0x0) 00:58:13 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0100001b0001000000000000000800ac1e0001000000000000000000070500000000000000000000000000000000aa00000000000000000a"], 0x13c}}, 0x0) [ 2042.039024][ T8656] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. 00:58:13 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000002380)=[{0x0, 0x0, 0x0}], 0x1, 0x0) 00:58:13 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0100001b0001000000000000000800ac1e0001000000000000000000070500000000000000000000000000000000aa00000000000000000a"], 0x13c}}, 0x0) 00:58:13 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x8, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000040)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d64d4d", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x3, 0x0, 0x0, 0x0, [], {0x0, 0x6, '\x00', 0x0, 0x3a, 0x0, @loopback, @mcast2, [], "39a4ef13f5cff0be"}}}}}}}, 0x0) 00:58:13 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000002380)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)}], 0x1, 0x0) [ 2042.308639][ T8669] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2042.378172][ T9903] usb 6-1: new high-speed USB device number 103 using dummy_hcd 00:58:13 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0100001b0001000000000000000800ac1e0001000000000000000000070500000000000000000000000000000000aa00000000000000000a"], 0x13c}}, 0x0) 00:58:13 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f0000000100)=[{0x10081, 0x0, 0x0, 0x0, @time, {}, {}, @time}], 0x1c) [ 2042.653184][ T8679] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2042.779034][ T9903] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2042.798042][ T9903] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2042.807871][ T9903] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2042.838090][ T9903] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2042.847666][ T9903] usb 6-1: config 0 descriptor?? [ 2043.342395][ T8660] udc-core: couldn't find an available UDC or it's busy [ 2043.349560][ T8660] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2043.679464][ T9903] keytouch 0003:0926:3333.028D: fixing up Keytouch IEC report descriptor [ 2043.700372][ T9903] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.028D/input/input605 [ 2043.793579][ T9903] keytouch 0003:0926:3333.028D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 2043.890606][ T9903] usb 6-1: USB disconnect, device number 103 00:58:15 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)={0x40, 0x0, 0x2e, {0x2e, 0x5, "2648f7be311be28e381acfa4ed14d8562969866bdab65e5d4220d683e10a03c2a3cd510e8ac901ff8db0bf5d"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x7fffff9, 0xf007, 0x1, [0xc0f0, 0x1fe00c0]}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x0, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x43}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) r3 = syz_open_dev$evdev(&(0x7f0000001200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000001280)={0x1f, 0x1, &(0x7f0000001240)="7f"}) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af4566f3c7347185913f6185b306e694b7c75ea187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, 0x0}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "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"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r4 = syz_open_dev$hidraw(&(0x7f0000001300)='/dev/hidraw#\x00', 0x0, 0x41) r5 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5e, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80284504, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000012c0)={0x80, 0x5, 0x830c, 0x2, "09738855f8bbb430744feb4e216baa45df434c8d892fdaf6966ac4a3dd6a9e7f"}) write$hidraw(r4, &(0x7f0000002d80)="961e782da136c24bc08d302972a62ecfe3cbeead1c954c7742868c42011a331f2e92dc729b41d125c492e95d9516199064d5c77956e7f4086d533f1446cfffce26ec03d6452313cdd5acfede0cb2cfc5b7677939c7f836c19d839d27e54abd54ee564a34f9ddce5aba0e4cfcc8ae4871522b2854d636453bd4b9579fac970fd342f7a2c9fa881d442e2e61bcbcb73c0f2f2e8b6c075face514675ba4aff91d01148ee7a619061990cb32807e7dabb1a73a1dba70f62308537c75ef78178017ae1120d4ed", 0xc4) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000080)) syz_open_dev$hidraw(0x0, 0x0, 0x0) 00:58:15 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000002380)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)}], 0x1, 0x0) 00:58:15 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:58:15 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0100001b0001000000000000000800ac1e0001000000000000000000070500000000000000000000000000000000aa00000000000000000a"], 0x13c}}, 0x0) 00:58:15 executing program 3: unshare(0x20400) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5403, 0x0) 00:58:15 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x0, 0x0) 00:58:15 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000002380)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)}], 0x1, 0x0) [ 2044.622532][ T8734] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. 00:58:16 executing program 0: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0100001b0001000000000000000800ac1e0001000000000000000000070500000000000000000000000000000000aa00000000000000000a"], 0x13c}}, 0x0) 00:58:16 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffff7}]}) sched_getparam(0x0, &(0x7f0000000040)) 00:58:16 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000002380)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=[@prinfo={0x18}], 0x18}], 0x1, 0x0) 00:58:16 executing program 0: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0100001b0001000000000000000800ac1e0001000000000000000000070500000000000000000000000000000000aa00000000000000000a"], 0x13c}}, 0x0) [ 2045.007850][ T2522] usb 6-1: new high-speed USB device number 104 using dummy_hcd 00:58:16 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000002380)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=[@prinfo={0x18}], 0x18}], 0x1, 0x0) [ 2045.369320][ T2522] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2045.405667][ T2522] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2045.470282][ T2522] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2045.498104][ T2522] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2045.508230][ T2522] usb 6-1: config 0 descriptor?? [ 2045.969851][ T8738] udc-core: couldn't find an available UDC or it's busy [ 2045.976871][ T8738] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2046.288808][ T2522] keytouch 0003:0926:3333.028E: fixing up Keytouch IEC report descriptor [ 2046.314960][ T2522] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.028E/input/input606 [ 2046.405767][ T2522] keytouch 0003:0926:3333.028E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 2046.499956][ T2484] usb 6-1: USB disconnect, device number 104 00:58:18 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)={0x40, 0x0, 0x2e, {0x2e, 0x5, "2648f7be311be28e381acfa4ed14d8562969866bdab65e5d4220d683e10a03c2a3cd510e8ac901ff8db0bf5d"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x7fffff9, 0xf007, 0x1, [0xc0f0, 0x1fe00c0]}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x0, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x43}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) r3 = syz_open_dev$evdev(&(0x7f0000001200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000001280)={0x1f, 0x1, &(0x7f0000001240)="7f"}) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af4566f3c7347185913f6185b306e694b7c75ea187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, 0x0}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "fc7100269712596c1c0d58c245f9288bf191c1b2d9e0ad034268fecdcd70b64ed4c6e89a0258cbcf833bc1eb865d68be278f5a18754ff7313cb371def95e6e05f55fde7aaba59e06c4ccd15f53687551e509ff69fd40908a2437f4a01d300b0171b3ef07ee7433422f93afd890907707b2ccd358604b5cb1dd095847ec110bf1d9fbef1e51fbfccd883518ea849192df942e366f1734ddbd5fa67f1bad262fcb31ec227d1313a3ac61cc0e65f9d337948af511b90d0aa49321e1074cd4f2cfc548e655c9124ac2d67a2b54313bb70e93004f738d08844f6bf03b6b947f7ef616e0df9fb68800c72b7626d7f77c9c201f68828e4e178116b05ff954440c8db0d7"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r4 = syz_open_dev$hidraw(&(0x7f0000001300)='/dev/hidraw#\x00', 0x0, 0x41) r5 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5e, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80284504, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000012c0)={0x80, 0x5, 0x830c, 0x2, "09738855f8bbb430744feb4e216baa45df434c8d892fdaf6966ac4a3dd6a9e7f"}) write$hidraw(r4, &(0x7f0000002d80)="961e782da136c24bc08d302972a62ecfe3cbeead1c954c7742868c42011a331f2e92dc729b41d125c492e95d9516199064d5c77956e7f4086d533f1446cfffce26ec03d6452313cdd5acfede0cb2cfc5b7677939c7f836c19d839d27e54abd54ee564a34f9ddce5aba0e4cfcc8ae4871522b2854d636453bd4b9579fac970fd342f7a2c9fa881d442e2e61bcbcb73c0f2f2e8b6c075face514675ba4aff91d01148ee7a619061990cb32807e7dabb1a73a1dba70f62308537c75ef78178017ae1120d4ed", 0xc4) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000080)) syz_open_dev$hidraw(0x0, 0x0, 0x0) 00:58:18 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000002380)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=[@prinfo={0x18}], 0x18}], 0x1, 0x0) 00:58:18 executing program 0: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0100001b0001000000000000000800ac1e0001000000000000000000070500000000000000000000000000000000aa00000000000000000a"], 0x13c}}, 0x0) 00:58:18 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:58:18 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x0, 0x0) 00:58:18 executing program 3: unshare(0x20400) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0xc074510c, 0x0) 00:58:18 executing program 0: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0100001b0001000000000000000800ac1e0001000000000000000000070500000000000000000000000000000000aa00000000000000000a"], 0x13c}}, 0x0) 00:58:18 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup3(r0, r1, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 00:58:18 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000007) mmap(&(0x7f00006ff000/0x2000)=nil, 0x2000, 0xf, 0x12, r0, 0x2f806000) r1 = open(&(0x7f0000000140)='./bus\x00', 0x1e1442, 0x0) write$UHID_INPUT(r1, &(0x7f0000001440), 0xfffffc41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fadvise64(r1, 0x0, 0x0, 0x4) 00:58:18 executing program 0: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0100001b0001000000000000000800ac1e0001000000000000000000070500000000000000000000000000000000aa00000000000000000a"], 0x13c}}, 0x0) 00:58:18 executing program 1: socket(0x40000000015, 0x5, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000500)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0xffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) [ 2047.587765][ T2484] usb 6-1: new high-speed USB device number 105 using dummy_hcd 00:58:19 executing program 0: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0100001b0001000000000000000800ac1e0001000000000000000000070500000000000000000000000000000000aa00000000000000000a"], 0x13c}}, 0x0) [ 2047.998352][ T2484] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2048.026040][ T2484] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2048.127613][ T2484] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2048.182500][ T2484] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2048.249936][ T2484] usb 6-1: config 0 descriptor?? [ 2048.740507][ T8815] udc-core: couldn't find an available UDC or it's busy [ 2048.747560][ T8815] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2049.078358][ T2484] keytouch 0003:0926:3333.028F: fixing up Keytouch IEC report descriptor [ 2049.089994][ T2484] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.028F/input/input607 [ 2049.193973][ T2484] keytouch 0003:0926:3333.028F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 2049.285288][ T2484] usb 6-1: USB disconnect, device number 105 00:58:21 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)={0x40, 0x0, 0x2e, {0x2e, 0x5, "2648f7be311be28e381acfa4ed14d8562969866bdab65e5d4220d683e10a03c2a3cd510e8ac901ff8db0bf5d"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x7fffff9, 0xf007, 0x1, [0xc0f0, 0x1fe00c0]}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x0, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x43}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) r3 = syz_open_dev$evdev(&(0x7f0000001200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000001280)={0x1f, 0x1, &(0x7f0000001240)="7f"}) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af4566f3c7347185913f6185b306e694b7c75ea187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, 0x0}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "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"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r4 = syz_open_dev$hidraw(&(0x7f0000001300)='/dev/hidraw#\x00', 0x0, 0x41) r5 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5e, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80284504, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000012c0)={0x80, 0x5, 0x830c, 0x2, "09738855f8bbb430744feb4e216baa45df434c8d892fdaf6966ac4a3dd6a9e7f"}) write$hidraw(r4, &(0x7f0000002d80)="961e782da136c24bc08d302972a62ecfe3cbeead1c954c7742868c42011a331f2e92dc729b41d125c492e95d9516199064d5c77956e7f4086d533f1446cfffce26ec03d6452313cdd5acfede0cb2cfc5b7677939c7f836c19d839d27e54abd54ee564a34f9ddce5aba0e4cfcc8ae4871522b2854d636453bd4b9579fac970fd342f7a2c9fa881d442e2e61bcbcb73c0f2f2e8b6c075face514675ba4aff91d01148ee7a619061990cb32807e7dabb1a73a1dba70f62308537c75ef78178017ae1120d4ed", 0xc4) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000080)) syz_open_dev$hidraw(0x0, 0x0, 0x0) 00:58:21 executing program 1: 00:58:21 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x0, 0x0) 00:58:21 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:58:21 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 00:58:21 executing program 3: 00:58:21 executing program 3: 00:58:21 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 00:58:21 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000000)={0x40000000}) 00:58:21 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x1e1442, 0x0) write$UHID_INPUT(r1, &(0x7f0000001440), 0xfffffc41) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fadvise64(r1, 0x0, 0x0, 0x4) 00:58:21 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 00:58:21 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) [ 2050.507136][ T2484] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 2050.918075][ T2484] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2050.952766][ T2484] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2050.999447][ T2484] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2051.026076][ T2484] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2051.041376][ T2484] usb 6-1: config 0 descriptor?? [ 2051.539209][ T8908] udc-core: couldn't find an available UDC or it's busy [ 2051.546468][ T8908] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2051.859793][ T2484] keytouch 0003:0926:3333.0290: fixing up Keytouch IEC report descriptor [ 2051.872139][ T2484] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0290/input/input608 [ 2051.963265][ T2484] keytouch 0003:0926:3333.0290: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 2052.071991][T15019] usb 6-1: USB disconnect, device number 106 00:58:24 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)={0x40, 0x0, 0x2e, {0x2e, 0x5, "2648f7be311be28e381acfa4ed14d8562969866bdab65e5d4220d683e10a03c2a3cd510e8ac901ff8db0bf5d"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x7fffff9, 0xf007, 0x1, [0xc0f0, 0x1fe00c0]}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x0, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x43}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) r3 = syz_open_dev$evdev(&(0x7f0000001200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000001280)={0x1f, 0x1, &(0x7f0000001240)="7f"}) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af4566f3c7347185913f6185b306e694b7c75ea187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "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"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r4 = syz_open_dev$hidraw(&(0x7f0000001300)='/dev/hidraw#\x00', 0x0, 0x41) r5 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5e, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80284504, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000012c0)={0x80, 0x5, 0x830c, 0x2, "09738855f8bbb430744feb4e216baa45df434c8d892fdaf6966ac4a3dd6a9e7f"}) write$hidraw(r4, &(0x7f0000002d80)="961e782da136c24bc08d302972a62ecfe3cbeead1c954c7742868c42011a331f2e92dc729b41d125c492e95d9516199064d5c77956e7f4086d533f1446cfffce26ec03d6452313cdd5acfede0cb2cfc5b7677939c7f836c19d839d27e54abd54ee564a34f9ddce5aba0e4cfcc8ae4871522b2854d636453bd4b9579fac970fd342f7a2c9fa881d442e2e61bcbcb73c0f2f2e8b6c075face514675ba4aff91d01148ee7a619061990cb32807e7dabb1a73a1dba70f62308537c75ef78178017ae1120d4ed", 0xc4) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000080)) syz_open_dev$hidraw(0x0, 0x0, 0x0) 00:58:24 executing program 1: syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000040)='./file0\x00', 0x2c4, 0x0, 0x0, 0x0, &(0x7f0000000440)) 00:58:24 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 00:58:24 executing program 4: 00:58:24 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:58:24 executing program 3: 00:58:24 executing program 4: 00:58:24 executing program 3: [ 2052.847472][ T8979] attempt to access beyond end of device [ 2052.868891][ T8979] loop1: rw=4096, want=136, limit=1 [ 2052.881878][ T8979] gfs2: error 10 reading superblock 00:58:24 executing program 3: 00:58:24 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 00:58:24 executing program 3: [ 2052.932848][ T8979] attempt to access beyond end of device [ 2052.947069][ T8979] loop1: rw=4096, want=136, limit=1 [ 2052.959668][ T8979] gfs2: error 10 reading superblock 00:58:24 executing program 1: [ 2053.236894][ T2522] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 2053.607491][ T2522] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2053.626736][ T2522] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2053.636575][ T2522] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2053.676803][ T2522] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2053.686552][ T2522] usb 6-1: config 0 descriptor?? [ 2054.159817][ T8983] udc-core: couldn't find an available UDC or it's busy [ 2054.166950][ T8983] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2054.478139][ T2522] keytouch 0003:0926:3333.0291: fixing up Keytouch IEC report descriptor [ 2054.489295][ T2522] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0291/input/input609 [ 2054.582725][ T2522] keytouch 0003:0926:3333.0291: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 2054.690624][ T2484] usb 6-1: USB disconnect, device number 107 00:58:26 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)={0x40, 0x0, 0x2e, {0x2e, 0x5, "2648f7be311be28e381acfa4ed14d8562969866bdab65e5d4220d683e10a03c2a3cd510e8ac901ff8db0bf5d"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x7fffff9, 0xf007, 0x1, [0xc0f0, 0x1fe00c0]}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x0, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x43}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) r3 = syz_open_dev$evdev(&(0x7f0000001200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000001280)={0x1f, 0x1, &(0x7f0000001240)="7f"}) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af4566f3c7347185913f6185b306e694b7c75ea187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "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"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r4 = syz_open_dev$hidraw(&(0x7f0000001300)='/dev/hidraw#\x00', 0x0, 0x41) r5 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5e, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80284504, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000012c0)={0x80, 0x5, 0x830c, 0x2, "09738855f8bbb430744feb4e216baa45df434c8d892fdaf6966ac4a3dd6a9e7f"}) write$hidraw(r4, &(0x7f0000002d80)="961e782da136c24bc08d302972a62ecfe3cbeead1c954c7742868c42011a331f2e92dc729b41d125c492e95d9516199064d5c77956e7f4086d533f1446cfffce26ec03d6452313cdd5acfede0cb2cfc5b7677939c7f836c19d839d27e54abd54ee564a34f9ddce5aba0e4cfcc8ae4871522b2854d636453bd4b9579fac970fd342f7a2c9fa881d442e2e61bcbcb73c0f2f2e8b6c075face514675ba4aff91d01148ee7a619061990cb32807e7dabb1a73a1dba70f62308537c75ef78178017ae1120d4ed", 0xc4) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000080)) syz_open_dev$hidraw(0x0, 0x0, 0x0) 00:58:26 executing program 4: 00:58:26 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x13c}}, 0x0) 00:58:26 executing program 3: 00:58:26 executing program 1: 00:58:26 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:58:26 executing program 4: 00:58:26 executing program 1: 00:58:26 executing program 3: 00:58:26 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x13c}}, 0x0) 00:58:26 executing program 4: 00:58:26 executing program 3: [ 2055.766518][T15019] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 2056.127286][T15019] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2056.145737][T15019] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2056.159276][T15019] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2056.172852][T15019] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2056.183940][T15019] usb 6-1: config 0 descriptor?? [ 2056.648382][ T9053] udc-core: couldn't find an available UDC or it's busy [ 2056.655411][ T9053] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2056.967474][T15019] keytouch 0003:0926:3333.0292: fixing up Keytouch IEC report descriptor [ 2056.985672][T15019] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0292/input/input610 [ 2057.073338][T15019] keytouch 0003:0926:3333.0292: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 2057.177808][ T9901] usb 6-1: USB disconnect, device number 108 00:58:29 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x13c}}, 0x0) 00:58:29 executing program 1: 00:58:29 executing program 3: 00:58:29 executing program 4: 00:58:29 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:58:29 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)={0x40, 0x0, 0x2e, {0x2e, 0x5, "2648f7be311be28e381acfa4ed14d8562969866bdab65e5d4220d683e10a03c2a3cd510e8ac901ff8db0bf5d"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x7fffff9, 0xf007, 0x1, [0xc0f0, 0x1fe00c0]}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x0, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x43}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) r3 = syz_open_dev$evdev(&(0x7f0000001200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000001280)={0x1f, 0x1, &(0x7f0000001240)="7f"}) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af4566f3c7347185913f6185b306e694b7c75ea187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f00000004c0)=ANY=[@ANYBLOB="00030400000204030a08b5f4dff5abf62516eefff03b833aaa9a42d8867ada37523214452bbee48a8a4d9667d7fed8e8861b64a47306fb6bcdaf49e1b5639c28c347f81e8fec9b9e5e0adae6664083da44404259382a14f5521d78ff7450eedbe2736c2e5f03f829f560da68281354432a40e6b19e9fd8a6fdb13d66f91b58b8563c2cc4e5438d1e3c61487fd4eb83c5db960ac76404b1e962bd616962af6c335d15d0ad947a2321bf0bfa15f6a2b8a6354a95267eb37d4e60d625405870bcd52fea4a7c1f4b67be28add47f384793e16201ee7d616e30a637f81cf50ca924959d5782e6ca9e83972cb688ef0f92931041ffaf636beb6a44cac5"], &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "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"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r4 = syz_open_dev$hidraw(&(0x7f0000001300)='/dev/hidraw#\x00', 0x0, 0x41) r5 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5e, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80284504, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000012c0)={0x80, 0x5, 0x830c, 0x2, "09738855f8bbb430744feb4e216baa45df434c8d892fdaf6966ac4a3dd6a9e7f"}) write$hidraw(r4, &(0x7f0000002d80)="961e782da136c24bc08d302972a62ecfe3cbeead1c954c7742868c42011a331f2e92dc729b41d125c492e95d9516199064d5c77956e7f4086d533f1446cfffce26ec03d6452313cdd5acfede0cb2cfc5b7677939c7f836c19d839d27e54abd54ee564a34f9ddce5aba0e4cfcc8ae4871522b2854d636453bd4b9579fac970fd342f7a2c9fa881d442e2e61bcbcb73c0f2f2e8b6c075face514675ba4aff91d01148ee7a619061990cb32807e7dabb1a73a1dba70f62308537c75ef78178017ae1120d4ed", 0xc4) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000080)) syz_open_dev$hidraw(0x0, 0x0, 0x0) 00:58:29 executing program 1: 00:58:29 executing program 3: 00:58:29 executing program 4: 00:58:29 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0x13c}}, 0x0) 00:58:29 executing program 3: 00:58:29 executing program 1: 00:58:29 executing program 4: 00:58:29 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0x13c}}, 0x0) [ 2058.316403][ T2522] usb 6-1: new high-speed USB device number 109 using dummy_hcd 00:58:29 executing program 1: 00:58:29 executing program 3: 00:58:29 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x0, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) [ 2058.676887][ T2522] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2058.719028][ T2522] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2058.742608][ T2522] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2058.754389][ T2522] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2058.785299][ T2522] usb 6-1: config 0 descriptor?? [ 2059.258438][ T9120] udc-core: couldn't find an available UDC or it's busy [ 2059.265634][ T9120] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2059.577349][ T2522] keytouch 0003:0926:3333.0293: fixing up Keytouch IEC report descriptor [ 2059.588889][ T2522] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0293/input/input611 [ 2059.675724][ T2522] keytouch 0003:0926:3333.0293: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 2059.796505][ T2522] usb 6-1: USB disconnect, device number 109 00:58:31 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)={0x40, 0x0, 0x2e, {0x2e, 0x5, "2648f7be311be28e381acfa4ed14d8562969866bdab65e5d4220d683e10a03c2a3cd510e8ac901ff8db0bf5d"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x7fffff9, 0xf007, 0x1, [0xc0f0, 0x1fe00c0]}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x0, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x43}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) r3 = syz_open_dev$evdev(&(0x7f0000001200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000001280)={0x1f, 0x1, &(0x7f0000001240)="7f"}) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af4566f3c7347185913f6185b306e694b7c75ea187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x0, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "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"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r4 = syz_open_dev$hidraw(&(0x7f0000001300)='/dev/hidraw#\x00', 0x0, 0x41) r5 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5e, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80284504, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000012c0)={0x80, 0x5, 0x830c, 0x2, "09738855f8bbb430744feb4e216baa45df434c8d892fdaf6966ac4a3dd6a9e7f"}) write$hidraw(r4, &(0x7f0000002d80)="961e782da136c24bc08d302972a62ecfe3cbeead1c954c7742868c42011a331f2e92dc729b41d125c492e95d9516199064d5c77956e7f4086d533f1446cfffce26ec03d6452313cdd5acfede0cb2cfc5b7677939c7f836c19d839d27e54abd54ee564a34f9ddce5aba0e4cfcc8ae4871522b2854d636453bd4b9579fac970fd342f7a2c9fa881d442e2e61bcbcb73c0f2f2e8b6c075face514675ba4aff91d01148ee7a619061990cb32807e7dabb1a73a1dba70f62308537c75ef78178017ae1120d4ed", 0xc4) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000080)) syz_open_dev$hidraw(0x0, 0x0, 0x0) 00:58:31 executing program 3: 00:58:31 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0x13c}}, 0x0) 00:58:31 executing program 4: 00:58:31 executing program 1: 00:58:31 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x0, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:58:31 executing program 1: 00:58:31 executing program 3: 00:58:31 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x13c}}, 0x0) 00:58:32 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x1929a6cb}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0) 00:58:32 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x0, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:58:32 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x1a002, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1100000042000506"], 0x14}}, 0x0) [ 2060.985947][ T2522] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 2061.357049][ T2522] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2061.389413][ T2522] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2061.425241][ T2522] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2061.442555][ T2522] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2061.453548][ T2522] usb 6-1: config 0 descriptor?? [ 2061.938150][ T9199] udc-core: couldn't find an available UDC or it's busy [ 2061.945207][ T9199] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2062.256793][ T2522] keytouch 0003:0926:3333.0294: fixing up Keytouch IEC report descriptor [ 2062.275232][ T2522] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0294/input/input612 [ 2062.367798][ T2522] keytouch 0003:0926:3333.0294: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 2062.475678][ T9901] usb 6-1: USB disconnect, device number 110 00:58:34 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)={0x40, 0x0, 0x2e, {0x2e, 0x5, "2648f7be311be28e381acfa4ed14d8562969866bdab65e5d4220d683e10a03c2a3cd510e8ac901ff8db0bf5d"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x7fffff9, 0xf007, 0x1, [0xc0f0, 0x1fe00c0]}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x0, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x43}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) r3 = syz_open_dev$evdev(&(0x7f0000001200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000001280)={0x1f, 0x1, &(0x7f0000001240)="7f"}) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af4566f3c7347185913f6185b306e694b7c75ea187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x0, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "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"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r4 = syz_open_dev$hidraw(&(0x7f0000001300)='/dev/hidraw#\x00', 0x0, 0x41) r5 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5e, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80284504, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000012c0)={0x80, 0x5, 0x830c, 0x2, "09738855f8bbb430744feb4e216baa45df434c8d892fdaf6966ac4a3dd6a9e7f"}) write$hidraw(r4, &(0x7f0000002d80)="961e782da136c24bc08d302972a62ecfe3cbeead1c954c7742868c42011a331f2e92dc729b41d125c492e95d9516199064d5c77956e7f4086d533f1446cfffce26ec03d6452313cdd5acfede0cb2cfc5b7677939c7f836c19d839d27e54abd54ee564a34f9ddce5aba0e4cfcc8ae4871522b2854d636453bd4b9579fac970fd342f7a2c9fa881d442e2e61bcbcb73c0f2f2e8b6c075face514675ba4aff91d01148ee7a619061990cb32807e7dabb1a73a1dba70f62308537c75ef78178017ae1120d4ed", 0xc4) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000080)) syz_open_dev$hidraw(0x0, 0x0, 0x0) 00:58:34 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}, 0x1}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) 00:58:34 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x13c}}, 0x0) 00:58:34 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) set_robust_list(&(0x7f0000000240), 0xc) 00:58:34 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:58:34 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x4f03a000) setitimer(0x0, 0x0, 0x0) [ 2063.186012][ T9286] syz-executor.3 calls setitimer() with new_value NULL pointer. Misfeature support will be removed 00:58:34 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x13c}}, 0x0) 00:58:34 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:58:34 executing program 3: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x1}, 0x9002, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={'ipvlan1\x00'}) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f00000000c0)=0x1104, 0x4) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)={0xa4, 0x0, 0x300, 0x0, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc0000000}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) 00:58:34 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0100001b0001000000000000000800ac1e0001000000000000000000"], 0x13c}}, 0x0) 00:58:34 executing program 4: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0x1f) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r1 = socket(0x2, 0x803, 0xff) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) [ 2063.565703][ T9903] usb 6-1: new high-speed USB device number 111 using dummy_hcd 00:58:34 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) [ 2063.676392][ T9306] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2063.840748][ T29] audit: type=1804 audit(1595638715.133:65): pid=9305 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir291047821/syzkaller.zoNb62/1872/bus" dev="sda1" ino=16287 res=1 [ 2063.946389][ T9903] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2064.019766][ T9903] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2064.104817][ T9903] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2064.190451][ T9903] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2064.271517][ T9903] usb 6-1: config 0 descriptor?? [ 2064.438356][ T29] audit: type=1804 audit(1595638715.733:66): pid=9310 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir291047821/syzkaller.zoNb62/1872/bus" dev="sda1" ino=16287 res=1 [ 2064.757464][ T9293] udc-core: couldn't find an available UDC or it's busy [ 2064.764578][ T9293] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2065.066605][ T9903] keytouch 0003:0926:3333.0295: fixing up Keytouch IEC report descriptor [ 2065.078255][ T9903] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0295/input/input613 [ 2065.185389][ T9903] keytouch 0003:0926:3333.0295: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 2065.273869][ T2522] usb 6-1: USB disconnect, device number 111 00:58:37 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)={0x40, 0x0, 0x2e, {0x2e, 0x5, "2648f7be311be28e381acfa4ed14d8562969866bdab65e5d4220d683e10a03c2a3cd510e8ac901ff8db0bf5d"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x7fffff9, 0xf007, 0x1, [0xc0f0, 0x1fe00c0]}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x0, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x43}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) r3 = syz_open_dev$evdev(&(0x7f0000001200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000001280)={0x1f, 0x1, &(0x7f0000001240)="7f"}) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af4566f3c7347185913f6185b306e694b7c75ea187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x0, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "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"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r4 = syz_open_dev$hidraw(&(0x7f0000001300)='/dev/hidraw#\x00', 0x0, 0x41) r5 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5e, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80284504, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000012c0)={0x80, 0x5, 0x830c, 0x2, "09738855f8bbb430744feb4e216baa45df434c8d892fdaf6966ac4a3dd6a9e7f"}) write$hidraw(r4, &(0x7f0000002d80)="961e782da136c24bc08d302972a62ecfe3cbeead1c954c7742868c42011a331f2e92dc729b41d125c492e95d9516199064d5c77956e7f4086d533f1446cfffce26ec03d6452313cdd5acfede0cb2cfc5b7677939c7f836c19d839d27e54abd54ee564a34f9ddce5aba0e4cfcc8ae4871522b2854d636453bd4b9579fac970fd342f7a2c9fa881d442e2e61bcbcb73c0f2f2e8b6c075face514675ba4aff91d01148ee7a619061990cb32807e7dabb1a73a1dba70f62308537c75ef78178017ae1120d4ed", 0xc4) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000080)) syz_open_dev$hidraw(0x0, 0x0, 0x0) 00:58:37 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, 0x0, 0x0) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:58:37 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0100001b0001000000000000000800ac1e0001000000000000000000"], 0x13c}}, 0x0) 00:58:37 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8}]}}]}, 0x3c}}, 0x0) 00:58:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x4, 0x0, 0x0, 0x3, 0x7]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioprio_get$pid(0x0, 0x0) 00:58:37 executing program 3: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x1}, 0x9002, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={'ipvlan1\x00'}) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f00000000c0)=0x1104, 0x4) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)={0xa4, 0x0, 0x300, 0x0, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc0000000}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) [ 2065.947913][ T9367] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. 