.697727][ T4604] usb 4-1: USB disconnect, device number 15 [ 653.705105][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 653.739258][ T9071] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 653.750543][ T9071] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=e3.55 [ 653.760637][ T9071] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.775461][ T8703] usb 1-1: device descriptor read/64, error 18 [ 653.805802][ T9071] usb 2-1: config 0 descriptor?? [ 653.895912][ T8703] usb usb1-port1: attempt power cycle [ 653.955671][ T9070] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 653.966306][ T9070] usb 6-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 653.976218][ T9070] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.004962][ T9070] usb 6-1: config 0 descriptor?? [ 654.076211][ T9071] powermate: unknown product id 0240 [ 654.084070][ T9071] input: Griffin SoundKnob as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input34 04:35:39 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x6f, 0xe3, 0xaf, 0x40, 0x22b8, 0x6027, 0x52b8, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0xa}}]}}]}}, 0x0) [ 654.275634][ T4604] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 654.279035][ T9071] usb 5-1: USB disconnect, device number 20 [ 654.288961][ T8706] usb 2-1: USB disconnect, device number 22 [ 654.305070][ C1] powermate: config urb returned -71 [ 654.485543][ T9070] rtl8192cu: Chip version 0x11 [ 654.515248][ T4604] usb 4-1: Using ep0 maxpacket: 16 [ 654.606182][ T8703] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 654.636476][ T4604] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 654.646842][ T4604] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 654.658165][ T4604] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 654.668148][ T4604] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 654.678135][ T4604] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 654.815411][ T9071] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 654.829946][ T4604] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 654.839319][ T4604] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 654.847684][ T4604] usb 4-1: Manufacturer: syz 04:35:40 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) [ 654.925581][ T9070] rtl_usb: Too few input end points found [ 654.945189][ T4604] usb 4-1: config 0 descriptor?? [ 654.950877][ T8703] usb 1-1: device descriptor read/8, error -71 [ 654.959619][ T9070] usb 6-1: USB disconnect, device number 14 04:35:40 executing program 1: syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) [ 655.165467][ T8703] usb 1-1: device descriptor read/8, error -71 [ 655.216908][ T9071] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=52.b8 [ 655.226476][ T9071] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.273965][ T9071] usb 5-1: config 0 descriptor?? [ 655.328511][ T9071] usb 5-1: bad CDC descriptors [ 655.334432][ T9071] usb 5-1: unsupported MDLM descriptors [ 655.425879][ T4604] Registered IR keymap rc-hauppauge 04:35:41 executing program 5: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a66f1b40da0b7f31cc9d000000010902240001000000000904"], 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001bc0)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000b00)={0x1c, &(0x7f0000000a40)={0x0, 0x0, 0x1, "1b"}, 0x0, 0x0}) [ 655.460781][ T4604] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 655.533226][ T9071] usb 5-1: USB disconnect, device number 21 [ 655.573169][ T4604] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 655.617280][ T4604] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 655.633444][ T4604] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input35 [ 655.655933][ T8703] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 655.738106][ T4604] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 655.755183][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 655.775213][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 655.784176][ T4604] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 655.795164][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 655.815312][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 655.824325][ T4604] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 655.835167][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 655.842398][ T8703] usb 1-1: device descriptor read/8, error -61 [ 655.855203][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 655.874510][ T4604] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 655.882287][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 655.895058][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 655.915167][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 655.935244][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 655.955052][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 655.975050][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 655.986233][ T4604] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 655.995079][ C0] mceusb 4-1:0.0: Error: urb status = -71 04:35:41 executing program 1: syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) [ 656.015278][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 656.035103][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 656.055147][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 656.075038][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 656.087359][ T4604] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 656.097049][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 656.115087][ C0] mceusb 4-1:0.0: Error: urb status = -71 04:35:41 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f00000001c0)={[{0x2, 0x4e00, "ff11"}, {}]}) [ 656.125457][ T8703] usb 1-1: device descriptor read/8, error -61 [ 656.135169][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 656.155035][ C0] mceusb 4-1:0.0: Error: urb status = -71 04:35:41 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x4f, 0xd1, 0x47, 0x40, 0x41e, 0x4012, 0x6c76, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xab, 0xa7, 0xc1}}]}}]}}, 0x0) [ 656.175060][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 656.188493][ T4604] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 656.196151][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 656.215063][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 656.225134][ T9071] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 656.235032][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 656.245780][ T8703] usb usb1-port1: unable to enumerate USB device [ 656.255287][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 656.272298][ T4604] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 656.279895][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 656.295108][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 656.305400][ T3225] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 656.315116][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 656.335277][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 656.355108][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 656.362404][ T4604] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 656.375035][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 656.395081][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 656.401649][ T4604] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 656.415110][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 656.435008][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 656.443755][ T4604] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 656.452174][ T4604] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 656.461002][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 656.475124][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 656.495996][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 656.515035][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 656.528461][ T4604] usb 4-1: USB disconnect, device number 16 [ 656.535092][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 656.596623][ T9071] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 656.608133][ T9071] usb 6-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 656.618466][ T9071] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.687275][ T3225] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=52.b8 [ 656.697386][ T3225] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.728404][ T3225] usb 5-1: config 0 descriptor?? [ 656.743523][ T9071] usb 6-1: config 0 descriptor?? [ 656.771897][ T3225] usb 5-1: bad CDC descriptors [ 656.782455][ T3225] usb 5-1: unsupported MDLM descriptors [ 656.996875][ T9070] usb 5-1: USB disconnect, device number 22 [ 657.026520][ T9071] rtl8192cu: Chip version 0x10 04:35:42 executing program 4: syz_usb_connect(0x0, 0x52, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0xc6, 0x1, 0x40, 0x45e, 0x723, 0x30f8, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x1, 0x0, 0x0, [@uac_control={{}, [@feature_unit={0x13, 0x24, 0x6, 0x0, 0x0, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, "11"}, @extension_unit={0x7}, @selector_unit={0x5}]}]}}]}}]}}, 0x0) [ 657.096239][ T4604] usb 4-1: new high-speed USB device number 17 using dummy_hcd 04:35:42 executing program 1: syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) [ 657.248595][ T9071] rtlwifi: RTL8XXX did not boot from eeprom, check it !! [ 657.255871][ T9071] rtl_usb: Too few input end points found [ 657.336031][ T4604] usb 4-1: Using ep0 maxpacket: 16 [ 657.457283][ T4604] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 657.467839][ T4604] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 657.479052][ T4604] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 657.488982][ T4604] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 657.498506][ T9071] usb 6-1: USB disconnect, device number 15 [ 657.498925][ T4604] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 657.785117][ T9070] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 657.806832][ T4604] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 657.816340][ T4604] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 657.824495][ T4604] usb 4-1: Manufacturer: syz [ 657.898194][ T4604] usb 4-1: config 0 descriptor?? 04:35:43 executing program 5: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a66f1b40da0b7f31cc9d000000010902240001000000000904"], 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001bc0)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000b00)={0x1c, &(0x7f0000000a40)={0x0, 0x0, 0x1, "1b"}, 0x0, 0x0}) [ 658.184764][ T9070] usb 5-1: New USB device found, idVendor=045e, idProduct=0723, bcdDevice=30.f8 [ 658.194298][ T9070] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.288733][ T9070] usb 5-1: config 0 descriptor?? [ 658.333323][ T9070] uvcvideo: Found UVC 0.00 device (045e:0723) [ 658.340937][ T9070] uvcvideo: No valid video chain found. [ 658.376026][ T4604] Registered IR keymap rc-hauppauge 04:35:44 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100003cfeae40cd06070174e2000000010902"], 0x0) [ 658.410012][ T4604] mceusb 4-1:0.0: Error: mce write submit urb error = -90 04:35:44 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 658.539301][ T9070] usb 5-1: USB disconnect, device number 23 [ 658.674082][ T4604] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 658.715443][ T4604] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 658.730885][ T4604] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input36 [ 658.865676][ T3225] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 658.916673][ T4604] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 658.935356][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 658.955061][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 658.972381][ T4604] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 658.981790][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 658.995084][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 659.015060][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 659.035088][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 659.055204][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 659.075046][ C0] mceusb 4-1:0.0: Error: urb status = -71 04:35:44 executing program 3: syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xc, &(0x7f00000001c0)={[{0x2, 0x4e00, "ff11"}, {}]}) [ 659.095042][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 659.109387][ T4604] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 659.117716][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 659.135487][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 659.155057][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 659.161792][T12836] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 659.175075][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 659.183241][ T4604] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 659.195031][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 659.215188][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 659.226040][ T4604] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 659.235095][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 659.255038][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 659.267300][ T3225] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 659.275119][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 659.278205][ T3225] usb 6-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 659.293812][ T3225] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.295110][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 659.315016][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 659.328767][ T4604] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 659.336373][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 659.355045][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 659.365566][ T9070] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 659.375412][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 659.395062][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 659.409593][ T4604] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 659.417224][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 659.435069][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 659.448916][ T3225] usb 6-1: config 0 descriptor?? [ 659.455118][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 659.475101][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 659.495045][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 659.501508][ T4604] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 659.515021][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 659.527055][T12836] usb 1-1: config 0 has no interfaces? [ 659.533656][T12836] usb 1-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=e2.74 [ 659.544474][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 659.550700][T12836] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.560880][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 659.585170][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 659.594463][ T4604] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 659.606358][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 659.635078][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 659.655129][ T4604] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 659.670736][ C0] mceusb 4-1:0.0: Error: urb status = -71 04:35:45 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 659.706251][ T3225] rtl8192cu: Chip version 0x10 [ 659.719114][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 659.737346][ T4604] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 659.745759][ T4604] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 659.765925][T12836] usb 1-1: config 0 descriptor?? [ 659.782422][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 659.796649][ T9070] usb 5-1: New USB device found, idVendor=045e, idProduct=0723, bcdDevice=30.f8 [ 659.805998][ T9070] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 04:35:45 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc2, 0x90, 0x67, 0x40, 0xac8, 0x323, 0x248d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf8, 0x64, 0x9}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000bc0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="0000010000000b"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000400)=ANY=[@ANYBLOB="00000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, 'g'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 659.829170][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 659.859473][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 659.883124][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 659.897210][ T4604] usb 4-1: USB disconnect, device number 17 [ 659.916076][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 659.925592][ T9070] usb 5-1: config 0 descriptor?? [ 659.940315][ T3225] rtlwifi: RTL8XXX did not boot from eeprom, check it !! [ 659.947574][ T3225] rtl_usb: Too few input end points found [ 660.011630][ T9070] uvcvideo: Found UVC 0.00 device (045e:0723) [ 660.020571][ T9070] uvcvideo: No valid video chain found. [ 660.041605][T12836] usb 1-1: USB disconnect, device number 35 [ 660.172204][ T3225] usb 6-1: USB disconnect, device number 16 [ 660.196884][ T9070] usb 5-1: USB disconnect, device number 24 04:35:46 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec2e0108191d0411f75e000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001200)={0x2, &(0x7f0000001580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 04:35:46 executing program 3: syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xc, &(0x7f00000001c0)={[{0x2, 0x4e00, "ff11"}, {}]}) 04:35:46 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100003cfeae40cd06070174e2000000010902"], 0x0) 04:35:46 executing program 5: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a66f1b40da0b7f31cc9d000000010902240001000000000904"], 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001bc0)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000b00)={0x1c, &(0x7f0000000a40)={0x0, 0x0, 0x1, "1b"}, 0x0, 0x0}) 04:35:46 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 660.975171][T12836] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 661.216578][T12836] usb 5-1: Using ep0 maxpacket: 8 04:35:47 executing program 3: syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xc, &(0x7f00000001c0)={[{0x2, 0x4e00, "ff11"}, {}]}) [ 661.337143][T12836] usb 5-1: New USB device found, idVendor=1d19, idProduct=1104, bcdDevice=5e.f7 [ 661.346668][T12836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.400412][T12836] usb 5-1: config 0 descriptor?? [ 661.655553][T12836] usb 5-1: dvb_usb_v2: found a 'MSI DIGIVOX Micro HD' in warm state [ 662.171137][ T3225] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 662.205270][ T9071] usb 1-1: new high-speed USB device number 36 using dummy_hcd 04:35:48 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 04:35:48 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f00000001c0)={[{0x2, 0x4e00, "ff11"}, {}]}) [ 662.568296][ T3225] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 662.578707][ T3225] usb 6-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 662.589649][ T3225] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.605254][ T9071] usb 1-1: config 0 has no interfaces? [ 662.611688][ T9071] usb 1-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=e2.74 [ 662.621117][ T9071] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.710596][ T9071] usb 1-1: config 0 descriptor?? [ 662.731668][ T3225] usb 6-1: config 0 descriptor?? [ 662.936321][T12836] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -110 [ 662.968420][ T8703] usb 1-1: USB disconnect, device number 36 [ 662.985806][ T3225] rtl8192cu: Chip version 0x10 [ 663.075192][ T9071] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 663.195835][ T3225] rtlwifi: RTL8XXX did not boot from eeprom, check it !! [ 663.203021][ T3225] rtl_usb: Too few input end points found 04:35:49 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1770, 0xff00, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000001940)={0x14, &(0x7f0000000300)=ANY=[@ANYBLOB="0000cf000000cf"], 0x0}, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) [ 663.366828][ T9071] usb 2-1: device descriptor read/64, error 18 [ 663.429743][ T8703] usb 6-1: USB disconnect, device number 17 04:35:49 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100003cfeae40cd06070174e2000000010902"], 0x0) 04:35:49 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f00000001c0)={[{0x2, 0x4e00, "ff11"}, {}]}) 04:35:49 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000850d740402000b97e610000000109021b0001000000000904"], 0x0) [ 663.688128][T12836] usb 5-1: USB disconnect, device number 25 [ 663.766300][ T9071] usb 2-1: device descriptor read/64, error 18 [ 664.037449][ T9071] usb 2-1: new high-speed USB device number 24 using dummy_hcd 04:35:49 executing program 5: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a66f1b40da0b7f31cc9d000000010902240001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000001000)={0x0, 0x0, 0x4, "bae5015e"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001bc0)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000b00)={0x1c, &(0x7f0000000a40)={0x0, 0x0, 0x1, "1b"}, 0x0, 0x0}) [ 664.337096][ T9071] usb 2-1: device descriptor read/64, error 18 [ 664.356286][ T3225] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 664.517747][ T8796] usb 5-1: new high-speed USB device number 26 using dummy_hcd 04:35:50 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f00000001c0)={[{0x2, 0x4e00, "ff11"}, {}]}) [ 664.726866][ T3225] usb 1-1: config 0 has no interfaces? [ 664.732645][ T3225] usb 1-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=e2.74 [ 664.743409][ T3225] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.755842][ T9071] usb 2-1: device descriptor read/64, error 18 [ 664.788320][T12836] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 664.823434][ T3225] usb 1-1: config 0 descriptor?? [ 664.890067][ T9071] usb usb2-port1: attempt power cycle [ 664.907685][ T8796] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 664.918260][ T8796] usb 5-1: New USB device found, idVendor=2040, idProduct=b900, bcdDevice=61.7e [ 664.927652][ T8796] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.030273][ T8796] usb 5-1: config 0 descriptor?? [ 665.072723][ T3225] usb 1-1: USB disconnect, device number 37 [ 665.090573][ T8796] smsusb:smsusb_probe: board id=8, interface number 0 [ 665.097666][ T8796] smsusb:smsusb_probe: Device initialized with return code -19 [ 665.157807][T12836] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 665.168357][T12836] usb 6-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 665.177721][T12836] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.236271][T12836] usb 6-1: config 0 descriptor?? [ 665.292806][ T8796] usb 5-1: USB disconnect, device number 26 04:35:51 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f00000001c0)={[{0x2, 0x4e00, "ff11"}, {}]}) [ 665.638699][ T9071] usb 2-1: new high-speed USB device number 25 using dummy_hcd 04:35:51 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100003cfeae40cd06070174e20000000109021b000100000000090400"], 0x0) [ 665.715906][T12836] rtl8192cu: Chip version 0x11 04:35:51 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 665.925687][ T9071] usb 2-1: device descriptor read/8, error -71 [ 665.939041][T12836] rtlwifi: RTL8XXX did not boot from eeprom, check it !! [ 665.947498][T12836] rtl_usb: Too few input end points found [ 666.075704][ T3225] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 666.145069][T12836] usb 6-1: USB disconnect, device number 18 [ 666.169179][ T9071] usb 2-1: device descriptor read/8, error -71 [ 666.203515][ T0] NOHZ: local_softirq_pending 08 [ 666.218805][ T8796] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 666.255829][ T8705] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 666.486443][ T3225] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 666.501312][ T3225] usb 5-1: New USB device found, idVendor=2040, idProduct=b900, bcdDevice=61.7e [ 666.516216][ T3225] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.555383][ T8705] usb 4-1: device descriptor read/64, error 18 [ 666.640846][ T8796] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 666.657373][ T8796] usb 1-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=e2.74 [ 666.669951][ T8796] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 04:35:52 executing program 2: syz_usb_connect(0x0, 0x1b, 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000003c0)='/dev/input/event#\x00', 0x4000003, 0x0) syz_open_dev$hiddev(0x0, 0x8, 0x0) r0 = syz_open_dev$hidraw(0x0, 0xfffffffffffffffe, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x8]) r1 = syz_open_dev$hidraw(0x0, 0x6ae67851, 0x42601) write$hidraw(r1, &(0x7f0000001200)='\x00', 0xffffff45) read$hidraw(r0, &(0x7f0000003200)=""/4096, 0xffffffad) r2 = syz_open_dev$hidraw(0x0, 0x0, 0x80041) r3 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r3, 0xc0189436, 0x0) ioctl$HIDIOCAPPLICATION(r2, 0x4030582b, 0x4001e0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, &(0x7f0000000000)={0x0, 0x100, 0x3}) [ 666.685577][ T9071] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 666.732170][ T3225] usb 5-1: config 0 descriptor?? [ 666.750104][ T8796] usb 1-1: config 0 descriptor?? [ 666.785206][ T3225] smsusb:smsusb_probe: board id=8, interface number 0 [ 666.807487][ T3225] smsusb:smsusb_probe: Device initialized with return code -19 [ 666.841034][ T8796] keyspan 1-1:0.0: Keyspan 1 port adapter converter detected [ 666.849669][ T8796] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 84 [ 666.891707][ T8796] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 666.900990][ T8796] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 82 [ 666.909913][ T8796] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 666.917997][ T8796] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 666.926071][ T8796] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83 04:35:52 executing program 5: syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000001000)={0x0, 0x0, 0x4, "bae5015e"}, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001bc0)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000b00)={0x1c, &(0x7f0000000a40)={0x0, 0x0, 0x1, "1b"}, 0x0, 0x0}) [ 666.934129][ T8796] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 3 [ 666.946728][ T9071] usb 2-1: device descriptor read/8, error -61 04:35:52 executing program 4: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x245, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4}}, {{{0x9, 0x5, 0x81, 0x3, 0x10}}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x4, {[@main, @local=@item_012={0x2, 0x2, 0x0, "23bd"}]}}, 0x0}, 0x0) [ 667.025007][ T3225] usb 5-1: USB disconnect, device number 27 [ 667.036759][ T8705] usb 4-1: device descriptor read/64, error 18 [ 667.136548][ T8796] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 667.222044][ T8796] usb 1-1: USB disconnect, device number 38 [ 667.247836][ T9071] usb 2-1: device descriptor read/8, error -61 [ 667.268179][ T8796] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 667.279715][ T8796] keyspan 1-1:0.0: device disconnected [ 667.325309][ T8705] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 667.368706][ T9071] usb usb2-port1: unable to enumerate USB device [ 667.605473][ T8705] usb 4-1: device descriptor read/64, error 18 04:35:53 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100003cfeae40cd06070174e20000000109021b000100000000090400"], 0x0) [ 667.685306][ T9071] usb 5-1: new high-speed USB device number 28 using dummy_hcd 04:35:53 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x35, 0x42, 0x61, 0x40, 0x4b4, 0x5500, 0x5ae4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xec, 0x42, 0x4c}}]}}]}}, 0x0) 04:35:53 executing program 5: syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000001000)={0x0, 0x0, 0x4, "bae5015e"}, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001bc0)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000b00)={0x1c, &(0x7f0000000a40)={0x0, 0x0, 0x1, "1b"}, 0x0, 0x0}) [ 667.995114][ T8705] usb 4-1: device descriptor read/64, error 18 [ 668.069621][ T9071] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 668.080976][ T9071] usb 5-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= 0.40 [ 668.090357][ T9071] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.103477][ T8706] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 668.115802][ T8705] usb usb4-port1: attempt power cycle [ 668.206172][ T9071] usb 5-1: config 0 descriptor?? [ 668.467193][ T8706] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 668.477646][ T8706] usb 1-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=e2.74 [ 668.487385][ T8706] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.538104][ T8706] usb 1-1: config 0 descriptor?? [ 668.555751][ T9071] usbhid 5-1:0.0: can't add hid device: -71 [ 668.562266][ T9071] usbhid: probe of 5-1:0.0 failed with error -71 [ 668.576348][ T9071] usb 5-1: USB disconnect, device number 28 [ 668.582493][ T8706] keyspan 1-1:0.0: Keyspan 1 port adapter converter detected [ 668.582786][ T8706] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 84 [ 668.599899][ T8706] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 668.608059][ T8706] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 82 [ 668.616594][ T8706] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 668.624566][ T8706] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 668.632714][ T8706] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83 [ 668.640857][ T8706] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 3 [ 668.671399][ T8706] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 668.786853][ T8706] usb 1-1: USB disconnect, device number 39 [ 668.810285][ T8706] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 668.821963][ T8706] keyspan 1-1:0.0: device disconnected [ 668.836408][ T8705] usb 4-1: new high-speed USB device number 20 using dummy_hcd 04:35:54 executing program 5: syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000001000)={0x0, 0x0, 0x4, "bae5015e"}, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001bc0)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000b00)={0x1c, &(0x7f0000000a40)={0x0, 0x0, 0x1, "1b"}, 0x0, 0x0}) 04:35:54 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f00000001c0)={[{0x2, 0x4e00, "ff11"}, {}]}) [ 669.108141][ T8705] usb 4-1: device descriptor read/8, error -71 04:35:54 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 669.256231][ T9071] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 669.324306][ T8705] usb 4-1: device descriptor read/8, error -71 04:35:55 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100003cfeae40cd06070174e20000000109021b000100000000090400"], 0x0) [ 669.636469][ T9071] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 669.648586][ T9071] usb 5-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= 0.40 [ 669.658535][ T9071] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.705974][ T8706] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 669.746846][ T9071] usb 5-1: config 0 descriptor?? 04:35:55 executing program 5: r0 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000001000)={0x0, 0x0, 0x4, "bae5015e"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001bc0)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000b00)={0x1c, &(0x7f0000000a40)={0x0, 0x0, 0x1, "1b"}, 0x0, 0x0}) [ 669.861219][ T8705] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 669.870094][ T3225] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 669.975499][ T8706] usb 2-1: device descriptor read/64, error 18 [ 670.046479][ T8705] usb 4-1: device descriptor read/8, error -61 [ 670.249521][ T3225] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 670.260459][ T3225] usb 1-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=e2.74 [ 670.269833][ T3225] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.286261][ T9071] apple 0003:05AC:0245.0005: unknown main item tag 0x0 [ 670.309785][ T9071] apple 0003:05AC:0245.0005: hidraw0: USB HID v0.00 Device [HID 05ac:0245] on usb-dummy_hcd.4-1/input0 [ 670.331251][ T3225] usb 1-1: config 0 descriptor?? [ 670.340311][ T8705] usb 4-1: device descriptor read/8, error -61 [ 670.366132][ T8706] usb 2-1: device descriptor read/64, error 18 [ 670.381094][ T3225] keyspan 1-1:0.0: Keyspan 1 port adapter converter detected [ 670.389453][ T3225] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 84 [ 670.399210][ T3225] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 670.407414][ T3225] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 82 [ 670.415653][ T3225] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 670.423635][ T3225] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 670.431731][ T3225] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83 [ 670.439999][ T3225] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 3 [ 670.478956][ T8705] usb usb4-port1: unable to enumerate USB device [ 670.484369][ T9600] usb 5-1: USB disconnect, device number 29 [ 670.531390][ T3225] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 670.600208][ T3225] usb 1-1: USB disconnect, device number 40 [ 670.627747][ T3225] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 670.640780][ T3225] keyspan 1-1:0.0: device disconnected [ 670.646258][ T8706] usb 2-1: new high-speed USB device number 28 using dummy_hcd 04:35:56 executing program 5: r0 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000001000)={0x0, 0x0, 0x4, "bae5015e"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001bc0)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000b00)={0x1c, &(0x7f0000000a40)={0x0, 0x0, 0x1, "1b"}, 0x0, 0x0}) [ 670.935568][ T8706] usb 2-1: device descriptor read/64, error 18 04:35:56 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100003cfeae40cd06070174e20000000109021b0001000000000904000001f3ecb6"], 0x0) 04:35:57 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x403, 0x97c1, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000900)={{0x12, 0x1, 0x0, 0x55, 0xef, 0x41, 0x0, 0xa5c, 0x21e1, 0xe3c8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xfc, 0x15, 0x98}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000002c0)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x5, {0x5, 0x0, "6ee56b"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 671.303141][T12836] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 671.326217][ T8706] usb 2-1: device descriptor read/64, error 18 [ 671.449185][ T8706] usb usb2-port1: attempt power cycle [ 671.666618][T12836] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 671.678090][T12836] usb 5-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= 0.40 [ 671.688532][T12836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.710244][T12836] usb 5-1: config 0 descriptor?? [ 671.845193][ T9071] usb 1-1: new high-speed USB device number 41 using dummy_hcd 04:35:57 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401c1b021b4000000000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r1) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) ioctl$EVIOCGNAME(r2, 0x4004550d, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) 04:35:57 executing program 5: r0 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000001000)={0x0, 0x0, 0x4, "bae5015e"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001bc0)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000b00)={0x1c, &(0x7f0000000a40)={0x0, 0x0, 0x1, "1b"}, 0x0, 0x0}) [ 671.998720][T12836] usbhid 5-1:0.0: can't add hid device: -71 [ 672.005652][T12836] usbhid: probe of 5-1:0.0 failed with error -71 [ 672.063824][T12836] usb 5-1: USB disconnect, device number 30 [ 672.185175][ T8706] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 672.245510][ T9071] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 672.255946][ T9071] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 672.269169][ T9071] usb 1-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=e2.74 [ 672.278481][ T9071] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.370620][ T9071] usb 1-1: config 0 descriptor?? [ 672.377287][ T8706] usb 2-1: device descriptor read/8, error -61 [ 672.436977][ T9071] keyspan 1-1:0.0: Keyspan 1 port adapter converter detected [ 672.444792][ T9071] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 84 [ 672.454711][ T9071] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 672.462888][ T9071] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 82 [ 672.471176][ T9071] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 672.479244][ T9071] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 04:35:58 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f00000001c0)={[{0x2, 0x4e00, "ff11"}, {}]}) [ 672.487383][ T9071] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83 [ 672.495961][ T9071] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 3 04:35:58 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 672.545233][T12836] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 672.645231][ T8706] usb 2-1: device descriptor read/8, error -71 [ 672.656300][ T9071] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 04:35:58 executing program 5: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000001000)={0x0, 0x0, 0x4, "bae5015e"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001bc0)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000b00)={0x1c, &(0x7f0000000a40)={0x0, 0x0, 0x1, "1b"}, 0x0, 0x0}) [ 672.711483][ T9071] usb 1-1: USB disconnect, device number 41 [ 672.773442][ T9071] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 672.785090][ T9071] keyspan 1-1:0.0: device disconnected [ 672.906185][T12836] usb 5-1: config 0 has no interfaces? [ 672.911926][T12836] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 672.921372][T12836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.023737][T12836] usb 5-1: config 0 descriptor?? [ 673.198734][ T8705] usb 4-1: new high-speed USB device number 22 using dummy_hcd 04:35:58 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100003cfeae40cd06070174e20000000109021b0001000000000904000001f3ecb6"], 0x0) [ 673.272468][ T8703] usb 5-1: USB disconnect, device number 31 [ 673.405219][T12836] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 673.436092][ T8706] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 673.525363][ T8705] usb 4-1: device descriptor read/64, error 18 [ 673.608481][ T8706] usb 2-1: device descriptor read/8, error -61 [ 673.685300][T12836] usb 6-1: device descriptor read/64, error 18 [ 673.756446][ T3225] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 673.870686][ T8703] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 673.894256][ T8706] usb 2-1: device descriptor read/8, error -61 [ 673.935228][ T8705] usb 4-1: device descriptor read/64, error 18 [ 674.019395][ T8706] usb usb2-port1: unable to enumerate USB device [ 674.096771][T12836] usb 6-1: device descriptor read/64, error 18 [ 674.146305][ T3225] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 674.157054][ T3225] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 674.171233][ T3225] usb 1-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=e2.74 [ 674.180550][ T3225] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.198363][ T3225] usb 1-1: config 0 descriptor?? [ 674.205823][ T8705] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 674.236201][ T8703] usb 5-1: config 0 has no interfaces? [ 674.242027][ T8703] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 674.244417][ T3225] keyspan 1-1:0.0: Keyspan 1 port adapter converter detected [ 674.251918][ T8703] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.259216][ T3225] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 84 [ 674.277161][ T3225] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 674.285314][ T3225] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 82 [ 674.293518][ T3225] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 674.301552][ T3225] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 674.309606][ T3225] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83 [ 674.318719][ T3225] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 3 [ 674.341176][ T3225] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 674.366423][T12836] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 674.401148][ T8703] usb 5-1: config 0 descriptor?? [ 674.453256][ T3225] usb 1-1: USB disconnect, device number 42 [ 674.472874][ T3225] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 674.484481][ T3225] keyspan 1-1:0.0: device disconnected [ 674.585783][ T8705] usb 4-1: device descriptor read/64, error 18 04:36:00 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a9d46840b113420012710000010109021b0001000e00000904be5c0143aead00090581ce"], 0x0) [ 674.647020][T12836] usb 6-1: device descriptor read/64, error 18 [ 674.657799][ T8706] usb 5-1: USB disconnect, device number 32 [ 675.005352][ T8705] usb 4-1: device descriptor read/64, error 18 [ 675.036236][T12836] usb 6-1: device descriptor read/64, error 18 04:36:00 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100003cfeae40cd06070174e20000000109021b0001000000000904000001f3ecb6"], 0x0) [ 675.127361][ T8705] usb usb4-port1: attempt power cycle [ 675.158634][T12836] usb usb6-port1: attempt power cycle [ 675.565570][ T8706] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 675.875322][T12836] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 675.895096][ T8705] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 675.926458][ T8706] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 675.937769][ T8706] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 675.951025][ T8706] usb 1-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=e2.74 [ 675.960322][ T8706] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.977868][ T8706] usb 1-1: config 0 descriptor?? [ 676.022413][ T8706] keyspan 1-1:0.0: Keyspan 1 port adapter converter detected [ 676.030255][ T8706] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 84 [ 676.040637][ T8706] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 676.048826][ T8706] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 82 [ 676.057777][ T8706] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 04:36:01 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f00000001c0)={[{0x2, 0x4e00, "ff11"}, {}]}) 04:36:01 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 676.066302][ T8706] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 676.074221][ T8706] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83 [ 676.082416][ T8706] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 3 [ 676.103659][ T8706] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 676.135284][ T8705] usb 4-1: device descriptor read/8, error -71 [ 676.223333][ T8706] usb 1-1: USB disconnect, device number 43 [ 676.256023][ T8706] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 676.267470][ T8706] keyspan 1-1:0.0: device disconnected 04:36:01 executing program 5: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000001000)={0x0, 0x0, 0x4, "bae5015e"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001bc0)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000b00)={0x1c, &(0x7f0000000a40)={0x0, 0x0, 0x1, "1b"}, 0x0, 0x0}) [ 676.277998][ T3225] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 676.327142][T12836] usb 6-1: device descriptor read/8, error -71 [ 676.356698][ T8705] usb 4-1: device descriptor read/8, error -71 [ 676.535411][T12836] usb 6-1: device descriptor read/8, error -71 04:36:02 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401c1b021b4000000000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r1) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) ioctl$EVIOCGNAME(r2, 0x4004550d, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) [ 676.659226][ T9600] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 676.675445][ T3225] usb 5-1: device descriptor read/all, error -71 04:36:02 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100003cfeae40cd06070174e20000000109021b0001000000000904000001f3ecb6000905"], 0x0) [ 676.865491][ T8705] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 676.935332][ T9600] usb 2-1: device descriptor read/64, error 18 [ 677.045126][T12836] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 677.056465][ T8705] usb 4-1: device descriptor read/8, error -61 [ 677.151627][ T3225] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 677.216919][T12836] usb 6-1: device descriptor read/8, error -61 [ 677.305842][ T8796] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 677.325226][ T9600] usb 2-1: device descriptor read/64, error 18 [ 677.378642][ T8705] usb 4-1: device descriptor read/8, error -61 [ 677.486850][T12836] usb 6-1: device descriptor read/8, error -61 [ 677.517089][ T8705] usb usb4-port1: unable to enumerate USB device [ 677.553221][ T3225] usb 5-1: config 0 has no interfaces? [ 677.559484][ T3225] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 677.568883][ T3225] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.595283][ T9600] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 677.606695][T12836] usb usb6-port1: unable to enumerate USB device [ 677.649675][ T3225] usb 5-1: config 0 descriptor?? [ 677.738872][ T8796] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 677.750145][ T8796] usb 1-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=e2.74 [ 677.759623][ T8796] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.865247][ T9600] usb 2-1: device descriptor read/64, error 18 [ 677.878214][ T8796] usb 1-1: config 0 descriptor?? 