00:58:37 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0100001b0001000000000000000800ac1e0001000000000000000000"], 0x13c}}, 0x0) 00:58:37 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat$dir(0xffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) dup3(r2, r0, 0x0) 00:58:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = mq_open(&(0x7f0000000280)='eth0\x00', 0x42, 0x20, 0x0) mq_notify(r1, &(0x7f0000000140)={0x0, 0x2e, 0x1, @thr={&(0x7f0000000040), &(0x7f00000000c0)="3c5d8da40d1477844fc4c160b6004a90edc520a6935a49cf5da4c2b525d13146ed27d429c762a4b0e9aaed82555cd1ae800d"}}) mq_timedsend(r1, &(0x7f00000e6000), 0x0, 0xe6, 0x0) r2 = mq_open(&(0x7f0000000280)='eth0\x00', 0x0, 0x20, 0x0) mq_notify(r2, 0x0) mq_timedsend(r2, &(0x7f00000e6000), 0x0, 0xe6, &(0x7f0000e0b000)) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000140)={0x0, r2, 0x5, 0x6, 0x3, 0x1ff}) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) r3 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000200)={0x0, 0xffffffff, 0xfffd, 0x7fffffff}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) mq_timedsend(r3, &(0x7f0000000180)="899811ba84bf796d55412e19c28cb6cd1c5ab9b951418312f8808de737b21debe158f4549c03ed8ddf72b7b74415fc81f1f87887ff56ff6833c5d61380f20d6ae7f3a6229369bc3c1d99280b4e59af99bb1faf19c770d7c5d523f423a772ce6eb9934ca52853", 0x66, 0x5, &(0x7f0000000100)={r4, r5+10000000}) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f00000002c0)={0xd219, 0x180, 0x20000, 0x9, 0x80000001, 0x972}) fcntl$dupfd(0xffffffffffffffff, 0x0, r3) [ 2066.206829][ T9372] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 00:58:37 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, 0x0, 0x0) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) [ 2066.248449][ T9389] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. 00:58:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x4, 0x0, 0x0, 0x3, 0x7]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioprio_get$pid(0x0, 0x0) 00:58:37 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0100001b0001000000000000000800ac1e0001000000000000000000070500"/43], 0x13c}}, 0x0) [ 2066.315509][ T2522] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 2066.576080][ T9408] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2066.676059][ T2522] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2066.691472][ T2522] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2066.715546][ T2522] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2066.724833][ T2522] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2066.736148][ T2522] usb 6-1: config 0 descriptor?? [ 2067.196991][ T9377] udc-core: couldn't find an available UDC or it's busy [ 2067.204144][ T9377] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2067.536095][ T2522] keytouch 0003:0926:3333.0296: fixing up Keytouch IEC report descriptor [ 2067.555783][ T2522] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0296/input/input614 [ 2067.640513][ T2522] keytouch 0003:0926:3333.0296: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 2067.761453][ T9903] usb 6-1: USB disconnect, device number 112 00:58:39 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)={0x40, 0x0, 0x2e, {0x2e, 0x5, "2648f7be311be28e381acfa4ed14d8562969866bdab65e5d4220d683e10a03c2a3cd510e8ac901ff8db0bf5d"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x7fffff9, 0xf007, 0x1, [0xc0f0, 0x1fe00c0]}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x0, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x43}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) r3 = syz_open_dev$evdev(&(0x7f0000001200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000001280)={0x1f, 0x1, &(0x7f0000001240)="7f"}) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af4566f3c7347185913f6185b306e694b7c75ea187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x0, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "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"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r4 = syz_open_dev$hidraw(&(0x7f0000001300)='/dev/hidraw#\x00', 0x0, 0x41) r5 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5e, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80284504, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000012c0)={0x80, 0x5, 0x830c, 0x2, "09738855f8bbb430744feb4e216baa45df434c8d892fdaf6966ac4a3dd6a9e7f"}) write$hidraw(r4, &(0x7f0000002d80)="961e782da136c24bc08d302972a62ecfe3cbeead1c954c7742868c42011a331f2e92dc729b41d125c492e95d9516199064d5c77956e7f4086d533f1446cfffce26ec03d6452313cdd5acfede0cb2cfc5b7677939c7f836c19d839d27e54abd54ee564a34f9ddce5aba0e4cfcc8ae4871522b2854d636453bd4b9579fac970fd342f7a2c9fa881d442e2e61bcbcb73c0f2f2e8b6c075face514675ba4aff91d01148ee7a619061990cb32807e7dabb1a73a1dba70f62308537c75ef78178017ae1120d4ed", 0xc4) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000080)) syz_open_dev$hidraw(0x0, 0x0, 0x0) 00:58:39 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, 0x0, 0x0) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:58:39 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) io_setup(0x81, &(0x7f0000000040)=0x0) io_getevents(r0, 0x0, 0x0, 0x0, 0x0) 00:58:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x4, 0x0, 0x0, 0x3, 0x7]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioprio_get$pid(0x0, 0x0) 00:58:39 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) ioctl$DRM_IOCTL_MODE_SETGAMMA(0xffffffffffffffff, 0xc02064a5, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) 00:58:39 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0100001b0001000000000000000800ac1e0001000000000000000000070500"/43], 0x13c}}, 0x0) [ 2068.469682][ T9470] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. 00:58:39 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0100001b0001000000000000000800ac1e0001000000000000000000070500"/43], 0x13c}}, 0x0) [ 2068.599157][ T9467] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 00:58:40 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:58:40 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) io_setup(0x81, &(0x7f0000000040)=0x0) io_getevents(r0, 0x0, 0x0, 0x0, 0x0) 00:58:40 executing program 4: finit_module(0xffffffffffffffff, 0x0, 0x0) clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x1a4, 0x1a4, 0x40000, 0x1a4, 0x1a4, 0x244, 0x244, 0x244, 0x244, 0x244, 0x3, 0x0, {[{{@uncond=[0x0, 0xff, 0x48, 0x0, 0x0, 0x4c, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d], 0x0, 0x164, 0x1a4, 0xa, {0x9000000}, [@common=@inet=@recent0={{0xf4, 'recent\x00'}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, '\x00', 'vlan1\x00'}, 0x0, 0x70, 0xa0, 0x0, {0xff00000000000000}}, @common=@inet=@SET2={0x30, 'SET\x00'}}], {{[], 0x1a8, 0x70, 0x94}, {0x24}}}}, 0x334) [ 2068.788653][ T9486] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. 00:58:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x375, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x4, 0x0, 0x0, 0x3, 0x7]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sched_setscheduler(0x0, 0x5, 0x0) ioprio_get$pid(0x0, 0x0) [ 2068.884945][ T9901] usb 6-1: new high-speed USB device number 113 using dummy_hcd 00:58:40 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0100001b0001000000000000000800ac1e0001000000000000000000070500000000000000000000000000000000aa0000"], 0x13c}}, 0x0) [ 2069.025797][ T9501] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2069.164377][ T9497] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2069.188846][ T9497] debugfs: Directory '9497-4' with parent 'kvm' already present! [ 2069.285658][ T9901] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2069.302837][ T9901] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2069.344740][ T9901] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2069.353975][ T9901] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2069.386154][ T9901] usb 6-1: config 0 descriptor?? [ 2069.858885][ T9478] udc-core: couldn't find an available UDC or it's busy [ 2069.866019][ T9478] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2070.177124][ T9901] keytouch 0003:0926:3333.0297: fixing up Keytouch IEC report descriptor [ 2070.188187][ T9901] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0297/input/input615 [ 2070.296050][ T9901] keytouch 0003:0926:3333.0297: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 2070.395313][ T9901] usb 6-1: USB disconnect, device number 113 00:58:42 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)={0x40, 0x0, 0x2e, {0x2e, 0x5, "2648f7be311be28e381acfa4ed14d8562969866bdab65e5d4220d683e10a03c2a3cd510e8ac901ff8db0bf5d"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x7fffff9, 0xf007, 0x1, [0xc0f0, 0x1fe00c0]}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x0, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x43}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) r3 = syz_open_dev$evdev(&(0x7f0000001200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000001280)={0x1f, 0x1, &(0x7f0000001240)="7f"}) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af4566f3c7347185913f6185b306e694b7c75ea187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x0, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "fc7100269712596c1c0d58c245f9288bf191c1b2d9e0ad034268fecdcd70b64ed4c6e89a0258cbcf833bc1eb865d68be278f5a18754ff7313cb371def95e6e05f55fde7aaba59e06c4ccd15f53687551e509ff69fd40908a2437f4a01d300b0171b3ef07ee7433422f93afd890907707b2ccd358604b5cb1dd095847ec110bf1d9fbef1e51fbfccd883518ea849192df942e366f1734ddbd5fa67f1bad262fcb31ec227d1313a3ac61cc0e65f9d337948af511b90d0aa49321e1074cd4f2cfc548e655c9124ac2d67a2b54313bb70e93004f738d08844f6bf03b6b947f7ef616e0df9fb68800c72b7626d7f77c9c201f68828e4e178116b05ff954440c8db0d7"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r4 = syz_open_dev$hidraw(&(0x7f0000001300)='/dev/hidraw#\x00', 0x0, 0x41) r5 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5e, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80284504, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000012c0)={0x80, 0x5, 0x830c, 0x2, "09738855f8bbb430744feb4e216baa45df434c8d892fdaf6966ac4a3dd6a9e7f"}) write$hidraw(r4, &(0x7f0000002d80)="961e782da136c24bc08d302972a62ecfe3cbeead1c954c7742868c42011a331f2e92dc729b41d125c492e95d9516199064d5c77956e7f4086d533f1446cfffce26ec03d6452313cdd5acfede0cb2cfc5b7677939c7f836c19d839d27e54abd54ee564a34f9ddce5aba0e4cfcc8ae4871522b2854d636453bd4b9579fac970fd342f7a2c9fa881d442e2e61bcbcb73c0f2f2e8b6c075face514675ba4aff91d01148ee7a619061990cb32807e7dabb1a73a1dba70f62308537c75ef78178017ae1120d4ed", 0xc4) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000080)) syz_open_dev$hidraw(0x0, 0x0, 0x0) 00:58:42 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) io_setup(0x81, &(0x7f0000000040)=0x0) io_getevents(r0, 0x0, 0x0, 0x0, 0x0) 00:58:42 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0100001b0001000000000000000800ac1e0001000000000000000000070500000000000000000000000000000000aa0000"], 0x13c}}, 0x0) 00:58:42 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:58:42 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) pipe(0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x1a002, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1100000042000506"], 0x14}}, 0x0) 00:58:42 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1015, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0xc020662a, 0x0) [ 2071.125604][ T9570] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. 00:58:42 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0100001b0001000000000000000800ac1e0001000000000000000000070500000000000000000000000000000000aa0000"], 0x13c}}, 0x0) 00:58:42 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00') sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') 00:58:42 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:58:42 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f0000000340)) [ 2071.445728][ T9583] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. 00:58:42 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0100001b0001000000000000000800ac1e0001000000000000000000070500000000000000000000000000000000aa000000000000"], 0x13c}}, 0x0) [ 2071.604788][ T9901] usb 6-1: new high-speed USB device number 114 using dummy_hcd 00:58:43 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) [ 2071.796305][ T9596] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2072.011002][ T9901] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2072.034783][ T9901] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2072.069896][ T9901] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2072.099844][ T9901] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2072.133371][ T9901] usb 6-1: config 0 descriptor?? [ 2072.628198][ T9578] udc-core: couldn't find an available UDC or it's busy [ 2072.635271][ T9578] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2072.966595][ T9901] keytouch 0003:0926:3333.0298: fixing up Keytouch IEC report descriptor [ 2072.979160][ T9901] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0298/input/input616 [ 2073.071628][ T9901] keytouch 0003:0926:3333.0298: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 2073.184629][ T9901] usb 6-1: USB disconnect, device number 114 00:58:45 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000001280)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') preadv(r0, &(0x7f00000017c0), 0x1a1, 0x4d7) 00:58:45 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') 00:58:45 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0100001b0001000000000000000800ac1e0001000000000000000000070500000000000000000000000000000000aa000000000000"], 0x13c}}, 0x0) 00:58:45 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffff7}]}) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x50, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x2e, &(0x7f0000000140)="d3d763180dee636b7b6129f7f249b9740c9e57f43d26af000000008a58480aa40700000000000090e934c111d4e0"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:58:45 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:58:45 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810300000000003cf57187b312525b631dda1ea9b142bd891381f1343366ade89a08e1cf0f98b5ef41723da4a9166d9587c13a27b926deaedfc0e23540aa2a491d0041c82c1cef6b12b15b8ebb95144b567cc87d36c55c6f74ee455f0f16bee8885271686a58a13ecf239365a8d86391a25ea859d07bf8ae8d27bbeb4858431b95a08406c74bb0603bf8a56ab62c448e925fe31569b9611da91b0c4276ca64e90781a2a1703ac2f8a285d9fb645e9937824ed2c6690971ea801f840920a87e5ebebed4e972d8b98666bcaf88424b834db21281a7be5ebe3c6063381d34877d8f1b0ef4267b16c536a3f9aa577cc9953ca2048ca44d1baaff811ec5b965b92f04553fb17d2b1546ef30e4413de6c57aa334d2948f1189aef576773dec278c51fb0c4483db3387d09415f654f31ab1b20fd95df5a8031340f6"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)={0x40, 0x0, 0x2e, {0x2e, 0x5, "2648f7be311be28e381acfa4ed14d8562969866bdab65e5d4220d683e10a03c2a3cd510e8ac901ff8db0bf5d"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x7fffff9, 0xf007, 0x1, [0xc0f0, 0x1fe00c0]}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x0, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x43}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) r3 = syz_open_dev$evdev(&(0x7f0000001200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000001280)={0x1f, 0x1, &(0x7f0000001240)="7f"}) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af4566f3c7347185913f6185b306e694b7c75ea187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x0, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "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"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r4 = syz_open_dev$hidraw(&(0x7f0000001300)='/dev/hidraw#\x00', 0x0, 0x41) r5 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5e, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80284504, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000012c0)={0x80, 0x5, 0x830c, 0x2, "09738855f8bbb430744feb4e216baa45df434c8d892fdaf6966ac4a3dd6a9e7f"}) write$hidraw(r4, &(0x7f0000002d80)="961e782da136c24bc08d302972a62ecfe3cbeead1c954c7742868c42011a331f2e92dc729b41d125c492e95d9516199064d5c77956e7f4086d533f1446cfffce26ec03d6452313cdd5acfede0cb2cfc5b7677939c7f836c19d839d27e54abd54ee564a34f9ddce5aba0e4cfcc8ae4871522b2854d636453bd4b9579fac970fd342f7a2c9fa881d442e2e61bcbcb73c0f2f2e8b6c075face514675ba4aff91d01148ee7a619061990cb32807e7dabb1a73a1dba70f62308537c75ef78178017ae1120d4ed", 0xc4) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000080)) syz_open_dev$hidraw(0x0, 0x0, 0x0) [ 2073.912071][ T9662] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. 00:58:45 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000000)=ANY=[@ANYBLOB="23e9e73a"], &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='afs\x00', 0x0, 0x0) 00:58:45 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0xc, 0x3) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0x4) setsockopt$inet_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x303}, "eeb18b014090761e", "c8abee46a530752fe83b9a1848055d8b56dded1712a509dac23352bce5a4f85d", "6c4da567"}, 0x38) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) 00:58:45 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') 00:58:45 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0100001b0001000000000000000800ac1e0001000000000000000000070500000000000000000000000000000000aa000000000000"], 0x13c}}, 0x0) 00:58:45 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:58:45 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000040)={0x33, 0x6, 0x0, {0x4, 0x3, 0xa, 0x0, '/dev/cuse\x00'}}, 0x33) [ 2074.167655][ T9684] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. 