04:36:03 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007075eb08f305400255e30000000109021b000100000000090400000100007d000905850b04"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) [ 677.930430][ T8796] keyspan 1-1:0.0: Keyspan 1 port adapter converter detected [ 677.938680][ T8796] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 84 [ 677.948493][ T8796] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 677.956778][ T8796] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 82 [ 677.964817][ T8796] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 677.972944][ T8796] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 677.981001][ T8796] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83 [ 677.989109][ T8796] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 3 [ 678.025622][ T3225] usb 5-1: USB disconnect, device number 34 [ 678.217156][ T8796] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 678.257566][ T9600] usb 2-1: device descriptor read/64, error 18 [ 678.261282][ T8796] usb 1-1: USB disconnect, device number 44 [ 678.295303][ T8796] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 678.306654][ T8796] keyspan 1-1:0.0: device disconnected [ 678.376521][ T9600] usb usb2-port1: attempt power cycle [ 678.605420][ T3225] usb 5-1: new high-speed USB device number 35 using dummy_hcd 04:36:04 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100003cfeae40cd06070174e20000000109021b0001000000000904000001f3ecb6000905"], 0x0) [ 679.015554][ T3225] usb 5-1: config 0 has no interfaces? [ 679.021377][ T3225] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 679.030812][ T3225] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.047278][ T3225] usb 5-1: config 0 descriptor?? [ 679.096469][ T9600] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 679.185402][ T8706] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 679.308491][ T8703] usb 5-1: USB disconnect, device number 35 04:36:05 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 679.496272][ T9600] usb 2-1: device descriptor read/8, error -71 [ 679.556425][ T8706] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 679.567426][ T8706] usb 1-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=e2.74 [ 679.576813][ T8706] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 04:36:05 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f00000001c0)={[{0x2, 0x4e00, "ff11"}, {}]}) 04:36:05 executing program 5: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000001000)={0x0, 0x0, 0x4, "bae5015e"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001bc0)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000b00)={0x1c, &(0x7f0000000a40)={0x0, 0x0, 0x1, "1b"}, 0x0, 0x0}) [ 679.705957][ T8706] usb 1-1: config 0 descriptor?? [ 679.711890][ T9600] usb 2-1: device descriptor read/8, error -71 [ 679.776939][ T8706] keyspan 1-1:0.0: Keyspan 1 port adapter converter detected [ 679.784790][ T8706] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 84 [ 679.794569][ T8706] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 679.802702][ T8706] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 82 [ 679.811298][ T8706] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 679.819446][ T8706] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 679.827523][ T8706] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83 [ 679.835620][ T8706] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 3 [ 680.030359][ T8706] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 680.072648][ T8706] usb 1-1: USB disconnect, device number 45 [ 680.155274][ T8706] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 680.166786][ T8706] keyspan 1-1:0.0: device disconnected [ 680.215564][ T9600] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 680.396299][ T9600] usb 2-1: device descriptor read/8, error -61 [ 680.402756][ T8707] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 680.415298][ T8705] usb 6-1: new high-speed USB device number 23 using dummy_hcd 04:36:06 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100003cfeae40cd06070174e20000000109021b0001000000000904000001f3ecb6000905"], 0x0) [ 680.666211][ T9600] usb 2-1: device descriptor read/8, error -61 [ 680.679767][ T8707] usb 4-1: device descriptor read/64, error 18 [ 680.705057][ T8705] usb 6-1: device descriptor read/64, error 18 04:36:06 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401c1b021b4000000000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r1) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) ioctl$EVIOCGNAME(r2, 0x4004550d, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) [ 680.786616][ T9600] usb usb2-port1: unable to enumerate USB device [ 681.057235][ T8706] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 681.095430][ T8705] usb 6-1: device descriptor read/64, error 18 [ 681.106122][ T8707] usb 4-1: device descriptor read/64, error 18 04:36:06 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xc0, 0xbb, 0x9b, 0x40, 0x20b7, 0x1540, 0xef8f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x40, 0x21, 0x1, 0x1f}}) syz_usb_control_io(r0, 0x0, &(0x7f00000027c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f00000001c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x21, 0x1, 0x7}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x40, 0x21, 0x1}}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000ac0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000001c40), 0x0, 0x0, 0x0, 0x0}) [ 681.265566][ T8796] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 681.366456][ T8705] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 681.378081][ T8707] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 681.447041][ T8706] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 681.458895][ T8706] usb 1-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=e2.74 [ 681.468500][ T8706] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.485691][ T8706] usb 1-1: config 0 descriptor?? [ 681.530269][ T8706] keyspan 1-1:0.0: Keyspan 1 port adapter converter detected [ 681.538214][ T8706] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 84 [ 681.548119][ T8706] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 681.556356][ T8706] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 82 [ 681.564374][ T8706] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 681.572421][ T8706] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 681.580493][ T8706] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83 [ 681.588647][ T8706] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 3 [ 681.659245][ T8796] usb 5-1: config 0 has no interfaces? [ 681.665144][ T8796] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 681.665399][ T8707] usb 4-1: device descriptor read/64, error 18 [ 681.674331][ T8796] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.676416][ T8705] usb 6-1: device descriptor read/64, error 18 [ 681.719182][ T8796] usb 5-1: config 0 descriptor?? [ 681.758459][ T8706] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 681.909680][ T8706] usb 1-1: USB disconnect, device number 46 [ 681.981394][ T8706] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 681.996975][T10133] usb 5-1: USB disconnect, device number 36 [ 682.056426][ T8706] keyspan 1-1:0.0: device disconnected [ 682.068088][ T8707] usb 4-1: device descriptor read/64, error 18 [ 682.145785][ T8705] usb 6-1: device descriptor read/64, error 18 [ 682.189269][ T8707] usb usb4-port1: attempt power cycle 04:36:07 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100003cfeae40cd06070174e20000000109021b0001000000000904000001f3ecb600090582"], 0x0) [ 682.275750][ T8705] usb usb6-port1: attempt power cycle [ 682.555558][T10133] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 682.817584][ T8706] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 682.908952][ T8707] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 682.927033][T10133] usb 5-1: config 0 has no interfaces? [ 682.932741][T10133] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 682.942097][T10133] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 04:36:08 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007075eb08f305400255e30000000109021b"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 682.968036][T10133] usb 5-1: config 0 descriptor?? [ 683.026072][ T8705] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 683.188209][ T8706] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 683.198359][ T8706] usb 1-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=e2.74 [ 683.208076][ T8706] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.223969][ T9071] usb 5-1: USB disconnect, device number 37 04:36:08 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f00000001c0)={[{0x2, 0x4e00, "ff11"}, {}]}) 04:36:08 executing program 5: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000001000)={0x0, 0x0, 0x4, "bae5015e"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001bc0)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000b00)={0x1c, &(0x7f0000000a40)={0x0, 0x0, 0x1, "1b"}, 0x0, 0x0}) [ 683.235375][ T8707] usb 4-1: device descriptor read/8, error -71 [ 683.306572][ T8705] usb 6-1: device descriptor read/8, error -71 [ 683.326143][ T8706] usb 1-1: config 0 descriptor?? [ 683.372588][ T8706] keyspan 1-1:0.0: Keyspan 1 port adapter converter detected [ 683.380549][ T8706] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 84 [ 683.390423][ T8706] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 683.398648][ T8706] keyspan 1-1:0.0: unsupported endpoint type 0 [ 683.405338][ T8706] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 683.413730][ T8706] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 683.421878][ T8706] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83 [ 683.430088][ T8706] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 3 [ 683.479387][ T8706] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 683.495498][ T8707] usb 4-1: device descriptor read/8, error -71 [ 683.537410][ T8705] usb 6-1: device descriptor read/8, error -71 [ 683.573953][ T8706] usb 1-1: USB disconnect, device number 47 [ 683.596534][ T8703] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 683.616318][ T8706] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 683.627712][ T8706] keyspan 1-1:0.0: device disconnected [ 683.856463][ T8703] usb 2-1: Using ep0 maxpacket: 8 [ 683.979434][ T8703] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 683.990428][ T8703] usb 2-1: config 0 has no interfaces? [ 683.996507][ T8703] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=e3.55 [ 684.005882][ T8703] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.016965][ T8707] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 684.053061][ T8703] usb 2-1: config 0 descriptor?? [ 684.105785][ T8705] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 684.196546][ T8707] usb 4-1: device descriptor read/8, error -61 04:36:09 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100003cfeae40cd06070174e20000000109021b0001000000000904000001f3ecb600090582"], 0x0) [ 684.296857][ T8705] usb 6-1: device descriptor read/8, error -61 04:36:10 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000009c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x20, 0x80, 0x1c, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000580)={0x14, 0x0, &(0x7f0000000540)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 684.467306][ T8707] usb 4-1: device descriptor read/8, error -61 [ 684.589070][ T8707] usb usb4-port1: unable to enumerate USB device [ 684.591249][ T8705] usb 6-1: device descriptor read/8, error -61 04:36:10 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401c1b021b4000000000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r1) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) ioctl$EVIOCGNAME(r2, 0x4004550d, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) [ 684.719544][ T8705] usb usb6-port1: unable to enumerate USB device [ 684.726839][ T8703] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 685.108693][ T8703] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 685.118879][ T8703] usb 1-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=e2.74 [ 685.128291][ T8703] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.148368][ T8703] usb 1-1: config 0 descriptor?? [ 685.150378][ T8705] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 685.191347][ T8703] keyspan 1-1:0.0: Keyspan 1 port adapter converter detected [ 685.199310][ T8703] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 84 [ 685.209516][ T8703] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 685.219437][ T8703] keyspan 1-1:0.0: unsupported endpoint type 0 [ 685.226568][ T8703] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 685.234625][ T8703] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 685.242741][ T8703] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83 [ 685.250963][ T8703] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 3 [ 685.264743][ T8703] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 685.392084][ T8706] usb 1-1: USB disconnect, device number 48 [ 685.415638][ T8706] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 685.427107][ T8706] keyspan 1-1:0.0: device disconnected [ 685.546210][ T8705] usb 5-1: config 0 has no interfaces? [ 685.551938][ T8705] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 685.561360][ T8705] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.640356][ T8705] usb 5-1: config 0 descriptor?? [ 685.938460][ T8703] usb 5-1: USB disconnect, device number 38 04:36:11 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100003cfeae40cd06070174e20000000109021b0001000000000904000001f3ecb600090582"], 0x0) 04:36:12 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007075eb08f305400255e30000000109021b"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 686.496652][ T8703] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 686.518536][ T8705] usb 2-1: USB disconnect, device number 35 04:36:12 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902380001000000"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f00000001c0)={[{0x2, 0x4e00, "ff11"}, {}]}) 04:36:12 executing program 5: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000001000)={0x0, 0x0, 0x4, "bae5015e"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001bc0)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000b00)={0x1c, &(0x7f0000000a40)={0x0, 0x0, 0x1, "1b"}, 0x0, 0x0}) [ 686.856774][ T8703] usb 5-1: config 0 has no interfaces? [ 686.862642][ T8703] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 686.872108][ T8703] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.937725][ T8703] usb 5-1: config 0 descriptor?? [ 687.028492][ T9600] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 687.155740][ T3225] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 687.195665][ T8703] usb 5-1: USB disconnect, device number 39 [ 687.298127][ T8705] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 687.415443][ T3225] usb 2-1: Using ep0 maxpacket: 8 [ 687.415755][ T9600] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 687.431035][ T9600] usb 1-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=e2.74 [ 687.440514][ T9600] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.455425][ T9600] usb 1-1: config 0 descriptor?? [ 687.500874][ T9600] keyspan 1-1:0.0: Keyspan 1 port adapter converter detected [ 687.509103][ T9600] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 84 [ 687.523287][ T9600] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 687.531667][ T9600] keyspan 1-1:0.0: unsupported endpoint type 0 [ 687.539036][ T9600] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 687.546311][ T3225] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 687.547079][ T9600] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 687.557095][ T3225] usb 2-1: config 0 has no interfaces? [ 687.565794][ T9600] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83 [ 687.571147][ T3225] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=e3.55 [ 687.579088][ T9600] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 3 [ 687.588129][ T3225] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.598313][ T8707] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 687.605554][ T8705] usb 4-1: Using ep0 maxpacket: 16 [ 687.766967][ T8705] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 687.767130][ T9600] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 687.777450][ T8705] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 04:36:13 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0xd6, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000600)={0x14, &(0x7f00000004c0)={0x0, 0x0, 0xf0, {0xf0, 0xc, "40f27665a8329717e817afad581f7929bed0f9e845e53ccd293fa8d292b173d2585813555d63bd8f9b63ae66569a2674e4e25000e209231a5203679bd521bff2ed7ea69a788d7cffe8d5258cf0da4f7dca068b5e3c6a501a4f1b5a217b38e25f807ecea23af91a80629e78dca0b03d9316d01ac345c881d42f4ae695760141eafee445749b1391d184e7df2fd00ada80ae98c0a8816354a203b74f1036aab746df3edba9cb2f22f986d6973ea242590f40d64f7944f0b4bf7f3e78553e1293ddb4a2381a2bf3bf33ce0756d49659f4afb85c326e2beceeda438fcb6464f21b6ffa02835d7f248b6297568c252171"}}, 0x0}, &(0x7f0000000740)={0x1c, 0x0, 0x0, 0x0}) [ 687.825792][ T3225] usb 2-1: config 0 descriptor?? [ 687.841838][ T9600] usb 1-1: USB disconnect, device number 49 [ 687.896112][ T8707] usb 6-1: device descriptor read/64, error 18 [ 687.909559][ T9600] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 687.922282][ T9600] keyspan 1-1:0.0: device disconnected [ 687.967590][ T8705] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 687.976885][ T8705] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 687.985159][ T8705] usb 4-1: Manufacturer: syz [ 688.042940][ T8705] usb 4-1: config 0 descriptor?? [ 688.288379][ T8707] usb 6-1: device descriptor read/64, error 18 [ 688.555177][ T8707] usb 6-1: new high-speed USB device number 28 using dummy_hcd 04:36:14 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401c1b021b4000000000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r1) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) ioctl$EVIOCGNAME(r2, 0x4004550d, 0x0) [ 688.825332][ T8707] usb 6-1: device descriptor read/64, error 18 04:36:14 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201fe0009003c08ff200042ef160000000109021b8c5b7600000009040002010209bd00070581070001"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x1, 0x1, 'L'}, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f0000000100)=""/242, 0xf2) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000600), 0x0, 0x0, &(0x7f0000000700), &(0x7f0000000540)={0x20, 0x3, 0x1}}) syz_usb_ep_write(r1, 0x0, 0xfffffffffffffcf5, &(0x7f0000000300)="893c8aa1eeea37") [ 689.216022][ T8707] usb 6-1: device descriptor read/64, error 18 [ 689.339203][ T8707] usb usb6-port1: attempt power cycle [ 689.357005][ T3225] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 689.437651][ T9071] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 689.625823][ T3225] usb 1-1: Using ep0 maxpacket: 8 [ 689.777511][ T3225] usb 1-1: config index 0 descriptor too short (expected 35867, got 27) [ 689.786242][ T3225] usb 1-1: config 118 has too many interfaces: 91, using maximum allowed: 32 [ 689.795923][ T3225] usb 1-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 689.806548][ T3225] usb 1-1: config 118 has 1 interface, different from the descriptor's value: 91 [ 689.816447][ T3225] usb 1-1: config 118 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 689.827878][ T3225] usb 1-1: config 118 interface 0 has no altsetting 0 [ 689.835007][ T3225] usb 1-1: New USB device found, idVendor=20ff, idProduct=4200, bcdDevice=16.ef [ 689.844155][ T3225] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.907300][ T9071] usb 5-1: config 0 has no interfaces? [ 689.913092][ T9071] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 689.922544][ T9071] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.055984][ T8707] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 690.161277][ T9071] usb 5-1: config 0 descriptor?? 04:36:15 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902380001000000"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f00000001c0)={[{0x2, 0x4e00, "ff11"}, {}]}) [ 690.266452][ T9071] usb 4-1: USB disconnect, device number 30 04:36:16 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007075eb08f305400255e30000000109021b"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 690.326241][ T9600] usb 2-1: USB disconnect, device number 36 [ 690.449711][ T8705] usb 5-1: USB disconnect, device number 40 04:36:16 executing program 5: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000001000)={0x0, 0x0, 0x4, "bae5015e"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001bc0)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000b00)={0x1c, &(0x7f0000000a40)={0x0, 0x0, 0x1, "1b"}, 0x0, 0x0}) [ 690.596293][ T8707] usb 6-1: device descriptor read/8, error -71 [ 690.657584][ T3225] hub 1-1:118.0: bad descriptor, ignoring hub [ 690.663969][ T3225] hub: probe of 1-1:118.0 failed with error -5 [ 690.764709][ T3225] cdc_wdm 1-1:118.0: cdc-wdm0: USB WDM device [ 690.805753][ T8707] usb 6-1: device descriptor read/8, error -71 [ 690.981421][ T9071] usb 1-1: USB disconnect, device number 50 [ 691.026628][ T8705] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 691.138506][ T8703] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 691.155600][ T9600] usb 2-1: new high-speed USB device number 37 using dummy_hcd 04:36:16 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x4020940d, &(0x7f00000000c0)=""/40) [ 691.297979][ T8707] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 691.385634][ T8703] usb 4-1: Using ep0 maxpacket: 16 [ 691.397642][ T9600] usb 2-1: Using ep0 maxpacket: 8 [ 691.406425][ T8796] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 691.476167][ T8705] usb 5-1: config 0 has no interfaces? [ 691.477467][ T8707] usb 6-1: device descriptor read/8, error -61 [ 691.481883][ T8705] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 691.497902][ T8705] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.505717][ T8703] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 691.516326][ T8703] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 691.547082][ T9600] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 691.557559][ T9600] usb 2-1: config 0 has no interfaces? [ 691.563245][ T9600] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=e3.55 [ 691.572903][ T9600] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.592915][ T9600] usb 2-1: config 0 descriptor?? [ 691.626215][ T8703] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 691.635774][ T8703] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 691.640103][ T8705] usb 5-1: config 0 descriptor?? [ 691.644037][ T8703] usb 4-1: Manufacturer: syz [ 691.665324][ T8796] usb 1-1: Using ep0 maxpacket: 8 [ 691.676408][ T8703] usb 4-1: config 0 descriptor?? [ 691.775935][ T8707] usb 6-1: device descriptor read/8, error -61 [ 691.796764][ T8796] usb 1-1: config index 0 descriptor too short (expected 35867, got 27) [ 691.805539][ T8796] usb 1-1: config 118 has too many interfaces: 91, using maximum allowed: 32 [ 691.814485][ T8796] usb 1-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config 04:36:17 executing program 2: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000fc0)=ANY=[], 0x0) [ 691.825081][ T8796] usb 1-1: config 118 has 1 interface, different from the descriptor's value: 91 [ 691.834423][ T8796] usb 1-1: config 118 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 691.845795][ T8796] usb 1-1: config 118 interface 0 has no altsetting 0 [ 691.852728][ T8796] usb 1-1: New USB device found, idVendor=20ff, idProduct=4200, bcdDevice=16.ef [ 691.861961][ T8796] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.896266][ T8707] usb usb6-port1: unable to enumerate USB device [ 691.897362][ T8705] usb 5-1: USB disconnect, device number 41 04:36:17 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x522, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000040)={0x14, &(0x7f0000000080)={0x0, 0x0, 0x2a, {0x2a, 0x0, "d944a33db5b90372fa000e64e7e36e2ce292bde1a8eb5515c827d700"/40}}, 0x0}, 0x0) [ 692.295994][ T8796] usb 1-1: can't set config #118, error -71 [ 692.321419][ T8796] usb 1-1: USB disconnect, device number 51 [ 692.875614][ T8703] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 693.247183][ T8703] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 693.258385][ T8703] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 693.268569][ T8703] usb 1-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.40 [ 693.277871][ T8703] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 04:36:19 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401c1b021b4000000000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r1) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x4004550d, 0x0) [ 693.725459][ T8703] usb 1-1: config 0 descriptor?? 04:36:19 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902380001000000"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f00000001c0)={[{0x2, 0x4e00, "ff11"}, {}]}) [ 694.065636][ T8703] usbhid 1-1:0.0: can't add hid device: -71 [ 694.066023][ T9070] usb 4-1: USB disconnect, device number 31 [ 694.072050][ T8703] usbhid: probe of 1-1:0.0 failed with error -71 04:36:19 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007075eb08f305400255e30000000109021b00010000000009040000"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 694.153219][ T8703] usb 1-1: USB disconnect, device number 52 [ 694.175140][ T9071] usb 2-1: USB disconnect, device number 37 04:36:19 executing program 5: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a66f1b40da0b7f31cc9d00"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000001000)={0x0, 0x0, 0x4, "bae5015e"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001bc0)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000b00)={0x1c, &(0x7f0000000a40)={0x0, 0x0, 0x1, "1b"}, 0x0, 0x0}) [ 694.565625][ T8707] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 694.755525][ T8703] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 694.797632][ T9071] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 694.816446][ T8706] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 694.875139][ T8705] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 694.929630][ T8707] usb 5-1: config 0 has no interfaces? [ 694.935548][ T8707] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 694.944750][ T8707] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.001332][ T8707] usb 5-1: config 0 descriptor?? [ 695.045315][ T9071] usb 2-1: Using ep0 maxpacket: 8 [ 695.081536][ T8706] usb 4-1: Using ep0 maxpacket: 16 [ 695.127261][ T8703] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 695.138738][ T8703] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 695.148955][ T8703] usb 1-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.40 [ 695.158301][ T8703] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.177261][ T8705] usb 6-1: no configurations [ 695.182018][ T8705] usb 6-1: can't read configurations, error -22 [ 695.189516][ T9071] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 695.200075][ T9071] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=e3.55 [ 695.209497][ T9071] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 04:36:20 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x0, 0x0, {}, {0x3}, @period={0x0, 0x7, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000939a12407d04015060a5000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000000)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="230653000000064177"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 695.229403][ T8706] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 695.239876][ T8706] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 695.259853][ T8707] usb 5-1: USB disconnect, device number 42 [ 695.283788][ T9071] usb 2-1: config 0 descriptor?? [ 695.332981][ T9071] powermate: probe of 2-1:0.0 failed with error -22 [ 695.369037][ T8703] usb 1-1: config 0 descriptor?? [ 695.380410][ T8706] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 695.390017][ T8706] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 695.398436][ T8706] usb 4-1: Manufacturer: syz [ 695.406288][ T8705] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 695.488247][ T8706] usb 4-1: config 0 descriptor?? 04:36:21 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x1, 0x0, 0x0, 0x0, 0x0, 0xdb62}]}) [ 695.738186][ T8705] usb 6-1: no configurations [ 695.742988][ T8705] usb 6-1: can't read configurations, error -22 [ 695.746234][ T8703] usbhid 1-1:0.0: can't add hid device: -71 [ 695.755886][ T8703] usbhid: probe of 1-1:0.0 failed with error -71 [ 695.777830][ T8705] usb usb6-port1: attempt power cycle [ 695.836379][ T8707] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 695.860197][ T8703] usb 1-1: USB disconnect, device number 53 [ 696.209797][ T8707] usb 5-1: config 0 has no interfaces? [ 696.215639][ T8707] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 696.225139][ T8707] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.294166][ T8707] usb 5-1: config 0 descriptor?? 04:36:21 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x1, 0x0, 0x0, 0x0, 0x0, 0xdb62}]}) [ 696.528322][ T8705] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 696.552050][ T8706] usb 5-1: USB disconnect, device number 43 [ 696.716981][ T8705] usb 6-1: no configurations [ 696.721768][ T8705] usb 6-1: can't read configurations, error -22 04:36:22 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x1, 0x0, 0x0, 0x0, 0x0, 0xdb62}]}) [ 696.948674][ T8705] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 697.120686][ T8705] usb 6-1: no configurations [ 697.125629][ T8705] usb 6-1: can't read configurations, error -22 [ 697.164274][ T8705] usb usb6-port1: unable to enumerate USB device 04:36:23 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x1, 0x0, 0x0, 0x0, 0x0, 0xdb62}]}) 04:36:23 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f00000001c0)={[{0x2, 0x4e00, "ff11"}, {}]}) [ 697.553712][ T8706] usb 4-1: USB disconnect, device number 32 04:36:23 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007075eb08f305400255e30000000109021b00010000000009040000"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 697.602575][ T8796] usb 2-1: USB disconnect, device number 38 04:36:23 executing program 5: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a66f1b40da0b7f31cc9d00"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000001000)={0x0, 0x0, 0x4, "bae5015e"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001bc0)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000b00)={0x1c, &(0x7f0000000a40)={0x0, 0x0, 0x1, "1b"}, 0x0, 0x0}) 04:36:23 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401c1b021b4000000000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r1) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGNAME(r2, 0x4004550d, 0x0) 04:36:23 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x1, 0x0, 0x0, 0x0, 0x0, 0xdb62}]}) [ 698.285188][ T8703] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 698.355954][ T8706] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 698.455158][ T3225] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 698.526037][ T8703] usb 4-1: Using ep0 maxpacket: 16 04:36:24 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x1, 0x0, 0x0, 0x0, 0x0, 0xdb62}]}) [ 698.585429][ T9071] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 698.595146][ T8706] usb 2-1: Using ep0 maxpacket: 8 04:36:24 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3f8, 0x2c0, 0x2c0, 0x130, 0x0, 0x1e0, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'batadv_slave_0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@ip={@local, @dev, 0x0, 0x0, 'syzkaller0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x458) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$PPPIOCSDEBUG(0xffffffffffffffff, 0x40047440, &(0x7f0000000540)) r1 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff48}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4000000001) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={0x0}}, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) write$binfmt_misc(r2, &(0x7f0000000680)=ANY=[@ANYBLOB], 0xf9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) sendmmsg(r3, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) [ 698.649182][ T8703] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 698.660134][ T8703] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 698.670377][ T8703] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 698.740725][ T8706] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 698.751348][ T8706] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=e3.55 [ 698.760933][ T8706] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.783071][ T3225] usb 6-1: no configurations [ 698.788250][ T3225] usb 6-1: can't read configurations, error -22 [ 698.848508][ T8703] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 698.857932][ T8703] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 698.866351][ T8703] usb 4-1: Manufacturer: syz [ 698.892139][ T8706] usb 2-1: config 0 descriptor?? [ 698.937861][ T8703] usb 4-1: config 0 descriptor?? [ 698.950022][ T8706] powermate: probe of 2-1:0.0 failed with error -22 [ 698.971387][ T3225] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 699.006820][ T9071] usb 5-1: config 0 has no interfaces? [ 699.012580][ T9071] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 699.022158][ T9071] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.130739][ T9071] usb 5-1: config 0 descriptor?? 04:36:24 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x1, 0x0, 0x0, 0x0, 0x0, 0xdb62}]}) [ 699.286266][ T3225] usb 6-1: no configurations [ 699.291306][ T3225] usb 6-1: can't read configurations, error -22 [ 699.315442][ T3225] usb usb6-port1: attempt power cycle [ 699.365807][T14351] not chained 40000 origins [ 699.370381][T14351] CPU: 1 PID: 14351 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 699.379064][T14351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 699.391338][T14351] Call Trace: [ 699.394668][T14351] dump_stack+0x21c/0x280 [ 699.399029][T14351] ? __msan_poison_alloca+0xf0/0x120 [ 699.404346][T14351] kmsan_internal_chain_origin+0x6f/0x130 [ 699.410118][T14351] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 699.415953][T14351] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 699.422230][T14351] ? selinux_socket_getpeersec_dgram+0x666/0x7f0 [ 699.428597][T14351] ? kmsan_get_metadata+0x116/0x180 [ 699.433816][T14351] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 699.439651][T14351] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 699.445820][T14351] ? security_socket_getpeersec_dgram+0x1bf/0x220 [ 699.452271][T14351] ? kmsan_get_metadata+0x116/0x180 [ 699.457506][T14351] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 699.463386][T14351] ? kmsan_get_metadata+0x116/0x180 [ 699.468827][T14351] ? kmsan_set_origin_checked+0x95/0xf0 [ 699.474398][T14351] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 699.480509][T14351] ? _copy_from_user+0x201/0x310 [ 699.485895][T14351] ? kmsan_get_metadata+0x116/0x180 [ 699.491200][T14351] __msan_chain_origin+0x50/0x90 [ 699.496178][T14351] __get_compat_msghdr+0x6db/0x9d0 [ 699.501373][T14351] get_compat_msghdr+0x108/0x2b0 [ 699.506355][T14351] __sys_sendmmsg+0x755/0xf70 [ 699.511982][T14351] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 699.517902][T14351] ? __msan_poison_alloca+0xf0/0x120 [ 699.523669][T14351] ? kmsan_copy_to_user+0x81/0x90 [ 699.529075][T14351] ? _copy_to_user+0x1bf/0x260 [ 699.533883][T14351] ? put_old_timespec32+0x231/0x2d0 [ 699.539204][T14351] ? kmsan_get_metadata+0x116/0x180 [ 699.544542][T14351] ? kmsan_get_metadata+0x116/0x180 [ 699.549871][T14351] ? kmsan_get_metadata+0x116/0x180 [ 699.555117][T14351] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 699.560537][T14351] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 699.566752][T14351] __do_fast_syscall_32+0x2af/0x480 [ 699.571992][T14351] do_fast_syscall_32+0x6b/0xd0 [ 699.576876][T14351] do_SYSENTER_32+0x73/0x90 [ 699.581417][T14351] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 699.587889][T14351] RIP: 0023:0xf7f5f549 [ 699.591956][T14351] Code: Bad RIP value. [ 699.596057][T14351] RSP: 002b:00000000f55380cc EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 699.604573][T14351] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000020001e00 [ 699.612557][T14351] RDX: 00000000fffffe36 RSI: 0000000000000000 RDI: 0000000000000000 [ 699.620552][T14351] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 699.628542][T14351] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 699.636529][T14351] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 699.644534][T14351] Uninit was stored to memory at: [ 699.649588][T14351] kmsan_internal_chain_origin+0xad/0x130 [ 699.655334][T14351] __msan_chain_origin+0x50/0x90 [ 699.660301][T14351] __get_compat_msghdr+0x6db/0x9d0 [ 699.665436][T14351] get_compat_msghdr+0x108/0x2b0 [ 699.670385][T14351] __sys_sendmmsg+0x755/0xf70 [ 699.676679][T14351] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 699.682183][T14351] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 699.688391][T14351] __do_fast_syscall_32+0x2af/0x480 [ 699.693618][T14351] do_fast_syscall_32+0x6b/0xd0 [ 699.702524][T14351] do_SYSENTER_32+0x73/0x90 [ 699.708480][T14351] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 699.720139][T14351] [ 699.722480][T14351] Uninit was stored to memory at: [ 699.727537][T14351] kmsan_internal_chain_origin+0xad/0x130 [ 699.733281][T14351] __msan_chain_origin+0x50/0x90 [ 699.740770][T14351] __get_compat_msghdr+0x6db/0x9d0 [ 699.746002][T14351] get_compat_msghdr+0x108/0x2b0 [ 699.750956][T14351] __sys_sendmmsg+0x755/0xf70 [ 699.755743][T14351] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 699.761219][T14351] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 699.766875][T14351] __do_fast_syscall_32+0x2af/0x480 [ 699.772103][T14351] do_fast_syscall_32+0x6b/0xd0 [ 699.776978][T14351] do_SYSENTER_32+0x73/0x90 [ 699.781500][T14351] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 699.787828][T14351] [ 699.790162][T14351] Uninit was stored to memory at: [ 699.795207][T14351] kmsan_internal_chain_origin+0xad/0x130 [ 699.800937][T14351] __msan_chain_origin+0x50/0x90 [ 699.805891][T14351] __get_compat_msghdr+0x6db/0x9d0 [ 699.811009][T14351] get_compat_msghdr+0x108/0x2b0 [ 699.815958][T14351] __sys_sendmmsg+0x755/0xf70 [ 699.820653][T14351] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 699.826049][T14351] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 699.831613][T14351] __do_fast_syscall_32+0x2af/0x480 [ 699.836843][T14351] do_fast_syscall_32+0x6b/0xd0 [ 699.841707][T14351] do_SYSENTER_32+0x73/0x90 [ 699.846228][T14351] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 699.853364][T14351] [ 699.855732][T14351] Uninit was stored to memory at: [ 699.860785][T14351] kmsan_internal_chain_origin+0xad/0x130 [ 699.866523][T14351] __msan_chain_origin+0x50/0x90 [ 699.871475][T14351] __get_compat_msghdr+0x6db/0x9d0 [ 699.876596][T14351] get_compat_msghdr+0x108/0x2b0 [ 699.881570][T14351] __sys_sendmmsg+0x755/0xf70 [ 699.886265][T14351] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 699.891655][T14351] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 699.897230][T14351] __do_fast_syscall_32+0x2af/0x480 [ 699.902442][T14351] do_fast_syscall_32+0x6b/0xd0 [ 699.907313][T14351] do_SYSENTER_32+0x73/0x90 [ 699.911832][T14351] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 699.918156][T14351] [ 699.920487][T14351] Uninit was stored to memory at: [ 699.925528][T14351] kmsan_internal_chain_origin+0xad/0x130 [ 699.931262][T14351] __msan_chain_origin+0x50/0x90 [ 699.936222][T14351] __get_compat_msghdr+0x6db/0x9d0 [ 699.941357][T14351] get_compat_msghdr+0x108/0x2b0 [ 699.946396][T14351] __sys_sendmmsg+0x755/0xf70 [ 699.951088][T14351] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 699.956476][T14351] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 699.962034][T14351] __do_fast_syscall_32+0x2af/0x480 [ 699.967255][T14351] do_fast_syscall_32+0x6b/0xd0 [ 699.972122][T14351] do_SYSENTER_32+0x73/0x90 [ 699.976639][T14351] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 699.982964][T14351] [ 699.985297][T14351] Uninit was stored to memory at: [ 699.990341][T14351] kmsan_internal_chain_origin+0xad/0x130 [ 699.996438][T14351] __msan_chain_origin+0x50/0x90 [ 700.001429][T14351] __get_compat_msghdr+0x6db/0x9d0 [ 700.006753][T14351] get_compat_msghdr+0x108/0x2b0 [ 700.011890][T14351] __sys_sendmmsg+0x755/0xf70 [ 700.016669][T14351] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 700.022056][T14351] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 700.028425][T14351] __do_fast_syscall_32+0x2af/0x480 [ 700.033832][T14351] do_fast_syscall_32+0x6b/0xd0 [ 700.038813][T14351] do_SYSENTER_32+0x73/0x90 [ 700.043423][T14351] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 700.050184][T14351] [ 700.052545][T14351] Uninit was stored to memory at: [ 700.057677][T14351] kmsan_internal_chain_origin+0xad/0x130 [ 700.063407][T14351] __msan_chain_origin+0x50/0x90 [ 700.068372][T14351] __get_compat_msghdr+0x6db/0x9d0 [ 700.073529][T14351] get_compat_msghdr+0x108/0x2b0 [ 700.078487][T14351] __sys_sendmmsg+0x755/0xf70 [ 700.083199][T14351] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 700.088596][T14351] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 700.094174][T14351] __do_fast_syscall_32+0x2af/0x480 [ 700.099481][T14351] do_fast_syscall_32+0x6b/0xd0 [ 700.104347][T14351] do_SYSENTER_32+0x73/0x90 [ 700.108865][T14351] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 700.115189][T14351] [ 700.117523][T14351] Local variable ----msg_sys@__sys_sendmmsg created at: [ 700.124469][T14351] __sys_sendmmsg+0xbb/0xf70 [ 700.129334][T14351] __sys_sendmmsg+0xbb/0xf70 [ 700.151735][ T8707] usb 5-1: USB disconnect, device number 44 [ 700.655281][ T3225] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 700.745915][ T8707] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 700.807498][ T3225] usb 6-1: no configurations [ 700.812285][ T3225] usb 6-1: can't read configurations, error -22 [ 700.995472][ T3225] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 701.107197][ T8707] usb 5-1: config 0 has no interfaces? [ 701.113022][ T8707] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 701.122499][ T8707] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 04:36:26 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007075eb08f305400255e30000000109021b00010000000009040000"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 701.178418][ T9070] usb 2-1: USB disconnect, device number 39 [ 701.180608][ T8707] usb 5-1: config 0 descriptor?? 