00:58:45 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1=0xe0000306, @dev={0xac, 0x14, 0x14, 0xc}}, 0xc) sendmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x32b, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00390340d5ae7d0200ff050005", 0x2e}], 0x1}, 0x80) 00:58:45 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r3 = dup(r1) write$tun(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000bbbbbbbbbbbbaaaaaaaaaaaa86dd60ffffad00002f"], 0x3a) 00:58:45 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0100001b0001000000000000000800ac1e0001000000000000000000070500000000000000000000000000000000aa0000000000000000"], 0x13c}}, 0x0) [ 2074.355150][T15019] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 2074.382011][ T9691] device bridge0 entered promiscuous mode [ 2074.466056][ T9697] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2074.526624][ T9697] device bridge0 left promiscuous mode [ 2074.537412][ T9704] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. 00:58:45 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000040)={0x33, 0x6, 0x0, {0x4, 0x3, 0xa, 0x0, '/dev/cuse\x00'}}, 0x33) 00:58:45 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0100001b0001000000000000000800ac1e0001000000000000000000070500000000000000000000000000000000aa0000000000000000"], 0x13c}}, 0x0) [ 2074.596156][ T9691] device bridge0 entered promiscuous mode [ 2074.715561][T15019] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2074.727966][ T9714] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2074.773214][T15019] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2074.864939][T15019] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2074.952299][T15019] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2075.034567][T15019] usb 6-1: config 0 descriptor?? [ 2075.289564][ T9709] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2075.311699][ T9709] device bridge0 left promiscuous mode [ 2075.527185][ T9671] udc-core: couldn't find an available UDC or it's busy [ 2075.566174][ T9671] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2075.845096][T15019] keytouch 0003:0926:3333.0299: fixing up Keytouch IEC report descriptor [ 2075.859276][T15019] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0299/input/input617 [ 2075.949384][T15019] keytouch 0003:0926:3333.0299: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 2076.074463][T15019] usb 6-1: USB disconnect, device number 115 00:58:48 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810300000000003cf57187b312525b631dda1ea9b142bd891381f1343366ade89a08e1cf0f98b5ef41723da4a9166d9587c13a27b926deaedfc0e23540aa2a491d0041c82c1cef6b12b15b8ebb95144b567cc87d36c55c6f74ee455f0f16bee8885271686a58a13ecf239365a8d86391a25ea859d07bf8ae8d27bbeb4858431b95a08406c74bb0603bf8a56ab62c448e925fe31569b9611da91b0c4276ca64e90781a2a1703ac2f8a285d9fb645e9937824ed2c6690971ea801f840920a87e5ebebed4e972d8b98666bcaf88424b834db21281a7be5ebe3c6063381d34877d8f1b0ef4267b16c536a3f9aa577cc9953ca2048ca44d1baaff811ec5b965b92f04553fb17d2b1546ef30e4413de6c57aa334d2948f1189aef576773dec278c51fb0c4483db3387d09415f654f31ab1b20fd95df5a8031340f6"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)={0x40, 0x0, 0x2e, {0x2e, 0x5, "2648f7be311be28e381acfa4ed14d8562969866bdab65e5d4220d683e10a03c2a3cd510e8ac901ff8db0bf5d"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x7fffff9, 0xf007, 0x1, [0xc0f0, 0x1fe00c0]}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x0, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x43}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) r3 = syz_open_dev$evdev(&(0x7f0000001200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000001280)={0x1f, 0x1, &(0x7f0000001240)="7f"}) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af4566f3c7347185913f6185b306e694b7c75ea187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f00000004c0)=ANY=[@ANYBLOB="00030400000204030a08b5f4dff5abf62516eefff03b833aaa9a42d8867ada37523214452bbee48a8a4d9667d7fed8e8861b64a47306fb6bcdaf49e1b5639c28c347f81e8fec9b9e5e0adae6664083da44404259382a14f5521d78ff7450eedbe2736c2e5f03f829f560da68281354432a40e6b19e9fd8a6fdb13d66f91b58b8563c2cc4e5438d1e3c61487fd4eb83c5db960ac76404b1e962bd616962af6c335d15d0ad947a2321bf0bfa15f6a2b8a6354a95267eb37d4e60d625405870bcd52fea4a7c1f4b67be28add47f384793e16201ee7d616e30a637f81cf50ca924959d5782e6ca9e83972cb688ef0f92931041ffaf636beb6a44cac5"], &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x0, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "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"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r4 = syz_open_dev$hidraw(&(0x7f0000001300)='/dev/hidraw#\x00', 0x0, 0x41) r5 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5e, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80284504, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000012c0)={0x80, 0x5, 0x830c, 0x2, "09738855f8bbb430744feb4e216baa45df434c8d892fdaf6966ac4a3dd6a9e7f"}) write$hidraw(r4, &(0x7f0000002d80)="961e782da136c24bc08d302972a62ecfe3cbeead1c954c7742868c42011a331f2e92dc729b41d125c492e95d9516199064d5c77956e7f4086d533f1446cfffce26ec03d6452313cdd5acfede0cb2cfc5b7677939c7f836c19d839d27e54abd54ee564a34f9ddce5aba0e4cfcc8ae4871522b2854d636453bd4b9579fac970fd342f7a2c9fa881d442e2e61bcbcb73c0f2f2e8b6c075face514675ba4aff91d01148ee7a619061990cb32807e7dabb1a73a1dba70f62308537c75ef78178017ae1120d4ed", 0xc4) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000080)) syz_open_dev$hidraw(0x0, 0x0, 0x0) 00:58:48 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0100001b0001000000000000000800ac1e0001000000000000000000070500000000000000000000000000000000aa0000000000000000"], 0x13c}}, 0x0) 00:58:48 executing program 1: ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4af8337b5bf50f3056eaf05b8c261d911dbec33123439ab5ae6ed122eaae0022aa6fe00c939a4f48138797637803ade3b9cbbb325845e84ecc5e48b7f9e1e70e", "73117bf060f9161ab8e9cd611110c3641f898d5a86eba41ef1fdf62aa80710ff5899223a9f04b534e3376627f13ec19f6599e2955b1af66c0ddea3043b0c01ae", "59ee420d691c82955c167d72255755885beed7261325a9cf9d7eb4cf262b10c8"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)=0x13) 00:58:48 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x0, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:58:48 executing program 4: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qrtr-tun\x00', 0x0) 00:58:48 executing program 3: [ 2076.821133][ T9781] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. 00:58:48 executing program 3: 00:58:48 executing program 0: 00:58:48 executing program 4: 00:58:48 executing program 3: 00:58:48 executing program 0: [ 2077.183929][T21857] usb 6-1: new high-speed USB device number 116 using dummy_hcd 00:58:48 executing program 4: [ 2077.584074][T21857] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2077.604267][T21857] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2077.632358][T21857] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2077.653621][T21857] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2077.680576][T21857] usb 6-1: config 0 descriptor?? [ 2078.136147][ T9786] udc-core: couldn't find an available UDC or it's busy [ 2078.143309][ T9786] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2078.445093][T21857] keytouch 0003:0926:3333.029A: fixing up Keytouch IEC report descriptor [ 2078.456382][T21857] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.029A/input/input618 [ 2078.555127][T21857] keytouch 0003:0926:3333.029A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 2078.659460][ T6043] usb 6-1: USB disconnect, device number 116 00:58:50 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)={0x40, 0x0, 0x2e, {0x2e, 0x5, "2648f7be311be28e381acfa4ed14d8562969866bdab65e5d4220d683e10a03c2a3cd510e8ac901ff8db0bf5d"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x7fffff9, 0xf007, 0x1, [0xc0f0, 0x1fe00c0]}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x0, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x43}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) r3 = syz_open_dev$evdev(&(0x7f0000001200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000001280)={0x1f, 0x1, &(0x7f0000001240)="7f"}) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af4566f3c7347185913f6185b306e694b7c75ea187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x0, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "fc7100269712596c1c0d58c245f9288bf191c1b2d9e0ad034268fecdcd70b64ed4c6e89a0258cbcf833bc1eb865d68be278f5a18754ff7313cb371def95e6e05f55fde7aaba59e06c4ccd15f53687551e509ff69fd40908a2437f4a01d300b0171b3ef07ee7433422f93afd890907707b2ccd358604b5cb1dd095847ec110bf1d9fbef1e51fbfccd883518ea849192df942e366f1734ddbd5fa67f1bad262fcb31ec227d1313a3ac61cc0e65f9d337948af511b90d0aa49321e1074cd4f2cfc548e655c9124ac2d67a2b54313bb70e93004f738d08844f6bf03b6b947f7ef616e0df9fb68800c72b7626d7f77c9c201f68828e4e178116b05ff954440c8db0d7"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r4 = syz_open_dev$hidraw(&(0x7f0000001300)='/dev/hidraw#\x00', 0x0, 0x41) r5 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5e, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80284504, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000012c0)={0x80, 0x5, 0x830c, 0x2, "09738855f8bbb430744feb4e216baa45df434c8d892fdaf6966ac4a3dd6a9e7f"}) write$hidraw(r4, &(0x7f0000002d80)="961e782da136c24bc08d302972a62ecfe3cbeead1c954c7742868c42011a331f2e92dc729b41d125c492e95d9516199064d5c77956e7f4086d533f1446cfffce26ec03d6452313cdd5acfede0cb2cfc5b7677939c7f836c19d839d27e54abd54ee564a34f9ddce5aba0e4cfcc8ae4871522b2854d636453bd4b9579fac970fd342f7a2c9fa881d442e2e61bcbcb73c0f2f2e8b6c075face514675ba4aff91d01148ee7a619061990cb32807e7dabb1a73a1dba70f62308537c75ef78178017ae1120d4ed", 0xc4) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000080)) syz_open_dev$hidraw(0x0, 0x0, 0x0) 00:58:50 executing program 3: 00:58:50 executing program 4: 00:58:50 executing program 0: 00:58:50 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x0, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:58:50 executing program 1: ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4af8337b5bf50f3056eaf05b8c261d911dbec33123439ab5ae6ed122eaae0022aa6fe00c939a4f48138797637803ade3b9cbbb325845e84ecc5e48b7f9e1e70e", "73117bf060f9161ab8e9cd611110c3641f898d5a86eba41ef1fdf62aa80710ff5899223a9f04b534e3376627f13ec19f6599e2955b1af66c0ddea3043b0c01ae", "59ee420d691c82955c167d72255755885beed7261325a9cf9d7eb4cf262b10c8"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)=0x13) 00:58:50 executing program 3: 00:58:50 executing program 4: 00:58:50 executing program 0: 00:58:50 executing program 4: 00:58:50 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x0, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:58:50 executing program 0: [ 2079.803460][T21857] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 2080.184167][T21857] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2080.199645][T21857] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2080.213289][T21857] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2080.223703][T21857] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2080.239303][T21857] usb 6-1: config 0 descriptor?? [ 2080.716212][ T9853] udc-core: couldn't find an available UDC or it's busy [ 2080.723212][ T9853] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2081.034839][T21857] keytouch 0003:0926:3333.029B: fixing up Keytouch IEC report descriptor [ 2081.045769][T21857] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.029B/input/input619 [ 2081.138978][T21857] keytouch 0003:0926:3333.029B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 2081.241026][T15019] usb 6-1: USB disconnect, device number 117 00:58:53 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)={0x40, 0x0, 0x2e, {0x2e, 0x5, "2648f7be311be28e381acfa4ed14d8562969866bdab65e5d4220d683e10a03c2a3cd510e8ac901ff8db0bf5d"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x7fffff9, 0xf007, 0x1, [0xc0f0, 0x1fe00c0]}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x0, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x43}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) r3 = syz_open_dev$evdev(&(0x7f0000001200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000001280)={0x1f, 0x1, &(0x7f0000001240)="7f"}) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af4566f3c7347185913f6185b306e694b7c75ea187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f00000004c0)=ANY=[@ANYBLOB="00030400000204030a08b5f4dff5abf62516eefff03b833aaa9a42d8867ada37523214452bbee48a8a4d9667d7fed8e8861b64a47306fb6bcdaf49e1b5639c28c347f81e8fec9b9e5e0adae6664083da44404259382a14f5521d78ff7450eedbe2736c2e5f03f829f560da68281354432a40e6b19e9fd8a6fdb13d66f91b58b8563c2cc4e5438d1e3c61487fd4eb83c5db960ac76404b1e962bd616962af6c335d15d0ad947a2321bf0bfa15f6a2b8a6354a95267eb37d4e60d625405870bcd52fea4a7c1f4b67be28add47f384793e16201ee7d616e30a637f81cf50ca924959d5782e6ca9e83972cb688ef0f92931041ffaf636beb6a44cac5"], &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x0, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "fc7100269712596c1c0d58c245f9288bf191c1b2d9e0ad034268fecdcd70b64ed4c6e89a0258cbcf833bc1eb865d68be278f5a18754ff7313cb371def95e6e05f55fde7aaba59e06c4ccd15f53687551e509ff69fd40908a2437f4a01d300b0171b3ef07ee7433422f93afd890907707b2ccd358604b5cb1dd095847ec110bf1d9fbef1e51fbfccd883518ea849192df942e366f1734ddbd5fa67f1bad262fcb31ec227d1313a3ac61cc0e65f9d337948af511b90d0aa49321e1074cd4f2cfc548e655c9124ac2d67a2b54313bb70e93004f738d08844f6bf03b6b947f7ef616e0df9fb68800c72b7626d7f77c9c201f68828e4e178116b05ff954440c8db0d7"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r4 = syz_open_dev$hidraw(&(0x7f0000001300)='/dev/hidraw#\x00', 0x0, 0x41) r5 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5e, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80284504, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000012c0)={0x80, 0x5, 0x830c, 0x2, "09738855f8bbb430744feb4e216baa45df434c8d892fdaf6966ac4a3dd6a9e7f"}) write$hidraw(r4, &(0x7f0000002d80)="961e782da136c24bc08d302972a62ecfe3cbeead1c954c7742868c42011a331f2e92dc729b41d125c492e95d9516199064d5c77956e7f4086d533f1446cfffce26ec03d6452313cdd5acfede0cb2cfc5b7677939c7f836c19d839d27e54abd54ee564a34f9ddce5aba0e4cfcc8ae4871522b2854d636453bd4b9579fac970fd342f7a2c9fa881d442e2e61bcbcb73c0f2f2e8b6c075face514675ba4aff91d01148ee7a619061990cb32807e7dabb1a73a1dba70f62308537c75ef78178017ae1120d4ed", 0xc4) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000080)) syz_open_dev$hidraw(0x0, 0x0, 0x0) 00:58:53 executing program 3: 00:58:53 executing program 4: 00:58:53 executing program 0: 00:58:53 executing program 1: ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4af8337b5bf50f3056eaf05b8c261d911dbec33123439ab5ae6ed122eaae0022aa6fe00c939a4f48138797637803ade3b9cbbb325845e84ecc5e48b7f9e1e70e", "73117bf060f9161ab8e9cd611110c3641f898d5a86eba41ef1fdf62aa80710ff5899223a9f04b534e3376627f13ec19f6599e2955b1af66c0ddea3043b0c01ae", "59ee420d691c82955c167d72255755885beed7261325a9cf9d7eb4cf262b10c8"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)=0x13) 00:58:53 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fe, 0x0, 0x0) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:58:53 executing program 4: 00:58:53 executing program 0: 00:58:53 executing program 3: 00:58:53 executing program 4: 00:58:53 executing program 0: 00:58:53 executing program 3: [ 2082.353171][T15019] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 2082.714003][T15019] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2082.745134][T15019] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2082.790739][T15019] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2082.808096][T15019] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2082.851232][T15019] usb 6-1: config 0 descriptor?? [ 2083.319319][ T9923] udc-core: couldn't find an available UDC or it's busy [ 2083.331181][ T9923] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2083.654476][T15019] keytouch 0003:0926:3333.029C: fixing up Keytouch IEC report descriptor [ 2083.666504][T15019] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.029C/input/input620 [ 2083.772151][T15019] keytouch 0003:0926:3333.029C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 2083.883184][T15019] usb 6-1: USB disconnect, device number 118 00:58:55 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)={0x40, 0x0, 0x2e, {0x2e, 0x5, "2648f7be311be28e381acfa4ed14d8562969866bdab65e5d4220d683e10a03c2a3cd510e8ac901ff8db0bf5d"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x7fffff9, 0xf007, 0x1, [0xc0f0, 0x1fe00c0]}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x0, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x43}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) r3 = syz_open_dev$evdev(&(0x7f0000001200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000001280)={0x1f, 0x1, &(0x7f0000001240)="7f"}) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af4566f3c7347185913f6185b306e694b7c75ea187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0x0, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "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"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r4 = syz_open_dev$hidraw(&(0x7f0000001300)='/dev/hidraw#\x00', 0x0, 0x41) r5 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5e, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80284504, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000012c0)={0x80, 0x5, 0x830c, 0x2, "09738855f8bbb430744feb4e216baa45df434c8d892fdaf6966ac4a3dd6a9e7f"}) write$hidraw(r4, &(0x7f0000002d80)="961e782da136c24bc08d302972a62ecfe3cbeead1c954c7742868c42011a331f2e92dc729b41d125c492e95d9516199064d5c77956e7f4086d533f1446cfffce26ec03d6452313cdd5acfede0cb2cfc5b7677939c7f836c19d839d27e54abd54ee564a34f9ddce5aba0e4cfcc8ae4871522b2854d636453bd4b9579fac970fd342f7a2c9fa881d442e2e61bcbcb73c0f2f2e8b6c075face514675ba4aff91d01148ee7a619061990cb32807e7dabb1a73a1dba70f62308537c75ef78178017ae1120d4ed", 0xc4) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000080)) syz_open_dev$hidraw(0x0, 0x0, 0x0) 00:58:55 executing program 0: 00:58:55 executing program 3: 00:58:55 executing program 4: 00:58:55 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fe, 0x0, 0x0) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:58:55 executing program 1: ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4af8337b5bf50f3056eaf05b8c261d911dbec33123439ab5ae6ed122eaae0022aa6fe00c939a4f48138797637803ade3b9cbbb325845e84ecc5e48b7f9e1e70e", "73117bf060f9161ab8e9cd611110c3641f898d5a86eba41ef1fdf62aa80710ff5899223a9f04b534e3376627f13ec19f6599e2955b1af66c0ddea3043b0c01ae", "59ee420d691c82955c167d72255755885beed7261325a9cf9d7eb4cf262b10c8"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)=0x13) 00:58:55 executing program 0: 00:58:56 executing program 3: 00:58:56 executing program 4: 00:58:56 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x1, 0x0) bind(r0, &(0x7f0000000000)=@un=@abs={0x0, 0xd}, 0x10) 00:58:56 executing program 3: 00:58:56 executing program 4: [ 2084.992976][T15019] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 2085.360313][T15019] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2085.392895][T15019] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2085.414015][T15019] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2085.431054][T15019] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2085.442084][T15019] usb 6-1: config 0 descriptor?? [ 2085.916774][ T9987] udc-core: couldn't find an available UDC or it's busy [ 2085.923809][ T9987] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2086.235070][T15019] keytouch 0003:0926:3333.029D: fixing up Keytouch IEC report descriptor [ 2086.261098][T15019] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.029D/input/input621 [ 2086.348143][T15019] keytouch 0003:0926:3333.029D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 2086.447931][T15019] usb 6-1: USB disconnect, device number 119 00:58:58 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810300000000003cf57187b312525b631dda1ea9b142bd891381f1343366ade89a08e1cf0f98b5ef41723da4a9166d9587c13a27b926deaedfc0e23540aa2a491d0041c82c1cef6b12b15b8ebb95144b567cc87d36c55c6f74ee455f0f16bee8885271686a58a13ecf239365a8d86391a25ea859d07bf8ae8d27bbeb4858431b95a08406c74bb0603bf8a56ab62c448e925fe31569b9611da91b0c4276ca64e90781a2a1703ac2f8a285d9fb645e9937824ed2c6690971ea801f840920a87e5ebebed4e972d8b98666bcaf88424b834db21281a7be5ebe3c6063381d34877d8f1b0ef4267b16c536a3f9aa577cc9953ca2048ca44d1baaff811ec5b965b92f04553fb17d2b1546ef30e4413de6c57aa334d2948f1189aef576773dec278c51fb0c4483db3387d09415f654f31ab1b20fd95df5a8031340f6"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)={0x40, 0x0, 0x2e, {0x2e, 0x5, "2648f7be311be28e381acfa4ed14d8562969866bdab65e5d4220d683e10a03c2a3cd510e8ac901ff8db0bf5d"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x7fffff9, 0xf007, 0x1, [0xc0f0, 0x1fe00c0]}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x0, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x43}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) r3 = syz_open_dev$evdev(&(0x7f0000001200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000001280)={0x1f, 0x1, &(0x7f0000001240)="7f"}) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af4566f3c7347185913f6185b306e694b7c75ea187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f00000004c0)=ANY=[@ANYBLOB="00030400000204030a08b5f4dff5abf62516eefff03b833aaa9a42d8867ada37523214452bbee48a8a4d9667d7fed8e8861b64a47306fb6bcdaf49e1b5639c28c347f81e8fec9b9e5e0adae6664083da44404259382a14f5521d78ff7450eedbe2736c2e5f03f829f560da68281354432a40e6b19e9fd8a6fdb13d66f91b58b8563c2cc4e5438d1e3c61487fd4eb83c5db960ac76404b1e962bd616962af6c335d15d0ad947a2321bf0bfa15f6a2b8a6354a95267eb37d4e60d625405870bcd52fea4a7c1f4b67be28add47f384793e16201ee7d616e30a637f81cf50ca924959d5782e6ca9e83972cb688ef0f92931041ffaf636beb6a44cac5"], &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0x0, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "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"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r4 = syz_open_dev$hidraw(&(0x7f0000001300)='/dev/hidraw#\x00', 0x0, 0x41) r5 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5e, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80284504, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000012c0)={0x80, 0x5, 0x830c, 0x2, "09738855f8bbb430744feb4e216baa45df434c8d892fdaf6966ac4a3dd6a9e7f"}) write$hidraw(r4, &(0x7f0000002d80)="961e782da136c24bc08d302972a62ecfe3cbeead1c954c7742868c42011a331f2e92dc729b41d125c492e95d9516199064d5c77956e7f4086d533f1446cfffce26ec03d6452313cdd5acfede0cb2cfc5b7677939c7f836c19d839d27e54abd54ee564a34f9ddce5aba0e4cfcc8ae4871522b2854d636453bd4b9579fac970fd342f7a2c9fa881d442e2e61bcbcb73c0f2f2e8b6c075face514675ba4aff91d01148ee7a619061990cb32807e7dabb1a73a1dba70f62308537c75ef78178017ae1120d4ed", 0xc4) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000080)) syz_open_dev$hidraw(0x0, 0x0, 0x0) 00:58:58 executing program 3: 00:58:58 executing program 0: 00:58:58 executing program 4: 00:58:58 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fe, 0x0, 0x0) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:58:58 executing program 1: ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4af8337b5bf50f3056eaf05b8c261d911dbec33123439ab5ae6ed122eaae0022aa6fe00c939a4f48138797637803ade3b9cbbb325845e84ecc5e48b7f9e1e70e", "73117bf060f9161ab8e9cd611110c3641f898d5a86eba41ef1fdf62aa80710ff5899223a9f04b534e3376627f13ec19f6599e2955b1af66c0ddea3043b0c01ae", "59ee420d691c82955c167d72255755885beed7261325a9cf9d7eb4cf262b10c8"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x13) 00:58:58 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x16, 0x0, 0x0) 00:58:58 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$devlink(0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc0407008b65d8b4ac2ca35c66", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x30007, 0x0) 00:58:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_netdev_private(r0, 0x89ff, &(0x7f0000000100)) 00:58:58 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:58:58 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r1, 0x0) mount$fuseblk(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0) 00:58:58 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0x0, r3) setregid(0x0, r3) [ 2087.584905][T21857] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 2087.992641][T21857] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2088.010587][T21857] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2088.022239][T21857] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2088.040211][T21857] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2088.051845][T21857] usb 6-1: config 0 descriptor?? [ 2088.535577][T10057] udc-core: couldn't find an available UDC or it's busy [ 2088.542787][T10057] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2088.874238][T21857] keytouch 0003:0926:3333.029E: fixing up Keytouch IEC report descriptor [ 2088.885760][T21857] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.029E/input/input622 [ 2088.970846][T21857] keytouch 0003:0926:3333.029E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 2089.084042][T15019] usb 6-1: USB disconnect, device number 120 00:59:01 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)={0x40, 0x0, 0x2e, {0x2e, 0x5, "2648f7be311be28e381acfa4ed14d8562969866bdab65e5d4220d683e10a03c2a3cd510e8ac901ff8db0bf5d"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x7fffff9, 0xf007, 0x1, [0xc0f0, 0x1fe00c0]}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x0, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x43}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) r3 = syz_open_dev$evdev(&(0x7f0000001200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000001280)={0x1f, 0x1, &(0x7f0000001240)="7f"}) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af4566f3c7347185913f6185b306e694b7c75ea187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0x0, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "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"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r4 = syz_open_dev$hidraw(&(0x7f0000001300)='/dev/hidraw#\x00', 0x0, 0x41) r5 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5e, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80284504, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000012c0)={0x80, 0x5, 0x830c, 0x2, "09738855f8bbb430744feb4e216baa45df434c8d892fdaf6966ac4a3dd6a9e7f"}) write$hidraw(r4, &(0x7f0000002d80)="961e782da136c24bc08d302972a62ecfe3cbeead1c954c7742868c42011a331f2e92dc729b41d125c492e95d9516199064d5c77956e7f4086d533f1446cfffce26ec03d6452313cdd5acfede0cb2cfc5b7677939c7f836c19d839d27e54abd54ee564a34f9ddce5aba0e4cfcc8ae4871522b2854d636453bd4b9579fac970fd342f7a2c9fa881d442e2e61bcbcb73c0f2f2e8b6c075face514675ba4aff91d01148ee7a619061990cb32807e7dabb1a73a1dba70f62308537c75ef78178017ae1120d4ed", 0xc4) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000080)) syz_open_dev$hidraw(0x0, 0x0, 0x0) 00:59:01 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:59:01 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$setopts(0x4200, r1, 0x0, 0xb932be5836ab1a1f) 00:59:01 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000200)=0x0) getresuid(&(0x7f0000000000), &(0x7f0000000040), 0x0) mmap(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x5, 0x11, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_submit(r1, 0x5800, &(0x7f0000000540)=[&(0x7f00000000c0)={0xffffff7f, 0xff0f, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) preadv(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000001280)=""/34, 0x22}], 0x1, 0x0) 00:59:01 executing program 1: ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4af8337b5bf50f3056eaf05b8c261d911dbec33123439ab5ae6ed122eaae0022aa6fe00c939a4f48138797637803ade3b9cbbb325845e84ecc5e48b7f9e1e70e", "73117bf060f9161ab8e9cd611110c3641f898d5a86eba41ef1fdf62aa80710ff5899223a9f04b534e3376627f13ec19f6599e2955b1af66c0ddea3043b0c01ae", "59ee420d691c82955c167d72255755885beed7261325a9cf9d7eb4cf262b10c8"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x13) 00:59:01 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$devlink(0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc0407008b65d8b4ac2ca35c66", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x30007, 0x0) [ 2089.794574][T10141] ptrace attach of "/root/syz-executor.4"[7377] was attempted by "/root/syz-executor.4"[10141] 00:59:01 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$devlink(0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc0407008b65d8b4ac2ca35c66", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x30007, 0x0) 00:59:01 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) [ 2090.112281][T15019] usb 6-1: new high-speed USB device number 121 using dummy_hcd 00:59:01 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) [ 2090.493354][T15019] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2090.538262][T15019] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 00:59:01 executing program 1: ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4af8337b5bf50f3056eaf05b8c261d911dbec33123439ab5ae6ed122eaae0022aa6fe00c939a4f48138797637803ade3b9cbbb325845e84ecc5e48b7f9e1e70e", "73117bf060f9161ab8e9cd611110c3641f898d5a86eba41ef1fdf62aa80710ff5899223a9f04b534e3376627f13ec19f6599e2955b1af66c0ddea3043b0c01ae", "59ee420d691c82955c167d72255755885beed7261325a9cf9d7eb4cf262b10c8"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x13) 00:59:01 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$devlink(0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc0407008b65d8b4ac2ca35c66", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x30007, 0x0) [ 2090.635857][T15019] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2090.719617][T15019] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2090.740538][T15019] usb 6-1: config 0 descriptor?? 00:59:02 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x7, 0xe, 0x300, &(0x7f0000000140)="e3d0e9d6d9d18e5f39868de363d3", 0x0, 0x19d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) dup(0xffffffffffffffff) getpgrp(0x0) [ 2091.004044][T10175] [ 2091.011531][T10175] ********************************************************** [ 2091.053406][T10175] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 2091.086891][T10175] ** ** [ 2091.121840][T10175] ** trace_printk() being used. Allocating extra memory. ** [ 2091.147581][T10175] ** ** [ 2091.165491][T10175] ** This means that this is a DEBUG kernel and it is ** [ 2091.178235][T10175] ** unsafe for production use. ** [ 2091.190714][T10175] ** ** [ 2091.207248][T10175] ** If you see this message and you are not debugging ** [ 2091.216918][T10147] udc-core: couldn't find an available UDC or it's busy [ 2091.219766][T10175] ** the kernel, report this immediately to your vendor! ** [ 2091.234467][T10147] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2091.239154][T10175] ** ** [ 2091.264682][T10175] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 2091.284923][T10175] ********************************************************** [ 2091.553982][T15019] keytouch 0003:0926:3333.029F: fixing up Keytouch IEC report descriptor [ 2091.615008][T15019] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.029F/input/input623 [ 2091.763835][T15019] keytouch 0003:0926:3333.029F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 2091.840251][T15019] usb 6-1: USB disconnect, device number 121 00:59:03 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)={0x40, 0x0, 0x2e, {0x2e, 0x5, "2648f7be311be28e381acfa4ed14d8562969866bdab65e5d4220d683e10a03c2a3cd510e8ac901ff8db0bf5d"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x7fffff9, 0xf007, 0x1, [0xc0f0, 0x1fe00c0]}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x0, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x43}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) r3 = syz_open_dev$evdev(&(0x7f0000001200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000001280)={0x1f, 0x1, &(0x7f0000001240)="7f"}) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af4566f3c7347185913f6185b306e694b7c75ea187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x0, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "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"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r4 = syz_open_dev$hidraw(&(0x7f0000001300)='/dev/hidraw#\x00', 0x0, 0x41) r5 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5e, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80284504, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000012c0)={0x80, 0x5, 0x830c, 0x2, "09738855f8bbb430744feb4e216baa45df434c8d892fdaf6966ac4a3dd6a9e7f"}) write$hidraw(r4, &(0x7f0000002d80)="961e782da136c24bc08d302972a62ecfe3cbeead1c954c7742868c42011a331f2e92dc729b41d125c492e95d9516199064d5c77956e7f4086d533f1446cfffce26ec03d6452313cdd5acfede0cb2cfc5b7677939c7f836c19d839d27e54abd54ee564a34f9ddce5aba0e4cfcc8ae4871522b2854d636453bd4b9579fac970fd342f7a2c9fa881d442e2e61bcbcb73c0f2f2e8b6c075face514675ba4aff91d01148ee7a619061990cb32807e7dabb1a73a1dba70f62308537c75ef78178017ae1120d4ed", 0xc4) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000080)) syz_open_dev$hidraw(0x0, 0x0, 0x0) 00:59:03 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:59:03 executing program 4: sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x4000091005d7d, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000240)='syscall\x00') 00:59:03 executing program 1: ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4af8337b5bf50f3056eaf05b8c261d911dbec33123439ab5ae6ed122eaae0022aa6fe00c939a4f48138797637803ade3b9cbbb325845e84ecc5e48b7f9e1e70e", "73117bf060f9161ab8e9cd611110c3641f898d5a86eba41ef1fdf62aa80710ff5899223a9f04b534e3376627f13ec19f6599e2955b1af66c0ddea3043b0c01ae", "59ee420d691c82955c167d72255755885beed7261325a9cf9d7eb4cf262b10c8"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)=0x13) 00:59:03 executing program 0: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000200)={{}, {0x6, @multicast}, 0x6, {0x2, 0x0, @empty}, 'ip6gretap0\x00'}) 00:59:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000240)=0x2, 0x4) 00:59:04 executing program 3: creat(&(0x7f0000000100)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) 00:59:04 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_int(r1, 0x0, 0xf, 0x0, &(0x7f0000000140)) 00:59:04 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x24201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x9849}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1, 0x4, 0x0, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x252a, 0x0, 0x3000000, [], [{}, {0x801, 0x0, 0x80000001}]}) [ 2092.910553][ T29] audit: type=1804 audit(1595638744.207:67): pid=10241 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir590203235/syzkaller.sHsvWs/2028/bus" dev="sda1" ino=16287 res=1 [ 2092.952529][ T6043] usb 6-1: new high-speed USB device number 122 using dummy_hcd 00:59:04 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000040), 0x4) 00:59:04 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:59:04 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x10d082) r1 = memfd_create(&(0x7f0000000040)='\xbb\x02\xb1\xed\x96\xdb\xb1,\x116\xe0\x89]\xad\x01\xc3r%;\x99\xbck\xe7=\xfa\xe8HB\x00\x00\xd7h\xa4\x06jt\xea\xf9l\x00\x00\x00\x00!