04:36:27 executing program 5: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a66f1b40da0b7f31cc9d00"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000001000)={0x0, 0x0, 0x4, "bae5015e"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001bc0)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000b00)={0x1c, &(0x7f0000000a40)={0x0, 0x0, 0x1, "1b"}, 0x0, 0x0}) 04:36:27 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f00000001c0)={[{0x2, 0x4e00, "ff11"}, {}]}) [ 701.445883][ T3225] usb 6-1: device descriptor read/all, error -71 [ 701.467114][ T8796] usb 4-1: USB disconnect, device number 33 [ 701.481337][ T3225] usb usb6-port1: unable to enumerate USB device 04:36:27 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401c1b021b4000000000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r1) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGNAME(r2, 0x4004550d, 0x0) [ 701.622050][ T9070] usb 5-1: USB disconnect, device number 45 [ 701.759916][ T8706] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 702.008926][ T8706] usb 2-1: Using ep0 maxpacket: 8 04:36:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r2, 0x104000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x12d0, 0x0, 0x1140, 0x0, 0x1140, 0x1140, 0x1238, 0x1238, 0x1238, 0x1238, 0x1238, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x10d8, 0x1140, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030, 'cgroup\x00'}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz0\x00'}}, @common=@unspec=@devgroup={{0x38, 'devgroup\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'nr0\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x1330) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card2/oss_mixer\x00', 0x113042, 0x0) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[@ANYBLOB='\t'], 0x102f) memfd_create(&(0x7f00000000c0)='/proc/asound/card2/oss_mixer\x00', 0x3) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r4, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) [ 702.115980][ T8707] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 702.125550][ T8706] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 702.127864][ T3225] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 702.136444][ T8706] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=e3.55 [ 702.153857][ T8706] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.183843][ T9600] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 702.202350][ T8706] usb 2-1: config 0 descriptor?? [ 702.253019][ T8706] powermate: probe of 2-1:0.0 failed with error -22 [ 702.395783][ T8707] usb 4-1: Using ep0 maxpacket: 16 [ 702.446723][ T3225] usb 6-1: no configurations [ 702.451556][ T3225] usb 6-1: can't read configurations, error -22 04:36:28 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x1, 0x0, 0x0, 0x0, 0x0, 0xdb62}]}) [ 702.517103][ T8707] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 702.527999][ T8707] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 702.538714][ T8707] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 702.556786][ T9600] usb 5-1: config 0 has no interfaces? [ 702.562505][ T9600] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 702.572041][ T9600] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.622174][ T9600] usb 5-1: config 0 descriptor?? 04:36:28 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) close(r2) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="a0000000320001000000000000000000000000008c0001000c001700070001007874000010000f0009000100766c616e000000002c00010008000300ff0700000c00120007fff300ffffff7f04000f000b0001"], 0x1}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 702.655707][ T3225] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 702.673934][ T8707] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 702.683587][ T8707] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 702.692038][ T8707] usb 4-1: Manufacturer: syz [ 702.758689][ T8707] usb 4-1: config 0 descriptor?? [ 702.871965][ T9070] usb 5-1: USB disconnect, device number 46 [ 702.957309][ T3225] usb 6-1: no configurations [ 702.962103][ T3225] usb 6-1: can't read configurations, error -22 [ 703.002813][ T3225] usb usb6-port1: attempt power cycle 04:36:28 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x1, 0x0, 0x0, 0x0, 0x0, 0xdb62}]}) [ 703.134271][T14418] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14418 comm=syz-executor.2 [ 703.148491][T14418] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. [ 703.159340][T14418] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 703.436057][ T9070] usb 5-1: new high-speed USB device number 47 using dummy_hcd 04:36:29 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x1, 0x0, 0x0, 0x0, 0x0, 0xdb62}]}) [ 703.766001][ T3225] usb 6-1: new high-speed USB device number 41 using dummy_hcd 04:36:29 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x1, 0x0, 0x0, 0x0, 0x0, 0xdb62}]}) [ 703.826609][ T9070] usb 5-1: config 0 has no interfaces? [ 703.832967][ T9070] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 703.844148][ T9070] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.906321][ T9070] usb 5-1: config 0 descriptor?? 04:36:29 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) close(r2) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="a0000000320001000000000000000000000000008c0001000c001700070001007874000010000f0009000100766c616e000000002c00010008000300ff0700000c00120007fff300ffffff7f04000f000b0001"], 0x1}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 703.957525][ T3225] usb 6-1: no configurations [ 703.962318][ T3225] usb 6-1: can't read configurations, error -22 [ 704.135323][ T3225] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 704.151301][ T9070] usb 5-1: USB disconnect, device number 47 04:36:29 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x1, 0x0, 0x0, 0x0, 0x0, 0xdb62}]}) [ 704.277175][ T3225] usb 6-1: no configurations [ 704.281953][ T3225] usb 6-1: can't read configurations, error -22 [ 704.302257][ T3225] usb usb6-port1: unable to enumerate USB device [ 704.364053][T14436] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14436 comm=syz-executor.2 [ 704.377549][T14436] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. [ 704.387994][T14436] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 04:36:30 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007075eb08f305400255e30000000109021b000100000000090400000100007d00"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 704.518690][ T3225] usb 2-1: USB disconnect, device number 40 04:36:30 executing program 5: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a66f1b40da0b7f31cc9d0000000109022400"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000001000)={0x0, 0x0, 0x4, "bae5015e"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001bc0)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000b00)={0x1c, &(0x7f0000000a40)={0x0, 0x0, 0x1, "1b"}, 0x0, 0x0}) 04:36:30 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f00000001c0)={[{0x2, 0x4e00, "ff11"}, {}]}) [ 704.920636][ T9071] usb 4-1: USB disconnect, device number 34 [ 705.145322][ T3225] usb 2-1: new high-speed USB device number 41 using dummy_hcd 04:36:30 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x1, 0x0, 0x0, 0x0, 0x0, 0xdb62}]}) 04:36:30 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401c1b021b4000000000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r1) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGNAME(r2, 0x4004550d, 0x0) 04:36:30 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) close(r2) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="a0000000320001000000000000000000000000008c0001000c001700070001007874000010000f0009000100766c616e000000002c00010008000300ff0700000c00120007fff300ffffff7f04000f000b0001"], 0x1}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 705.415330][ T3225] usb 2-1: Using ep0 maxpacket: 8 [ 705.517323][ T8706] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 705.526304][ T8707] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 705.556187][ T3225] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 705.566630][T14463] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14463 comm=syz-executor.2 [ 705.566962][T14463] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. [ 705.580056][ T3225] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 705.580221][ T3225] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=e3.55 [ 705.589597][T14463] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 705.602627][ T3225] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 04:36:31 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x1, 0x0, 0x0, 0x0, 0x0, 0xdb62}]}) [ 705.792952][ T3225] usb 2-1: config 0 descriptor?? [ 705.825671][ T8707] usb 4-1: Using ep0 maxpacket: 16 [ 705.842618][ T3225] powermate: probe of 2-1:0.0 failed with error -22 [ 705.946195][ T8707] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 705.956930][ T8707] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 705.967067][ T8707] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 705.980840][ T8706] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 705.991417][ T8706] usb 6-1: config 0 has no interfaces? [ 705.997349][ T8706] usb 6-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 706.006712][ T8706] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.075598][ T8706] usb 6-1: config 0 descriptor?? [ 706.089652][ T4604] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 706.110085][ T8707] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 706.119919][ T8707] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 706.128424][ T8707] usb 4-1: Manufacturer: syz [ 706.150740][ T8707] usb 4-1: config 0 descriptor?? 04:36:31 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x1, 0x0, 0x0, 0x0, 0x0, 0xdb62}]}) 04:36:32 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in=@loopback, 0x3502, 0x1}}, 0xe8) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x1c) [ 706.478061][ T4604] usb 5-1: config 0 has no interfaces? [ 706.483849][ T4604] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 706.493543][ T4604] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.627556][ T4604] usb 5-1: config 0 descriptor?? 04:36:32 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x1, 0x0, 0x0, 0x0, 0x0, 0xdb62}]}) [ 706.871033][ T4604] usb 5-1: USB disconnect, device number 48 04:36:32 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000180)=""/246) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet(0x2, 0xa, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) [ 707.245496][T14508] syz-executor.2 uses obsolete (PF_INET,SOCK_PACKET) [ 707.260735][T14508] syz-executor.2 (14508) used obsolete PPPIOCDETACH ioctl 04:36:32 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x1, 0x0, 0x0, 0x0, 0x0, 0xdb62}]}) [ 707.426404][ T4604] usb 5-1: new high-speed USB device number 49 using dummy_hcd 04:36:33 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007075eb08f305400255e30000000109021b000100000000090400000100007d00"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 707.801005][ T4604] usb 5-1: config 0 has no interfaces? [ 707.807231][ T4604] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 707.816764][ T4604] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.832800][ T9071] usb 2-1: USB disconnect, device number 41 [ 707.939787][ T4604] usb 5-1: config 0 descriptor?? [ 708.190973][ T8707] usb 5-1: USB disconnect, device number 49 [ 708.199406][ T9070] usb 4-1: USB disconnect, device number 35 04:36:34 executing program 5: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a66f1b40da0b7f31cc9d0000000109022400"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000001000)={0x0, 0x0, 0x4, "bae5015e"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001bc0)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000b00)={0x1c, &(0x7f0000000a40)={0x0, 0x0, 0x1, "1b"}, 0x0, 0x0}) 04:36:34 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) open(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00010028ae000001000014e6ffff04000400000000000964e035883b0dc49f5754ecc0000466cd3d80d451034750680a"], 0x1c}}, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) 04:36:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x1, 0x0, 0x0, 0x0, 0x0, 0xdb62}]}) [ 708.336478][ T4604] usb 6-1: USB disconnect, device number 43 [ 708.435115][ T9071] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 708.675906][ T9071] usb 2-1: Using ep0 maxpacket: 8 [ 708.816403][ T9071] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 708.827493][ T9071] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 708.840738][ T9071] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=e3.55 [ 708.850014][ T9071] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.937500][ T9071] usb 2-1: config 0 descriptor?? [ 708.982220][ T9071] powermate: probe of 2-1:0.0 failed with error -22 [ 709.006263][ T4604] usb 6-1: new high-speed USB device number 44 using dummy_hcd 04:36:35 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401c1b021b4000000000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r1) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x4004550d, 0x0) 04:36:35 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f00000001c0)={[{0x2, 0x4e00, "ff11"}, {}]}) 04:36:35 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$getown(r0, 0x9) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$PPPIOCSDEBUG(0xffffffffffffffff, 0x40047440, &(0x7f0000000540)=0x7) r1 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff48, 0x3c}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, 0x0, 0x40) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) 04:36:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x1, 0x0, 0x0, 0x0, 0x0, 0xdb62}]}) [ 709.365475][ T4604] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 709.375873][ T4604] usb 6-1: config 0 has no interfaces? [ 709.382236][ T4604] usb 6-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 709.391903][ T4604] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.572347][ T4604] usb 6-1: config 0 descriptor?? 04:36:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x1, 0x0, 0x0, 0x0, 0x0, 0xdb62}]}) [ 709.825441][ T9600] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 710.065610][ T9600] usb 4-1: Using ep0 maxpacket: 16 04:36:35 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x418, 0x2c0, 0x2c0, 0x130, 0x0, 0x1e0, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'batadv_slave_0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xa2}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@ip={@local, @dev, 0x0, 0x0, 'syzkaller0\x00'}, 0x0, 0xb8, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@socket0={{0x20, 'socket\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) fcntl$getown(r0, 0x9) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000540)=0x7) r2 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff48, 0x3c}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x4000000001) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={0x0}}, 0x40) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) write$binfmt_misc(r3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/267], 0xf9) sync_file_range(r0, 0x1, 0x3a, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) sendmmsg(r6, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) [ 710.186812][ T9071] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 710.196442][ T9600] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 710.207013][ T9600] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 710.218297][ T9600] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 04:36:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x1, 0x0, 0x0, 0x0, 0x0, 0xdb62}]}) [ 710.337907][ T9600] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 710.347376][ T9600] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 710.355877][ T9600] usb 4-1: Manufacturer: syz [ 710.425780][ T9600] usb 4-1: config 0 descriptor?? [ 710.570116][ T9071] usb 5-1: config 0 has no interfaces? [ 710.577053][ T9071] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 710.586699][ T9071] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.765195][ T9071] usb 5-1: config 0 descriptor?? 04:36:36 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x1, 0x0, 0x0, 0x0, 0x0, 0xdb62}]}) [ 711.012855][ T9071] usb 5-1: USB disconnect, device number 50 04:36:36 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007075eb08f305400255e30000000109021b000100000000090400000100007d00"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 711.238355][ T9600] usb 2-1: USB disconnect, device number 42 [ 711.635913][ T9071] usb 5-1: new high-speed USB device number 51 using dummy_hcd 04:36:37 executing program 5: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a66f1b40da0b7f31cc9d0000000109022400"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000001000)={0x0, 0x0, 0x4, "bae5015e"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001bc0)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000b00)={0x1c, &(0x7f0000000a40)={0x0, 0x0, 0x1, "1b"}, 0x0, 0x0}) 04:36:37 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000002c0)={0xf0f045}) poll(&(0x7f0000000180)=[{r0, 0x10d}], 0x1, 0x0) 04:36:37 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x1, 0x0, 0x0, 0x0, 0x0, 0xdb62}]}) [ 711.732100][ T8706] usb 6-1: USB disconnect, device number 44 [ 711.835664][ T9600] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 712.056187][ T9071] usb 5-1: config 0 has no interfaces? [ 712.061897][ T9071] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 712.071377][ T9071] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.076111][ T9600] usb 2-1: Using ep0 maxpacket: 8 [ 712.193455][ T9071] usb 5-1: config 0 descriptor?? [ 712.206444][ T9600] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 712.217433][ T9600] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 712.231078][ T9600] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=e3.55 [ 712.240619][ T9600] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.397532][ T9600] usb 2-1: config 0 descriptor?? [ 712.425538][ T3225] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 712.444140][ T9600] powermate: probe of 2-1:0.0 failed with error -22 [ 712.449407][ T9071] usb 5-1: USB disconnect, device number 51 [ 712.550285][ T9070] usb 4-1: USB disconnect, device number 36 [ 712.836749][ T3225] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 712.847550][ T3225] usb 6-1: config 0 has no interfaces? [ 712.853226][ T3225] usb 6-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 712.862663][ T3225] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.919952][ T3225] usb 6-1: config 0 descriptor?? 04:36:39 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x1, 0x0, 0x0, 0x0, 0x0, 0xdb62}]}) 04:36:39 executing program 2: perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff48, 0x3c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4000000001) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/267], 0xf9) sync_file_range(0xffffffffffffffff, 0x1, 0x3a, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) 04:36:39 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401c1b021b4000000000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r1) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x4004550d, 0x0) 04:36:39 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f00000001c0)={[{0x2, 0x4e00, "ff11"}, {}]}) 04:36:39 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1ff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000080)={{0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 04:36:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x1, 0x0, 0x0, 0x0, 0x0, 0xdb62}]}) [ 714.155213][ T9070] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 714.395379][ T8706] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 714.399711][ T9070] usb 4-1: Using ep0 maxpacket: 16 04:36:40 executing program 2: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000207008000000000000500000000000028df07840800094000e90000180002"], 0x1}}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="280004001c00010da017e700000003000208716901000000"], 0x1}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2840000014"], 0x1}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='E', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 04:36:40 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007075eb08f305400255e30000000109021b000100000000090400000100007d00090585"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 714.542854][ T9600] usb 2-1: USB disconnect, device number 43 [ 714.549255][ T9070] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 714.559715][ T9070] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 714.570969][ T9070] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 04:36:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x1, 0x0, 0x0, 0x0, 0x0, 0xdb62}]}) [ 714.755512][ T9070] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 714.756211][ T8706] usb 5-1: config 0 has no interfaces? [ 714.766367][ T9070] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 714.766492][ T9070] usb 4-1: Manufacturer: syz [ 714.774174][ T8706] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 714.799692][ T8706] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.892509][ T9070] usb 4-1: config 0 descriptor?? [ 714.970149][T14677] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 714.979707][T14677] netlink: 16397 bytes leftover after parsing attributes in process `syz-executor.2'. [ 715.064819][ T8706] usb 5-1: config 0 descriptor?? [ 715.092072][T14685] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 715.100531][T14685] netlink: 16397 bytes leftover after parsing attributes in process `syz-executor.2'. 04:36:40 executing program 5: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a66f1b40da0b7f31cc9d000000010902240001000000"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000001000)={0x0, 0x0, 0x4, "bae5015e"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001bc0)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000b00)={0x1c, &(0x7f0000000a40)={0x0, 0x0, 0x1, "1b"}, 0x0, 0x0}) [ 715.206868][ T8706] usb 6-1: USB disconnect, device number 45 [ 715.256131][ T9600] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 715.320901][ T4604] usb 5-1: USB disconnect, device number 52 04:36:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x1, 0x0, 0x0, 0x0, 0x0, 0xdb62}]}) 04:36:41 executing program 2: sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00010028ae000001000014e6ffff04000400000000000964e035883b0dc49f5754ecc0000466cd3d80d451034750680abb87b1a22c3ed93b41364a55"], 0x1c}}, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) [ 715.498554][ T9600] usb 2-1: Using ep0 maxpacket: 8 [ 715.616353][ T9600] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 715.626644][ T9600] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=e3.55 [ 715.636113][ T9600] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.726064][ T9600] usb 2-1: config 0 descriptor?? [ 715.773028][ T9600] powermate: probe of 2-1:0.0 failed with error -5 [ 715.826204][ T8703] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 715.905555][ T4604] usb 5-1: new high-speed USB device number 53 using dummy_hcd 04:36:41 executing program 2: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) [ 716.187306][ T8703] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 716.197811][ T8703] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 716.207728][ T8703] usb 6-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 716.217045][ T8703] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.305916][ T4604] usb 5-1: config 0 has no interfaces? [ 716.311629][ T4604] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 716.321118][ T4604] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.390393][ T8703] usb 6-1: config 0 descriptor?? [ 716.404244][ T4604] usb 5-1: config 0 descriptor?? [ 716.649795][ T9070] usb 5-1: USB disconnect, device number 53 [ 716.919442][ T4604] usb 4-1: USB disconnect, device number 37 04:36:43 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401c1b021b4000000000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r1) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x4004550d, 0x0) 04:36:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x1, 0x0, 0x0, 0x0, 0x0, 0xdb62}]}) 04:36:43 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) write$binfmt_elf64(r1, &(0x7f00000002c0)=ANY=[], 0x1a0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) fallocate(r0, 0x100000003, 0x0, 0x80019c) 04:36:43 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f00000001c0)={[{0x2, 0x4e00, "ff11"}, {}]}) 04:36:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x1, 0x0, 0x0, 0x0, 0x0, 0xdb62}]}) 04:36:43 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007075eb08f305400255e30000000109021b000100000000090400000100007d00090585"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 718.090729][ T8706] usb 2-1: USB disconnect, device number 44 [ 718.098763][ T4604] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 718.315876][ T9600] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 718.365531][ T4604] usb 4-1: Using ep0 maxpacket: 16 [ 718.486307][ T4604] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 718.498255][ T4604] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 718.510263][ T4604] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 04:36:44 executing program 5: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a66f1b40da0b7f31cc9d000000010902240001000000"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000001000)={0x0, 0x0, 0x4, "bae5015e"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001bc0)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000b00)={0x1c, &(0x7f0000000a40)={0x0, 0x0, 0x1, "1b"}, 0x0, 0x0}) [ 718.706948][ T9600] usb 5-1: config 0 has no interfaces? [ 718.712679][ T9600] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 718.722152][ T9600] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.745599][ T8703] usb 6-1: USB disconnect, device number 46 04:36:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x1, 0x0, 0x0, 0x0, 0x0, 0xdb62}]}) [ 718.806346][ T4604] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 718.816419][ T4604] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 718.824567][ T4604] usb 4-1: Manufacturer: syz [ 718.870028][ T9600] usb 5-1: config 0 descriptor?? [ 718.931527][ T4604] usb 4-1: config 0 descriptor?? [ 719.068733][ T3225] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 719.122874][ T8703] usb 5-1: USB disconnect, device number 54 [ 719.326767][ T3225] usb 2-1: Using ep0 maxpacket: 8 [ 719.462893][ T3225] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 719.473024][ T3225] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=e3.55 [ 719.482438][ T3225] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.485868][ T4604] usb 6-1: new high-speed USB device number 47 using dummy_hcd 04:36:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, 0x0) [ 719.599317][ T3225] usb 2-1: config 0 descriptor?? [ 719.656982][ T3225] powermate: probe of 2-1:0.0 failed with error -5 [ 719.696027][ T8703] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 719.887119][ T4604] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 719.897547][ T4604] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 719.906907][ T4604] usb 6-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 719.916238][ T4604] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.095671][ T4604] usb 6-1: config 0 descriptor?? [ 720.102239][ T8703] usb 5-1: config 0 has no interfaces? [ 720.108303][ T8703] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 720.117772][ T8703] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 04:36:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, 0x0) [ 720.229656][ T8703] usb 5-1: config 0 descriptor?? [ 720.481060][ T8703] usb 5-1: USB disconnect, device number 55 [ 720.744808][ T28] audit: type=1800 audit(1598762206.374:12): pid=14748 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16289 res=0 04:36:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, 0x0) 04:36:46 executing program 2: r0 = socket$inet(0xa, 0x5, 0x0) setsockopt$inet_mreqn(r0, 0x84, 0x82, 0x0, 0x0) [ 720.929074][ T9071] usb 4-1: USB disconnect, device number 38 04:36:47 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401c1b021b4000000000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r1) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x4004550d, 0x0) 04:36:47 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f00000001c0)={[{0x2, 0x4e00, "ff11"}, {}]}) 04:36:47 executing program 2: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(aegis128l-generic)\x00'}, 0x58) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x4) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) 04:36:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}]}) 04:36:47 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007075eb08f305400255e30000000109021b000100000000090400000100007d00090585"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 721.777751][ T8703] usb 2-1: USB disconnect, device number 45 [ 721.945898][ T4604] usb 4-1: new high-speed USB device number 39 using dummy_hcd 04:36:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}]}) [ 722.185789][ T4604] usb 4-1: Using ep0 maxpacket: 16 [ 722.275702][ T3225] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 722.276830][ T8703] usb 6-1: USB disconnect, device number 47 [ 722.305668][ T4604] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config 04:36:48 executing program 5: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a66f1b40da0b7f31cc9d000000010902240001000000"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000001000)={0x0, 0x0, 0x4, "bae5015e"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001bc0)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000b00)={0x1c, &(0x7f0000000a40)={0x0, 0x0, 0x1, "1b"}, 0x0, 0x0}) [ 722.316127][ T4604] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 722.327360][ T4604] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 04:36:48 executing program 2: [ 722.500478][ T4604] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 722.509909][ T4604] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 722.518340][ T4604] usb 4-1: Manufacturer: syz [ 722.595285][ T9071] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 722.610996][ T4604] usb 4-1: config 0 descriptor?? [ 722.651632][ T3225] usb 5-1: config 0 has no interfaces? [ 722.657482][ T3225] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 722.667364][ T3225] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 04:36:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}]}) [ 722.748185][ T3225] usb 5-1: config 0 descriptor?? [ 722.875765][ T9071] usb 2-1: Using ep0 maxpacket: 8 [ 722.991608][ T3225] usb 5-1: USB disconnect, device number 56 [ 723.007096][ T9071] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 723.017192][ T9071] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=e3.55 [ 723.026702][ T9071] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.080239][ T9071] usb 2-1: config 0 descriptor?? [ 723.139426][ T9071] powermate: probe of 2-1:0.0 failed with error -5 [ 723.568322][ T3225] usb 5-1: new high-speed USB device number 57 using dummy_hcd 04:36:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xdb62}]}) 04:36:49 executing program 2: [ 723.981572][ T3225] usb 5-1: config 0 has no interfaces? [ 723.987412][ T3225] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 723.996170][ T8703] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 723.996882][ T3225] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.093837][ T3225] usb 5-1: config 0 descriptor?? 04:36:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xdb62}]}) [ 724.351854][ T9071] usb 5-1: USB disconnect, device number 57 [ 724.357055][ T8703] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 724.368263][ T8703] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 724.377655][ T8703] usb 6-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 724.386946][ T8703] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.410568][ T8703] usb 6-1: config 0 descriptor?? [ 724.694118][ T3225] usb 4-1: USB disconnect, device number 39 [ 725.255338][ T4604] usb 2-1: USB disconnect, device number 46 04:36:51 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401c1b021b4000000000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r1) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, 0x0) syz_usb_disconnect(r1) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x4004550d, 0x0) 04:36:51 executing program 2: 04:36:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xdb62}]}) 04:36:51 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f00000001c0)={[{0x2, 0x4e00, "ff11"}, {}]}) 04:36:51 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007075eb08f305400255e30000000109021b000100000000090400000100007d000905850b"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 04:36:51 executing program 2: [ 725.816274][ T4604] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 725.879568][ T3225] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 726.038368][ T9071] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 726.065910][ T4604] usb 2-1: Using ep0 maxpacket: 8 [ 726.135248][ T3225] usb 4-1: Using ep0 maxpacket: 16 [ 726.186336][ T4604] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 726.197647][ T4604] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 726.208279][ T4604] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=e3.55 [ 726.217654][ T4604] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.266856][ T3225] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 726.277779][ T3225] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 726.289019][ T3225] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 726.293826][ T4604] usb 2-1: config 0 descriptor?? [ 726.387260][ T3225] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 726.396808][ T3225] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 726.405404][ T3225] usb 4-1: Manufacturer: syz [ 726.416566][ T9071] usb 5-1: config 0 has no interfaces? [ 726.422277][ T9071] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 726.431942][ T9071] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.535980][ T3225] usb 4-1: config 0 descriptor?? [ 726.548011][ T9071] usb 5-1: config 0 descriptor?? [ 726.556159][ T4604] powermate: unknown product id 0240 [ 726.561555][ T4604] powermate: Expected payload of 3--6 bytes, found 0 bytes! [ 726.569730][ T4604] powermate: probe of 2-1:0.0 failed with error -5 04:36:52 executing program 5: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a66f1b40da0b7f31cc9d0000000109022400010000000009"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000001000)={0x0, 0x0, 0x4, "bae5015e"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001bc0)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000b00)={0x1c, &(0x7f0000000a40)={0x0, 0x0, 0x1, "1b"}, 0x0, 0x0}) 04:36:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x1}]}) 04:36:52 executing program 2: [ 726.742595][ T4604] usb 6-1: USB disconnect, device number 48 [ 726.812035][ T9071] usb 5-1: USB disconnect, device number 58 04:36:52 executing program 2: 04:36:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x1}]}) [ 727.405808][ T9071] usb 5-1: new high-speed USB device number 59 using dummy_hcd 04:36:53 executing program 2: [ 727.505567][ T9600] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 727.789247][ T9071] usb 5-1: config 0 has no interfaces? [ 727.795151][ T9071] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 727.804358][ T9071] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.872739][ T9071] usb 5-1: config 0 descriptor?? [ 727.877589][ T9600] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 727.888139][ T9600] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 727.897417][ T9600] usb 6-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 727.906768][ T9600] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.983107][ T9600] usb 6-1: config 0 descriptor?? [ 728.125395][ T9071] usb 5-1: USB disconnect, device number 59 [ 728.544176][ T9600] usb 4-1: USB disconnect, device number 40 [ 728.640118][ T9071] usb 2-1: USB disconnect, device number 47 04:36:54 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401c1b021b4000000000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r1) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, 0x0) syz_usb_disconnect(r1) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x4004550d, 0x0) 04:36:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x1}]}) 04:36:54 executing program 2: 04:36:54 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f00000001c0)={[{0x2, 0x4e00, "ff11"}, {}]}) 04:36:54 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007075eb08f305400255e30000000109021b000100000000090400000100007d000905850b"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 04:36:55 executing program 2: [ 729.802734][ T9071] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 729.810870][ T9070] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 729.985374][ T8796] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 730.066134][ T9071] usb 2-1: Using ep0 maxpacket: 8 [ 730.079576][ T9070] usb 4-1: Using ep0 maxpacket: 16 [ 730.197380][ T9071] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 730.208641][ T9071] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 730.219036][ T9071] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=e3.55 [ 730.223314][ T8706] usb 6-1: USB disconnect, device number 49 [ 730.228443][ T9071] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 04:36:55 executing program 5: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a66f1b40da0b7f31cc9d0000000109022400010000000009"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000001000)={0x0, 0x0, 0x4, "bae5015e"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001bc0)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000b00)={0x1c, &(0x7f0000000a40)={0x0, 0x0, 0x1, "1b"}, 0x0, 0x0}) 04:36:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0xdb62}]}) 04:36:55 executing program 2: [ 730.255450][ T9070] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 730.265874][ T9070] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 730.277122][ T9070] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 730.426457][ T8796] usb 5-1: config 0 has no interfaces? [ 730.432212][ T8796] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 730.446668][ T8796] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.466389][ T9070] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 730.475913][ T9070] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 730.484061][ T9070] usb 4-1: Manufacturer: syz [ 730.525249][ T9071] usb 2-1: config 0 descriptor?? [ 730.593744][ T9070] usb 4-1: config 0 descriptor?? [ 730.610456][ T8796] usb 5-1: config 0 descriptor?? 04:36:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0xdb62}]}) 04:36:56 executing program 2: [ 730.776140][ T9071] powermate: unknown product id 0240 [ 730.785937][ T9071] powermate: Expected payload of 3--6 bytes, found 0 bytes! [ 730.794041][ T9071] powermate: probe of 2-1:0.0 failed with error -5 [ 730.898853][ T8796] usb 5-1: USB disconnect, device number 60 [ 731.165994][ T9070] usb 6-1: new high-speed USB device number 50 using dummy_hcd 04:36:56 executing program 2: [ 731.426606][ T8796] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 731.557699][ T9070] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 731.569328][ T9070] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 731.579034][ T9070] usb 6-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 731.588519][ T9070] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.668725][ T9070] usb 6-1: config 0 descriptor?? [ 731.896575][ T8796] usb 5-1: config 0 has no interfaces? [ 731.902413][ T8796] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 731.911977][ T8796] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.971319][ T8796] usb 5-1: config 0 descriptor?? [ 732.244674][ T8796] usb 5-1: USB disconnect, device number 61 [ 732.533037][ T8796] usb 2-1: USB disconnect, device number 48 [ 732.565039][ T9071] usb 4-1: USB disconnect, device number 41 04:36:59 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401c1b021b4000000000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r1) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, 0x0) syz_usb_disconnect(r1) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x4004550d, 0x0) 04:36:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0xdb62}]}) 04:36:59 executing program 2: 04:36:59 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007075eb08f305400255e30000000109021b000100000000090400000100007d000905850b"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 04:36:59 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10000000010200090502"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f00000001c0)={[{0x2, 0x4e00, "ff11"}, {}]}) 04:36:59 executing program 2: 04:36:59 executing program 5: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a66f1b40da0b7f31cc9d0000000109022400010000000009"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000001000)={0x0, 0x0, 0x4, "bae5015e"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001bc0)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000b00)={0x1c, &(0x7f0000000a40)={0x0, 0x0, 0x1, "1b"}, 0x0, 0x0}) [ 733.812671][ T8796] usb 6-1: USB disconnect, device number 50 [ 733.925471][ T9071] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 733.925666][ T4604] usb 2-1: new high-speed USB device number 49 using dummy_hcd 04:36:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x1, 0x0, 0x0, 0x0, 0x0, 0xdb62}]}) [ 734.185466][ T9071] usb 4-1: Using ep0 maxpacket: 16 [ 734.205725][ T4604] usb 2-1: Using ep0 maxpacket: 8 [ 734.215917][ T8705] usb 5-1: new high-speed USB device number 62 using dummy_hcd 04:36:59 executing program 2: [ 734.325475][ T4604] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 734.336467][ T9071] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 734.338016][ T4604] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 734.348243][ T9071] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 734.358156][ T4604] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=e3.55 [ 734.369241][ T9071] usb 4-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 734.378428][ T4604] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.389097][ T9071] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 04:37:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x1, 0x0, 0x0, 0x0, 0x0, 0xdb62}]}) [ 734.479136][ T9071] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 734.488649][ T9071] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 734.497334][ T9071] usb 4-1: Manufacturer: syz [ 734.519205][ T9071] usb 4-1: config 0 descriptor?? [ 734.547020][ T8796] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 734.635461][ T8705] usb 5-1: config 0 has no interfaces? [ 734.641399][ T8705] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 734.650876][ T8705] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.689357][ T8705] usb 5-1: config 0 descriptor?? [ 734.782392][ T4604] usb 2-1: config 0 descriptor?? 04:37:00 executing program 2: [ 734.935431][ T8705] usb 5-1: USB disconnect, device number 62 [ 734.948356][ T8796] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 734.958741][ T8796] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 734.968008][ T8796] usb 6-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 734.977352][ T8796] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 04:37:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x1, 0x0, 0x0, 0x0, 0x0, 0xdb62}]}) [ 735.047620][ T4604] powermate: unknown product id 0240 [ 735.053025][ T4604] powermate: Expected payload of 3--6 bytes, found 0 bytes! [ 735.063948][ T4604] powermate: probe of 2-1:0.0 failed with error -5 [ 735.066984][ T8796] usb 6-1: config 0 descriptor?? [ 735.540949][ T8705] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 735.949770][ T8705] usb 5-1: config 0 has no interfaces? [ 735.955943][ T8705] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 735.965577][ T8705] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.017714][ T8705] usb 5-1: config 0 descriptor?? [ 736.263703][ T8703] usb 5-1: USB disconnect, device number 63 [ 736.618814][ T8705] usb 4-1: USB disconnect, device number 42 [ 736.629898][ T4604] usb 2-1: USB disconnect, device number 49 [ 737.161508][ T4604] usb 6-1: USB disconnect, device number 51 04:37:03 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401c1b021b4000000000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r1) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x4004550d, 0x0) 04:37:03 executing program 2: 04:37:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x7}, {0x1, 0x0, 0x0, 0x0, 0x0, 0xdb62}]}) 04:37:03 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007075eb08f305400255e30000000109021b000100000000090400000100007d000905850b04"], 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 04:37:03 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10000000010200090502"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f00000001c0)={[{0x2, 0x4e00, "ff11"}, {}]}) 04:37:03 executing program 5: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a66f1b40da0b7f31cc9d000000010902240001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000001000)={0x0, 0x0, 0x4, "bae5015e"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001bc0)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000b00)={0x1c, &(0x7f0000000a40)={0x0, 0x0, 0x1, "1b"}, 0x0, 0x0}) 04:37:03 executing program 2: 04:37:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x7}, {0x1, 0x0, 0x0, 0x0, 0x0, 0xdb62}]}) [ 737.985441][ T8703] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 737.993740][ T9600] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 738.016620][ T8796] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 738.235743][ T9600] usb 2-1: Using ep0 maxpacket: 8 [ 738.275095][ T8796] usb 4-1: Using ep0 maxpacket: 16 [ 738.307002][ T4604] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 738.346999][ T8703] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 738.357886][ T8703] usb 6-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 738.367365][ T8703] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.378983][ T9600] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 738.391694][ T9600] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=e3.55 [ 738.401074][ T9600] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.407023][ T8796] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 738.419856][ T8796] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 738.430989][ T8796] usb 4-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 738.441880][ T8796] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 738.577544][ T8703] usb 6-1: config 0 descriptor?? [ 738.589033][ T9600] usb 2-1: config 0 descriptor?? [ 738.739700][ T4604] usb 5-1: config 0 has no interfaces? [ 738.745819][ T4604] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 738.755340][ T4604] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.837381][ T4604] usb 5-1: config 0 descriptor?? [ 738.842774][ T8703] rtl8192cu: Chip version 0x10 [ 738.849098][ T9600] powermate: unknown product id 0240 [ 738.856969][ T9600] input: Griffin SoundKnob as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input40 04:37:04 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000035000505d25a80648c2a940d0324fc60100000000a000e60053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) [ 738.887738][ T8796] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 738.897432][ T8796] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 738.906186][ T8796] usb 4-1: Manufacturer: syz 04:37:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x7}, {0x1, 0x0, 0x0, 0x0, 0x0, 0xdb62}]}) [ 739.045634][ T8703] rtlwifi: RTL8XXX did not boot from eeprom, check it !! [ 739.053093][ T8703] rtl_usb: Too few input end points found [ 739.083827][ T8796] usb 4-1: config 0 descriptor?? [ 739.085187][ C0] powermate: config urb returned -71 [ 739.105095][ C0] powermate: config urb returned -71 [ 739.125259][ C0] powermate: config urb returned -71 [ 739.145117][ C0] powermate: config urb returned -71 [ 739.196768][ T4604] usb 5-1: USB disconnect, device number 64 [ 739.205648][ T9600] usb 2-1: USB disconnect, device number 50 [ 739.277271][ T8703] usb 6-1: USB disconnect, device number 52 [ 739.566741][T15228] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.2'. [ 739.576416][T15228] openvswitch: netlink: Message has 18430 unknown bytes. [ 739.655956][ T4604] usb 5-1: new high-speed USB device number 65 using dummy_hcd 04:37:05 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007075eb08f305400255e30000000109021b000100000000090400000100007d000905850b04"], 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 04:37:05 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) [ 740.016624][ T4604] usb 5-1: config 0 has no interfaces? [ 740.022469][ T4604] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 740.033068][ T4604] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.115979][ T4604] usb 5-1: config 0 descriptor?? [ 740.361349][ T4604] usb 5-1: USB disconnect, device number 65 [ 740.595916][ T8796] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 740.855136][ T8796] usb 2-1: Using ep0 maxpacket: 8 [ 740.988822][ T8796] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 740.998184][ T4604] usb 4-1: USB disconnect, device number 43 [ 741.000068][ T8796] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=e3.55 [ 741.015793][ T8796] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.105848][ T8796] usb 2-1: config 0 descriptor?? [ 741.369297][ T8796] powermate: unknown product id 0240 [ 741.377085][ T8796] input: Griffin SoundKnob as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input41 [ 741.585109][ C1] powermate: config urb returned -71 [ 741.593295][ T8796] usb 2-1: USB disconnect, device number 51 [ 741.605123][ C1] powermate: config urb returned -71 04:37:07 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401c1b021b4000000000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r1) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$hiddev(0x0, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x4004550d, 0x0) 04:37:07 executing program 5: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a66f1b40da0b7f31cc9d000000010902240001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000001000)={0x0, 0x0, 0x4, "bae5015e"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001bc0)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000b00)={0x1c, &(0x7f0000000a40)={0x0, 0x0, 0x1, "1b"}, 0x0, 0x0}) 04:37:07 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) syz_init_net_socket$ax25(0x3, 0x3, 0xcc) syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') 04:37:07 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r1 = socket(0x400000000000010, 0x802, 0x0) write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$inet(0x2, 0xa, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000080)=0x7, 0x4) 04:37:07 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef10000000010200090502"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f00000001c0)={[{0x2, 0x4e00, "ff11"}, {}]}) [ 741.610605][ C1] powermate: usb_submit_urb(config) failed [ 742.285548][ T8703] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 742.366247][ T4604] usb 6-1: new high-speed USB device number 53 using dummy_hcd 04:37:08 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007075eb08f305400255e30000000109021b000100000000090400000100007d000905850b04"], 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 04:37:08 executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x141001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000}, 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 04:37:08 executing program 0: r0 = socket(0xa, 0x3, 0x9) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, &(0x7f0000000000)={'vcan0\x00'}) [ 742.575536][ T8703] usb 4-1: Using ep0 maxpacket: 16 [ 742.696606][ T8703] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 742.707063][ T8703] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 742.718426][ T8703] usb 4-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 742.729321][ T8703] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 742.756604][ T4604] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 742.767269][ T4604] usb 6-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 742.776725][ T4604] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.815310][ T9600] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 742.913890][ T4604] usb 6-1: config 0 descriptor?? [ 743.057175][ T8703] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 743.066639][ T8703] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 743.074830][ T8703] usb 4-1: Manufacturer: syz [ 743.144366][ T8703] usb 4-1: config 0 descriptor?? [ 743.175542][ T4604] rtl8192cu: Chip version 0x10 [ 743.196487][ T9600] usb 5-1: config 0 has no interfaces? [ 743.202185][ T9600] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 743.212322][ T9600] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.215629][ T8705] usb 2-1: new high-speed USB device number 52 using dummy_hcd 04:37:09 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000035000505d25a80648c2a940d0424fc6010020a400a000e60053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) [ 743.352319][ T9600] usb 5-1: config 0 descriptor?? [ 743.396148][ T4604] rtlwifi: RTL8XXX did not boot from eeprom, check it !! [ 743.404392][ T4604] rtl_usb: Too few input end points found [ 743.485421][ T8705] usb 2-1: Using ep0 maxpacket: 8 [ 743.602533][ T8796] usb 6-1: USB disconnect, device number 53 [ 743.617656][ T8705] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 743.627243][ T9600] usb 5-1: USB disconnect, device number 66 [ 743.629045][ T8705] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=e3.55 [ 743.643989][ T8705] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.688858][ T8705] usb 2-1: config 0 descriptor?? 04:37:09 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000032000505d25a80648c2a940d0324fc6010020a400a000e60053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) [ 743.946590][ T8705] powermate: unknown product id 0240 [ 743.954209][ T8705] input: Griffin SoundKnob as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input42 04:37:09 executing program 2: r0 = inotify_init1(0x0) fcntl$getownex(r0, 0x10, 0x0) ptrace$setregset(0x4205, 0x0, 0x4, &(0x7f0000001780)={0x0}) r1 = perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x0) ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, &(0x7f00000003c0)={0x6, 0x8}) mkdir(0x0, 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x58248}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') accept4$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e, 0x100000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="78000000100001040600"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000500012800e0001006970366772657461700000003c0002800800150054a302000400120005000b000200000014000600fe880000000000000000000000000001050008000400000008000c000000000008000a00dd35557c07d0f6cdb776446013e2fdba8b1422abe53183e738e3f7184fec0a7eb81fb00db8f56f31acd5c6364e9e6b1d4f642f3e89b5fa3d4e507dee44475598834d826ef4756b71871c11930f0b71c8b199cddedefa7d390552adb85b1a13b09a5b4808f12df5573cd3f5a566bca30535bd7e6ce22da9a8a16023aff98d0593a2", @ANYRES32=0x0, @ANYBLOB="86567e1e5ff95141af06ecdf31e169c9768367f4beba3db70000000000"], 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x28}, 0x1, 0xfffffffe}, 0x0) r3 = signalfd(r1, &(0x7f0000000180)={[0x3]}, 0x8) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'gretap0\x00', &(0x7f00000007c0)={'erspan0\x00', 0x0, 0x7, 0x700, 0x4, 0x101, {{0x26, 0x4, 0x3, 0xb, 0x98, 0x68, 0x0, 0x4, 0x29, 0x0, @empty, @remote, {[@cipso={0x86, 0xa, 0x3, [{0x5, 0x4, "846a"}]}, @cipso={0x86, 0x41, 0x3, [{0x1, 0x2}, {0x1, 0x9, "c7c1873d4b0a0c"}, {0x5, 0xd, "27d6fca183e110a8d3536a"}, {0x2, 0x8, "c7156f3c00d5"}, {0x7, 0x5, "a388e1"}, {0x7, 0xb, "db8734ca961244da22"}, {0x7, 0x2}, {0x7, 0x9, "975a35a80ca86e"}]}, @timestamp_prespec={0x44, 0x14, 0x55, 0x3, 0x0, [{@multicast1, 0x523}, {@dev={0xac, 0x14, 0x14, 0x36}, 0xffffffff}]}, @timestamp={0x44, 0x20, 0xf4, 0x0, 0x0, [0x80000001, 0x3, 0x3, 0x1, 0xb0, 0x9, 0xfffffe00]}, @timestamp_prespec={0x44, 0x4, 0x95, 0x3, 0xa}]}}}}}) sendmsg$ETHTOOL_MSG_WOL_GET(r3, &(0x7f0000000940)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x34, 0x0, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000000}, 0x80) inotify_init1(0x0) [ 744.155172][ C1] powermate: config urb returned -71 [ 744.172294][ T8705] usb 2-1: USB disconnect, device number 52 [ 744.178745][ C1] powermate 2-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 744.178819][ C1] powermate: config urb returned -71 [ 744.178836][ C1] powermate: usb_submit_urb(config) failed [ 744.197316][ T9600] usb 5-1: new high-speed USB device number 67 using dummy_hcd 04:37:10 executing program 5: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a66f1b40da0b7f31cc9d000000010902240001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000001000)={0x0, 0x0, 0x4, "bae5015e"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001bc0)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000b00)={0x1c, &(0x7f0000000a40)={0x0, 0x0, 0x1, "1b"}, 0x0, 0x0}) [ 744.596301][ T9600] usb 5-1: config 0 has no interfaces? [ 744.602148][ T9600] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 744.611873][ T9600] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.747362][ T9600] usb 5-1: config 0 descriptor?? [ 744.989868][ T4604] usb 5-1: USB disconnect, device number 67 [ 745.192571][ T9600] usb 4-1: USB disconnect, device number 44 [ 745.267192][ T8705] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 745.665521][ T8705] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 745.675999][ T8705] usb 6-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 745.686607][ T8705] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.742816][ T8705] usb 6-1: config 0 descriptor?? [ 746.019215][ T8705] rtl8192cu: Chip version 0x10 04:37:11 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401c1b021b4000000000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r1) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x4004550d, 0x0) 04:37:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000400)=0x1d, 0x4) 04:37:11 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f00000001c0)={[{0x2, 0x4e00, "ff11"}, {}]}) 04:37:11 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007075eb08f305400255e30000000109021b000100000000090400000100007d000905850b04"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 04:37:11 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000640)='oom_score\x00') sendfile(r0, r1, 0x0, 0x1) [ 746.236504][ T8705] rtlwifi: RTL8XXX did not boot from eeprom, check it !! [ 746.244025][ T8705] rtl_usb: Too few input end points found [ 746.445935][ T9600] usb 6-1: USB disconnect, device number 54 04:37:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000000c14000426bd7000ffdbdf2508000300041b0008003d000200000008003d00b5"], 0x30}}, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:37:12 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/if_inet6\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x4000000000dc) [ 746.777784][ T8705] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 746.795846][ T8796] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 746.965515][T15383] debugfs: Directory '15383-4' with parent 'kvm' already present! [ 746.977609][ T9071] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 747.045187][ T8796] usb 2-1: Using ep0 maxpacket: 8 [ 747.052157][ T8705] usb 4-1: Using ep0 maxpacket: 16 [ 747.196607][ T8796] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 747.215894][ T8796] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=e3.55 [ 747.231827][ T8796] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.244655][ T8705] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 747.263874][ T8705] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 747.281725][ T8705] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 04:37:12 executing program 5: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a66f1b40da0b7f31cc9d000000010902240001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001bc0)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000b00)={0x1c, &(0x7f0000000a40)={0x0, 0x0, 0x1, "1b"}, 0x0, 0x0}) [ 747.293766][ T8705] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 747.308954][ T8705] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 04:37:13 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/mcfilter6\x00') sendfile(r0, r1, 0x0, 0x1) [ 747.448100][ T8796] usb 2-1: config 0 descriptor?? [ 747.554044][ T9071] usb 5-1: config 0 has no interfaces? [ 747.560320][ T9071] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 747.570779][ T9071] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 04:37:13 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@my=0x0}) [ 747.611118][ T8705] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 747.622034][ T8705] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 747.630968][ T8705] usb 4-1: Manufacturer: syz [ 747.665662][ T9071] usb 5-1: config 0 descriptor?? [ 747.675289][ T8705] usb 4-1: config 0 descriptor?? [ 747.739393][ T8796] powermate: unknown product id 0240 [ 747.752901][ T8796] input: Griffin SoundKnob as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input43 [ 747.911940][ T4604] usb 5-1: USB disconnect, device number 68 [ 747.983274][ T8796] usb 2-1: USB disconnect, device number 53 [ 747.990958][ C1] powermate 2-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 747.991043][ C1] powermate: config urb returned -71 04:37:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 747.991064][ C1] powermate: usb_submit_urb(config) failed [ 748.148313][ T8705] Registered IR keymap rc-hauppauge [ 748.189868][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 748.205336][ T8707] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 748.240198][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 748.281850][ T8705] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 748.297897][ T8705] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input44 04:37:14 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') [ 748.411291][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 748.425287][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 748.455191][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 748.463866][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 748.475206][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 748.495672][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 748.496069][ T4604] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 748.503246][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 748.518389][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 748.535172][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 748.555318][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 748.566818][ T8707] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 748.582483][ T8707] usb 6-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 748.584479][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 748.592881][ T8707] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.593151][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 748.610364][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 748.625217][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 748.655156][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 748.675256][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 748.695280][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 748.715174][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 748.735391][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 748.755174][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 748.761502][ T8707] usb 6-1: config 0 descriptor?? [ 748.775155][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 748.795280][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 748.815192][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 748.835121][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 748.855241][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 748.875202][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 748.895213][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 748.915149][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 748.927430][ T4604] usb 5-1: config 0 has no interfaces? [ 748.933264][ T4604] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 748.942776][ T4604] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.945100][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 748.975185][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 748.995156][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 749.015153][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 749.035309][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 749.055198][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 749.056315][ T8707] rtl8192cu: Chip version 0x10 [ 749.064603][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 749.075522][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 749.095182][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 749.115154][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 749.130901][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 749.140414][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 749.155252][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 749.164402][ T4604] usb 5-1: config 0 descriptor?? [ 749.175224][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 749.195212][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 749.215396][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 749.235218][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 749.252391][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 749.260595][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 749.285222][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 749.285966][ T8707] rtlwifi: RTL8XXX did not boot from eeprom, check it !! [ 749.299569][ T8707] rtl_usb: Too few input end points found [ 749.315238][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 749.335245][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 749.347815][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 749.355718][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 749.378302][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 749.405992][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 749.431895][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 749.433242][ T4604] usb 5-1: USB disconnect, device number 69 [ 749.447653][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 749.466816][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 749.492210][ T8707] usb 6-1: USB disconnect, device number 55 [ 749.499162][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 749.515856][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 749.553483][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 749.567383][ T8705] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 749.576469][ T8705] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 749.609504][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 749.637070][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 749.658862][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 749.686374][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 749.694012][ T8705] usb 4-1: USB disconnect, device number 45 [ 749.715158][ C1] mceusb 4-1:0.0: Error: urb status = -71 04:37:16 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401c1b021b4000000000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x4004550d, 0x0) 04:37:16 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007075eb08f305400255e30000000109021b000100000000090400000100007d000905850b04"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 04:37:16 executing program 2: r0 = inotify_init1(0x0) fcntl$getownex(r0, 0x10, 0x0) ptrace$setregset(0x4205, 0x0, 0x4, &(0x7f0000001780)={0x0}) ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, &(0x7f00000003c0)={0x6, 0x8}) mkdir(0x0, 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x58248}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') accept4$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e, 0x100000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="78000000100001040600"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000500012800e0001006970366772657461700000003c0002800800150054a302000400120005000b000200000014000600fe880000000000000000000000000001050008000400000008000c000000000008000a00dd35557c07d0f6cdb776446013e2fdba8b1422abe53183e738e3f7184fec0a7eb81fb00db8f56f31acd5c6364e9e6b1d4f642f3e89b5fa3d4e507dee44475598834d826ef4756b71871c11930f0b71c8b199cddedefa7d3905", @ANYRES32=0x0, @ANYBLOB="86567e1e5ff95141af06ecdf31e169c9768367f4beba3db70000000000"], 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x28}, 0x1, 0xfffffffe}, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000180)={[0x3]}, 0x8) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'gretap0\x00', &(0x7f00000007c0)={'erspan0\x00', 0x0, 0x7, 0x700, 0x4, 0x101, {{0x24, 0x4, 0x3, 0xb, 0x90, 0x68, 0x0, 0x4, 0x29, 0x0, @empty, @remote, {[@cipso={0x86, 0xa, 0x3, [{0x5, 0x4, "846a"}]}, @cipso={0x86, 0x38, 0x3, [{0x1, 0x2}, {0x5, 0xd, "27d6fca183e110a8d3536a"}, {0x2, 0x8, "c7156f3c00d5"}, {0x7, 0x5, "a388e1"}, {0x7, 0xb, "db8734ca961244da22"}, {0x7, 0x2}, {0x7, 0x9, "975a35a80ca86e"}]}, @timestamp_prespec={0x44, 0x14, 0x55, 0x3, 0x6, [{@multicast1, 0x523}, {@dev={0xac, 0x14, 0x14, 0x36}, 0xffffffff}]}, @timestamp={0x44, 0x20, 0xf4, 0x0, 0x0, [0x80000001, 0x3, 0x3, 0x1, 0xb0, 0x9, 0xfffffe00]}, @timestamp_prespec={0x44, 0x4, 0x95, 0x3, 0xa}]}}}}}) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000940)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x34, 0x0, 0x402, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000000}, 0x80) inotify_init1(0x0) 04:37:16 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f00000001c0)={[{0x2, 0x4e00, "ff11"}, {}]}) 04:37:16 executing program 0: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000040)={{0x2, 0x0, @dev}, {0x0, @multicast}, 0x1e, {0x2, 0x0, @private}, 'veth0_to_bond\x00'}) 04:37:16 executing program 5: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a66f1b40da0b7f31cc9d000000010902240001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001bc0)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000b00)={0x1c, &(0x7f0000000a40)={0x0, 0x0, 0x1, "1b"}, 0x0, 0x0}) [ 750.821942][ T28] audit: type=1400 audit(1598762236.454:13): avc: denied { create } for pid=15470 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 04:37:16 executing program 0: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000040)={{0x2, 0x0, @dev}, {0x0, @multicast}, 0x0, {0x2, 0x0, @private}, 'veth0_to_bond\x00'}) [ 751.062625][ T8707] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 751.157875][ T8705] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 751.205693][ T27] usb 4-1: new high-speed USB device number 46 using dummy_hcd 04:37:16 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') socket$nl_route(0x10, 0x3, 0x0) alarm(0x0) [ 751.315760][ T8707] usb 2-1: Using ep0 maxpacket: 8 [ 751.347314][ T8796] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 751.436682][ T8707] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 751.449451][ T8707] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=e3.55 [ 751.459645][ T8707] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.481566][ T27] usb 4-1: Using ep0 maxpacket: 16 [ 751.557221][ T8705] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 751.564390][ T8707] usb 2-1: config 0 descriptor?? [ 751.569170][ T8705] usb 6-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 751.584794][ T8705] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.636768][ T27] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 751.648179][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 751.670885][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 751.682094][ T27] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 751.693160][ T27] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 04:37:17 executing program 0: setpriority(0x1, 0x0, 0x1) 04:37:17 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000020000505d25a80648c2a940d0324fc6010020a400a000e60053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) [ 751.753288][ T8705] usb 6-1: config 0 descriptor?? [ 751.806962][ T27] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 751.818153][ T27] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 751.827282][ T27] usb 4-1: Manufacturer: syz [ 751.827508][ T8707] powermate: unknown product id 0240 [ 751.843422][ T8707] input: Griffin SoundKnob as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input45 [ 751.867698][ T8796] usb 5-1: config 0 has no interfaces? [ 751.874223][ T8796] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 751.883848][ T8796] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.902040][ T27] usb 4-1: config 0 descriptor?? [ 751.915976][ T8796] usb 5-1: config 0 descriptor?? [ 752.031993][ T8707] usb 2-1: USB disconnect, device number 54 [ 752.039125][ C0] powermate 2-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 752.039212][ C0] powermate: config urb returned -71 [ 752.039235][ C0] powermate: usb_submit_urb(config) failed [ 752.066135][ T8705] rtl8192cu: Chip version 0x10 [ 752.169683][T12836] usb 5-1: USB disconnect, device number 70 [ 752.277625][ T8705] rtlwifi: RTL8XXX did not boot from eeprom, check it !! [ 752.285317][ T8705] rtl_usb: Too few input end points found 04:37:18 executing program 0: r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000440)=[{&(0x7f0000003a80)='\a', 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x7ffff000}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000000)="be", 0x1}], 0x1}, 0x4040060) [ 752.376280][ T27] Registered IR keymap rc-hauppauge [ 752.411162][ T27] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 752.476095][ T27] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 752.490729][ T8705] usb 6-1: USB disconnect, device number 56 [ 752.528891][ T27] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 752.548257][ T27] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input46 [ 752.602191][ T27] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 752.615252][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 752.635273][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 752.655239][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 752.685164][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 752.708344][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 752.732915][ T27] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 752.745843][T12836] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 752.754426][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 752.809809][ T27] mceusb 4-1:0.0: Error: mce write submit urb error = -90 04:37:18 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007075eb08f305400255e30000000109021b000100000000090400000100007d000905850b04"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) [ 752.897895][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 752.944855][ T27] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 752.979954][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 752.993311][ T27] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 753.013346][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 753.070296][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 753.078770][ T27] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 753.136913][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 753.145921][T12836] usb 5-1: config 0 has no interfaces? [ 753.151882][T12836] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 753.152028][ T27] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 753.170327][T12836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.204833][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 753.216574][ T27] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 753.253723][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 753.270181][ T27] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 753.299128][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 753.319254][ T27] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 753.365541][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 753.396308][T12836] usb 5-1: config 0 descriptor?? [ 753.401068][ T27] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 753.410403][ T27] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 753.461335][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 753.489773][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 753.532517][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 753.542497][ T27] usb 4-1: USB disconnect, device number 46 [ 753.563733][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 753.664721][T12836] usb 5-1: USB disconnect, device number 71 [ 753.806300][ T8705] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 753.953199][T15549] syz-executor.0 (15549) used greatest stack depth: 4664 bytes left [ 754.065481][ T8705] usb 2-1: Using ep0 maxpacket: 8 [ 754.169322][ T9264] tipc: TX() has been purged, node left! [ 754.196418][ T8705] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 754.209758][ T8705] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=e3.55 [ 754.219370][ T8705] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.342406][ T8705] usb 2-1: config 0 descriptor?? [ 754.595878][ T8705] powermate: unknown product id 0240 [ 754.604434][ T8705] input: Griffin SoundKnob as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input47 04:37:20 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401c1b021b4000000000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x4004550d, 0x0) 04:37:20 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f00000001c0)={[{0x2, 0x4e00, "ff11"}, {}]}) 04:37:20 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r0, 0x1) 04:37:20 executing program 5: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a66f1b40da0b7f31cc9d000000010902240001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001bc0)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000b00)={0x1c, &(0x7f0000000a40)={0x0, 0x0, 0x1, "1b"}, 0x0, 0x0}) 04:37:20 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/arp\x00') sendfile(r0, r1, 0x0, 0x1) [ 754.825619][ T8705] usb 2-1: USB disconnect, device number 55 [ 754.835125][ C1] powermate: config urb returned -71 [ 754.840690][ C1] powermate: usb_submit_urb(config) failed [ 755.226178][ T8707] usb 4-1: new high-speed USB device number 47 using dummy_hcd 04:37:20 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r2, 0x0, 0x200000000000c8, &(0x7f0000000000), 0x4) setsockopt$inet_int(r2, 0x0, 0x40000000000c9, 0x0, 0x0) [ 755.330169][ T27] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 755.496318][ T8707] usb 4-1: Using ep0 maxpacket: 16 [ 755.537152][T12836] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 755.621304][ T8707] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 755.632549][ T8707] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 755.644509][ T8707] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 755.655326][ T8707] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 755.665401][ T8707] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 755.758541][ T27] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 755.769521][ T27] usb 6-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 755.779931][ T27] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.914460][ T27] usb 6-1: config 0 descriptor?? [ 755.915803][T12836] usb 5-1: config 0 has no interfaces? [ 755.926187][T12836] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 755.936855][T12836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.066371][ T8707] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 756.076667][ T8707] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 756.085520][ T8707] usb 4-1: Manufacturer: syz [ 756.130743][T12836] usb 5-1: config 0 descriptor?? [ 756.233506][ T8707] usb 4-1: config 0 descriptor?? [ 756.270469][ T27] rtl8192cu: Chip version 0x10 [ 756.385089][T12836] usb 5-1: USB disconnect, device number 72 [ 756.485405][ T27] rtlwifi: RTL8XXX did not boot from eeprom, check it !! [ 756.492815][ T27] rtl_usb: Too few input end points found [ 756.716139][ T8707] Registered IR keymap rc-hauppauge [ 756.752090][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 04:37:22 executing program 1: setpriority(0x2, 0x0, 0x1) [ 756.798939][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 756.804151][ T8796] usb 6-1: USB disconnect, device number 57 [ 756.851556][ T8707] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 756.867180][ T8707] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input48 [ 756.918474][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 756.935212][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 756.955386][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 756.962930][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 756.975212][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 756.982171][T12836] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 756.995247][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 757.003117][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 757.015097][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 757.035261][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 757.054745][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 757.063094][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 757.075968][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 757.095347][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 757.115365][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 757.135436][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 757.155276][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 757.163029][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 757.175181][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 757.195383][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 757.215316][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 757.234685][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 757.242496][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 757.255155][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 757.275251][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 757.296682][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 757.315273][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 757.330100][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 757.337995][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 757.349000][T12836] usb 5-1: config 0 has no interfaces? [ 757.354695][T12836] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 757.364330][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 757.370687][T12836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.379603][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 757.395295][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 757.415197][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 757.422159][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 757.435377][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 757.454056][T12836] usb 5-1: config 0 descriptor?? [ 757.459768][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 757.470928][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 757.478615][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 757.495174][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 757.510048][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 757.517835][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 757.535334][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 757.550904][ T8707] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 757.559707][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 757.566650][ T8707] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 757.575519][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 757.592645][ T8707] usb 4-1: USB disconnect, device number 47 [ 757.598980][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 757.722475][ T8703] usb 5-1: USB disconnect, device number 73 [ 759.397091][ T9264] device hsr_slave_0 left promiscuous mode [ 759.424618][ T9264] device hsr_slave_1 left promiscuous mode [ 759.456450][ T9264] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 759.465926][ T9264] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 759.507731][ T9264] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 759.515748][ T9264] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 759.540290][ T9264] device bridge_slave_1 left promiscuous mode [ 759.547344][ T9264] bridge0: port 2(bridge_slave_1) entered disabled state [ 759.575617][ T9264] device bridge_slave_0 left promiscuous mode [ 759.582480][ T9264] bridge0: port 1(bridge_slave_0) entered disabled state [ 759.623000][ T9264] device veth1_macvtap left promiscuous mode [ 759.629687][ T9264] device veth0_macvtap left promiscuous mode [ 759.636023][ T9264] device veth1_vlan left promiscuous mode [ 759.641872][ T9264] device veth0_vlan left promiscuous mode 04:37:27 executing program 1: syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x2240) 04:37:27 executing program 5: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a66f1b40da0b7f31cc9d000000010902240001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x10, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001bc0)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000b00)={0x1c, &(0x7f0000000a40)={0x0, 0x0, 0x1, "1b"}, 0x0, 0x0}) 04:37:27 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f00000001c0)={[{0x2, 