\xf8\xac\xdc\x00\x00\x00', 0x0) pwritev(r1, &(0x7f00000001c0)=[{&(0x7f0000000200)="c5", 0x1}], 0x1, 0x40ee1) socket$inet6(0xa, 0x400000000001, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3fbcbab16c80fab, 0x11, r0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f00000000c0)) [ 2093.058966][ T29] audit: type=1804 audit(1595638744.257:68): pid=10241 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir590203235/syzkaller.sHsvWs/2028/bus" dev="sda1" ino=16287 res=1 [ 2093.413504][ T6043] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2093.464637][ T6043] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2093.547989][ T6043] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2093.627328][ T6043] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2093.655943][ T6043] usb 6-1: config 0 descriptor?? [ 2094.124232][T10235] udc-core: couldn't find an available UDC or it's busy [ 2094.131247][T10235] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2094.443219][ T6043] keytouch 0003:0926:3333.02A0: fixing up Keytouch IEC report descriptor [ 2094.455575][ T6043] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.02A0/input/input624 [ 2094.543683][ T6043] keytouch 0003:0926:3333.02A0: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 2094.661728][ T6043] usb 6-1: USB disconnect, device number 122 00:59:06 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)={0x40, 0x0, 0x2e, {0x2e, 0x5, "2648f7be311be28e381acfa4ed14d8562969866bdab65e5d4220d683e10a03c2a3cd510e8ac901ff8db0bf5d"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x7fffff9, 0xf007, 0x1, [0xc0f0, 0x1fe00c0]}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x0, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x43}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) r3 = syz_open_dev$evdev(&(0x7f0000001200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000001280)={0x1f, 0x1, &(0x7f0000001240)="7f"}) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af4566f3c7347185913f6185b306e694b7c75ea187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x0, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "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"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r4 = syz_open_dev$hidraw(&(0x7f0000001300)='/dev/hidraw#\x00', 0x0, 0x41) r5 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5e, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80284504, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000012c0)={0x80, 0x5, 0x830c, 0x2, "09738855f8bbb430744feb4e216baa45df434c8d892fdaf6966ac4a3dd6a9e7f"}) write$hidraw(r4, &(0x7f0000002d80)="961e782da136c24bc08d302972a62ecfe3cbeead1c954c7742868c42011a331f2e92dc729b41d125c492e95d9516199064d5c77956e7f4086d533f1446cfffce26ec03d6452313cdd5acfede0cb2cfc5b7677939c7f836c19d839d27e54abd54ee564a34f9ddce5aba0e4cfcc8ae4871522b2854d636453bd4b9579fac970fd342f7a2c9fa881d442e2e61bcbcb73c0f2f2e8b6c075face514675ba4aff91d01148ee7a619061990cb32807e7dabb1a73a1dba70f62308537c75ef78178017ae1120d4ed", 0xc4) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000080)) syz_open_dev$hidraw(0x0, 0x0, 0x0) 00:59:06 executing program 1: ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4af8337b5bf50f3056eaf05b8c261d911dbec33123439ab5ae6ed122eaae0022aa6fe00c939a4f48138797637803ade3b9cbbb325845e84ecc5e48b7f9e1e70e", "73117bf060f9161ab8e9cd611110c3641f898d5a86eba41ef1fdf62aa80710ff5899223a9f04b534e3376627f13ec19f6599e2955b1af66c0ddea3043b0c01ae", "59ee420d691c82955c167d72255755885beed7261325a9cf9d7eb4cf262b10c8"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)=0x13) 00:59:06 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, 0x0) 00:59:06 executing program 0: preadv(0xffffffffffffffff, &(0x7f0000002840)=[{&(0x7f0000002400)=""/132, 0x84}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') preadv(r0, &(0x7f00000017c0), 0x19e, 0x3f00) 00:59:06 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x33, 0x0, &(0x7f0000000040)) 00:59:06 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:59:06 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000200)=0x0) r2 = open(&(0x7f00000009c0)='./bus\x00', 0x0, 0x0) getresuid(&(0x7f0000000000), &(0x7f0000000040), 0x0) mmap(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x5, 0x11, r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x5800, &(0x7f0000000540)=[&(0x7f00000000c0)={0xffffff7f, 0xff0f, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) preadv(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000001280)=""/34, 0x22}], 0x1, 0x0) 00:59:06 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) 00:59:06 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:59:06 executing program 0: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$peeksig(0x4209, r1, &(0x7f0000000040)={0x0, 0x0, 0x1}, &(0x7f0000000080)=[{}]) [ 2095.650377][ T29] audit: type=1804 audit(1595638746.937:69): pid=10322 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir291047821/syzkaller.zoNb62/1903/bus" dev="sda1" ino=16149 res=1 [ 2095.771866][T15019] usb 6-1: new high-speed USB device number 123 using dummy_hcd 00:59:07 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x19, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x1e8, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x0, 0x2d0, 0x2d0, 0x2d0, 0x2d0, 0x2d0, 0x3, 0x0, {[{{@uncond=[0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "dae7bbe9998a260a8f00a30e54d356de8911e05d607ed2184b8a7d2f9d2e"}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x248) [ 2095.799320][ T29] audit: type=1804 audit(1595638746.977:70): pid=10318 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir291047821/syzkaller.zoNb62/1903/bus" dev="sda1" ino=16149 res=1 [ 2095.815827][T10328] ptrace attach of "/root/syz-executor.0"[6832] was attempted by "/root/syz-executor.0"[10328] 00:59:07 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000200)=0x0) r2 = open(&(0x7f00000009c0)='./bus\x00', 0x0, 0x0) getresuid(&(0x7f0000000000), &(0x7f0000000040), 0x0) mmap(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x5, 0x11, r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x5800, &(0x7f0000000540)=[&(0x7f00000000c0)={0xffffff7f, 0xff0f, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) preadv(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000001280)=""/34, 0x22}], 0x1, 0x0) [ 2095.951026][ T29] audit: type=1804 audit(1595638746.997:71): pid=10322 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir291047821/syzkaller.zoNb62/1903/bus" dev="sda1" ino=16149 res=1 [ 2096.048391][ T29] audit: type=1804 audit(1595638746.997:72): pid=10318 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir291047821/syzkaller.zoNb62/1903/bus" dev="sda1" ino=16149 res=1 [ 2096.081276][ T29] audit: type=1804 audit(1595638747.337:73): pid=10338 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir291047821/syzkaller.zoNb62/1904/bus" dev="sda1" ino=16168 res=1 [ 2096.118808][ T29] audit: type=1804 audit(1595638747.407:74): pid=10336 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir291047821/syzkaller.zoNb62/1904/bus" dev="sda1" ino=16168 res=1 [ 2096.202871][T15019] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2096.237628][T15019] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2096.257080][T15019] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2096.268772][T15019] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2096.313867][T15019] usb 6-1: config 0 descriptor?? [ 2096.774829][T10315] udc-core: couldn't find an available UDC or it's busy [ 2096.782381][T10315] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2097.092778][T15019] keytouch 0003:0926:3333.02A1: fixing up Keytouch IEC report descriptor [ 2097.104605][T15019] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.02A1/input/input625 [ 2097.189728][T15019] keytouch 0003:0926:3333.02A1: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 2097.309273][T15019] usb 6-1: USB disconnect, device number 123 00:59:09 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)={0x40, 0x0, 0x2e, {0x2e, 0x5, "2648f7be311be28e381acfa4ed14d8562969866bdab65e5d4220d683e10a03c2a3cd510e8ac901ff8db0bf5d"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x7fffff9, 0xf007, 0x1, [0xc0f0, 0x1fe00c0]}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x0, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x43}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) r3 = syz_open_dev$evdev(&(0x7f0000001200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000001280)={0x1f, 0x1, &(0x7f0000001240)="7f"}) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af4566f3c7347185913f6185b306e694b7c75ea187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x0, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "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"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r4 = syz_open_dev$hidraw(&(0x7f0000001300)='/dev/hidraw#\x00', 0x0, 0x41) r5 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5e, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80284504, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000012c0)={0x80, 0x5, 0x830c, 0x2, "09738855f8bbb430744feb4e216baa45df434c8d892fdaf6966ac4a3dd6a9e7f"}) write$hidraw(r4, &(0x7f0000002d80)="961e782da136c24bc08d302972a62ecfe3cbeead1c954c7742868c42011a331f2e92dc729b41d125c492e95d9516199064d5c77956e7f4086d533f1446cfffce26ec03d6452313cdd5acfede0cb2cfc5b7677939c7f836c19d839d27e54abd54ee564a34f9ddce5aba0e4cfcc8ae4871522b2854d636453bd4b9579fac970fd342f7a2c9fa881d442e2e61bcbcb73c0f2f2e8b6c075face514675ba4aff91d01148ee7a619061990cb32807e7dabb1a73a1dba70f62308537c75ef78178017ae1120d4ed", 0xc4) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000080)) syz_open_dev$hidraw(0x0, 0x0, 0x0) 00:59:09 executing program 0: syz_open_dev$loop(0x0, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) 00:59:09 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 00:59:09 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r0, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000) 00:59:09 executing program 1: ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4af8337b5bf50f3056eaf05b8c261d911dbec33123439ab5ae6ed122eaae0022aa6fe00c939a4f48138797637803ade3b9cbbb325845e84ecc5e48b7f9e1e70e", "73117bf060f9161ab8e9cd611110c3641f898d5a86eba41ef1fdf62aa80710ff5899223a9f04b534e3376627f13ec19f6599e2955b1af66c0ddea3043b0c01ae", "59ee420d691c82955c167d72255755885beed7261325a9cf9d7eb4cf262b10c8"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)=0x13) 00:59:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001cc0)=[{{&(0x7f0000000180)=@nl=@proc, 0x80, 0x0}}], 0x1, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) 00:59:09 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='timers\x00') timer_create(0x0, 0x0, &(0x7f0000000080)) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000240)=""/237, 0xed}], 0x1, 0x5) 00:59:09 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) 00:59:09 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 00:59:09 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002a00fb4b"], 0x2}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$inet(0x10, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x84ffde, 0x0) [ 2098.361306][T15019] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 2098.433622][T10417] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2098.455716][ T29] audit: type=1800 audit(1595638749.748:75): pid=10397 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="memory.events" dev="sda1" ino=16125 res=0 00:59:09 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) 00:59:09 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) preadv(r1, &(0x7f00000012c0)=[{&(0x7f00000000c0)=""/35, 0x23}], 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) dup3(r2, r1, 0x0) [ 2098.620451][T10429] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2098.742048][T15019] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2098.811483][T15019] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2098.933008][T15019] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2098.961571][T15019] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2098.982640][T15019] usb 6-1: config 0 descriptor?? [ 2099.443328][T10399] udc-core: couldn't find an available UDC or it's busy [ 2099.453453][T10399] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2099.762277][T15019] keytouch 0003:0926:3333.02A2: fixing up Keytouch IEC report descriptor [ 2099.798271][T15019] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.02A2/input/input626 [ 2099.883300][T15019] keytouch 0003:0926:3333.02A2: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 2099.974794][ T2484] usb 6-1: USB disconnect, device number 124 00:59:11 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810300000000003cf57187b312525b631dda1ea9b142bd891381f1343366ade89a08e1cf0f98b5ef41723da4a9166d9587c13a27b926deaedfc0e23540aa2a491d0041c82c1cef6b12b15b8ebb95144b567cc87d36c55c6f74ee455f0f16bee8885271686a58a13ecf239365a8d86391a25ea859d07bf8ae8d27bbeb4858431b95a08406c74bb0603bf8a56ab62c448e925fe31569b9611da91b0c4276ca64e90781a2a1703ac2f8a285d9fb645e9937824ed2c6690971ea801f840920a87e5ebebed4e972d8b98666bcaf88424b834db21281a7be5ebe3c6063381d34877d8f1b0ef4267b16c536a3f9aa577cc9953ca2048ca44d1baaff811ec5b965b92f04553fb17d2b1546ef30e4413de6c57aa334d2948f1189aef576773dec278c51fb0c4483db3387d09415f654f31ab1b20fd95df5a8031340f6"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)={0x40, 0x0, 0x2e, {0x2e, 0x5, "2648f7be311be28e381acfa4ed14d8562969866bdab65e5d4220d683e10a03c2a3cd510e8ac901ff8db0bf5d"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x7fffff9, 0xf007, 0x1, [0xc0f0, 0x1fe00c0]}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x0, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x43}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) r3 = syz_open_dev$evdev(&(0x7f0000001200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000001280)={0x1f, 0x1, &(0x7f0000001240)="7f"}) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af4566f3c7347185913f6185b306e694b7c75ea187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "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"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r4 = syz_open_dev$hidraw(&(0x7f0000001300)='/dev/hidraw#\x00', 0x0, 0x41) r5 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5e, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80284504, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000012c0)={0x80, 0x5, 0x830c, 0x2, "09738855f8bbb430744feb4e216baa45df434c8d892fdaf6966ac4a3dd6a9e7f"}) write$hidraw(r4, &(0x7f0000002d80)="961e782da136c24bc08d302972a62ecfe3cbeead1c954c7742868c42011a331f2e92dc729b41d125c492e95d9516199064d5c77956e7f4086d533f1446cfffce26ec03d6452313cdd5acfede0cb2cfc5b7677939c7f836c19d839d27e54abd54ee564a34f9ddce5aba0e4cfcc8ae4871522b2854d636453bd4b9579fac970fd342f7a2c9fa881d442e2e61bcbcb73c0f2f2e8b6c075face514675ba4aff91d01148ee7a619061990cb32807e7dabb1a73a1dba70f62308537c75ef78178017ae1120d4ed", 0xc4) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000080)) syz_open_dev$hidraw(0x0, 0x0, 0x0) 00:59:11 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) 00:59:11 executing program 0: syz_open_dev$loop(0x0, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000003c0)=0x3f) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x2001040, 0x0) mount$bpf(0x20000000, &(0x7f0000000140)='./file0/file0/file0\x00', 0x0, 0xc50c4, 0x0) mount(0x0, &(0x7f0000000380)='./file0/file0/file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x0) 00:59:11 executing program 3: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1) r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x8004) 00:59:11 executing program 1: ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4af8337b5bf50f3056eaf05b8c261d911dbec33123439ab5ae6ed122eaae0022aa6fe00c939a4f48138797637803ade3b9cbbb325845e84ecc5e48b7f9e1e70e", "73117bf060f9161ab8e9cd611110c3641f898d5a86eba41ef1fdf62aa80710ff5899223a9f04b534e3376627f13ec19f6599e2955b1af66c0ddea3043b0c01ae", "59ee420d691c82955c167d72255755885beed7261325a9cf9d7eb4cf262b10c8"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)=0x13) 00:59:11 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000000)) 00:59:12 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0xc03012f3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) 00:59:12 executing program 1: ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4af8337b5bf50f3056eaf05b8c261d911dbec33123439ab5ae6ed122eaae0022aa6fe00c939a4f48138797637803ade3b9cbbb325845e84ecc5e48b7f9e1e70e", "73117bf060f9161ab8e9cd611110c3641f898d5a86eba41ef1fdf62aa80710ff5899223a9f04b534e3376627f13ec19f6599e2955b1af66c0ddea3043b0c01ae", "59ee420d691c82955c167d72255755885beed7261325a9cf9d7eb4cf262b10c8"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)=0x13) 00:59:12 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000200)='./file0/file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x2001040, 0x0) mount$bpf(0x20000000, &(0x7f0000000140)='./file0/file0/file0\x00', 0x0, 0xc50c4, 0x0) mount$bpf(0x20000000, &(0x7f00000001c0)='./file0/file0/file0\x00', 0x0, 0x1820, 0x0) 00:59:12 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000002600)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002ac0)={[{@shortname_winnt='shortname=winnt'}, {@fat=@nfs='nfs'}]}) 00:59:12 executing program 3: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$peeksig(0x4209, r1, &(0x7f0000000040)={0xfffffffffffefffc, 0x1, 0x2}, &(0x7f0000000080)=[{}, {}]) 00:59:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)}], 0x1, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000004c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2101.102386][T10518] FAT-fs (loop4): bogus number of reserved sectors [ 2101.109766][T10520] ptrace attach of "/root/syz-executor.3"[7121] was attempted by "/root/syz-executor.3"[10520] [ 2101.115473][T10518] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2101.156643][T15019] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 2101.195758][T10518] FAT-fs (loop4): bogus number of reserved sectors [ 2101.208259][T10518] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2101.533949][T15019] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2101.554945][T15019] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2101.567000][T15019] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2101.577651][T15019] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2101.588901][T15019] usb 6-1: config 0 descriptor?? [ 2102.054395][T10510] udc-core: couldn't find an available UDC or it's busy [ 2102.062027][T10510] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2102.372300][T15019] keytouch 0003:0926:3333.02A3: fixing up Keytouch IEC report descriptor [ 2102.387759][T15019] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.02A3/input/input627 [ 2102.476175][T15019] keytouch 0003:0926:3333.02A3: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 2102.585945][T15019] usb 