0x4e00, "ff11"}, {}]}) 04:37:27 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000300)='attr/sockcreate\x00') sendfile(r0, r1, 0x0, 0x1) 04:37:27 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401c1b021b4000000000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x4004550d, 0x0) [ 762.296001][ T9071] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 762.326995][ T27] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 762.336357][T12836] usb 4-1: new high-speed USB device number 48 using dummy_hcd 04:37:28 executing program 0: openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0xe0000, 0x0, 0x6, 0x823}, 0x0, 0xffffffffffffffff, r1, 0x4) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000240)={0x26, 0x2}) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x0, 0x8201, 0xf32, 0x0, 0x0, 0x6bec}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$mice(0xffffffffffffff9c, 0x0, 0x101440) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="02002abd7000fcdbdf250c000000050033"], 0x1c}}, 0x164954113e6fa68e) 04:37:28 executing program 1: openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x4000, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_open_procfs(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, 0x0) syz_open_procfs(0x0, 0x0) syz_open_procfs(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sysinfo(0x0) syz_genetlink_get_family_id$SEG6(0x0) socket$inet_udplite(0x2, 0x2, 0x88) [ 762.605685][T12836] usb 4-1: Using ep0 maxpacket: 16 [ 762.726330][T12836] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 762.726811][ T27] usb 5-1: config 0 has no interfaces? [ 762.737090][T12836] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 762.742345][ T27] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 762.753499][T12836] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 762.762676][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.772495][T12836] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 762.783046][ T9071] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 762.790739][T12836] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 762.814765][ T9071] usb 6-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 762.827604][ T9071] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.023824][ T9071] usb 6-1: config 0 descriptor?? [ 763.056877][ T27] usb 5-1: config 0 descriptor?? [ 763.210685][T12836] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 763.220164][T12836] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 763.228509][T12836] usb 4-1: Manufacturer: syz [ 763.297088][T12836] usb 4-1: config 0 descriptor?? [ 763.333052][ T27] usb 5-1: USB disconnect, device number 74 [ 763.342030][ T9071] rtl8192cu: Chip version 0x10 [ 763.555712][ T9071] rtlwifi: RTL8XXX did not boot from eeprom, check it !! [ 763.562889][ T9071] rtl_usb: Too few input end points found [ 763.786204][T12836] Registered IR keymap rc-hauppauge [ 763.809136][ T3225] usb 6-1: USB disconnect, device number 58 [ 763.820419][T12836] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 763.926361][ T27] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 764.051753][T12836] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 764.116881][T12836] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 764.132294][T12836] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input49 [ 764.308570][T12836] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 764.325298][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 764.326514][ T27] usb 5-1: config 0 has no interfaces? [ 764.337128][ T27] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 764.345186][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 764.346434][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.365284][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 764.374186][T12836] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 764.385280][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 764.405226][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 764.412041][T12836] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 764.425253][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 764.445212][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 764.451781][T12836] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 764.465235][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 764.485206][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 764.492176][T12836] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 764.505262][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 764.525249][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 764.531976][T12836] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 764.545224][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 764.565238][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 764.573871][T12836] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 764.585192][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 764.605258][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 764.612503][T12836] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 764.622815][ T27] usb 5-1: config 0 descriptor?? [ 764.625240][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 764.645233][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 764.654747][T12836] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 764.665266][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 764.685321][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 764.705251][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 764.713958][T12836] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 764.725256][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 764.745293][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 764.760755][T12836] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 764.769229][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 764.775679][T12836] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 764.785305][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 764.805218][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 764.825240][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 764.839175][T12836] usb 4-1: USB disconnect, device number 48 [ 764.845519][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 765.001453][ T27] usb 5-1: USB disconnect, device number 75 [ 767.779374][ T9071] Bluetooth: hci2: command 0x0409 tx timeout [ 769.856420][T12836] Bluetooth: hci2: command 0x041b tx timeout [ 771.935917][T12836] Bluetooth: hci2: command 0x040f tx timeout [ 774.030041][ T9600] Bluetooth: hci2: command 0x0419 tx timeout [ 774.569829][ T9264] team0 (unregistering): Port device team_slave_1 removed [ 774.692401][ T9264] team0 (unregistering): Port device team_slave_0 removed [ 774.925276][ T9264] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 775.017752][ T9264] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 776.192906][ T9264] bond0 (unregistering): Released all slaves [ 776.528089][T15718] IPVS: ftp: loaded support on port[0] = 21 [ 778.378226][T15718] chnl_net:caif_netlink_parms(): no params data found [ 779.380151][T15718] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.387915][T15718] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.398114][T15718] device bridge_slave_0 entered promiscuous mode [ 779.558908][T15718] bridge0: port 2(bridge_slave_1) entered blocking state [ 779.566414][T15718] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.576710][T15718] device bridge_slave_1 entered promiscuous mode [ 780.009097][T15718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 780.225793][T15718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 780.462488][T15718] team0: Port device team_slave_0 added [ 780.568644][T15718] team0: Port device team_slave_1 added [ 781.060890][T15718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 781.068053][T15718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 781.094216][T15718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 781.192692][T15718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 781.201122][T15718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 781.227516][T15718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 781.873219][T15718] device hsr_slave_0 entered promiscuous mode [ 782.026372][T15718] device hsr_slave_1 entered promiscuous mode [ 782.088870][T15718] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 782.097179][T15718] Cannot create hsr debugfs directory [ 785.080200][T15718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 785.285914][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 785.295875][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 785.380226][T15718] 8021q: adding VLAN 0 to HW filter on device team0 [ 785.543404][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 785.554678][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 785.564466][ T8705] bridge0: port 1(bridge_slave_0) entered blocking state [ 785.572868][ T8705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 785.816509][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 785.830603][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 785.842465][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 785.855581][ T8705] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.866318][ T8705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 785.886144][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 785.903055][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 785.997839][T15718] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 786.013290][T15718] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 786.339383][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 786.353146][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 786.366106][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 786.385195][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 786.401684][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 786.414386][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 786.431362][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 786.448857][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 786.459524][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 786.469938][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 786.572639][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 786.585887][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 786.680860][T15718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 787.883286][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 787.894253][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 788.169734][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 788.180542][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 788.273752][T15718] device veth0_vlan entered promiscuous mode [ 788.386916][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 788.396762][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 788.643570][T15718] device veth1_vlan entered promiscuous mode [ 788.888263][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 788.899124][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 789.115527][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 789.127183][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 789.183973][T15718] device veth0_macvtap entered promiscuous mode [ 789.247442][T15718] device veth1_macvtap entered promiscuous mode [ 789.431573][T15718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 789.442411][T15718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.453155][T15718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 789.464318][T15718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.474641][T15718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 789.485239][T15718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.495305][T15718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 789.506181][T15718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.516217][T15718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 789.526854][T15718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.542002][T15718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 789.558383][T12836] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 789.568671][T12836] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 789.578893][T12836] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 789.589579][T12836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 790.346299][T15718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 790.356928][T15718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 790.367692][T15718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 790.379742][T15718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 790.390298][T15718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 790.401050][T15718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 790.411169][T15718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 790.422201][T15718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 790.432706][T15718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 790.443328][T15718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 790.458419][T15718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 790.470955][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 790.481690][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 04:37:57 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() r1 = getpid() rt_tgsigqueueinfo(r0, r1, 0x16, &(0x7f0000000000)) 04:37:57 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f0000000040)=0x7) syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') 04:37:57 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r0, 0x0) 04:37:57 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f00000001c0)={[{0x2, 0x4e00, "ff11"}, {}]}) 04:37:57 executing program 5: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a66f1b40da0b7f31cc9d000000010902240001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x10, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001bc0)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000b00)={0x1c, &(0x7f0000000a40)={0x0, 0x0, 0x1, "1b"}, 0x0, 0x0}) 04:37:57 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401c1b021b4000000000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x4004550d, 0x0) 04:37:57 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 04:37:57 executing program 2: clone(0x780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$KVM_ASSIGN_SET_MSIX_NR(0xffffffffffffffff, 0x4008ae73, &(0x7f00000000c0)={0x0, 0x7fff}) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x600) sendfile(r0, r1, 0x0, 0x10000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f00000002c0)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000280)) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x40001}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/if_inet6\x00') dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 791.935985][T12836] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 792.008532][ T3225] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 792.018491][ T8705] usb 5-1: new high-speed USB device number 76 using dummy_hcd 04:37:57 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) bind$packet(r2, &(0x7f00000003c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="20188281f3a1"}, 0x14) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$can_bcm(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x1d, r4}, 0x10, &(0x7f00000000c0)={&(0x7f0000000180)={0x1, 0x7, 0x0, {0x0, 0xea60}, {0x0, 0x2710}}, 0x48}}, 0x0) [ 792.275609][ T3225] usb 4-1: Using ep0 maxpacket: 16 [ 792.305955][T12836] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 792.316782][T12836] usb 6-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 792.326209][T12836] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.417650][ T8705] usb 5-1: config 0 has no interfaces? [ 792.423379][ T8705] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 792.432917][ T8705] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.443345][ T3225] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 792.453833][ T3225] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 792.465124][ T3225] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 792.475125][ T3225] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 792.485118][ T3225] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 792.524650][ T28] audit: type=1804 audit(1598762278.154:14): pid=15975 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir558874421/syzkaller.UvZw1X/2/file0" dev="sda1" ino=16083 res=1 [ 792.578685][T12836] usb 6-1: config 0 descriptor?? [ 792.722789][ T8705] usb 5-1: config 0 descriptor?? [ 792.875826][T12836] rtl8192cu: Chip version 0x10 04:37:58 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000440)={@in={{0x2, 0x0, @dev}}, 0x0, 0x9, 0x8}, 0xd8) r1 = socket$unix(0x1, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0x90) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4) sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x4000800, 0x0, 0xfffffffffffffd34) [ 792.917092][ T3225] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 792.926598][ T3225] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 792.934737][ T3225] usb 4-1: Manufacturer: syz [ 792.985700][ T27] usb 5-1: USB disconnect, device number 76 [ 793.085680][ T3225] usb 4-1: config 0 descriptor?? [ 793.096201][T12836] rtlwifi: RTL8XXX did not boot from eeprom, check it !! [ 793.103674][T12836] rtl_usb: Too few input end points found 04:37:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0x8, 0x0, &(0x7f0000000040)) [ 793.156619][ T28] audit: type=1800 audit(1598762278.794:15): pid=15975 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.2" name="file0" dev="sda1" ino=16083 res=0 [ 793.329290][ T8707] usb 6-1: USB disconnect, device number 59 04:37:59 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000033000505d25a80648c2a940d0324fc6010020a400a000e60053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) [ 793.576914][ T3225] Registered IR keymap rc-hauppauge 04:37:59 executing program 0: inotify_init1(0x0) ptrace$setregset(0x4205, 0x0, 0x4, &(0x7f0000001780)={0x0}) r0 = perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x0) ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x58248}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') accept4$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e, 0x100000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="78000000100001040600"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000500012800e0001006970366772657461700000003c0002800800150054a302000400120005000b000200000014000600fe880000000000000000000000000001050008000400000008000c000000000008000a00dd35557c07d0f6cdb776446013e2fdba8b1422abe53183e738e3f7184fec0a7eb8", @ANYRES32=0x0], 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x28}, 0x1, 0xfffffffe}, 0x0) r2 = signalfd(r0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000940)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x2c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000000}, 0x80) inotify_init1(0x0) [ 793.610455][ T3225] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 793.625588][ T27] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 793.736138][ T3225] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 793.792120][ T3225] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 793.807589][ T3225] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input50 04:37:59 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/igmp6\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40004007fff, 0x32fe3c70}, 0x14) sendfile(r1, r0, 0x0, 0xedc0) [ 793.999134][ T3225] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 794.015344][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 794.045642][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 794.065321][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 794.077229][ T27] usb 5-1: config 0 has no interfaces? [ 794.083333][ T27] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 04:37:59 executing program 5: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a66f1b40da0b7f31cc9d000000010902240001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x10, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001bc0)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000b00)={0x1c, &(0x7f0000000a40)={0x0, 0x0, 0x1, "1b"}, 0x0, 0x0}) [ 794.093400][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 794.100408][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.108805][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 794.122294][ T3225] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 794.129958][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 794.145249][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 794.165762][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 794.185386][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 794.195706][ T3225] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 794.205247][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 794.213031][ T27] usb 5-1: config 0 descriptor?? [ 794.225403][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 794.245216][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 794.262699][ T3225] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 794.270449][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 794.285285][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 794.305193][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 794.325221][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 794.332506][ T3225] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 794.355247][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 794.375224][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 794.395253][ C1] mceusb 4-1:0.0: Error: urb status = -71 04:38:00 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f00000001c0)={[{0x2, 0x4e00, "ff11"}, {}]}) [ 794.404250][ T3225] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 794.415241][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 794.445332][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 794.462663][ T8705] usb 5-1: USB disconnect, device number 77 [ 794.469141][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 794.486704][ T3225] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 794.495231][ C1] mceusb 4-1:0.0: Error: urb status = -71 04:38:00 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="7400000024005f05e41e0b000000001700000000", @ANYRES32, @ANYBLOB="00000000ffffffff000000002c0008801c000100000547000600000000000000132d0000ffff0000030000000a000200000000000000000008000e00ff00000008000d000600000006000500400600000b000100636c73616374"], 0x74}}, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x800) [ 794.515377][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 794.523073][ T3225] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 794.535235][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 794.555327][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 794.563559][ T3225] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 794.585259][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 794.603884][ T3225] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 794.611602][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 794.625243][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 794.655194][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 794.670419][ T3225] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 794.678978][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 794.685413][ T3225] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 794.695258][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 794.725189][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 794.745367][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 794.775284][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 794.795290][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 794.815329][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 794.835303][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 794.855206][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 794.875214][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 794.884782][ T3225] usb 4-1: USB disconnect, device number 49 [ 794.895274][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 795.059025][T11141] tipc: TX() has been purged, node left! [ 795.195503][T10133] usb 6-1: new high-speed USB device number 60 using dummy_hcd 04:38:01 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401c1b021b4000000000010902"], 0x0) syz_usb_disconnect(r0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r1, 0x4004550d, 0x0) 04:38:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0xae80, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) ftruncate(0xffffffffffffffff, 0x0) 04:38:01 executing program 2: clone(0x1000900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x4001, 0x3, 0x390, 0x228, 0x0, 0x148, 0x0, 0x148, 0x2f8, 0x240, 0x240, 0x2f8, 0x240, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'bond_slave_1\x00'}, 0x0, 0x1c0, 0x228, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'macvtap0\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xec, 0x7}}}, @common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x2, 0x0, 0x8, 0x0, 'syz1\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) [ 795.580548][T10133] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 795.591080][T10133] usb 6-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 795.597680][ T9600] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 795.600531][T10133] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.763790][T10133] usb 6-1: config 0 descriptor?? [ 795.845810][ T9600] usb 4-1: Using ep0 maxpacket: 16 [ 795.966702][ T9600] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 795.977516][ T9600] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 795.988790][ T9600] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 795.998817][ T9600] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 796.008861][ T9600] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 796.047609][T10133] rtl8192cu: Chip version 0x10 04:38:01 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000840)='#em3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gcg,\"\x1dD4\x17\xc0\xe6\b\x00\x00\x00\x00\x00\x00\x00vob/~\xc2\xdd\x84\x1cVJ\xf0\xear \xff\xf1\xdem\x9c\xfa\xb4\x17\xa8z\x19\xebl\x17\x84\xd2\x86\xbf\x89.\xd7q\xbb\x7fN\xd1\r%;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbf\x8c\x19\r\x81j\x88d\x9d5\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\xf2\xdd\x03\xe02\xa4\xc4q\n\xe3\xa6\x91\x03\xde\x8e\xeb\x1d|\xf9\xff\x0f\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\x12?\xc7zL\x01\r-~\xaa\x80\xec\xc7\xf1\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x85\xda\xa3\xe1\xc3\x84\x8c\xc9+\xad\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xf8|}\xb4\xa8Ao3\x0f\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8p\xf2\x90\x03\xd6\xb2\xd6Y\xf2\x91\xc2\xeb\"\\\xa70k\x9f\x9b-1\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9baom\xd60\x80P!m\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\x98[}\x03\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\x02\x00>\xdd7\xb7\x8e\x9c;-o\xc9\xec_|\x02\xc8Ru\x95\xa8\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xf7\x1d_\xba\x8aeh;FA\xcdN#\xfb\xb0\xf2\x1e\x0e#J\xd0hB<\xc0\x82A0)p\xe7&B\x82\x83\x83\xd14\x01\xef\x1b\xa9\x1d\x1efM \x1d\x8e,\x0f\x86(1\xd6l\xd2\x8f\xb0\xd4\xb5\x1ae\xc1p0U\xb8\xb2\x9a\xcbA\x80\xbf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14s<\x05l\xc7\\\f\x9a\xb5\xdcw~;3\x10\xe3@\xd87\x05\x9f:~O\n\"dJ\x01\x03k\x1f\xcc)aM\x83\xe8\x90\xc6k~M\x11\xa92\xb0\x06\x87\xa1\xb8\xda\x96\xfa\xb0\x97\xc0\xcc\x058\x10Y\xda\x03\xb6\x1a\x881Y\xdd\xef\xe8\x8e\xeet\xc8\xcf\xb5}\xd6\n\x04VL\xa5}\xe2\xc9q\x11\x1e\xb9\xf5?a,.\x06H\xefI\x1eH\x1c\xce \x8e\x92\xecA4\'\x1czO]\xa6X\xdd\x1eCJ\xcc\xde\x1e\xd9P\xe9+\x87\xf2\x9e\xf3l\xeb\x05\x7f\xe2%\x1a5\x81\x82t\x1b\xd2\x8d\xcaT\xd8\xfa\xb5f\xf0\x8a\x8d1\x9eF\xd9\x96\xe6\x9a\x88g\xd8_\xd2\xe5B6\xe5\x8a=a\xf0\x17\xb2\xe5\x1c&\xa0\x97\xd6\xd3', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8010002}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000240)=r4, 0x12) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @tid=r4}, &(0x7f0000000080)) r5 = open(&(0x7f0000000180)='./bus\x00', 0xa00, 0x8) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) fcntl$dupfd(r6, 0x406, r0) r7 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) sendfile(r7, 0xffffffffffffffff, 0x0, 0x4000000000010046) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)="02b002bd059805ddddcee1035a6d58275c8aa520be74663719a020fd8b3d7ea7c36a240eeba52a6fba24f9e6c0e06c918c6038f8fa801faa4585b94f52c8d41f696ba05a77de7b1c678e3bde58cd1d3d7ea879ca3167e0cfc26a1cd4e125ee9ac9dfed1344d5fb22bce57232c8c153ee5cfcbdc48d13be0b1a22da3330", 0x7d}, 0x68) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) [ 796.279631][T10133] rtlwifi: RTL8XXX did not boot from eeprom, check it !! [ 796.286921][T10133] rtl_usb: Too few input end points found [ 796.357315][ T9600] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 796.366668][ T9600] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 796.375521][ T9600] usb 4-1: Manufacturer: syz 04:38:02 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x4, [@struct, @restrict, @enum={0x0, 0x4, 0x0, 0x6, 0x4, [{}, {}, {}, {}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x60}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) [ 796.415672][ T8707] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 796.495972][ T8705] usb 6-1: USB disconnect, device number 60 [ 796.527868][ T9600] usb 4-1: config 0 descriptor?? 04:38:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setuid(0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@local}}, {{@in=@remote}, 0x0, @in=@initdev}}, 0x0) getegid() setregid(0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0xb25, 0x0, 0x2, 0x0, 0x7]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 796.817314][ T8707] usb 5-1: config 0 has no interfaces? [ 796.823370][ T8707] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 796.832907][ T8707] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.989586][ T8707] usb 5-1: config 0 descriptor?? [ 797.008668][ T9600] Registered IR keymap rc-hauppauge [ 797.042214][ T9600] mceusb 4-1:0.0: Error: mce write submit urb error = -90 04:38:02 executing program 0: read$eventfd(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x99, &(0x7f00000002c0)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x74) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x0, 0x0}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000004c0)={0x4, 0xd, [], [@calipso={0x7, 0x38, {0x1, 0xc, 0x0, 0x3, [0x2, 0x2c0be204, 0x6, 0x20, 0x3, 0x1]}}, @pad1, @generic={0x5, 0xd, "312f13b853d7e2872ce8af53d3"}, @calipso={0x7, 0x18, {0x0, 0x4, 0x9d, 0x0, [0x7, 0x7fff]}}, @padn={0x1, 0x2, [0x0, 0x0]}]}, 0x78) r1 = socket(0x1, 0x803, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffa}, 0x48101, 0x0, 0x180}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x0, &(0x7f0000000740)={0x80, {{0xa, 0x4e23, 0x3, @private2, 0x6}}, {{0xa, 0x4e22, 0x1, @ipv4={[], [], @empty}, 0xfffffff7}}}, 0x104) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@mcast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x2, 0x9, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in=@multicast1, 0x4d2, 0x33}, 0x0, @in6=@private0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9}}, 0xe4) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRES64], 0x1) clone(0x20000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x21c, 0xb8, 0x0, 0xb8, 0xb8, 0x64000000, 0x188, 0x188, 0x188, 0x188, 0x188, 0x42f, 0x0, {[{{@ip={@multicast1=0xe000e400, @remote={0xac, 0x14, 0xb}}, 0xa000000, 0x70, 0xb8, 0x0, {0x900000000000000, 0x3e00000000000000}}, @unspec=@CT0={0x48, 'CT\x00'}}, {{@ip={@remote, @empty, 0x0, 0x0, '\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xd0, 0x0, {0xec00000000000000}}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x94, 0x0, {0xa}}, {0x24}}}}, 0x278) open(0x0, 0x0, 0x0) [ 797.218878][ T9600] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 797.275412][ T8705] usb 5-1: USB disconnect, device number 78 [ 797.282342][ T9600] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 797.297961][ T9600] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input51 04:38:03 executing program 5: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a66f1b40da0b7f31cc9d000000010902240001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x10, &(0x7f0000001000), 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001bc0)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000b00)={0x1c, &(0x7f0000000a40)={0x0, 0x0, 0x1, "1b"}, 0x0, 0x0}) 04:38:03 executing program 2: perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x84842, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x280820c, 0xfff8}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x84842, 0x0) read$FUSE(r3, &(0x7f00000021c0)={0x2020}, 0x200041e0) syz_fuse_handle_req(r1, &(0x7f0000006380)="f7709f77945ec10b4eecea480cce6641402373da5e6d7f24014f7acee96be0135b59ce90b463223252169e036a4daf3dae250a1e6de526211d43d9512ae526730f553268794994fd54868ec480d09862b687b463a8fc5058903593b9bb4d50879635cbf67a9e7d1110fa0e8ef89dbd2abdae33183737b8c0b907f5cc74ad6ab0383f8240e091417d2816317f40abb64224f616136f93d932f2223ef42fa3c3155d53075d3eb1db73beb32bc364e3fc246d3dcaca2dc91a634815412bae915cdb1a6da7884559403b545235541ddac97d7b1ea8135539ebcfac1edfa2fee8cf78bb46da7644a8f9e42ae06ca7a188b83fa537b0962a10411b67fc4d7dfe9e95cce2aef82e75f4680b8ff9976b6569523b72a86bd3a8c96f30e85812fe33a610c2be0a3c1063e2ee864c6e8bbf331f2768accfea78700a7321e4af2db46fd162457e439369da2217992b77502b9b958df27bc086369963793854d7f8b00c537de3216898b8f2c1dd925049eef1ab57bb6f63b2d88850b49b3c54d71f545afafa16bd2d06ae501344987623890fdf9ac04b179d2131070a34cf143697b6642bf5da67437aaf5e78e7e6be85e44ad7b265d78d2baf92ee5ccb0a452eb32fb3fdd1a41abf3a68086acd20458af55c086f77c30bbbce4c19542f92ab1e68393ffa58b140586b49761aacdf6aeb7682561f01e0869f503c4a161fd405046d3e6523bd4071c09b7516e4e784f4d11706f1c2eb170e735e563c43317a5a9afad28511163cdb63660beb699f7b8a7eaf57d48517974ffa766fe8deab0cfb11562b9c281bce2493d08c40a259e0325c52124e303064c6fbae2826355e531543863030fef484621a381a945b6ec7253e20047e7294bd069442f72672e6dfe1ca17d75d8c6b16c931438cec72e6ee53f3db89a10a38a93cc84c7393773461db5074b4f5060dd0a04a069a7a9b078856a3fa1786fc8dab621ba622acafd0781b523ea097283afb0c59222a316c6ddc0554bcaccc70288e524ed7719fc02a86283b57690a7320af028efbaedd5bd158a9dc9ea8e4f53c7da7566cdbdd4f4d9f01a9dfa6251a355e338efc8eee258add8731c7d22161482b7e3c8bc83f30482f9935fcc5974d9d0685b5fba3b07d7f85cc8fef18ac4e8e915b8476bb44d7384c996921ae40a4fdd2dd2a70ba17e1c2d6ec67b8f7b45568c105d52afa9c82bdc1dc7fd951b1e4fc1212bf29231d8e41ed4dacafec9a823a672dceeee0e4048b5620373c53ab8f3553c842a5a6d914f8334d6d8a4af785f418e6b4aab3965f94ca9d80a74a5a034fb6edd0322696aa1060d82c7b104983f8889026819ffdf3d45c604e53066b03dfae13fad499e3894120c10944eaf752989daee4e172decca9c2b324a817a7c787e6bc59fc2884e358a1a9b14b3704cabe374d23c002b8112be68f409302d3dad0a4c02105cb54c4350c24e6f3b7588bf1c28ae321eaebb930cf0c3b607acff20663eab8a593320c518eba8f9205350f11a9c1530115f7e00f2aa335c92e1305ffcfeac7cdecd6f1b6a33710ec77ce428484712d66bad137b6c8da5aa51d1b7196d981a14a40df8406b292f385cb149cfc0a86701566674e089b88487f34fdb0bf16ca94d9da4a837f15d5cf8f11d9c226844d3eb18d848420f344a3992772125319abb641ea56f03fc626f092f67a8b6716b29cf8585cf5fe25a35f5dab0e3e075ba3c84116fb6cbbf99a8153d179ffc1e64356f1fa0bca6823ebd8e1a176636962cff271cee5c5bafcb68fad4921e070c4ae08cd8fa0b94534f11e66403d129a5e8253bd3a9dc09a8189895819ff618532bf6743b17a243d515e63868bdf9287fd1bad0d525759953624c8e82debf88159b2c22945535d9379c911f89c7856be1438bd02df70c939b80741ddad245082a72556a2ab3c2390b84c17b6119103a0b8126dbc55e05b153ef9a12cc67f649c14160c698a7127b39fe88fb91d19b2a381c08114c6e3e6d3d42b77602c838c421a9a414f1eb182d0197ff67dcfb5d79404afbdf9c96f475a0d5afc9a4d7cdad458eed6b1de6c13b11c46004243db779e7ad6dbbf15e69ee34bd2524cf72e49a5352992a9251a86c3dc30d7d5fe61ae538928e8fdca0e04fdb5917523d8266b7b4f1679a5082e798f587c5ed9084c70965e94e12f643ab0191e606c2eb0c3359a2b8504f3bb2e721cfbcfdd90c31cde10992c9400273bbc45fe5ba34d7ede773036e2fd1fec1f001c495accdf8ff572de3eb2aeebad29acfe3d2b1448fd67368d0c37f8bfbbf09bafc8f99a44b187f4f443c82b21f66f722fb59f40ce0f9d83c52b9b3358a80e102b21795a1cfcb986c787ccbb9f9c96c2b66d2f7a94ef2c2a5b65d5c2970ba6f3107609f4a67432835c2ce1682d260f6826072a6b6d4b113a5b06311677ca01260f3567ff1ab6be13b455f93916906273c5430fcccb57e0d78224ebec422763ee3a6b94528749a7ee5f70c9036cf3a99a9c98abc0e8aec18733a0c7da76814f2ff741582a9d96eb798426065764fcf86e40b6490f545494b48749fa8d398c5938d6bc7dbe183deecb913ef4c61aef27ea6bb77c23af09c3dec453f01d8e0cf1a3df30d73d44c4e147d9ff2853cb05b1d9fcd2d80815016f65368c477f3e8b676ee1ef5b9154850f02951060f5335d7b8b1c395151b443130d27b4aa0cdd9c1badc38e1825cbaea22480e1d8a986b001a4464fea618707f43bdf7949f500f3f9293b7f7f28170d45eb3e9422d7a107d5dfab18b8e7a2cbc4b42a818384136a49a021721fe07dff4fb2f26e74ee6b5725166409d794c69a1a5b27cb6263c387b81612add3c9e9e509845843a6ffb2250d37c365e3f57f0ad6e908fab119211e7679b41c8e298f9e85558be25ec0a4e6c9aa3d523ef3771971bfd272fcb736d10fa98a87b78c532fcc322f5e24baa21f2a3c84a90ec9b546869400bad19dec3575ebc69c8e512210b81667ed3cede89d10ee5871a6fb166b2f5c96f079cd5bf97f41327930b210627106c4cb6d77e3793b808c425b8a4118bbaa2d1a1454b162cf9886ec17e215d12223a65348ab33185861ab1f3166a4a925d25a63def895a5b01deea11bcaf17c79d27a922834a32aa0f8676793c7257e44d3f7768de19292a385a7a4b3fc992abfb9f8f3ada57b83dc7955c0b2edef1a8214dd8ea2cc9679685137dd63f3918020e2e2f38602005a4a6e84422867b9160f65e92e053d0b58191eadcd5a8a69b18e3216ea63df3f31869c81de88fc75a1d9e15cbdf8d68ba50cd8dfa55259aa362c2615ccab13489844d5ed995383e334074f561a4a67e1060e64a818fc96135d34e604cabe3d9195cf1283725c7700e397ecb72fc8b36f38cd0830b19b439101e4b3839c48ddc95367bff87b888407a517f94fbe58a7033db1123c0a0074c730e34ce821e12f43d84d3b4f0310c6ecd8afe7779671d7b825bb3892825c762b86f0ffd182b6aafd477fadf0c7a931cb61e2b05fc11267bf0a9882e7c2f8e84d3480d9e4576cc03f0e1dbfbef9f66840ad37e76da3ff8a419730a0076de67e9b913f03f5b637287d981eafa1223feafb86bcff5b2ce987f6fa8386ee036a3f75fe014ef90b05a744e038c43766b5fd552e66b9b4996f774988d2a70fa0bf05fbc453cc4fd0ab642db1bc71e1b63919f3c49254f177306f9b00af5782c0633d68ecb85f93fc1afd8dee3dd1ca8b0d7ba0ea463de0b6e3e05c080f832e129cec16853923cf15f06d9a38e20a5a6fa5125d03c1b72680547eafd9fdf246af08dcb4d4d746577478fbc72d7a36bb4bd3b5ba4dc5e407babfcd64b8c413d7dd5433d6a4ee17d5b4835a74c81414a9397d73e15ae387f04a5012a37c88b226207aba933d68a67bcd38f5e0fb8b24c4434c3a0109deaef4f9ab1d230ea6a4acd6db0c3962d0de3bb64e33a29af8dcbf39d48a27c1649a66d4aecdce2db60c50bcec31677559369184608db197f2ebed81ca8fbeb9d2f8c486ec9839e765df69ea634f2815e75eac613febfa26012767c28eae207ed9315bf19c42de9602f44f45a9cb9913a67548787a30c9e56f3399ab281c537751a28d98392655a60ceb9f2515772d2f1d5d2843952312e2a59061b60f128def6795e0c8eb7b12a710c1afacc84f498a29d683d1949c17f3aeeb8b9a32eb10bb242d61a2db5902d592224fb8e1e713ef33caaec6f8516333ca4886345555166e91a6469d67f39241d144c6457c0f74c60e662439281a660b3c802eafa5825fab36b764d4753b33920dc72ec4b7136be556c7d0d528eef67049f5a7bd9cc7e4e94a4874ad8d06595ed38a5f1cafff1018c1351d1d7eab144edba6d4f9eeb7924a25b9f7a3eb20984919d9ade66a18c33f92b65031472ca657a724d86053a3fc60fc5502acec81822bc609954e402a406081cfe7931a1adbfc45a3168e30a451561302a131ff702b4d6c5d3603ea9d1b54c64aad93407e078d6b435154236ba594e8d2f798bbdface489b43120bc0bd7e1bcb6658c2c192ccf18f278e9c5bb14dbdf1a4eb3412f9dc64a31abefd79bd7c91bb7297c9f694840a75cae5d3482d15a2d148092a6545972b7f95a23206bda509260bb370a012b744c2bb46b57da12367d35e778b7d7f463fd8230368b5a5636f28e2cddd03c69adc9c913027a726130c95d818fa38ca7ba8421d3fcf0736cd3001ffcf80701cf6d737cc3dd8f905af39fb2806d2f22289d0001c74eb482f4faf0a1863099cc1b236edd1cfa206b21a2ed86affb4e6a3a4dfb54fab46c8c06cd3e370b50e08e1b7a08864269d867eba5fae8a49560e9479209966002c09719ab8ca58702bfb0071d3859df0193a956ed4d8ad19a2c79656c6dd42eb5a44b808df394333683b605ad0cf176bfcfdc89b01317a802cf0ab02fc3673822b55fcfba512792c9e40a150cfae4dcd40b2b12296ba95063a2f50f552b4682c4d461b1efb7555816b5b836ff0319af6935ae5b41e67329a7b21da93c36fcd87cbba1653c0d00077b14cfcba24f891d62219c157b6354300837d211fbcf1881f5e98d6195fb782479e106c072020b56285107e2fd7947bc64ec9a43a0b239c140ec0456685ac3eba988952e641d2eb16cd0132d2bb25576fc6bcd5e29eb9da2d40e8b50776abe5cd7ea45da8442a311977c51755015b3e4995739edef0567a3f169e980addb1705224175372339de904eb952e13f648449722258fa21f7e53f4a1956e8e9a39dbb18c6d2d10d9146358158a0ab7ce3f54120b705e1ccb7a13fb7e9103d0b80faaac31cab07f6d2d9f668c707b5e3bdf259923a1057816a31e8c771267fd974193d90e1a9837a987d9ba52f7af599c1aeed13f6619cc0b334396b750c9017f84cff56c0dfecc12faee59e37cf7d44575bb448abb19616d4fa79f4fdf96631328dd0d0717f12b9587d76b577bbe78eaa7b0acace3b79776b5d2e77942c57745e347ec766170e90cc66a5191bff3ad49d423ba2817cf92be74e653cc6274a20bade324638d57a27f2fea01d4670bc1ad5ec4d006492ff5fa616a0010be824766f12acec9b26a7606cc8453382c3dd1f5f5c85354569123824002c44d0ae4cd2e1ebb4e33e3d7b69fe14e05fb53af9d66f53990a830120cd618cfaa10e5f6deab4ef4522afd380ea52f90b181fd5b538f424900aac643d118c33dbb6ffe0b2428844f51943412d8fda4a327b71c814cd6345b3690a4716f04fc7323ff1af08e82ef5e571c9fb0fa9b22af40948febda32ea14ecf61700eb02967d09bfd078ace6cea259952c0be90fab1ce841f1022d2da82f173c580d43effdb424b1729aa9fe40292c082043a7c901bc76426ef6e3de788db31e50f54458ca4e360bb803b48d5a4be50724c1f48b504b086d9dca3ae74eae76a1849d14a4074f389aba805b793f9662f072405026afc3ef108ede69dbd2c769886dfc75a9a2e093137d92b38e34a050eca73cd3067d56dfd58fedaff2857e720b09d676607a1e8eeeb06b26494cc2b844f5e856271732477f384af839e98889d5c9cc28651f6eb74029f839150f947d180e48776ef1c829509e12016c6d1b717713e6325751a944cd259b1b86b1f5e793cdb55a73784498be09c2cebdd70159c77abc7c64af2e2de1a860a3e9dd8646b7a6866e1891fcf97a2b3ea47c0c57c5fa9a94129c2e27940ab9fe996eb1813d21d48fb6dbc9b8071c50dc26b4ed21588211fc5edb1ca873c70b606678ae7de9c10d2d083f372421a3038c592a38aec69020862f4432ef9ae7f400ed53b44bb58e92b022ac8b62a6b459337af339dc3346a809b715f9974d21e606244d23cf4dcb0956f93c14047243172adc97a1fed868bc49fb57ecc123425a21e94dd5b9d1ff52bc45965a7be2f5ea8218750e2cc8f174fbd2c7811742f5f17fa1f954b8423c403fd2e4e96296e37e0bfe2edd52e8c3b921dac771c61524455b401017ab5f655eca76139557a4a87cc30210b052ae17a5ca8b634322657ea4d87e0da2392c470f8951ac0560a01b4d0befe632ee311d0b87af31465d6cf7854f5738cb5debfa1d7381c74f45eea08c06d4ddc9e811d1a33394a35efdb7121cdf5f1603343df8431c87718a5d4cf3b2e593508d8b63f0d1e82f9ebc40d4022ba06327cc8233f29c0995da512b318bfa212e9582cb880d9bd6a02050a014294ef321bb2c65e4638a4fd2c8c27fd9ac28c9e49cdae6dd9eb05dafb38a4a003a56dba826e386f5fd3ab0d54b92f53ec11c850927fc4c5b669c67505ce59306ad86460b480b711d4b31c512829b7037d1c45b5b84c0be40a038b5e975c57c860476318a22df2e4f90009c38481e519b9511e54dc59e89a6593bc53ae03224466513930c5ed3689793f00be192a58a919db9ad1267962c0ee60327ee710accb0da037610ef8aaff63f6582f691096fbdfb1996abc4443cd4ffe04fcad3608413044b978d86d3a18bdf86fdb70cf7e7bbb0e4db9d36176d0ba8a4cf81369fa84ee55466df70e6d4431a873000c19bb5caff30c01c7f7f928cde86bea5c401e525fb8a938fd016bffd5c9d52b279e867bc64f575b80eec74e7f66fe92aef613636e50c8f32831ab4b7eabbc89ce6d7bbfd03b6b005e0c5ba27268369f5083b2ded32c1f9e8cd73a1daee26cf03dbbf9c476fd0f14935244eb7b544f8db1c19d8a21de7e8a88f540e8949f721f20d7a47cfad3f52d93c11a796fbe9fbe415194193e5c70b33237f70790905816b856c252a30e72c081a8bac6a1c9fd2c372b9f870831d6ba6671fd8684f25e60cc7e3a1a02ed5f1a4fe426373bf61404a68571e93f35659b6c37f939233ca6663603b053c8fc74da84dd971b9319a1260fa2f5d66609962e93f7f33a40b22066b86a74fb38bf1444d025f27f14e922661471ef8ad503e97f8e7dd6b9c9a420885e519e085a1f26f7149b82881908021f601679f79c944549bcb431a7d2b12f75aa54cae39f9caafefc01e7eb589d2eb574937abbe18b419d7d27309acb330293456337cb9d753e08f7b890bbf76c4d6ef548bc3b5965302bc65ab08a2420527c1ad8be374cae7cc858376219d39a7a6d58c478a721678e789bcc317a4d1acbf47870a4802a07ac0332f7fdad7156065de511862c2a076e264138b98e7abd1a2555ef2e1ca44ee68f06725508891051f6bd24479a616606024841c8203744b999868b9f2b3b5e8a42f454d25fcddf8f5569594716a4022c3ac8ba67115b93d8bb50684b0fb100dabca7f6b7e29b723007776435829c6f21223d7a2556766d198c76ab6cce3b6e6da5c4d14a26b7cda1cebe6792ce4c1498fe644fb4408189e472efde923506ea4d18aa3284ec311fa942dfa5d8b939e509a10c69461993cc9d3ace2fef29afee8d0894764ffd82371d5ed363b5968447ad3c0962b86584cc97740d7bc3838ab1c1b0198ea830f122b200722d3c2c8815a2a5f90382e1c58f2348dbd38449e28c67ed85f66ea3e383b91c782a4e77ad4aa538db6d15ab90dd464318ded6fd293a1b0279852335e3c94bcce6f37950fb23d96f84465aeaa8fc2f71ce61a1416e579399c363bb37ded602fbea1ba5de87ab12bc7aeb5c62f026f648ab2babea2517c3ade2828109da58c010e6efef544088ba412ea57d3cd4fad3fd85b17e386ffc8a700664b2604c8a71c011e894ac03a109d9ddbe0b6d625d33d7d16fba5bcbc1ee1cdcfc6a475a23aff414e5b4f83e9d18e10f9e6dc49e518561ad53a110794d2ad9c7fee95a03b632b2acbebac42c996e1b856b2f18a2a3bf7cb0726c10b6aa3ec2d78bebd26e86ecf78b87736017cffa7d654b357be120985c553d11dbc932139ea6e1efdb7ef34598db568e66d42429e414b5903ad6e616ff7faff6ecedec529cf16b280c18dd4c3c8cd5192f625965e15c29104855364565a4a52ac5ff78eb31a6e7602e84226a87364708c2a9fdcf2f66f5dd0951aacb7b6c8f9bd0e534ae44b47799cdb8f683db5a3258d6f1943e04e59b11fbc6f57d16ff150c94a22717c1b483ad064c25f09022cc4ce09e76fed2b2ce84e9a50623f84cb013d00b8ee3fd2eaf1ed84df2b29d3119865f5df8fbb6d7440ec6da33deff5c60f466f91959c0d7c7800937cf59fdc6e2d53e809a6f6754ed545fc71c42a95d198df6329a3f32ecd091e7e643727ee34241b9244ea9a2118ccc6d5b52f8dbd61dbc7a4b65e8a4b0e937669a8a6377022df74ac0d2d42008edfa83a71c2e14c8cb7f3e54612cbe5b64b31371f445ea6235467b339b285bffaad0acd9af5159b84f58a3e0230a7e6f055a016a0737b893e0d1b2dba11de53529c825bea86a455bba90eb4f10ea5425d498c18c0bc643a5bb07491a8b6d89b1c92329aaff3a9cb9302f81100d97b78a09d1f5c512c26409796608b77c969c070f6e55037c97bef2c30ebb373110c2356e0663c0a7010d13f18f9b7b1d4a5de88b110efe433a5dc9dd03ac7621a6de39584de91e9b43c5ef4cb435eeb45b8865540355030acddeaf451a453a0b0a76cb064ea1e939dc5491f2c591973c741cf1f73ef4451a1b43ed9d9e0c7b126b869e7cd326900a470dc08a15fb176346f7431dadd6b820ec10cba33d7097ebac9c1ff147fe39d9cedad2828facd8c37cb22a8b7d55b63170f55ccf45fc25715d00e7eb7c3f32c5a7dce02bb07073daa170caa4813b2102648cf6a5bc9ae5ef3fc4c6240447190340469cea21650f79f5ff0ab60e6fa8a30a45f29ca7f4356c275ef4dad63b07f73cc672d26091db75eff3e19b51272b0b786609333f6580a3ad3c83673df3776d04cd05fa86b7b8066076b71377580d8b226d9daec174cf2a62ffd48259ca04821e949021b3f540b5268c794a5314de9cb143dafce0575c06750f0c125b507bf39bf0abfc25b9bc39ddbc4450f0f3a70c312905a5c2d11f7b39a3cb0fd08be6f8b74c5d74fdfb0477c942caac42ae596e0aa36db5f10e1571231ebfc327e5a6111eb2f2a0e1be0b0752018973500f1b7c832cf36078c24717f66983bb72649829af53389e89694bce146f8cb358d7922ba07dfa9da6fbd65b7f5159010b1bc6847967b9eeef7c6db90f48b1c1a7ab63481809111b2876c73c375064bdca8064ee8d6d7b3817db8f5dc82709c586afea5850f415ca7641b5e6f45ff93b9dbc2f62c40c47dbe61a069d88e3664c8dfc9be2b35f8896e6d5c8a35b864b50d50364d3cec828a4f7dcff3cb314c9f7ab03c93e1fd8c5bfa2c303d76cb0954b401927a000babc400497d3f3a37c1f7a685ecc12b28db4b9b75debccfb132a4bb3b19ba91a441a94403eef6ad8222edd1dcecf215580296020731cab55029a189561499d34faef21eadfc370f98872c2192aef73f0cdf80de61cc9157d1e08d7153a49f7d1151fb9f110febc34e760c1afb87eb36c9df1d6aa047cb655b3ec5fdae8e2d93861070f98bd5f1c53c26f07d7c43cb295440af75e87671a552e39f9bfe1853222eb8ba0c8013944ee61dbe21281b1d4e3ea3dc0353d4ded5db0128504b97491353120c63bea1c5656be047a77bebe93efbab10375cb0946624e076a93a6ffdc284f4aa9fcf54ebda3653d5abf7da76f19c165d0982d48279ba8ee9f33b2fb060491aa26517e39f2cb4d4ce7726b249f070aeefca6843a813026e45c6ddfccd1e0b8883a7170644c43b227a2a3c03cbd17b8f3dc0910685169ada487a72251eeb6e6a1dd5661294337cf4cee2d74fdfbe00ff6d07847e63880059bcd12951e8b649cca1dc6a355a7d2c26ef8cabd467b21d6bbe28b108b385ffff7304d96b03500c912efd2af7c45f81f5f2f0e3357ec7da616f81ead2f823a128696ec7dd65a6587e5ecb56a8fba1bdea28909da5e085e164b046310182fad711d4e46abaa61281c88c729810c615ce9636b5c96e4150e2fcec6c111469ba8b0c010963d4338fba8a8a080e384198e1410af15f7ee18e5396b721fc331860e072207da236b35dd94fa7dab288a114ea46e754f1d0b4bfa1a5b216706652e52c489e9a3a1cee8ab4fe5d416ac22c2649673715909c27f31684f6e103913bfd28e02fca507940b86405cebb8084d1c6532a5508b716070c67ba544a1593895f4cc1a8d075415feb69d50fb674c3a89b59f80032cdfa8d1181856817bb16f50bafd0e21aa656661bf3b6bfc207a7a645a8edc15ff1cb706b6292a3263ef5ad1479338f59058d08ce76dc801d8e11e280badd5a0c0dcf1c6285d95cc087e7f0dd823b6b7c353d22f1e7ed03c1461cc4c170e33cd06c45f17fe1af233cca638611449493d533f701d77163f6784202d995e17b797d4d2f0d87d05a00728e8fdda47c70ecf919a2a110371da3474580720e8eae934888cf84f1f1a5530baf815e7c16129732ec4af417c1be0970b845dbced563f00a86135bda35c525aa020f285116b00071858e6eacf7b124b635ff7b62410e8c27a4c76adcdec10f5180130e8c554d2d8038677650171a2f6c3da4c04e340b48df92cf41d08a499f680a2cd6ab099fcede2f8b1888aa052c7f2dffdb203e19fb1e2e6237e19b218740c89cce311ff168437500a6eec570780938c3291a19482656a8d53b19bde3d4148bf1a9f2ea67ae835df675662f27b5b6f5e2652d0471c81740acef306d9605b4ca09a2c4c0f3f8063b6fa5fe01109c5e348eb318074785771ab2cedc48d0f5e15b3a368ace5aea415aa2d566063f25571b7a218b9e95117aaf0a389284e763e448c88b49205392fe032ed206ca8e27fb1c65a72d125cc860913dabe714be1a2a85120066cad66d53dec9a30664bfdd33e25398199211b15fe0770cb243bee320e95e506be4617c3e5e6825342c769bc1da3127f8d34c922f60ed2727f5d9209fc28099ec86c29572fc7159f6ced79b0a2a2653100230a55f7a578e2f1d90f6301069ed04106de45b976f2aabe769ed17d59a53116b74fa2f598c0d1e9919ca8d9cc21265ebc218ab9808b094eebd9a48d8349cf3faeaaa7c8ddb07f6eb874f70cdfafe050de69c6e7da6c8d2f71d581d6c604f4bb29243e9d1bbcb0890b436cb43d1a33c4b96a08af4137135a8c8fe74034dcaf1581856f800771", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) clock_gettime(0x0, 0x0) dup2(0xffffffffffffffff, r0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000740)=0x1, 0x4) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000140)={0xcdf}, 0x8) [ 797.599730][ T9600] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 797.615287][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 797.635283][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 797.655308][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 797.675284][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 797.686186][ T9600] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 797.695387][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 797.715305][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 797.735330][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 797.755282][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 797.775284][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 797.790259][ T9600] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 797.798394][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 797.815277][ C0] mceusb 4-1:0.0: Error: urb status = -71 04:38:03 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0xc, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f00000001c0)={[{0x2, 0x4e00, "ff11"}, {}]}) [ 797.835294][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 797.855219][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 797.875369][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 797.882112][ T9600] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 797.895246][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 797.915306][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 797.935918][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 797.955192][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 797.972544][ T9600] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 797.980299][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 797.995303][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 798.015487][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 798.035370][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 798.055353][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 798.070637][ T9600] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 798.078403][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 798.095370][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 798.115216][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 798.135237][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 798.155186][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 798.175226][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 798.195210][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 798.215265][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 798.232604][ T9600] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 798.240313][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 798.255297][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 798.275210][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 798.295206][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 798.315226][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 798.336179][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 798.343215][ T9600] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 798.355262][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 798.355867][T10133] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 798.375265][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 798.382178][ T9600] mceusb 4-1:0.0: Error: mce write submit urb error = -90 04:38:04 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x37, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000001380)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') [ 798.395244][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 798.415337][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 798.422850][ T9600] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 798.435227][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 798.455213][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 798.464164][ T9600] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 798.472618][ T9600] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 798.481436][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 798.495223][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 798.515213][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 798.535202][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 798.555246][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 798.575244][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 798.595231][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 798.615225][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 798.635251][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 798.644251][ T28] audit: type=1800 audit(1598762284.274:16): pid=16114 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=16305 res=0 [ 798.655555][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 798.677679][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 798.695295][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 798.715214][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 798.722147][ T9600] usb 4-1: USB disconnect, device number 50 04:38:04 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401c1b021b4000000000010902"], 0x0) syz_usb_disconnect(r0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r1, 0x4004550d, 0x0) [ 798.816867][T10133] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 798.827557][T10133] usb 6-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 798.837374][T10133] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.021130][T10133] usb 6-1: config 0 descriptor?? [ 799.275549][T10133] rtl8192cu: Chip version 0x10 [ 799.381530][ T9600] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 799.495619][T10133] rtl_usb: Too few input end points found [ 799.635541][ T9600] usb 4-1: Using ep0 maxpacket: 16 04:38:05 executing program 1: r0 = socket$inet(0x2, 0x3, 0x33) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x40) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) [ 799.657764][ T8705] usb 5-1: new high-speed USB device number 79 using dummy_hcd 04:38:05 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$packet(0x11, 0x0, 0x300) r3 = socket$inet(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f00000000c0)=0x5, 0x4) sendto$inet(r3, 0x0, 0x0, 0x20000801, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) r4 = perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) r5 = dup2(r3, r4) write$cgroup_type(r5, &(0x7f0000000080)='threaded\x00', 0xd10a) [ 799.756293][ T9600] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 799.766976][ T9600] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 799.778211][ T9600] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 799.788284][ T9600] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 799.798317][ T9600] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 800.046475][ T8705] usb 5-1: config 0 has no interfaces? [ 800.052177][ T8705] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 800.062097][ T8705] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.126643][ T9600] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 800.136277][ T9600] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 800.144432][ T9600] usb 4-1: Manufacturer: syz [ 800.215885][ T8705] usb 5-1: config 0 descriptor?? [ 800.219104][ T9600] usb 4-1: config 0 descriptor?? [ 800.462029][ T8796] usb 5-1: USB disconnect, device number 79 [ 800.705970][ T9600] Registered IR keymap rc-hauppauge [ 800.740321][ T9600] mceusb 4-1:0.0: Error: mce write submit urb error = -90 04:38:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setuid(0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@local}}, {{@in=@remote}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe4) r2 = getegid() setregid(0x0, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000300)={{}, {0x1, 0x8}, [{0x2, 0x4}, {0x2, 0x5}, {0x2, 0x1, 0xee01}], {0x4, 0x6}, [{0x8, 0x2}, {0x8, 0x7, r2}, {0x8, 0x3, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x2}], {0x10, 0x2}, {0x20, 0x7}}, 0x64, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) socket$inet(0x2, 0x3, 0x2) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r3, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x2, 0x3, 0x7]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 800.963035][T11141] tipc: TX() has been purged, node left! [ 800.984876][ T9600] mceusb 4-1:0.0: Error: mce write submit urb error = -90 04:38:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) setuid(0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@local}}, {{@in=@remote}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe4) setregid(0x0, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000300)={{}, {0x1, 0x8}, [{0x2, 0x4}, {0x2, 0x5}, {}, {0x2, 0x1, 0xee01}], {0x4, 0x6}, [{0x8, 0x2}, {0x8, 0x7}, {0x8, 0x3, 0xffffffffffffffff}, {0x8, 0x2}, {}], {0x10, 0x2}, {0x20, 0x7}}, 0x6c, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) socket$inet(0x2, 0x3, 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0xb25, 0x0, 0x2, 0x3, 0x7]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 801.019005][ T9600] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 801.034261][ T9600] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input52 [ 801.054292][T11141] tipc: TX() has been purged, node left! [ 801.178068][ T8705] usb 6-1: USB disconnect, device number 61 04:38:06 executing program 5: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a66f1b40da0b7f31cc9d000000010902240001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x10, &(0x7f0000001000), 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001bc0)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000b00)={0x1c, &(0x7f0000000a40)={0x0, 0x0, 0x1, "1b"}, 0x0, 0x0}) [ 801.226566][ T9600] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 801.245235][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 801.265284][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 801.285244][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 801.294142][ T9600] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 801.305278][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 801.325279][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 801.345277][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 801.365280][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 801.385290][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 801.395796][ T9600] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 801.405344][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 801.425276][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 801.445278][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 801.453268][ T9600] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 801.465281][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 801.485231][ C0] mceusb 4-1:0.0: Error: urb status = -71 04:38:07 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0xc, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f00000001c0)={[{0x2, 0x4e00, "ff11"}, {}]}) [ 801.505239][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 801.519196][ T9600] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 801.526878][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 801.545328][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 801.565253][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 801.585405][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 801.605247][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 801.625304][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 801.634495][ T9600] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 801.645323][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 801.665231][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 801.685237][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 801.702420][ T9600] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 801.710158][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 801.725309][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 801.745291][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 801.760265][ T9600] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 801.767993][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 801.785244][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 801.801171][ T9600] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 801.808886][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 801.825272][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 801.845209][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 801.865256][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 801.885229][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 801.905253][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 801.925246][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 801.939745][ T9600] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 801.947455][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 801.965338][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 801.985255][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 802.000204][ T9600] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 802.008696][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 802.014996][ T9600] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 802.025280][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 802.045281][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 802.065298][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 802.085244][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 802.105291][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 802.111861][ T8707] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 802.125268][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 802.145204][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 802.165182][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 802.185201][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 802.205287][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 802.225254][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 802.234240][ T9600] usb 4-1: USB disconnect, device number 51 [ 802.506713][ T8707] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 802.517205][ T8707] usb 6-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 802.526626][ T8707] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.614422][ T8707] usb 6-1: config 0 descriptor?? [ 802.735697][ T9600] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 802.875750][ T8707] rtl8192cu: Chip version 0x10 [ 802.976223][ T9600] usb 4-1: Using ep0 maxpacket: 16 [ 803.095789][ T8707] rtl_usb: Too few input end points found [ 803.111615][ T9600] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 803.122056][ T9600] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 803.133279][ T9600] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 803.147798][ T9600] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 803.157815][ T9600] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 803.367495][ T9600] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 803.377001][ T9600] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 803.385896][ T9600] usb 4-1: Manufacturer: syz [ 803.438763][ T9600] usb 4-1: config 0 descriptor?? [ 803.916638][ T9600] Registered IR keymap rc-hauppauge [ 803.950164][ T9600] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 804.257669][T16212] IPVS: ftp: loaded support on port[0] = 21 [ 804.328870][ T9600] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 804.439962][ T9600] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 804.527014][ T9600] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input53 [ 804.607100][ T9600] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 804.625253][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 804.640689][ T9600] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 804.648325][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 804.665221][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 804.685271][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 804.705310][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 804.725224][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 804.745250][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 804.765256][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 804.774586][ T9600] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 804.785218][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 804.805300][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 804.812221][ T9600] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 804.825252][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 804.845224][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 804.852865][ T9600] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 804.865243][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 804.885186][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 804.897124][ T9600] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 804.905331][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 804.925324][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 804.945258][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 804.956028][ T9600] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 804.965320][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 804.985247][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 805.002465][T10133] usb 6-1: USB disconnect, device number 62 [ 805.005244][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 805.027148][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 805.045298][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 805.054089][ T9600] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 805.065285][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 805.085228][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 805.091814][ T9600] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 805.105248][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 805.125233][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 805.150623][ T9600] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 805.158930][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 805.175232][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 805.195210][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 805.204674][ T9600] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 805.213092][ T9600] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 805.221932][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 805.235290][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 805.255287][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 805.275252][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 805.295269][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 805.315287][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 805.335213][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 805.354833][ T9600] usb 4-1: USB disconnect, device number 52 [ 805.361201][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 805.525373][T16212] chnl_net:caif_netlink_parms(): no params data found [ 805.921726][T16212] bridge0: port 1(bridge_slave_0) entered blocking state [ 805.929857][T16212] bridge0: port 1(bridge_slave_0) entered disabled state [ 805.939940][T16212] device bridge_slave_0 entered promiscuous mode [ 806.112383][T10133] Bluetooth: hci0: command 0x0409 tx timeout [ 806.150168][T16212] bridge0: port 2(bridge_slave_1) entered blocking state [ 806.157896][T16212] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.168291][T16212] device bridge_slave_1 entered promiscuous mode [ 806.296591][T16212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 806.358804][T16212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 806.482829][T16212] team0: Port device team_slave_0 added [ 806.514600][T16212] team0: Port device team_slave_1 added [ 806.632438][T16212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 806.639779][T16212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 806.667131][T16212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 806.979466][T16212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 806.986814][T16212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 807.013928][T16212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 807.207515][T16212] device hsr_slave_0 entered promiscuous mode [ 807.373124][T16212] device hsr_slave_1 entered promiscuous mode [ 807.466944][T16212] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 807.475949][T16212] Cannot create hsr debugfs directory [ 808.175997][ T9600] Bluetooth: hci0: command 0x041b tx timeout [ 810.257759][ T8703] Bluetooth: hci0: command 0x040f tx timeout [ 811.082819][T16212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 811.423894][T10133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 811.433634][T10133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 811.459198][T16212] 8021q: adding VLAN 0 to HW filter on device team0 [ 811.654090][T10133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 811.665187][T10133] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 811.674647][T10133] bridge0: port 1(bridge_slave_0) entered blocking state [ 811.682058][T10133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 812.018034][T10133] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 812.028203][T10133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 812.038551][T10133] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 812.048304][T10133] bridge0: port 2(bridge_slave_1) entered blocking state [ 812.055660][T10133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 812.065056][T10133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 812.076604][T10133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 812.336424][ T8707] Bluetooth: hci0: command 0x0419 tx timeout [ 812.532558][T16212] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 812.543630][T16212] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 812.636634][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 812.647896][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 812.658557][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 812.669642][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 812.680360][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 812.690429][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 812.701525][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 812.711519][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 813.275355][T16212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 813.288830][T10133] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 813.299071][T10133] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 813.308534][T10133] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 813.316573][T10133] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 814.577679][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 814.588454][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 814.957208][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 814.967378][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 815.071299][T16212] device veth0_vlan entered promiscuous mode [ 815.195790][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 815.205672][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 815.332481][T16212] device veth1_vlan entered promiscuous mode [ 815.611252][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 815.623567][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 816.019792][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 816.030473][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 816.090234][T16212] device veth0_macvtap entered promiscuous mode [ 816.240317][T16212] device veth1_macvtap entered promiscuous mode [ 816.549724][T16212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 816.560993][T16212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 816.571139][T16212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 816.581746][T16212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 816.591832][T16212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 816.602435][T16212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 816.612491][T16212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 816.623177][T16212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 816.633848][T16212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 816.644485][T16212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 816.654618][T16212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 816.665254][T16212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 816.680634][T16212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 816.693233][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 816.703708][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 816.714297][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 816.725846][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 816.851189][T16212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 816.862898][T16212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 816.873092][T16212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 816.883750][T16212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 816.893869][T16212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 816.904534][T16212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 816.914618][T16212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 816.925311][T16212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 816.935369][T16212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 816.945987][T16212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 816.956029][T16212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 816.966757][T16212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 816.982086][T16212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 816.995125][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 817.005956][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 04:38:23 executing program 0: pipe(0x0) close(0xffffffffffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x88002, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000040)={0x2}, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f00000006c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x9, [@struct={0x8, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x1, 0x0, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000040)=""/249, 0x39, 0xf9, 0x8}, 0x20) 04:38:23 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401c1b021b4000000000010902"], 0x0) syz_usb_disconnect(r0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r1, 0x4004550d, 0x0) 04:38:23 executing program 1: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xac, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0xe, 0x6, 0xf07, 0x0, 0x0, {0x0, 0x0, 0x3}}, 0x14}}, 0x0) 04:38:23 executing program 2: sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)={0xf4, 0x0, 0x200, 0x0, 0x25dfdbfd, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x4}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0xe0e}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x7b81}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x1001}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7ff}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x532, &(0x7f00000002c0)=0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000180)=0x6e, 0x800) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) io_getevents(r0, 0x3, 0x8000000000001ac, &(0x7f0000000340), &(0x7f0000000040)={0x0, r1+60000000}) 04:38:23 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0xc, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f00000001c0)={[{0x2, 0x4e00, "ff11"}, {}]}) 04:38:23 executing program 5: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a66f1b40da0b7f31cc9d000000010902240001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x10, &(0x7f0000001000), 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001bc0)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000b00)={0x1c, &(0x7f0000000a40)={0x0, 0x0, 0x1, "1b"}, 0x0, 0x0}) [ 817.742395][T16471] Cannot find add_set index 0 as target [ 818.143289][T16489] BPF:[1] UNION [ 818.147513][T16489] BPF:size=0 vlen=1 [ 818.151522][T16489] BPF: [ 818.154454][T16489] BPF:Invalid name [ 818.158954][T16489] BPF: [ 818.158954][T16489] 04:38:23 executing program 0: setitimer(0x1, &(0x7f0000000000)={{}, {0x0, 0x2710}}, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0xab, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c00000010001fff000024ff7f0000000000001f", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a002615a3053e80000000ce74ce4ff987f6e2267fd67e61b0393103388254713fd7b3357a25d1b44d22"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(0xffffffffffffffff, 0x4018ae50, 0x0) r0 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x48, r0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x9}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_DST={0x14, 0x1, @remote}]}, 0x48}}, 0x8c0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) write$eventfd(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) [ 818.285241][ T8707] usb 4-1: new high-speed USB device number 53 using dummy_hcd 04:38:23 executing program 1: socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffff38, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={@dev, @loopback, @rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80140038, r2}) r3 = socket$inet6(0xa, 0x80003, 0x3) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={@empty, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x0, 0x0, 0x400003, r2}) [ 818.327092][ T9600] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 818.438616][T10133] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 818.545362][ T8707] usb 4-1: Using ep0 maxpacket: 16 [ 818.667932][ T8707] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 818.678773][ T8707] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 818.690246][ T8707] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 818.700318][ T8707] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 818.710381][ T8707] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 818.727597][ T9600] usb 5-1: config 0 has no interfaces? [ 818.733283][ T9600] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 818.744411][ T9600] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.815765][T10133] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 818.826408][T10133] usb 6-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 818.828437][ T9600] usb 5-1: config 0 descriptor?? [ 818.835817][T10133] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.995324][T10133] usb 6-1: config 0 descriptor?? [ 819.101114][ T8705] usb 5-1: USB disconnect, device number 80 [ 819.191587][T16501] device vxlan0 entered promiscuous mode [ 819.268284][T10133] rtl8192cu: Chip version 0x10 [ 819.327562][ T8707] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 819.337783][ T8707] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 819.346401][ T8707] usb 4-1: Manufacturer: syz 04:38:25 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffedf, &(0x7f0000000000)='/proc/\x00\x00s/sy\x00\xef\xffZ\xff\x00\x00\x00\x00\x00\x00\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getdents(r0, &(0x7f0000000100)=""/153, 0x6c5b5f1f386a312d) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) [ 819.470607][ T8707] usb 4-1: config 0 descriptor?? [ 819.485878][T10133] rtl_usb: Too few input end points found [ 819.946260][ T8707] Registered IR keymap rc-hauppauge [ 819.980399][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 820.269412][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 820.371131][ T8707] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 820.386859][ T8707] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input54 [ 820.476695][T16504] device vxlan0 entered promiscuous mode 04:38:26 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xc, &(0x7f00000001c0)={[{0x2, 0x4e00, "ff11"}, {}]}) [ 820.668627][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 820.685320][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 820.705284][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 820.715609][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 820.725383][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 820.745300][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 820.752158][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 04:38:26 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffedf, &(0x7f0000000000)='/proc/\x00\x00s/sy\x00\xef\xffZ\xff\x00\x00\x00\x00\x00\x00\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getdents(r0, &(0x7f0000000100)=""/153, 0x6c5b5f1f386a312d) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) [ 820.765253][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 820.785376][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 820.791889][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 820.805262][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 820.825288][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 820.831752][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 820.845242][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 820.865291][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 820.871775][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 820.885219][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 820.905255][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 820.912893][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 04:38:26 executing program 4: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401c1b021b4000000000010902"], 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r1, 0x4004550d, 0x0) [ 820.925280][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 820.945271][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 820.952735][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 820.965243][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 820.985318][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 821.005333][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 821.025242][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 821.032910][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 821.045293][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 821.065305][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 821.078343][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 04:38:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x3e, 0x0) write$nbd(r2, &(0x7f0000000040)={0x6000000, 0x0, 0x0, 0x0, 0x7, "7307f2177f0000000000000015d530000000feff3921a0fcb3ac401de11c1743caeb837106f4e954a5b84df6449fe66884b3bc16079f565cea173db80437f6242b1b42d346f555dd6c020a7200"/88}, 0x68) [ 821.086006][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 821.105358][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 821.125288][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 821.145337][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 821.158965][ T8707] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 821.167487][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 821.173707][ T8707] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 821.185257][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 821.205293][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 821.225307][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 821.245255][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 821.247688][ T8705] usb 6-1: USB disconnect, device number 63 [ 821.265313][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 821.285270][ C0] mceusb 4-1:0.0: Error: urb status = -71 04:38:26 executing program 5: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a66f1b40da0b7f31cc9d000000010902240001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x10, &(0x7f0000001000)={0x0, 0x0, 0x2, "bae5"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001bc0)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000b00)={0x1c, &(0x7f0000000a40)={0x0, 0x0, 0x1, "1b"}, 0x0, 0x0}) [ 821.305280][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 821.325223][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 821.345251][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 821.359849][ T8707] usb 4-1: USB disconnect, device number 53 [ 821.366155][ C0] mceusb 4-1:0.0: Error: urb status = -71 04:38:27 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x400, 0x5b3}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24088, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) [ 821.857489][ T8706] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 821.910480][T16567] dlm: no locking on control device [ 821.968837][T16568] dlm: no locking on control device 04:38:27 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x3, 0x0, 0x0, 0x0, 0x499, 0x1}, 0x40) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) splice(r0, 0x0, r2, 0x0, 0x100001, 0x0) 04:38:27 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x5f4, 0xc8, 0x30c, 0x52c, 0x0, 0x0, 0x2a8, 0x52c, 0x52c, 0x52c, 0x2a8, 0x4, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'veth1\x00', 'veth1_macvtap\x00'}, 0x0, 0xa4, 0xec}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@rand_addr=0x64010100, 'veth1_to_bond\x00'}}}, {{@ipv6={@local, @dev, [], [], 'veth1_macvtap\x00', 'vlan0\x00'}, 0x0, 0x1c4, 0x220, 0x0, {}, [@common=@unspec=@comment={{0x120, 'comment\x00'}}]}, @common=@inet=@HMARK={0x5c, 'HMARK\x00', 0x0, {@ipv6=@loopback, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}}, {{@uncond, 0x0, 0x1fc, 0x220, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'veth1_to_batadv\x00', {0x7, 0x0, 0x4d, 0x0, 0x0, 0x4, 0xfffffffd, 0x5e7c}}}]}, @REJECT={0x24, 'REJECT\x00'}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x650) r1 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4f21, 0x0, @dev}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20040000, 0x0, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000), 0x4) [ 822.119047][ T27] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 822.216123][ T8707] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 822.226126][ T8706] usb 5-1: config 0 has no interfaces? [ 822.231824][ T8706] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 822.241400][ T8706] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.316487][ T8706] usb 5-1: config 0 descriptor?? [ 822.457252][ T8707] usb 4-1: Using ep0 maxpacket: 16 04:38:28 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) lchown(&(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, 0xee00) [ 822.527275][ T27] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 822.537791][ T27] usb 6-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 822.547612][ T27] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.562333][T16550] udc-core: couldn't find an available UDC or it's busy [ 822.569695][T16550] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 822.579869][ T8707] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 822.590253][ T8707] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 822.601486][ T8707] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 822.611437][ T8707] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 822.622315][ T8707] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 822.675866][ T27] usb 6-1: config 0 descriptor?? [ 822.752074][T16583] x_tables: duplicate underflow at hook 2 [ 822.771980][T16583] x_tables: duplicate underflow at hook 2 [ 822.796744][ T8707] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 822.809037][ T8707] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 822.823029][ T8707] usb 4-1: Manufacturer: syz [ 822.945944][ T27] rtl8192cu: Chip version 0x10 [ 822.956129][ T8707] usb 4-1: config 0 descriptor?? 