6-1: USB disconnect, device number 125 00:59:14 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)={0x40, 0x0, 0x2e, {0x2e, 0x5, "2648f7be311be28e381acfa4ed14d8562969866bdab65e5d4220d683e10a03c2a3cd510e8ac901ff8db0bf5d"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x7fffff9, 0xf007, 0x1, [0xc0f0, 0x1fe00c0]}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x0, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x43}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) r3 = syz_open_dev$evdev(&(0x7f0000001200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000001280)={0x1f, 0x1, &(0x7f0000001240)="7f"}) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af4566f3c7347185913f6185b306e694b7c75ea187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "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"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r4 = syz_open_dev$hidraw(&(0x7f0000001300)='/dev/hidraw#\x00', 0x0, 0x41) r5 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5e, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80284504, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000012c0)={0x80, 0x5, 0x830c, 0x2, "09738855f8bbb430744feb4e216baa45df434c8d892fdaf6966ac4a3dd6a9e7f"}) write$hidraw(r4, &(0x7f0000002d80)="961e782da136c24bc08d302972a62ecfe3cbeead1c954c7742868c42011a331f2e92dc729b41d125c492e95d9516199064d5c77956e7f4086d533f1446cfffce26ec03d6452313cdd5acfede0cb2cfc5b7677939c7f836c19d839d27e54abd54ee564a34f9ddce5aba0e4cfcc8ae4871522b2854d636453bd4b9579fac970fd342f7a2c9fa881d442e2e61bcbcb73c0f2f2e8b6c075face514675ba4aff91d01148ee7a619061990cb32807e7dabb1a73a1dba70f62308537c75ef78178017ae1120d4ed", 0xc4) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000080)) syz_open_dev$hidraw(0x0, 0x0, 0x0) 00:59:14 executing program 1: ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4af8337b5bf50f3056eaf05b8c261d911dbec33123439ab5ae6ed122eaae0022aa6fe00c939a4f48138797637803ade3b9cbbb325845e84ecc5e48b7f9e1e70e", "73117bf060f9161ab8e9cd611110c3641f898d5a86eba41ef1fdf62aa80710ff5899223a9f04b534e3376627f13ec19f6599e2955b1af66c0ddea3043b0c01ae", "59ee420d691c82955c167d72255755885beed7261325a9cf9d7eb4cf262b10c8"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)=0x13) 00:59:14 executing program 3: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) r1 = socket(0x11, 0xa, 0x20000) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'ipvlan1\x00'}) socket(0x11, 0xa, 0x0) 00:59:14 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) 00:59:14 executing program 2: r0 = getpgid(0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1) r3 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x2) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, 0x0, 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) syz_genetlink_get_family_id$ipvs(0x0) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000a40)={0xfffffffffffffff7, 0x1, 0x7, 0x0, 0x0, [{{r1}, 0xfffffffffffffffc}, {{}, 0x3}, {}, {{r2}, 0x40}, {{}, 0x1ff}, {{}, 0x6}, {{r1}, 0x800000000000000}]}) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0xa058000a}, 0xc, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000004ed0101000002f2ffffffff0200000109000200"], 0x44}, 0x1, 0x0, 0x0, 0x4000091}, 0x8004) 00:59:14 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x1) 00:59:14 executing program 1: ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4af8337b5bf50f3056eaf05b8c261d911dbec33123439ab5ae6ed122eaae0022aa6fe00c939a4f48138797637803ade3b9cbbb325845e84ecc5e48b7f9e1e70e", "73117bf060f9161ab8e9cd611110c3641f898d5a86eba41ef1fdf62aa80710ff5899223a9f04b534e3376627f13ec19f6599e2955b1af66c0ddea3043b0c01ae", "59ee420d691c82955c167d72255755885beed7261325a9cf9d7eb4cf262b10c8"}) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000200)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x13) 00:59:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:59:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r1, 0x0) ioprio_set$uid(0x0, 0x0, 0x2000) 00:59:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) request_key(0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:59:14 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'ipvlan1\x00'}) r1 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'ipvlan1\x00', {0x2, 0x0, @local}}) 00:59:14 executing program 1: ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4af8337b5bf50f3056eaf05b8c261d911dbec33123439ab5ae6ed122eaae0022aa6fe00c939a4f48138797637803ade3b9cbbb325845e84ecc5e48b7f9e1e70e", "73117bf060f9161ab8e9cd611110c3641f898d5a86eba41ef1fdf62aa80710ff5899223a9f04b534e3376627f13ec19f6599e2955b1af66c0ddea3043b0c01ae", "59ee420d691c82955c167d72255755885beed7261325a9cf9d7eb4cf262b10c8"}) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000200)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x13) [ 2103.680641][T15019] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 2104.044843][T15019] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2104.070599][T15019] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2104.104485][T15019] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2104.135893][T15019] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2104.177268][T15019] usb 6-1: config 0 descriptor?? [ 2104.663381][T10610] udc-core: couldn't find an available UDC or it's busy [ 2104.680796][T10610] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2105.001696][T15019] keytouch 0003:0926:3333.02A4: fixing up Keytouch IEC report descriptor [ 2105.045385][T15019] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.02A4/input/input628 [ 2105.146256][T15019] keytouch 0003:0926:3333.02A4: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 2105.209041][ T2484] usb 6-1: USB disconnect, device number 126 00:59:17 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)={0x40, 0x0, 0x2e, {0x2e, 0x5, "2648f7be311be28e381acfa4ed14d8562969866bdab65e5d4220d683e10a03c2a3cd510e8ac901ff8db0bf5d"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x7fffff9, 0xf007, 0x1, [0xc0f0, 0x1fe00c0]}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x0, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x43}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) r3 = syz_open_dev$evdev(&(0x7f0000001200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000001280)={0x1f, 0x1, &(0x7f0000001240)="7f"}) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af4566f3c7347185913f6185b306e694b7c75ea187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "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"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r4 = syz_open_dev$hidraw(&(0x7f0000001300)='/dev/hidraw#\x00', 0x0, 0x41) r5 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5e, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80284504, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000012c0)={0x80, 0x5, 0x830c, 0x2, "09738855f8bbb430744feb4e216baa45df434c8d892fdaf6966ac4a3dd6a9e7f"}) write$hidraw(r4, &(0x7f0000002d80)="961e782da136c24bc08d302972a62ecfe3cbeead1c954c7742868c42011a331f2e92dc729b41d125c492e95d9516199064d5c77956e7f4086d533f1446cfffce26ec03d6452313cdd5acfede0cb2cfc5b7677939c7f836c19d839d27e54abd54ee564a34f9ddce5aba0e4cfcc8ae4871522b2854d636453bd4b9579fac970fd342f7a2c9fa881d442e2e61bcbcb73c0f2f2e8b6c075face514675ba4aff91d01148ee7a619061990cb32807e7dabb1a73a1dba70f62308537c75ef78178017ae1120d4ed", 0xc4) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000080)) syz_open_dev$hidraw(0x0, 0x0, 0x0) 00:59:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 00:59:17 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x0) 00:59:17 executing program 1: ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4af8337b5bf50f3056eaf05b8c261d911dbec33123439ab5ae6ed122eaae0022aa6fe00c939a4f48138797637803ade3b9cbbb325845e84ecc5e48b7f9e1e70e", "73117bf060f9161ab8e9cd611110c3641f898d5a86eba41ef1fdf62aa80710ff5899223a9f04b534e3376627f13ec19f6599e2955b1af66c0ddea3043b0c01ae", "59ee420d691c82955c167d72255755885beed7261325a9cf9d7eb4cf262b10c8"}) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000200)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x13) 00:59:17 executing program 2: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1) r2 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r3 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x2) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, 0x0, 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x800) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)=ANY=[@ANYBLOB="d0010000", @ANYRES16, @ANYBLOB], 0x190}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendfile(r2, r2, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000a40)={0x0, 0x1, 0x8, 0x0, 0x0, [{{r0}, 0xfffffffffffffffc}, {{}, 0x3}, {}, {{r1}, 0x40}, {{}, 0x1ff}, {{}, 0x6}, {{r0}, 0x3f}, {{r0}, 0x800000000000000}]}) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0xa058000a}, 0xc, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000004ed0101000002f2ffffffff020000010900020073797a30000000020073797a310000000005000100070000"], 0x44}, 0x1, 0x0, 0x0, 0x4000091}, 0x8004) 00:59:17 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'ipvlan1\x00'}) r1 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'ipvlan1\x00', {0x2, 0x0, @local}}) 00:59:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)=0x13) 00:59:17 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) rt_sigpending(&(0x7f0000001780), 0x8) 00:59:17 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = inotify_init() poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) 00:59:17 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 00:59:17 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, &(0x7f0000000100)) timer_gettime(0x0, &(0x7f0000000180)) 00:59:17 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x10d082) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x40ee1) socket$inet6(0xa, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f00000000c0)) [ 2106.360401][ T2484] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 2106.771348][ T2484] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2106.803516][ T2484] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2106.826406][ T2484] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2106.847354][ T2484] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2106.868281][ T2484] usb 6-1: config 0 descriptor?? [ 2107.385227][T10720] udc-core: couldn't find an available UDC or it's busy [ 2107.393020][T10720] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2107.711379][ T2484] keytouch 0003:0926:3333.02A5: fixing up Keytouch IEC report descriptor [ 2107.739902][ T2484] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.02A5/input/input629 [ 2107.842015][ T2484] keytouch 0003:0926:3333.02A5: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 2107.918230][ T2484] usb 6-1: USB disconnect, device number 127 00:59:19 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)={0x40, 0x0, 0x2e, {0x2e, 0x5, "2648f7be311be28e381acfa4ed14d8562969866bdab65e5d4220d683e10a03c2a3cd510e8ac901ff8db0bf5d"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x7fffff9, 0xf007, 0x1, [0xc0f0, 0x1fe00c0]}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x0, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x43}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) r3 = syz_open_dev$evdev(&(0x7f0000001200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000001280)={0x1f, 0x1, &(0x7f0000001240)="7f"}) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af4566f3c7347185913f6185b306e694b7c75ea187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, 0x0) r4 = syz_open_dev$hidraw(&(0x7f0000001300)='/dev/hidraw#\x00', 0x0, 0x41) r5 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5e, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80284504, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000012c0)={0x80, 0x5, 0x830c, 0x2, "09738855f8bbb430744feb4e216baa45df434c8d892fdaf6966ac4a3dd6a9e7f"}) write$hidraw(r4, &(0x7f0000002d80)="961e782da136c24bc08d302972a62ecfe3cbeead1c954c7742868c42011a331f2e92dc729b41d125c492e95d9516199064d5c77956e7f4086d533f1446cfffce26ec03d6452313cdd5acfede0cb2cfc5b7677939c7f836c19d839d27e54abd54ee564a34f9ddce5aba0e4cfcc8ae4871522b2854d636453bd4b9579fac970fd342f7a2c9fa881d442e2e61bcbcb73c0f2f2e8b6c075face514675ba4aff91d01148ee7a619061990cb32807e7dabb1a73a1dba70f62308537c75ef78178017ae1120d4ed", 0xc4) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000080)) syz_open_dev$hidraw(0x0, 0x0, 0x0) 00:59:19 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x407412ec, 0x0) 00:59:19 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x2001040, 0x0) mount$bpf(0x20000000, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x1c50c6, 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file0/file0/file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) 00:59:19 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x32, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x1e8, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x0, 0x2d0, 0x2d0, 0x2d0, 0x2d0, 0x2d0, 0x3, 0x0, {[{{@uncond=[0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "dae7bbe9998a260a8f00a30e54d356de8911e05d607ed2184b8a7d2f9d2e"}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x248) 00:59:19 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'ipvlan1\x00'}) r1 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'ipvlan1\x00', {0x2, 0x0, @local}}) 00:59:19 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)=0x13) 00:59:20 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x38, 0x0, &(0x7f0000000080)) 00:59:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x0, 0x0, &(0x7f00000000c0)) 00:59:20 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000003c0)=0x3f) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x2001040, 0x0) mount$bpf(0x20000000, &(0x7f0000000140)='./file0/file0/file0\x00', 0x0, 0xc50c4, 0x0) mount(0x0, &(0x7f0000000380)='./file0/file0/file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$BLKPG(r0, 0x1276, 0x0) 00:59:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000040)}) request_key(0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) mlock(&(0x7f0000001000/0x3000)=nil, 0x3000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 00:59:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="c3"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r3, 0x0) [ 2109.061357][ T2484] usb 6-1: new high-speed USB device number 2 using dummy_hcd 00:59:20 executing program 0: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040), 0x4) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000080)=""/4096) [ 2109.490837][ T2484] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2109.541575][ T2484] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2109.628846][ T2484] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2109.697821][ T2484] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2109.748609][ T2484] usb 6-1: config 0 descriptor?? [ 2110.242760][T10814] udc-core: couldn't find an available UDC or it's busy [ 2110.250213][T10814] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2110.561312][ T2484] keytouch 0003:0926:3333.02A6: fixing up Keytouch IEC report descriptor [ 2110.573833][ T2484] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.02A6/input/input630 [ 2110.671454][ T2484] keytouch 0003:0926:3333.02A6: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 2110.778275][ T2484] usb 6-1: USB disconnect, device number 2 00:59:22 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)={0x40, 0x0, 0x2e, {0x2e, 0x5, "2648f7be311be28e381acfa4ed14d8562969866bdab65e5d4220d683e10a03c2a3cd510e8ac901ff8db0bf5d"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x7fffff9, 0xf007, 0x1, [0xc0f0, 0x1fe00c0]}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x0, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x43}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) r3 = syz_open_dev$evdev(&(0x7f0000001200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000001280)={0x1f, 0x1, &(0x7f0000001240)="7f"}) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af4566f3c7347185913f6185b306e694b7c75ea187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, 0x0) r4 = syz_open_dev$hidraw(&(0x7f0000001300)='/dev/hidraw#\x00', 0x0, 0x41) r5 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5e, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80284504, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000012c0)={0x80, 0x5, 0x830c, 0x2, "09738855f8bbb430744feb4e216baa45df434c8d892fdaf6966ac4a3dd6a9e7f"}) write$hidraw(r4, &(0x7f0000002d80)="961e782da136c24bc08d302972a62ecfe3cbeead1c954c7742868c42011a331f2e92dc729b41d125c492e95d9516199064d5c77956e7f4086d533f1446cfffce26ec03d6452313cdd5acfede0cb2cfc5b7677939c7f836c19d839d27e54abd54ee564a34f9ddce5aba0e4cfcc8ae4871522b2854d636453bd4b9579fac970fd342f7a2c9fa881d442e2e61bcbcb73c0f2f2e8b6c075face514675ba4aff91d01148ee7a619061990cb32807e7dabb1a73a1dba70f62308537c75ef78178017ae1120d4ed", 0xc4) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000080)) syz_open_dev$hidraw(0x0, 0x0, 0x0) 00:59:22 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)=0x13) 00:59:22 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$FUSE_DIRENTPLUS(r1, 0x0, 0x0) 00:59:22 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x1a, 0x0, &(0x7f0000000080)) 00:59:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 00:59:22 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'ipvlan1\x00'}) r1 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'ipvlan1\x00', {0x2, 0x0, @local}}) 00:59:22 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x105082) write(r0, 0x0, 0x0) 00:59:22 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 00:59:23 executing program 1: ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)=0x13) [ 2111.667098][T10914] debugfs: Directory '10914-4' with parent 'kvm' already present! 