04:38:28 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$TCGETS2(r1, 0x802c542a, 0x0) [ 823.089237][ T4604] usb 5-1: USB disconnect, device number 81 04:38:28 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000340)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) [ 823.166100][ T27] rtl_usb: Too few input end points found [ 823.216812][ T8707] Registered IR keymap rc-hauppauge [ 823.250722][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 04:38:29 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) [ 823.399172][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 823.440964][ T8707] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 823.457997][ T8707] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input55 [ 823.629262][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 823.645271][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 823.665539][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 823.685282][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 823.705248][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 823.725283][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 823.745502][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 823.757588][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 823.768271][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 823.785242][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 823.805323][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 823.818389][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 823.826188][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 823.845282][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 823.865242][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 823.885241][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 823.905267][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 823.925195][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 823.945304][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 823.965233][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 823.985274][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 824.003238][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 824.011094][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 824.025296][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 824.045241][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 824.065210][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 824.085291][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 824.105317][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 824.124394][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 824.132093][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 824.145308][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 824.165210][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 824.185273][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 824.205296][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 824.225270][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 824.245310][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 824.265244][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 824.285246][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 824.305259][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 824.325241][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 824.345226][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 824.364702][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 824.372432][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 824.385209][ C0] mceusb 4-1:0.0: Error: urb status = -71 04:38:30 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xc, &(0x7f00000001c0)={[{0x2, 0x4e00, "ff11"}, {}]}) 04:38:30 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd, 0x1, 'fq_codel\x00'}, {0x14, 0x2, [@TCA_FQ_CODEL_TARGET={0x8}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8}]}}]}, 0x48}}, 0x0) tkill(0x0, 0x5) 04:38:30 executing program 4: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401c1b021b4000000000010902"], 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r1, 0x4004550d, 0x0) 04:38:30 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) [ 824.405238][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 824.425248][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 824.445321][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 824.465262][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 824.485276][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 824.505273][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 824.511899][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 824.525265][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 824.545305][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 824.554171][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 824.565356][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 824.585253][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 824.591728][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 824.605622][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 824.625364][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 824.645348][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 824.665284][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 824.676596][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 824.685361][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 824.705267][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 824.725325][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 824.745343][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 824.765258][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 824.779662][ T8707] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 824.788167][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 824.794747][ T8707] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 824.805273][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 824.825243][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 824.845365][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 824.865414][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 824.885343][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 824.905300][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 824.925297][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 824.945372][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 824.965321][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 824.985334][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 825.005273][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 825.025275][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 825.045263][ C0] mceusb 4-1:0.0: Error: urb status = -71 04:38:30 executing program 5: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a66f1b40da0b7f31cc9d000000010902240001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x10, &(0x7f0000001000)={0x0, 0x0, 0x2, "bae5"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001bc0)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000b00)={0x1c, &(0x7f0000000a40)={0x0, 0x0, 0x1, "1b"}, 0x0, 0x0}) 04:38:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f00000018c0)=""/246) ioctl$PPPIOCSCOMPRESS(r2, 0x4010744d) [ 825.046296][ T8796] usb 6-1: USB disconnect, device number 64 [ 825.064857][ T8707] usb 4-1: USB disconnect, device number 54 [ 825.073043][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 825.224429][T16627] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 825.254242][ T27] usb 5-1: new high-speed USB device number 82 using dummy_hcd 04:38:30 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00') lseek(r0, 0x100000000, 0x0) 04:38:31 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) [ 825.625601][ T8707] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 825.626340][ T27] usb 5-1: config 0 has no interfaces? [ 825.639269][ T27] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 825.648628][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 04:38:31 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$inet(0x2, 0x3, 0x1) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0), 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') socket$nl_route(0x10, 0x3, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x501000, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="7c000000000119050000000000000000000000003c0001002c00010014000300000000000200000000b700000000080114000400fe800000000000000000f0ffffffffba0c000200050001002f000000240002000c000200050001002f00040014000100080001000000e40c4b159b3a91470001080007"], 0x7c}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000015c0)=ANY=[@ANYBLOB="3800000002010b08000000000000000000000000240002801400018008000100ac1414bb08000200ac1414000c000280050001002f000000d458afe8a0b0ccb27941789c1d77cc67cd51a450ffc827dedb4e7e11e16a9d3968acf4b52e381bd29253f3a12a0fb898979dd7c25d028044919d0b95fcc49880da8a3234402085155d33422fd70551220ca50a503c09239627430fb8ce4dc86ea09536d449efb9cb6c7ba11e175e5a0731e490d711ea94688cf9600e788e8a8cd14c5cba68dbff7c72607c3ad1ac7b17d0bcb2b9cd137c21291c639669ca5ae1"], 0x38}}, 0x0) alarm(0xfffffffffffffffe) [ 825.819548][ T27] usb 5-1: config 0 descriptor?? [ 825.865701][ T8707] usb 4-1: Using ep0 maxpacket: 16 [ 825.985931][ T8707] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 825.997268][ T8707] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 826.008588][ T8707] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 826.019488][ T8707] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 826.029989][ T8707] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 826.043705][T12836] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 826.061632][T16617] udc-core: couldn't find an available UDC or it's busy [ 826.068953][T16617] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 04:38:31 executing program 1: socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) [ 826.276512][ T8707] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 826.286093][ T8707] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 826.294230][ T8707] usb 4-1: Manufacturer: syz 04:38:32 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x1000000218007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 826.405623][ T8707] usb 4-1: config 0 descriptor?? [ 826.416419][T12836] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 826.427597][T12836] usb 6-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 826.437010][T12836] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.526670][T12836] usb 6-1: config 0 descriptor?? 04:38:32 executing program 0: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) listxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) [ 826.613771][ T27] usb 5-1: USB disconnect, device number 82 [ 826.676683][ T8707] Registered IR keymap rc-hauppauge [ 826.711115][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 826.786300][T12836] rtl8192cu: Chip version 0x10 [ 826.810884][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 826.850046][ T8707] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 826.866003][ T8707] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input56 [ 827.006218][T12836] rtl_usb: Too few input end points found [ 827.021718][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 827.035371][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 827.056333][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 827.075232][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 827.090687][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 827.098507][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 827.115246][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 827.129596][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 827.138418][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 827.155250][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 827.175267][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 827.195342][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 827.215293][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 827.222466][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 827.235389][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 827.255288][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 827.275241][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 827.295268][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 827.308895][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 827.316722][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 827.335251][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 827.355238][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 827.375273][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 827.395367][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 827.415253][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 827.435256][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 827.449180][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 827.458388][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 827.475410][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 827.495236][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 827.515241][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 827.535292][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 827.555239][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 827.575252][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 827.586524][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 827.595283][ C0] mceusb 4-1:0.0: Error: urb status = -71 04:38:33 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xc, &(0x7f00000001c0)={[{0x2, 0x4e00, "ff11"}, {}]}) 04:38:33 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000340)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x5) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x2b, 'cpu'}]}, 0x5) 04:38:33 executing program 4: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401c1b021b4000000000010902"], 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r1, 0x4004550d, 0x0) 04:38:33 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000380)='\'\xc4\'\v\xec\xe4\t\xc5r\x12-\x90\xda\x9a\x94\x02\xec\xea\x10\x90\x03\xcb\xf8\x1b6\xa5(\xd6\xd3\x93\xd3\xdf\x85P\x19G7Q\v\xdcHv~Qa\xf3\xd4\xfc(\x83\xfb\xf8)\xf6\x8a$\xb1\x90\xeb\'~\xa0\xd8\xc8\xe8\x94#\xcd\xd5Kp\xbf\xc0\x8d7\x1b?A(\xe8^\x9c\xff\x0f\x1ck\xbc\x95\x05\xcd\x17\xf7\x15o\xd4\xdc4\x84uw\xa6w\x0f\xea`1\xec\xb4\x04\xd5\r\x8d\xde\x1f]\x15\xe5\xe8\xd00\xe5\x8d\x9c\x9ec+\x02\x1d\xffa5\x94\xab\xddNe\xfe\x8c\xc4q\xbb#f\xc1\xb9\x81W\xa4$)!\v\x9b\xa7\b\x91\xe5\xeb\x88\x1c\x0f\xb2.Tr\xe4\x99\x9e\x03\xb4\xd2\xf9KW\xce\xd1cC\xd5\xcf\x97\xa9\xeab\xda\xd6:\xa91q\xf7\xc5\xc0C\xd1\'\x89\xee\x84T:\x88x\xe2\x83\xf2r\xf4&t@\x9e\xa4qf\xdf\xf4\xb5\x01\\a\x85\xd3\xe0\xb7\n\xe7\xed\x84Q\xd7s\xcd4B\xcbQ\xa4\x9f[\x99\xdfJ%\xa8\xfc\xe3`\xc1JA\xc9\xbc\xd4~}\xce\xe8\xfejH\x8fb\xdd\xbcJ\vk\'\xe7Q\xfd\xaaA`\xb5\xa1\xe4\xf8\x9eG\xcfb\xe8@\x04\xe1\xf8\xacU)(S\xed\xffA\xfaqt\xb6-\x9b5\xf6\x1e\x13$e\n\xc7\x9b\xb0X\xb6\xd4\t\x99^^\xc2>J\x16\xd0\x8c\xecy*\xa0\a\xe9Ar\xa6\xb4n9j\xe5\xba\x8a\n\xce2\xcf_\x1b.t)\x8d09A[-\xf6\xe7\xe8\x1f\x92>\xb8\xd4>-\xacY\x9e\x88\x96\xa7\xfa\xdaoL\xa6\xec\xe8\xd5\xbfaf\xd7\xfc\x03\x91w)\xcd\x1f\xbe\xc9R\xcfz\x03\xec\br\x83\x8bM-\xf8X\xfd\"\xb4RV\x7f\xda\xd3\xd4h\x1c\xdb\xbe\xa4U\xec\xcd\'\xbc\xd22\x85{,\xe6-,6\x9d\x85\xb4fL\b\x98\xe9@\xee\xc2.\xb3\xd6w\x10\x94\xb5%D\xe8\r\xfe\x98G\x82\fx,\xa2J\x12\x03ec\xd5e-\x1f6\xe7\xb6\xd9\xcf0J\xed\xb7\x9b\xfd\xfc\x00EQ\x1f\x00D\xc95\xdeG +\x1bp\xf4\t\x94\x87\xf1ZbO\xa6\xe9\f`u\xda\xb3\x1d\xf9\x94\x80\xc1\x17\xde(_\xa7\xe7\x11\x9a\xac\x8c\xb1\xd71\xc5\xe9\xd3n\xc2\xa4\x98P\x9aF\xc2\x93\xad@\xa9h\x96\x1b]2\x88\xf3\xd8\xc798\x8c\x9f\xd4W4\xf1}\aD\xa0\xd8\xda\xf4\x1bEx(t|\xf4Y\xfaJ\xc2GS\xc9R\xb5\xda\xa8\x9b\xaa\x01\xe2~\xd8f.#\x94\xbf\x85z\xbf\xa0x62L\x1f\x91\xd2\x1e%\x88\x1f\f\xabb\x8ds\x93\x9e\xed\xd2\xdb\x02\x0e\xcf\xf5\xaf\xc8>+\x03e\xb7\xba\xb9}\xca\xfc\xe8\xed\x9b\xa2\x9ey\bMv\x8f\x8a8\xfd;\x9a5J\xee\x9a\xae\x83>$\x8a6\x05P\x8c\x05\xb8\r\xcf\xdd\x15/\xa9\xa1\xd4\x87{\xc9I4\xe3 i\xa4\xc5\xe5l\x03?\xfdM&\xc0a9}h\x8ef\x10!\xf0\x99\x80\xb72\xcc\x06\'+\xf0\xa1\a\xeeSGH\x12\x068S7s\xd3\xdaT\"\xa9jk\xed\xa2IyM\xa3&t\xfeA\xa9\"\xb4\xec\xdex\x00\x80`p\x91\x84\xbfK\xb6\x00\xa7\xa2\x06\xce\xc8X\x7f\xd1@\xf1\xcf\xdf\xae\xdb\r\xf6h\xdf\xc6+\xac\r\x9f\xc2D\xdf\xd6\xde`\xa4\xd1=\x1b\x8d\xf4\xbe#\tH\x06;a(`\xdcw\x1dc_\v\x046j\xf9`\r\xc0\a\x8d\x12:l\xc7j3E\xd7\xcaX\x97\xad\x93\xea\x99\xca\xd7m\xb8\x1e1\xb6Nz\"U/\x0eP\b=\x01W\xcd\xf1x\x85\xf4&\xe7\xf9W\x06\xa4\xf8&\xbc\xf4\xd0\xd2\xd1W\xee\x9a\xdd\xdbu\x0e\x9aV\xe2\xc5\x84`Bu\x12\xa8/=\x17\xc4F\x11\xdfm-)\xd9hc\xba\xb7\x91\xd9\x11\x9a,\x19\xf4]\xa7Y@B\x1f\xa8\x06\x88\x8e\xf4\xbc\xad\xc0M\x91rFJ\x03\xac \xb9\x0e\xb58g\xaf\x849\x9c|\xfdq6\xfb)\xc6H\x8f\xc5\xa7\x93\xfd\x89pzp\xb4\n\xbd\xb2\xb2\xa8!\xb2N\xbb3\x9co\x0e!\nD\x7f\xe7\xf8\xd8YN\xaf\x1c\xf7\xe2\xfd\xf6\x0f\x938\xbf\xfd\x0f\x97Z\x9d1\xf5\x11\xc6\xdb\f\x81uB\xd4/0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd, 0x1, 'fq_codel\x00'}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8}]}}]}, 0x40}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, 0x90) 04:38:34 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e) [ 828.800298][ T4604] usb 6-1: USB disconnect, device number 65 [ 828.910319][T11141] tipc: TX() has been purged, node left! [ 828.985238][ T8705] usb 5-1: new high-speed USB device number 83 using dummy_hcd 04:38:34 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000340)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000640)=ANY=[@ANYBLOB='-cpu'], 0x5) [ 829.216788][ T8707] usb 4-1: new high-speed USB device number 56 using dummy_hcd 04:38:35 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$bt_hci(r0, &(0x7f0000000140), 0x6) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) [ 829.366826][ T8705] usb 5-1: config 0 has no interfaces? [ 829.373881][ T8705] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 829.387325][ T8705] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.465510][ T8707] usb 4-1: Using ep0 maxpacket: 16 [ 829.586777][ T8707] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 829.597680][ T8707] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 829.608958][ T8707] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 829.618949][ T8707] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 829.628893][ T8707] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 829.636349][ T8705] usb 5-1: config 0 descriptor?? [ 829.646826][T12836] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 829.901400][T16709] udc-core: couldn't find an available UDC or it's busy [ 829.908987][T16709] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 829.969070][ T8707] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 829.978470][ T8707] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 829.986889][ T8707] usb 4-1: Manufacturer: syz [ 830.000738][ T8707] usb 4-1: config 0 descriptor?? [ 830.028902][T12836] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 830.039412][T12836] usb 6-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 830.048938][T12836] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.116919][T12836] usb 6-1: config 0 descriptor?? 04:38:35 executing program 1: timer_create(0x0, &(0x7f0000000940)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000900)) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = getpid() r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000200)) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) pipe(0x0) readv(r0, &(0x7f0000000840)=[{&(0x7f0000000100)=""/231, 0xe7}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(r1, 0x800000015) [ 830.296576][ T8707] Registered IR keymap rc-hauppauge [ 830.329914][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 830.352175][ T4604] usb 5-1: USB disconnect, device number 83 04:38:36 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) [ 830.375745][T12836] rtl8192cu: Chip version 0x10 [ 830.474718][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 830.511214][ T8707] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 830.526834][ T8707] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input57 [ 830.596236][T12836] rtl_usb: Too few input end points found [ 830.731881][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 830.745276][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 830.765233][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 830.785232][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 830.805267][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 830.823920][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 830.831708][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 830.845245][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 830.865292][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 830.885264][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 830.905271][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 830.925234][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 830.944273][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 830.952499][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 830.965227][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 830.985214][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 831.005301][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 831.025269][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 831.045431][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 831.065335][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 831.085307][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 831.105253][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 831.114601][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 831.125324][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 831.145297][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 831.165218][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 831.185318][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 831.205446][ C0] mceusb 4-1:0.0: Error: urb status = -71 04:38:36 executing program 4: syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r1, 0x4004550d, 0x0) [ 831.212703][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 831.226685][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 831.246800][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 831.279851][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 831.296148][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 831.314778][ C0] mceusb 4-1:0.0: Error: urb status = -71 04:38:37 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) [ 831.341990][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 831.359905][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 831.373672][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 831.410068][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 831.421259][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 831.468116][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 831.476448][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 04:38:37 executing program 2: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000900)='#\'%nodev\x00\x7f\xe5\xd0ql\x86\xcd\xe6\x14\x93\xb0\x7f_,y<', 0x0) write(r1, &(0x7f0000002000)='/', 0x1) sendfile(r1, r1, &(0x7f0000000200), 0x87) sendfile(r1, r1, &(0x7f00000001c0), 0xfec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000380)='\'\xc4\'\v\xec\xe4\t\xc5r\x12-\x90\xda\x9a\x94\x02\xec\xea\x10\x90\x03\xcb\xf8\x1b6\xa5(\xd6\xd3\x93\xd3\xdf\x85P\x19G7Q\v\xdcHv~Qa\xf3\xd4\xfc(\x83\xfb\xf8)\xf6\x8a$\xb1\x90\xeb\'~\xa0\xd8\xc8\xe8\x94#\xcd\xd5Kp\xbf\xc0\x8d7\x1b?A(\xe8^\x9c\xff\x0f\x1ck\xbc\x95\x05\xcd\x17\xf7\x15o\xd4\xdc4\x84uw\xa6w\x0f\xea`1\xec\xb4\x04\xd5\r\x8d\xde\x1f]\x15\xe5\xe8\xd00\xe5\x8d\x9c\x9ec+\x02\x1d\xffa5\x94\xab\xddNe\xfe\x8c\xc4q\xbb#f\xc1\xb9\x81W\xa4$)!\v\x9b\xa7\b\x91\xe5\xeb\x88\x1c\x0f\xb2.Tr\xe4\x99\x9e\x03\xb4\xd2\xf9KW\xce\xd1cC\xd5\xcf\x97\xa9\xeab\xda\xd6:\xa91q\xf7\xc5\xc0C\xd1\'\x89\xee\x84T:\x88x\xe2\x83\xf2r\xf4&t@\x9e\xa4qf\xdf\xf4\xb5\x01\\a\x85\xd3\xe0\xb7\n\xe7\xed\x84Q\xd7s\xcd4B\xcbQ\xa4\x9f[\x99\xdfJ%\xa8\xfc\xe3`\xc1JA\xc9\xbc\xd4~}\xce\xe8\xfejH\x8fb\xdd\xbcJ\vk\'\xe7Q\xfd\xaaA`\xb5\xa1\xe4\xf8\x9eG\xcfb\xe8@\x04\xe1\xf8\xacU)(S\xed\xffA\xfaqt\xb6-\x9b5\xf6\x1e\x13$e\n\xc7\x9b\xb0X\xb6\xd4\t\x99^^\xc2>J\x16\xd0\x8c\xecy*\xa0\a\xe9Ar\xa6\xb4n9j\xe5\xba\x8a\n\xce2\xcf_\x1b.t)\x8d09A[-\xf6\xe7\xe8\x1f\x92>\xb8\xd4>-\xacY\x9e\x88\x96\xa7\xfa\xdaoL\xa6\xec\xe8\xd5\xbfaf\xd7\xfc\x03\x91w)\xcd\x1f\xbe\xc9R\xcfz\x03\xec\br\x83\x8bM-\xf8X\xfd\"\xb4RV\x7f\xda\xd3\xd4h\x1c\xdb\xbe\xa4U\xec\xcd\'\xbc\xd22\x85{,\xe6-,6\x9d\x85\xb4fL\b\x98\xe9@\xee\xc2.\xb3\xd6w\x10\x94\xb5%D\xe8\r\xfe\x98G\x82\fx,\xa2J\x12\x03ec\xd5e-\x1f6\xe7\xb6\xd9\xcf0J\xed\xb7\x9b\xfd\xfc\x00EQ\x1f\x00D\xc95\xdeG +\x1bp\xf4\t\x94\x87\xf1ZbO\xa6\xe9\f`u\xda\xb3\x1d\xf9\x94\x80\xc1\x17\xde(_\xa7\xe7\x11\x9a\xac\x8c\xb1\xd71\xc5\xe9\xd3n\xc2\xa4\x98P\x9aF\xc2\x93\xad@\xa9h\x96\x1b]2\x88\xf3\xd8\xc798\x8c\x9f\xd4W4\xf1}\aD\xa0\xd8\xda\xf4\x1bEx(t|\xf4Y\xfaJ\xc2GS\xc9R\xb5\xda\xa8\x9b\xaa\x01\xe2~\xd8f.#\x94\xbf\x85z\xbf\xa0x62L\x1f\x91\xd2\x1e%\x88\x1f\f\xabb\x8ds\x93\x9e\xed\xd2\xdb\x02\x0e\xcf\xf5\xaf\xc8>+\x03e\xb7\xba\xb9}\xca\xfc\xe8\xed\x9b\xa2\x9ey\bMv\x8f\x8a8\xfd;\x9a5J\xee\x9a\xae\x83>$\x8a6\x05P\x8c\x05\xb8\r\xcf\xdd\x15/\xa9\xa1\xd4\x87{\xc9I4\xe3 i\xa4\xc5\xe5l\x03?\xfdM&\xc0a9}h\x8ef\x10!\xf0\x99\x80\xb72\xcc\x06\'+\xf0\xa1\a\xeeSGH\x12\x068S7s\xd3\xdaT\"\xa9jk\xed\xa2IyM\xa3&t\xfeA\xa9\"\xb4\xec\xdex\x00\x80`p\x91\x84\xbfK\xb6\x00\xa7\xa2\x06\xce\xc8X\x7f\xd1@\xf1\xcf\xdf\xae\xdb\r\xf6h\xdf\xc6+\xac\r\x9f\xc2D\xdf\xd6\xde`\xa4\xd1=\x1b\x8d\xf4\xbe#\tH\x06;a(`\xdcw\x1dc_\v\x046j\xf9`\r\xc0\a\x8d\x12:l\xc7j3E\xd7\xcaX\x97\xad\x93\xea\x99\xca\xd7m\xb8\x1e1\xb6Nz\"U/\x0eP\b=\x01W\xcd\xf1x\x85\xf4&\xe7\xf9W\x06\xa4\xf8&\xbc\xf4\xd0\xd2\xd1W\xee\x9a\xdd\xdbu\x0e\x9aV\xe2\xc5\x84`Bu\x12\xa8/=\x17\xc4F\x11\xdfm-)\xd9hc\xba\xb7\x91\xd9\x11\x9a,\x19\xf4]\xa7Y@B\x1f\xa8\x06\x88\x8e\xf4\xbc\xad\xc0M\x91rFJ\x03\xac \xb9\x0e\xb58g\xaf\x849\x9c|\xfdq6\xfb)\xc6H\x8f\xc5\xa7\x93\xfd\x89pzp\xb4\n\xbd\xb2\xb2\xa8!\xb2N\xbb3\x9co\x0e!\nD\x7f\xe7\xf8\xd8YN\xaf\x1c\xf7\xe2\xfd\xf6\x0f\x938\xbf\xfd\x0f\x97Z\x9d1\xf5\x11\xc6\xdb\f\x81uB\xd4/0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd, 0x1, 'fq_codel\x00'}, {0x14, 0x2, [@TCA_FQ_CODEL_TARGET={0x8}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8}]}}]}, 0x48}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000dc0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d80)={&(0x7f0000000880)={0x308, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_OURS={0x218, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xac, 0x5, "99524db92b1c4eadba3f0f8364d8037f9f6dfd5637935440d07e7a60c99f128d9694ba95ec588a91b6ce86509b039bde16fffabbd2b1958c7ec771a48aa133317088fed0b0442196d2000879d6db5c802cf6d558d34934c217fb699eecd59993c7c58c08f9fdf5576277d31059b19d07339967afbcbeb310a549f4f3138dcbb607e701003a0675727779539abee651cc9fce5602354ba2426875f500eecfc9fb4a366102f742c3b5"}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x59, 0x5, "57430633cab23bb0ad1fd6448f3e897714467ed303e263f9a9917fa29094a08cd3eb30d8f1f912c866dd91637fba8d7c48ede441abdfe38f840bdd07adf77da3f7c4f9c9a946157c17cf25ec16946ebd27926a2b6f"}, @ETHTOOL_A_BITSET_MASK={0xfa, 0x5, "c28b36d7c5b8b3ca2a82994180813488ed808996b884146de22341e8ad0889a63ac0fd6026d22a112e513356f1a53662162fff7363cf1e705507bce42dcde609e4e8634935b2af237aa32a9bd98d2b0d13e8b31a2483fae8bb55793ab4c74b2dedc0a7b69abc199beb1e7f70e4769a76824c703b36bc7c2202978f71d6143360548211453bdc71490ec311bab8513b394c046a107affc558766f51a8bca578715fd1f529c469730570c696533f67024c8afceaff379130e78402321ce83d42acb4e49744edb5f9ff6957bf2d63b27b2d9cc9b649309ab0b630adff10f460a19e2ab6cc74b999979a9f81bb624767888a7d74aa4eb436"}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5}, @ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_LINKMODES_OURS={0xc8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xc0, 0x5, "bef315ca07624779fc89e42d81741f7f77aef0a4037d2499d6935cebdde54ce3a921510637ce4341954fd0547eeff7d0772c178841d4fe050942cb2bb731c526a302387a998582f9292d6497a28970178c1cb204d3b125179101d6f52648c43274f575b7287e9b0721d5e4cf72778a90aa3970fda57d07ebf4b1648067bffd3a2bfbe389a24cee6e09ddfd7bd840cdf0b93c39e63805f20f8bddd3b1b2468818691bd50aa9c84958282e943b2f483baa4b767605c9d6c146658591cc"}]}]}, 0x308}, 0x1, 0x0, 0x0, 0x4010}, 0x90) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x5) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x13, 0x2}, &(0x7f0000000100)) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0xfffffffffffffc6d, 0x20000800, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) r6 = signalfd4(r0, &(0x7f0000000000)={[0x9]}, 0x8, 0x180000) sendmsg$WG_CMD_GET_DEVICE(r6, 0x0, 0x8800) 04:38:56 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000340)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000380)=ANY=[@ANYBLOB='acpu'], 0x5) [ 851.175636][ T9600] usb 4-1: new high-speed USB device number 59 using dummy_hcd 04:38:56 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000340)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000640)=ANY=[], 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x0, 'cpu'}]}, 0x5) ioctl$CHAR_RAW_IOOPT(r0, 0x1279, 0x0) [ 851.325444][ T3225] usb 5-1: device not accepting address 90, error -71 [ 851.415251][ T9600] usb 4-1: Using ep0 maxpacket: 16 [ 851.542471][ T9600] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 851.552928][ T9600] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 851.564281][ T9600] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 851.574367][ T9600] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 04:38:57 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000340)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x2d, 'cpu'}]}, 0x5) [ 851.584372][ T9600] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 851.609423][ T8705] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 851.810169][ T3225] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 851.917749][ T9600] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 851.927298][ T9600] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 851.936212][ T9600] usb 4-1: Manufacturer: syz [ 852.019314][ T3225] usb 5-1: device descriptor read/8, error -61 [ 852.027085][ T8705] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 852.037618][ T8705] usb 6-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 852.042344][ T9600] usb 4-1: config 0 descriptor?? [ 852.046943][ T8705] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 04:38:57 executing program 0: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ecryptfs\x00', 0x0, 0x0) [ 852.083514][ T8705] usb 6-1: config 0 descriptor?? 04:38:57 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0x1, 0x1, 0x209e28, 0x1, 0x1}, 0x40) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r3, &(0x7f0000000000), &(0x7f0000000140)=""/130}, 0x18) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r3, &(0x7f00000000c0)="f9", &(0x7f0000000400)=""/80}, 0x20) [ 852.317628][ T9600] Registered IR keymap rc-hauppauge [ 852.332217][ T3225] usb 5-1: device descriptor read/8, error -61 [ 852.351658][ T9600] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 852.366053][ T8705] rtl8192cu: Chip version 0x10 [ 852.427174][ T9600] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 852.455662][ T3225] usb usb5-port1: unable to enumerate USB device [ 852.520486][ T9600] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 852.536205][ T9600] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input60 [ 852.594559][ T9600] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 852.606783][ T8705] rtl_usb: Too few input end points found [ 852.628755][ T9600] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 852.668559][ T9600] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 852.709035][ T9600] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 852.725524][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 852.745372][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 852.745579][T17191] Error parsing options; rc = [-22] [ 852.760752][ T9600] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 852.768594][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 852.785296][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 852.800494][ T9600] mceusb 4-1:0.0: Error: mce write submit urb error = -90 04:38:58 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000800)='/dev/vcsa\x00', 0x4400, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd, 0x1, 'fq_codel\x00'}, {0x14, 0x2, [@TCA_FQ_CODEL_TARGET={0x8}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8}]}}]}, 0x48}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000dc0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d80)={&(0x7f0000000880)={0x308, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_OURS={0x218, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xac, 0x5, "99524db92b1c4eadba3f0f8364d8037f9f6dfd5637935440d07e7a60c99f128d9694ba95ec588a91b6ce86509b039bde16fffabbd2b1958c7ec771a48aa133317088fed0b0442196d2000879d6db5c802cf6d558d34934c217fb699eecd59993c7c58c08f9fdf5576277d31059b19d07339967afbcbeb310a549f4f3138dcbb607e701003a0675727779539abee651cc9fce5602354ba2426875f500eecfc9fb4a366102f742c3b5"}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x59, 0x5, "57430633cab23bb0ad1fd6448f3e897714467ed303e263f9a9917fa29094a08cd3eb30d8f1f912c866dd91637fba8d7c48ede441abdfe38f840bdd07adf77da3f7c4f9c9a946157c17cf25ec16946ebd27926a2b6f"}, @ETHTOOL_A_BITSET_MASK={0xfa, 0x5, "c28b36d7c5b8b3ca2a82994180813488ed808996b884146de22341e8ad0889a63ac0fd6026d22a112e513356f1a53662162fff7363cf1e705507bce42dcde609e4e8634935b2af237aa32a9bd98d2b0d13e8b31a2483fae8bb55793ab4c74b2dedc0a7b69abc199beb1e7f70e4769a76824c703b36bc7c2202978f71d6143360548211453bdc71490ec311bab8513b394c046a107affc558766f51a8bca578715fd1f529c469730570c696533f67024c8afceaff379130e78402321ce83d42acb4e49744edb5f9ff6957bf2d63b27b2d9cc9b649309ab0b630adff10f460a19e2ab6cc74b999979a9f81bb624767888a7d74aa4eb436"}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5}, @ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_LINKMODES_OURS={0xc8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xc0, 0x5, "bef315ca07624779fc89e42d81741f7f77aef0a4037d2499d6935cebdde54ce3a921510637ce4341954fd0547eeff7d0772c178841d4fe050942cb2bb731c526a302387a998582f9292d6497a28970178c1cb204d3b125179101d6f52648c43274f575b7287e9b0721d5e4cf72778a90aa3970fda57d07ebf4b1648067bffd3a2bfbe389a24cee6e09ddfd7bd840cdf0b93c39e63805f20f8bddd3b1b2468818691bd50aa9c84958282e943b2f483baa4b767605c9d6c146658591cc"}]}]}, 0x308}, 0x1, 0x0, 0x0, 0x4010}, 0x90) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x5) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x13, 0x2}, &(0x7f0000000100)) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0xfffffffffffffc6d, 0x20000800, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) r6 = signalfd4(r0, &(0x7f0000000000)={[0x9]}, 0x8, 0x180000) sendmsg$WG_CMD_GET_DEVICE(r6, 0x0, 0x8800) [ 852.808316][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 852.825316][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 852.845338][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 852.865343][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 852.885342][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 852.894147][ T9600] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 852.905308][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 852.925293][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 852.945261][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 852.961361][ T9600] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 852.969171][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 852.985402][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 853.005292][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 853.025367][ C0] mceusb 4-1:0.0: Error: urb status = -71 04:38:58 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000800)='/dev/vcsa\x00', 0x4400, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd, 0x1, 'fq_codel\x00'}, {0x14, 0x2, [@TCA_FQ_CODEL_TARGET={0x8}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8}]}}]}, 0x48}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000dc0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d80)={&(0x7f0000000880)={0x308, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_OURS={0x218, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xac, 0x5, "99524db92b1c4eadba3f0f8364d8037f9f6dfd5637935440d07e7a60c99f128d9694ba95ec588a91b6ce86509b039bde16fffabbd2b1958c7ec771a48aa133317088fed0b0442196d2000879d6db5c802cf6d558d34934c217fb699eecd59993c7c58c08f9fdf5576277d31059b19d07339967afbcbeb310a549f4f3138dcbb607e701003a0675727779539abee651cc9fce5602354ba2426875f500eecfc9fb4a366102f742c3b5"}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x59, 0x5, "57430633cab23bb0ad1fd6448f3e897714467ed303e263f9a9917fa29094a08cd3eb30d8f1f912c866dd91637fba8d7c48ede441abdfe38f840bdd07adf77da3f7c4f9c9a946157c17cf25ec16946ebd27926a2b6f"}, @ETHTOOL_A_BITSET_MASK={0xfa, 0x5, "c28b36d7c5b8b3ca2a82994180813488ed808996b884146de22341e8ad0889a63ac0fd6026d22a112e513356f1a53662162fff7363cf1e705507bce42dcde609e4e8634935b2af237aa32a9bd98d2b0d13e8b31a2483fae8bb55793ab4c74b2dedc0a7b69abc199beb1e7f70e4769a76824c703b36bc7c2202978f71d6143360548211453bdc71490ec311bab8513b394c046a107affc558766f51a8bca578715fd1f529c469730570c696533f67024c8afceaff379130e78402321ce83d42acb4e49744edb5f9ff6957bf2d63b27b2d9cc9b649309ab0b630adff10f460a19e2ab6cc74b999979a9f81bb624767888a7d74aa4eb436"}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5}, @ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_LINKMODES_OURS={0xc8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xc0, 0x5, "bef315ca07624779fc89e42d81741f7f77aef0a4037d2499d6935cebdde54ce3a921510637ce4341954fd0547eeff7d0772c178841d4fe050942cb2bb731c526a302387a998582f9292d6497a28970178c1cb204d3b125179101d6f52648c43274f575b7287e9b0721d5e4cf72778a90aa3970fda57d07ebf4b1648067bffd3a2bfbe389a24cee6e09ddfd7bd840cdf0b93c39e63805f20f8bddd3b1b2468818691bd50aa9c84958282e943b2f483baa4b767605c9d6c146658591cc"}]}]}, 0x308}, 0x1, 0x0, 0x0, 0x4010}, 0x90) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x5) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x13, 0x2}, &(0x7f0000000100)) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0xfffffffffffffc6d, 0x20000800, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) r6 = signalfd4(r0, &(0x7f0000000000)={[0x9]}, 0x8, 0x180000) sendmsg$WG_CMD_GET_DEVICE(r6, 0x0, 0x8800) [ 853.045303][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 853.065271][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 853.085329][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 853.100712][ T9600] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 853.108481][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 853.125247][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 853.145360][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 853.153825][ T9600] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 853.165341][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 853.185358][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 853.200638][ T9600] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 853.209254][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 853.216164][ T9600] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 853.225406][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 853.245311][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 853.265336][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 853.285327][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 853.305358][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 853.325340][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 853.345375][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 853.365360][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 853.385419][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 853.405349][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 853.425398][ C0] mceusb 4-1:0.0: Error: urb status = -71 04:38:59 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8, &(0x7f00000001c0)={[{0x2, 0x4e00, "ff11"}]}) [ 853.445351][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 853.457994][ T9600] usb 4-1: USB disconnect, device number 59 [ 853.465340][ C0] mceusb 4-1:0.0: Error: urb status = -71 04:38:59 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x4004550d, 0x0) 04:38:59 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000012c0)=[{&(0x7f0000000180)=""/185, 0xb9}], 0x1, 0x800, 0x0) [ 854.401987][ T8796] usb 6-1: USB disconnect, device number 69 04:39:00 executing program 5: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a66f1b40da0b7f31cc9d000000010902240001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000001000)={0x0, 0x0, 0x4, "bae5015e"}, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001bc0)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000b00)={0x1c, &(0x7f0000000a40)={0x0, 0x0, 0x1, "1b"}, 0x0, 0x0}) 04:39:00 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='pagemap\x00') r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) exit(0x0) syz_open_procfs(0x0, &(0x7f0000001700)='fd/3\x00') 04:39:00 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0x1, 0x1, 0x209e28, 0x1, 0x1}, 0x40) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000000), &(0x7f0000000140)=""/130}, 0x18) [ 854.445293][ T8705] usb 4-1: new high-speed USB device number 60 using dummy_hcd 04:39:00 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) [ 854.715366][ T8705] usb 4-1: Using ep0 maxpacket: 16 [ 854.850170][ T8705] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 854.860817][ T8705] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 854.872216][ T8705] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 854.882224][ T8705] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 854.892683][ T8705] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 04:39:00 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/rt_cache\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(r0, &(0x7f00000012c0)=[{&(0x7f0000001440)=""/175, 0xaf}], 0x1, 0x0, 0x0) [ 855.200739][ T8705] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 855.210154][ T8705] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 855.219374][ T8705] usb 4-1: Manufacturer: syz [ 855.311613][ T3225] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 855.322919][ T8705] usb 4-1: config 0 descriptor?? 