00:59:23 executing program 3: syz_open_procfs(0x0, 0x0) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0xa4087, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r0]) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f00000002c0)=""/74) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000240)='vlan0\x00'}, 0x30) ioctl$TCSETX(0xffffffffffffffff, 0x5433, &(0x7f0000000040)={0x4, 0x2, [0x0, 0x0, 0x0, 0x0, 0xffff], 0xfffc}) clone(0x4a300500, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$smc(0x0) 00:59:23 executing program 0: r0 = syz_open_procfs(0x0, 0x0) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0xa4087, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) r1 = dup(0xffffffffffffffff) write$FUSE_BMAP(r1, &(0x7f0000000340)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYBLOB]) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f00000002c0)=""/74) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000240)='vlan0\x00'}, 0x30) ioctl$TCSETX(0xffffffffffffffff, 0x5433, &(0x7f0000000040)={0x4, 0x2, [0x0, 0x0, 0x0, 0x0, 0xffff], 0xfffc}) clone(0x4a300500, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$smc(0x0) preadv(r0, &(0x7f00000001c0), 0x0, 0x0) 00:59:23 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) [ 2111.909671][T21857] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 2112.303761][T10941] IPVS: ftp: loaded support on port[0] = 21 [ 2112.311308][T21857] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2112.331930][T21857] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2112.427161][T21857] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2112.470366][T21857] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2112.490400][T10946] IPVS: ftp: loaded support on port[0] = 21 [ 2112.532260][T21857] usb 6-1: config 0 descriptor?? [ 2112.751034][T10947] IPVS: ftp: loaded support on port[0] = 21 [ 2112.836233][T10949] IPVS: ftp: loaded support on port[0] = 21 [ 2113.033848][T10925] udc-core: couldn't find an available UDC or it's busy [ 2113.043373][T10925] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2113.224980][ T985] tipc: TX() has been purged, node left! [ 2113.370989][T21857] keytouch 0003:0926:3333.02A7: fixing up Keytouch IEC report descriptor [ 2113.400052][T21857] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.02A7/input/input631 [ 2113.499675][T21857] keytouch 0003:0926:3333.02A7: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 2113.582652][T21857] usb 6-1: USB disconnect, device number 3 00:59:25 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)={0x40, 0x0, 0x2e, {0x2e, 0x5, "2648f7be311be28e381acfa4ed14d8562969866bdab65e5d4220d683e10a03c2a3cd510e8ac901ff8db0bf5d"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x7fffff9, 0xf007, 0x1, [0xc0f0, 0x1fe00c0]}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x0, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x43}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) r3 = syz_open_dev$evdev(&(0x7f0000001200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000001280)={0x1f, 0x1, &(0x7f0000001240)="7f"}) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af4566f3c7347185913f6185b306e694b7c75ea187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, 0x0) r4 = syz_open_dev$hidraw(&(0x7f0000001300)='/dev/hidraw#\x00', 0x0, 0x41) r5 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5e, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80284504, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000012c0)={0x80, 0x5, 0x830c, 0x2, "09738855f8bbb430744feb4e216baa45df434c8d892fdaf6966ac4a3dd6a9e7f"}) write$hidraw(r4, &(0x7f0000002d80)="961e782da136c24bc08d302972a62ecfe3cbeead1c954c7742868c42011a331f2e92dc729b41d125c492e95d9516199064d5c77956e7f4086d533f1446cfffce26ec03d6452313cdd5acfede0cb2cfc5b7677939c7f836c19d839d27e54abd54ee564a34f9ddce5aba0e4cfcc8ae4871522b2854d636453bd4b9579fac970fd342f7a2c9fa881d442e2e61bcbcb73c0f2f2e8b6c075face514675ba4aff91d01148ee7a619061990cb32807e7dabb1a73a1dba70f62308537c75ef78178017ae1120d4ed", 0xc4) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000080)) syz_open_dev$hidraw(0x0, 0x0, 0x0) 00:59:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) 00:59:25 executing program 1: ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)=0x13) 00:59:25 executing program 4: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8924, &(0x7f00000000c0)={'ip6gre0\x00', @ifru_data=0x0}) 00:59:25 executing program 4: r0 = getpgid(0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1) r3 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x2) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, 0x0, 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) syz_genetlink_get_family_id$ipvs(0x0) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000a40)={0xfffffffffffffff7, 0x1, 0x7, 0x0, 0x0, [{{r1}, 0xfffffffffffffffc}, {{}, 0x3}, {}, {{r2}, 0x40}, {{}, 0x1ff}, {{}, 0x6}, {{r1}, 0x800000000000000}]}) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x8004) 00:59:25 executing program 2: ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000080)={@multicast, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @remote, {[@timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@broadcast}, {@multicast2}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@multicast2}, {@multicast2}]}]}}}}}}}, 0x0) 00:59:26 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x6cb, 0x0, &(0x7f00000000c0)) [ 2114.879401][T21857] usb 6-1: new high-speed USB device number 4 using dummy_hcd 00:59:26 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 00:59:26 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$update(0x2, 0x0, &(0x7f00000001c0)='|', 0x1) [ 2115.141874][T11076] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2115.279342][T21857] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2115.339204][T21857] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2115.418180][T21857] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2115.479165][T21857] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2115.529997][T21857] usb 6-1: config 0 descriptor?? [ 2115.746446][T11090] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2115.982721][T11063] udc-core: couldn't find an available UDC or it's busy [ 2116.008447][T11063] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2116.330838][T21857] keytouch 0003:0926:3333.02A8: fixing up Keytouch IEC report descriptor [ 2116.371583][T21857] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.02A8/input/input632 [ 2116.496869][T21857] keytouch 0003:0926:3333.02A8: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 2116.600359][T21857] usb 6-1: USB disconnect, device number 4 00:59:29 executing program 3: syz_open_procfs(0x0, 0x0) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0xa4087, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r0]) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f00000002c0)=""/74) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000240)='vlan0\x00'}, 0x30) ioctl$TCSETX(0xffffffffffffffff, 0x5433, &(0x7f0000000040)={0x4, 0x2, [0x0, 0x0, 0x0, 0x0, 0xffff], 0xfffc}) clone(0x4a300500, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$smc(0x0) 00:59:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) request_key(0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:59:29 executing program 2: r0 = getpgid(0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1) r3 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x2) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, 0x0, 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x800) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000), 0xc, &(0x7f0000000540)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB], 0x190}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000a40)={0xfffffffffffffff7, 0x1, 0x8, 0x0, 0x0, [{{r1}, 0xfffffffffffffffc}, {{}, 0x3}, {}, {{r2}, 0x40}, {{}, 0x1ff}, {{}, 0x6}, {{r1}, 0x3f}, {{r1}, 0x800000000000000}]}) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0xa058000a}, 0xc, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000004ed0101000002f2ffffffff020000010900020073797a30000000020073797a3100000000050001000700000005000100"], 0x44}, 0x1, 0x0, 0x0, 0x4000091}, 0x8004) [ 2118.054119][T11132] IPVS: ftp: loaded support on port[0] = 21 00:59:29 executing program 4: bpf$BPF_MAP_FREEZE(0x16, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r0, &(0x7f00000002c0), 0xfffffedd) 00:59:29 executing program 1: ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)=0x13) 00:59:29 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)={0x40, 0x0, 0x2e, {0x2e, 0x5, "2648f7be311be28e381acfa4ed14d8562969866bdab65e5d4220d683e10a03c2a3cd510e8ac901ff8db0bf5d"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x7fffff9, 0xf007, 0x1, [0xc0f0, 0x1fe00c0]}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x0, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x43}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) r3 = syz_open_dev$evdev(&(0x7f0000001200)='/dev/input/event#\x00', 0x2, 0x20000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000001280)={0x1f, 0x1, &(0x7f0000001240)="7f"}) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af4566f3c7347185913f6185b306e694b7c75ea187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f00000004c0)=ANY=[@ANYBLOB="00030400000204030a08b5f4dff5abf62516eefff03b833aaa9a42d8867ada37523214452bbee48a8a4d9667d7fed8e8861b64a47306fb6bcdaf49e1b5639c28c347f81e8fec9b9e5e0adae6664083da44404259382a14f5521d78ff7450eedbe2736c2e5f03f829f560da68281354432a40e6b19e9fd8a6fdb13d66f91b58b8563c2cc4e5438d1e3c61487fd4eb83c5db960ac76404b1e962bd616962af6c335d15d0ad947a2321bf0bfa15f6a2b8a6354a95267eb37d4e60d625405870bcd52fea4a7c1f4b67be28add47f384793e16201ee7d616e30a637f81cf50ca924959d5782e6ca9e83972cb688ef0f92931041ffaf636beb6a44cac5"], &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, 0x0, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r4 = syz_open_dev$hidraw(&(0x7f0000001300)='/dev/hidraw#\x00', 0x0, 0x41) r5 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5e, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80284504, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, "2eaa02bd966cc2f6c8e6caaba256916f0b8bd0a645b10900"}) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000012c0)={0x80, 0x5, 0x830c, 0x2, "09738855f8bbb430744feb4e216baa45df434c8d892fdaf6966ac4a3dd6a9e7f"}) write$hidraw(r4, &(0x7f0000002d80)="961e782da136c24bc08d302972a62ecfe3cbeead1c954c7742868c42011a331f2e92dc729b41d125c492e95d9516199064d5c77956e7f4086d533f1446cfffce26ec03d6452313cdd5acfede0cb2cfc5b7677939c7f836c19d839d27e54abd54ee564a34f9ddce5aba0e4cfcc8ae4871522b2854d636453bd4b9579fac970fd342f7a2c9fa881d442e2e61bcbcb73c0f2f2e8b6c075face514675ba4aff91d01148ee7a619061990cb32807e7dabb1a73a1dba70f62308537c75ef78178017ae1120d4ed", 0xc4) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000080)) syz_open_dev$hidraw(0x0, 0x0, 0x0) 00:59:29 executing program 2: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000200)={{}, {0x0, @multicast}, 0x0, {0x2, 0x0, @empty}, 'ip6gretap0\x00'}) [ 2118.458893][ T2536] usb 6-1: new high-speed USB device number 5 using dummy_hcd 00:59:29 executing program 0: syz_open_procfs(0x0, 0x0) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0xa4087, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(r0, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r0]) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000240)='vlan0\x00'}, 0x30) ioctl$TCSETX(0xffffffffffffffff, 0x5433, 0x0) clone(0x4a300500, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$smc(0x0) 00:59:30 executing program 2: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000200)={{}, {0x0, @multicast}, 0x0, {0x2, 0x0, @empty}, 'ip6gretap0\x00'}) [ 2118.829445][T11132] general protection fault, probably for non-canonical address 0xdffffc0000000080: 0000 [#1] PREEMPT SMP KASAN [ 2118.839515][ T2536] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2118.841305][T11132] KASAN: null-ptr-deref in range [0x0000000000000400-0x0000000000000407] [ 2118.860637][T11132] CPU: 0 PID: 11132 Comm: syz-executor.3 Not tainted 5.8.0-rc6-syzkaller #0 [ 2118.869658][T11132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2118.879843][T11132] RIP: 0010:free_netdev+0x41/0x480 [ 2118.884974][T11132] Code: d2 be 2b 27 00 00 48 c7 c7 e0 ca fd 88 e8 d7 23 1c fb 48 8d bd 00 04 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 f4 03 00 00 48 8b bd 00 04 00 00 e8 f9 9e 69 fb [ 2118.890126][ T2536] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2118.904587][T11132] RSP: 0018:ffffc90017d67930 EFLAGS: 00010202 [ 2118.904600][T11132] RAX: dffffc0000000000 RBX: ffff88804f1ac000 RCX: ffffc9000f883000 [ 2118.904606][T11132] RDX: 0000000000000080 RSI: ffffffff89bc1100 RDI: 0000000000000400 [ 2118.904612][T11132] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffffff8a7b8ac7 [ 2118.904620][T11132] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000fffffff4 [ 2118.904628][T11132] R13: ffff888051e5d410 R14: ffff88809d014800 R15: ffff888054dc56b8 [ 2118.904639][T11132] FS: 00007f1e3e9f5700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 2118.904647][T11132] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2118.904654][T11132] CR2: 0000000000000000 CR3: 0000000098a2f000 CR4: 00000000001426f0 [ 2118.904664][T11132] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2118.904671][T11132] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2118.904676][T11132] Call Trace: [ 2118.904701][T11132] ip6gre_init_net+0x546/0x610 [ 2118.904713][T11132] ? ip6gre_tunnel_uninit+0x420/0x420 [ 2118.904728][T11132] ops_init+0xaf/0x470 [ 2118.904741][T11132] ? ops_init+0xd2/0x470 [ 2118.904756][T11132] setup_net+0x2d8/0x850 [ 2118.904770][T11132] ? ops_init+0x470/0x470 [ 2118.904872][T11132] ? trace_kmalloc+0xfd/0x130 [ 2119.035761][T11132] ? kmem_cache_alloc_trace+0x168/0x2d0 [ 2119.041321][T11132] copy_net_ns+0x2cf/0x5e0 [ 2119.046444][T11132] create_new_namespaces+0x3f6/0xb10 [ 2119.051740][T11132] copy_namespaces+0x385/0x470 [ 2119.056579][T11132] copy_process+0x2b0b/0x6d90 [ 2119.061330][T11132] ? kvm_sched_clock_read+0x14/0x40 [ 2119.066544][T11132] ? sched_clock+0x2a/0x40 [ 2119.070997][T11132] ? sched_clock_cpu+0x18/0x1b0 [ 2119.075926][T11132] ? __cleanup_sighand+0xb0/0xb0 [ 2119.080863][T11132] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2119.087027][T11132] _do_fork+0x12c/0xa70 [ 2119.091194][T11132] ? __hrtimer_run_queues+0xc72/0xfc0 [ 2119.096621][T11132] ? find_held_lock+0x2d/0x110 [ 2119.101485][T11132] ? copy_init_mm+0x20/0x20 [ 2119.106884][T11132] ? trace_hardirqs_off+0x27/0x210 [ 2119.112338][T11132] ? read_seqcount_begin.constprop.0+0x139/0x1f0 [ 2119.118760][T11132] ? ktime_get+0xd8/0x120 [ 2119.123331][T11132] ? native_apic_msr_write+0x54/0x80 [ 2119.128663][T11132] ? lapic_next_event+0x4d/0x80 [ 2119.134384][T11132] __do_sys_clone+0xef/0x150 [ 2119.139068][T11132] ? __do_sys_clone3+0x320/0x320 [ 2119.144097][T11132] ? hrtimer_interrupt+0x6ea/0x930 [ 2119.149201][T11132] ? lock_is_held_type+0xb0/0xe0 [ 2119.154131][T11132] ? do_syscall_64+0x1c/0xe0 [ 2119.158917][T11132] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 2119.164887][T11132] do_syscall_64+0x60/0xe0 [ 2119.169296][T11132] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2119.175172][T11132] RIP: 0033:0x45c1f9 [ 2119.179059][T11132] Code: Bad RIP value. [ 2119.183107][T11132] RSP: 002b:00007f1e3e9f4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2119.191500][T11132] RAX: ffffffffffffffda RBX: 0000000000001f00 RCX: 000000000045c1f9 [ 2119.199547][T11132] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004a300500 [ 2119.207502][T11132] RBP: 000000000078bf50 R08: 0000000000000000 R09: 0000000000000000 [ 2119.215650][T11132] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 2119.223609][T11132] R13: 00007ffee3c4e28f R14: 00007f1e3e9f59c0 R15: 000000000078bf0c 00:59:30 executing program 1: ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4af8337b5bf50f3056eaf05b8c261d911dbec33123439ab5ae6ed122eaae0022aa6fe00c939a4f48138797637803ade3b9cbbb325845e84ecc5e48b7f9e1e70e", "73117bf060f9161ab8e9cd611110c3641f898d5a86eba41ef1fdf62aa80710ff5899223a9f04b534e3376627f13ec19f6599e2955b1af66c0ddea3043b0c01ae", "59ee420d691c82955c167d72255755885beed7261325a9cf9d7eb4cf262b10c8"}) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0xa0102, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)=0x13) [ 2119.231585][T11132] Modules linked in: [ 2119.241749][T11171] IPVS: ftp: loaded support on port[0] = 21 00:59:30 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x49, 0x0, &(0x7f0000000080)) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:59:30 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000c00)=ANY=[]) [ 2119.326830][ T2536] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2119.383581][ T2536] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2119.449934][ T2536] usb 6-1: config 0 descriptor?? [ 2119.562298][T11184] IPVS: ftp: loaded support on port[0] = 21 [ 2119.567627][T11132] ---[ end trace 730d0e2925f7a887 ]--- [ 2119.599831][T11132] RIP: 0010:free_netdev+0x41/0x480 [ 2119.605279][T11132] Code: d2 be 2b 27 00 00 48 c7 c7 e0 ca fd 88 e8 d7 23 1c fb 48 8d bd 00 04 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 f4 03 00 00 48 8b bd 00 04 00 00 e8 f9 9e 69 fb [ 2119.627257][T11132] RSP: 0018:ffffc90017d67930 EFLAGS: 00010202 [ 2119.641324][T11132] RAX: dffffc0000000000 RBX: ffff88804f1ac000 RCX: ffffc9000f883000 [ 2119.653409][T11132] RDX: 0000000000000080 RSI: ffffffff89bc1100 RDI: 0000000000000400 [ 2119.662325][T11132] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffffff8a7b8ac7 [ 2119.671575][T11132] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000fffffff4 [ 2119.680226][T11132] R13: ffff888051e5d410 R14: ffff88809d014800 R15: ffff888054dc56b8 [ 2119.688503][T11132] FS: 00007f1e3e9f5700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 2119.698378][T11132] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2119.721762][T11132] CR2: 00005613d298c440 CR3: 0000000098a2f000 CR4: 00000000001426e0 [ 2119.732726][T11132] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2119.745609][T11132] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2119.754235][T11132] Kernel panic - not syncing: Fatal exception [ 2119.762134][T11132] Kernel Offset: disabled [ 2119.766470][T11132] Rebooting in 86400 seconds..