04:39:01 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$bt_hci(r0, &(0x7f0000000140), 0x6) [ 855.416613][ T9070] usb 5-1: new high-speed USB device number 92 using dummy_hcd 04:39:01 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x4800, 0x0) [ 855.587329][ T8705] Registered IR keymap rc-hauppauge [ 855.622498][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 855.704513][ T9070] usb 5-1: device descriptor read/64, error 18 [ 855.717246][ T3225] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 855.728102][ T3225] usb 6-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 855.737601][ T3225] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.754126][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 855.787377][ T3225] usb 6-1: config 0 descriptor?? 04:39:01 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000340)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="2d63707520ff92b2f197d86ad80547edb4cd282eaa6ef7ad6224d7b3ecb7b7a2436978ac3aad2814b44d3d3a4a9f842473a457206fcb95c665a586b2445614306acda1963025e1dfa600a8713bc838b04a459a4600db8401f170d92ee34e1c46701f04ea91df2bacb934a272caa68cb930f14608493b756c3d164ffa"], 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x2b, 'cpu'}]}, 0x5) ioctl$CHAR_RAW_IOOPT(r0, 0x1279, &(0x7f0000000040)) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, &(0x7f0000000100)) [ 855.805628][ T8705] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 855.820842][ T8705] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input61 [ 855.926607][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 855.960807][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 855.999467][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 856.046522][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 856.075452][ C1] mceusb 4-1:0.0: Error: urb status = -71 04:39:01 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$TIOCGSID(r1, 0x5429, 0x0) [ 856.088985][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 856.105537][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 856.125413][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 856.139750][ T9070] usb 5-1: device descriptor read/64, error 18 [ 856.149658][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 856.185495][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 856.198055][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 856.209873][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 856.235284][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 856.255408][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 856.275291][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 856.295269][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 856.305460][ T3225] rtl8192cu: Chip version 0x11 [ 856.315347][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 856.335827][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 856.355325][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 856.366843][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 856.381358][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 856.405269][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 856.425295][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 856.441412][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 856.450039][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 856.465444][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 856.472581][ T9070] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 856.485281][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 856.505320][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 856.519974][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 856.530264][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 856.545321][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 856.575759][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 856.595338][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 856.615298][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 856.631219][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 856.639584][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 856.655509][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 856.675325][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 856.695560][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 856.715424][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 856.735715][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 856.743207][ T8705] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 856.751847][ T8705] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 856.760712][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 856.771768][ T9070] usb 5-1: device descriptor read/64, error 18 [ 856.778469][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 856.785528][ T3225] rtl_usb: Too few input end points found [ 856.795318][ C1] mceusb 4-1:0.0: Error: urb status = -71 04:39:02 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8, &(0x7f00000001c0)={[{0x2, 0x4e00, "ff11"}]}) [ 856.825341][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 856.845305][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 856.865304][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 856.880476][ T3225] usb 6-1: USB disconnect, device number 70 [ 856.886801][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 856.905276][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 856.925334][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 856.945395][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 856.965263][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 856.985273][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 857.005248][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 857.019562][ T8705] usb 4-1: USB disconnect, device number 60 [ 857.025898][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 857.190244][ T9070] usb 5-1: device descriptor read/64, error 18 [ 857.316771][ T9070] usb usb5-port1: attempt power cycle 04:39:03 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x4004550d, 0x0) 04:39:03 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r0, 0x0, 0x0, 0x0, 0x0) 04:39:03 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000340)='cgroup.subtree_control\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x2b, 'cpu'}]}, 0x5) 04:39:03 executing program 5: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a66f1b40da0b7f31cc9d000000010902240001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000001000)={0x0, 0x0, 0x4, "bae5015e"}, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001bc0)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000b00)={0x1c, &(0x7f0000000a40)={0x0, 0x0, 0x1, "1b"}, 0x0, 0x0}) 04:39:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000104001f00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028008000400000000000500160010"], 0x44}}, 0x0) [ 857.749678][ T8705] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 858.023783][ T8705] usb 4-1: Using ep0 maxpacket: 16 04:39:03 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x1, 0x0) write$P9_RVERSION(r0, &(0x7f0000000280)=ANY=[], 0x15) 04:39:03 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) sendto$inet(r0, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x60, 0x0, 0x53) [ 858.167470][ T8705] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 858.177997][ T8705] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 858.189237][ T8705] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 858.199211][ T8705] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 858.209151][ T8705] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 858.317049][ T8705] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 858.326426][ T8705] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 858.334791][ T8705] usb 4-1: Manufacturer: syz [ 858.341166][ T3225] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 858.437033][ T8705] usb 4-1: config 0 descriptor?? 04:39:04 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000040)={[{@fat=@dmask={'dmask'}}]}) [ 858.696504][ T8705] Registered IR keymap rc-hauppauge [ 858.730689][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 858.756308][ T3225] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 858.766842][ T3225] usb 6-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 858.776427][ T3225] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.817256][ T9070] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 858.893410][ T3225] usb 6-1: config 0 descriptor?? [ 858.948103][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 04:39:04 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000340)='ns\x00') fstat(r2, &(0x7f0000001f00)) [ 858.996828][ T8705] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 859.012530][ T8705] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input62 [ 859.036656][ T9070] usb 5-1: device descriptor read/8, error -61 04:39:04 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00') exit(0x0) preadv(r0, &(0x7f00000012c0)=[{&(0x7f0000001440)=""/175, 0xaf}], 0x1, 0x0, 0x0) [ 859.232447][T17330] FAT-fs (loop2): bogus number of reserved sectors [ 859.240042][T17330] FAT-fs (loop2): Can't find a valid FAT filesystem [ 859.297722][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 859.315315][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 859.335255][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 859.365233][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 859.371890][ T9070] usb 5-1: device descriptor read/8, error -61 [ 859.378599][ T3225] rtl8192cu: Chip version 0x11 [ 859.385352][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 859.402566][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 859.410680][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 859.425301][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 859.445303][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 859.471143][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 859.478785][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 859.495347][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 859.515296][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 859.534361][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 859.542065][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 859.555248][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 859.575378][ C1] mceusb 4-1:0.0: Error: urb status = -71 04:39:05 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x0, 0x0, 'A=e', 0x81}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 859.595398][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 859.613511][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 859.621132][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 859.635343][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 859.655445][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 859.663079][ T9070] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 859.675439][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 859.696610][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 859.715361][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 859.728653][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 859.736749][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 859.765423][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 859.778398][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 859.787012][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 859.805267][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 859.825607][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 859.832030][ T3225] rtl_usb: Too few input end points found [ 859.845339][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 859.865673][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 859.872803][ T9070] usb 5-1: device descriptor read/8, error -61 [ 859.885423][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 859.905316][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 859.935268][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 859.950060][ T3225] usb 6-1: USB disconnect, device number 71 [ 859.956388][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 859.972637][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 04:39:05 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8, &(0x7f00000001c0)={[{0x2, 0x4e00, "ff11"}]}) [ 859.980246][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 860.005232][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 860.025433][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 860.042400][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 860.050134][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 860.065347][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 860.090822][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 860.134068][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 860.166125][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 860.191915][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 860.227341][ T8705] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 860.235637][ T8705] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 860.273684][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 860.320895][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 860.363718][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 860.377866][ T9070] usb 5-1: device descriptor read/8, error -61 [ 860.392510][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 860.402711][ T8705] usb 4-1: USB disconnect, device number 61 [ 860.496266][ T9070] usb usb5-port1: unable to enumerate USB device [ 860.926311][ T8705] usb 4-1: new high-speed USB device number 62 using dummy_hcd 04:39:06 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x4004550d, 0x0) 04:39:06 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00') lseek(r0, 0xfffffffffffffffb, 0x0) 04:39:06 executing program 5: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a66f1b40da0b7f31cc9d000000010902240001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000001000)={0x0, 0x0, 0x4, "bae5015e"}, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001bc0)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000b00)={0x1c, &(0x7f0000000a40)={0x0, 0x0, 0x1, "1b"}, 0x0, 0x0}) 04:39:06 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='part=0x000000400000000']) [ 861.195874][ T8705] usb 4-1: Using ep0 maxpacket: 16 04:39:06 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x0, 0x0, 'A=e', 0x81}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 861.326432][ T8705] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 861.337253][ T8705] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 861.348489][ T8705] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 861.358392][ T8705] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 861.368342][ T8705] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 861.413290][T17375] hfsplus: part requires an argument [ 861.419473][T17375] hfsplus: unable to parse mount options 04:39:07 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00') lseek(r0, 0xfffffffffffffffb, 0x0) [ 861.605358][T12836] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 861.666759][ T8705] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 861.676063][ T8705] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 861.684767][ T8705] usb 4-1: Manufacturer: syz [ 861.743498][ T8705] usb 4-1: config 0 descriptor?? 04:39:07 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) [ 861.966948][T12836] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 861.978086][T12836] usb 6-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 861.987802][T12836] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.006388][ T8705] Registered IR keymap rc-hauppauge [ 862.040415][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 04:39:07 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00') lseek(r0, 0xfffffffffffffffb, 0x0) [ 862.081663][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 862.135475][T12836] usb 6-1: config 0 descriptor?? [ 862.135625][ T9070] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 862.174532][ T8705] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 862.190070][ T8705] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input63 [ 862.287010][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 862.331020][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 862.336070][ T8707] Bluetooth: hci0: command 0x0401 tx timeout [ 862.375821][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 862.408162][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 862.455412][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 862.466954][ T9070] usb 5-1: device descriptor read/64, error 18 [ 862.485393][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 862.505438][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 862.527108][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 862.537989][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 862.565340][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 862.585343][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 862.615577][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 862.616007][T12836] rtl8192cu: Chip version 0x11 [ 862.645541][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 862.675516][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 862.695319][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 862.713529][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 04:39:08 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x0, 0x0, 'A=e', 0x81}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 862.725879][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 862.745381][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 862.765324][ C1] mceusb 4-1:0.0: Error: urb status = -71 04:39:08 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00') lseek(r0, 0xfffffffffffffffb, 0x0) [ 862.785287][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 862.805281][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 862.825400][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 862.865292][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 862.885248][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 862.897638][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 862.905404][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 862.912707][ T9070] usb 5-1: device descriptor read/64, error 18 [ 862.935272][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 862.955355][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 862.975363][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 863.004377][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 863.012831][ C1] mceusb 4-1:0.0: Error: urb status = -71 04:39:08 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, &(0x7f0000000600)={[{@size={'size'}}, {@uid={'uid'}}], [{@dont_appraise='dont_appraise'}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@audit='audit'}, {@audit='audit'}]}) [ 863.025318][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 863.048163][T12836] rtl_usb: Too few input end points found [ 863.055266][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 863.075272][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 863.093977][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 863.098821][T12836] usb 6-1: USB disconnect, device number 72 [ 863.101626][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 863.125341][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 863.145338][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 863.165284][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 863.174395][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 863.185295][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 863.197800][ T9070] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 863.205698][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 863.225401][ C1] mceusb 4-1:0.0: Error: urb status = -71 04:39:08 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f00000001c0)={[{}]}) [ 863.245302][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 863.264694][ T8705] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 863.273335][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 863.279868][ T8705] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 863.288727][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 863.305394][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 863.325386][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 863.345397][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 863.365383][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 863.385353][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 863.405268][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 863.425240][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 863.445275][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 863.465849][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 863.485273][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 863.505242][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 863.512195][ T9070] usb 5-1: device descriptor read/64, error 18 [ 863.525331][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 863.537525][ T8705] usb 4-1: USB disconnect, device number 62 [ 863.863800][T17429] tmpfs: Bad value for 'size' [ 863.905825][ T9070] usb 5-1: device descriptor read/64, error 18 [ 864.026255][ T9070] usb usb5-port1: attempt power cycle [ 864.326033][ T8705] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 864.415878][T12836] Bluetooth: hci0: command 0x0401 tx timeout 04:39:10 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x4004550d, 0x0) 04:39:10 executing program 5: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a66f1b40da0b7f31cc9d000000010902240001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000001000)={0x0, 0x0, 0x4, "bae5015e"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000b00)={0x1c, &(0x7f0000000a40)={0x0, 0x0, 0x1, "1b"}, 0x0, 0x0}) 04:39:10 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_mr_cache\x00') lseek(r0, 0x100000000, 0x0) 04:39:10 executing program 0: lseek(0xffffffffffffffff, 0xfffffffffffffffb, 0x0) 04:39:10 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup_subtree(r0, &(0x7f0000000340)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000000c0)={[{0x2b, 'cpu'}]}, 0x5) [ 864.575830][ T8705] usb 4-1: Using ep0 maxpacket: 16 [ 864.696428][ T8705] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 864.706855][ T8705] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 864.718192][ T8705] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 864.728142][ T8705] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 864.738167][ T8705] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 04:39:10 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x501000, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="7c000000000119050000000000000000000000003c0001002c00010014000300000000000200000000b700000000080114000400fe800000000000000000f0ffffffffba0c000200050001002f000000240002000c000200050001002f00040014000100080001000000e40c4b159b3a91470001080007"], 0x7c}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000015c0)=ANY=[@ANYBLOB="3800000002010b08000000000000000000000000240002801400018008000100ac1414bb08000200ac1414000c000280050001002f000000d458afe8a0b0ccb27941789c1d77cc67cd51a450ffc827dedb4e7e11e16a9d3968acf4b52e381bd29253f3a12a0fb898979dd7c25d028044919d0b95fcc49880da8a3234402085155d33422fd70551220ca50a503c09239627430fb8ce4dc86ea09536d449efb9cb6c7ba11e175e5a0731e490d711ea94688cf9600e788e8a8cd14c5cba"], 0x38}}, 0x0) alarm(0xfffffffffffffffe) [ 865.006518][ T8705] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 865.016109][ T8705] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 865.024273][ T8705] usb 4-1: Manufacturer: syz [ 865.102913][ T8705] usb 4-1: config 0 descriptor?? 04:39:10 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000340)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000640)=ANY=[@ANYBLOB='-cpu'], 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x2b, 'cpu'}]}, 0x5) 04:39:10 executing program 0: lseek(0xffffffffffffffff, 0xfffffffffffffffb, 0x0) [ 865.260205][T10133] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 865.385871][ T8705] Registered IR keymap rc-hauppauge [ 865.420314][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 865.429228][ T9070] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 865.564636][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 865.627716][ T9070] usb 5-1: device descriptor read/8, error -61 [ 865.639739][ T8705] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 865.655621][ T8705] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input64 [ 865.707066][T10133] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 865.717831][T10133] usb 6-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 865.727444][T10133] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 04:39:11 executing program 0: lseek(0xffffffffffffffff, 0xfffffffffffffffb, 0x0) [ 865.871764][T10133] usb 6-1: config 0 descriptor?? [ 865.893114][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 865.905298][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 865.912275][ T9070] usb 5-1: device descriptor read/8, error -61 [ 865.925271][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 865.945265][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 865.965437][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 865.979012][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 865.986739][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 866.005285][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 866.022785][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 866.030474][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 866.045351][ C1] mceusb 4-1:0.0: Error: urb status = -71 04:39:11 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00') exit(0x0) preadv(r0, &(0x7f00000012c0)=[{&(0x7f0000001440)=""/175, 0xaf}], 0x1, 0x800, 0x0) [ 866.065279][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 866.085327][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 866.104673][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 866.112363][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 866.135307][ C1] mceusb 4-1:0.0: Error: urb status = -71 04:39:11 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x1, 0x0) write$P9_RAUTH(r0, &(0x7f0000000080)={0x14}, 0x14) [ 866.165267][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 866.185255][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 866.197760][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 866.206225][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 866.216987][ T9070] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 866.225295][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 866.255299][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 866.275272][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 866.283257][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 866.295337][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 866.315573][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 866.333695][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 866.342805][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 866.355402][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 866.375466][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 866.395391][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 866.403120][ T9070] usb 5-1: device descriptor read/8, error -61 [ 866.425473][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 866.445273][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 866.451978][T10133] rtl8192cu: Chip version 0x11 [ 866.465374][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 866.485317][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 866.495669][ T8707] Bluetooth: hci0: command 0x0401 tx timeout [ 866.497187][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 866.511034][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 866.525343][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 866.545303][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 866.565363][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 866.576421][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 866.595466][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 866.614560][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 866.622239][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 866.635333][ C1] mceusb 4-1:0.0: Error: urb status = -71 04:39:12 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f00000001c0)={[{}]}) [ 866.655867][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 866.675347][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 866.690901][ T8705] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 866.699562][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 866.706298][ T8705] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 866.715336][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 866.728456][ T9070] usb 5-1: device descriptor read/8, error -61 [ 866.741762][ T8705] usb 4-1: USB disconnect, device number 63 [ 866.748685][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 866.850488][ T9070] usb usb5-port1: unable to enumerate USB device [ 866.875964][T10133] rtl_usb: Too few input end points found [ 866.930425][T10133] usb 6-1: USB disconnect, device number 73 [ 867.395552][ T8705] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 867.635643][ T8705] usb 4-1: Using ep0 maxpacket: 16 [ 867.777846][ T8705] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 867.788309][ T8705] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 867.799575][ T8705] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 867.809506][ T8705] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 867.819501][ T8705] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 867.906998][ T8705] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 867.916426][ T8705] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 867.924588][ T8705] usb 4-1: Manufacturer: syz [ 867.989855][ T8705] usb 4-1: config 0 descriptor?? 04:39:13 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x4004550d, 0x0) 04:39:13 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r0, 0xfffffffffffffffb, 0x0) 04:39:13 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) dup2(r1, r0) 04:39:13 executing program 5: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a66f1b40da0b7f31cc9d000000010902240001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000001000)={0x0, 0x0, 0x4, "bae5015e"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000b00)={0x1c, &(0x7f0000000a40)={0x0, 0x0, 0x1, "1b"}, 0x0, 0x0}) 04:39:13 executing program 2: 04:39:13 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r0, 0xfffffffffffffffb, 0x0) [ 868.256279][ T8705] Registered IR keymap rc-hauppauge [ 868.290955][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 868.454185][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 04:39:14 executing program 2: [ 868.495278][ T8707] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 868.497579][ T8705] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 868.518517][ T8705] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input65 04:39:14 executing program 1: [ 868.561820][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 868.596785][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 868.627373][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 868.666213][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 868.708822][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 868.735538][T12836] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 868.753857][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 868.761638][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 868.775315][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 868.795304][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 868.815276][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 868.835300][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 868.855294][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 868.866906][ T8707] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 868.868339][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 868.877450][ T8707] usb 6-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 868.877649][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 868.877749][ T8707] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.901308][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 868.915877][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 868.933899][ T8707] usb 6-1: config 0 descriptor?? [ 868.945278][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 868.965266][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 868.985332][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 869.005354][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 869.005614][T12836] usb 5-1: device descriptor read/64, error 18 [ 869.025269][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 869.045285][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 869.063566][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 869.071269][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 869.085259][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 869.105287][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 869.112006][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 869.125344][ C1] mceusb 4-1:0.0: Error: urb status = -71 04:39:14 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r0, 0xfffffffffffffffb, 0x0) [ 869.155311][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 869.166580][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 869.175341][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 869.195302][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 869.210234][ T8705] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 869.218730][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 869.224897][ T8705] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 869.245231][ C1] mceusb 4-1:0.0: Error: urb status = -71 04:39:14 executing program 2: [ 869.265347][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 869.285410][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 869.315356][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 869.335386][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 869.355370][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 869.375552][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 869.395244][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 869.406341][T12836] usb 5-1: device descriptor read/64, error 18 [ 869.411837][ T8705] usb 4-1: USB disconnect, device number 64 [ 869.418888][ C1] mceusb 4-1:0.0: Error: urb status = -71 04:39:15 executing program 1: [ 869.450001][ T8707] rtl8192cu: Chip version 0x11 04:39:15 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f00000001c0)={[{}]}) [ 869.676119][T12836] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 869.856292][ T8707] rtl_usb: Too few input end points found [ 869.898727][ T8707] usb 6-1: USB disconnect, device number 74 [ 869.947749][T12836] usb 5-1: device descriptor read/64, error 18 [ 870.235302][ T8705] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 870.351417][T12836] usb 5-1: device descriptor read/64, error 18 [ 870.476084][T12836] usb usb5-port1: attempt power cycle [ 870.496538][ T8705] usb 4-1: Using ep0 maxpacket: 16 [ 870.635718][ T8705] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 870.646234][ T8705] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 870.658821][ T8705] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 870.669069][ T8705] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 870.679047][ T8705] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 870.796684][ T8705] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 870.806028][ T8705] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 870.814170][ T8705] usb 4-1: Manufacturer: syz [ 870.921967][ T8705] usb 4-1: config 0 descriptor?? [ 871.176766][ T8705] Registered IR keymap rc-hauppauge [ 871.195514][T12836] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 871.206358][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 871.251545][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 871.286714][ T8705] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 871.302073][ T8705] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input66 [ 871.353872][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 871.378473][T12836] usb 5-1: device descriptor read/8, error -61 [ 871.408892][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 871.445589][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 04:39:17 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x4004550d, 0x0) 04:39:17 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00') lseek(0xffffffffffffffff, 0xfffffffffffffffb, 0x0) 04:39:17 executing program 2: 04:39:17 executing program 1: 04:39:17 executing program 5: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a66f1b40da0b7f31cc9d000000010902240001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000001000)={0x0, 0x0, 0x4, "bae5015e"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000b00)={0x1c, &(0x7f0000000a40)={0x0, 0x0, 0x1, "1b"}, 0x0, 0x0}) [ 871.478829][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 871.528113][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 871.565724][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 871.585834][T12836] usb 5-1: device descriptor read/8, error -71 [ 871.595268][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 871.608725][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 871.617007][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 871.635375][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 871.665321][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 871.689785][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 871.697514][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 871.715298][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 871.735374][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 871.765330][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 871.785312][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 871.805375][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 871.821255][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 871.828976][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 871.845339][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 871.865372][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 871.885417][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 871.905339][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 871.924406][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 871.932161][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 871.945271][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 871.975307][ C1] mceusb 4-1:0.0: Error: urb status = -71 04:39:17 executing program 2: [ 871.995328][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 872.016028][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 872.034475][ T8705] mceusb 4-1:0.0: Registered with mce emulator interface version 1 04:39:17 executing program 1: [ 872.043052][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 872.049545][ T8705] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 872.058346][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 872.065289][ T9600] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 872.075235][ C1] mceusb 4-1:0.0: Error: urb status = -71 04:39:17 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00') lseek(0xffffffffffffffff, 0xfffffffffffffffb, 0x0) [ 872.095373][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 872.115337][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 872.141028][ T8705] usb 4-1: USB disconnect, device number 65 [ 872.147473][ C1] mceusb 4-1:0.0: Error: urb status = -71 04:39:18 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8, &(0x7f00000001c0)={[{}, {}]}) 04:39:18 executing program 2: [ 872.427780][ T9600] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 872.438322][ T9600] usb 6-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 872.448274][ T9600] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.570725][ T9600] usb 6-1: config 0 descriptor?? [ 872.598325][T12836] usb 5-1: new high-speed USB device number 103 using dummy_hcd 04:39:18 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00') lseek(0xffffffffffffffff, 0xfffffffffffffffb, 0x0) [ 872.787245][T12836] usb 5-1: device descriptor read/8, error -61 04:39:18 executing program 1: [ 873.056384][T12836] usb 5-1: device descriptor read/8, error -61 [ 873.096140][ T9600] rtl8192cu: Chip version 0x11 [ 873.135700][ T8707] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 873.176825][T12836] usb usb5-port1: unable to enumerate USB device [ 873.379387][ T8707] usb 4-1: Using ep0 maxpacket: 16 [ 873.499314][ T9600] rtl_usb: Too few input end points found [ 873.516352][ T8707] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 873.527411][ T8707] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 873.540931][ T8707] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 873.551455][ T8707] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 873.561492][ T8707] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 873.577253][ T9600] usb 6-1: USB disconnect, device number 75 [ 873.646343][ T8707] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 873.656099][ T8707] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 873.664152][ T8707] usb 4-1: Manufacturer: syz [ 873.719421][ T8707] usb 4-1: config 0 descriptor?? [ 873.987146][ T8707] Registered IR keymap rc-hauppauge [ 874.013314][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 874.047890][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 874.087584][ T8707] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 874.108329][ T8707] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input67 [ 874.135896][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 874.166851][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 874.205875][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 874.239596][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 874.278983][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 874.319028][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 874.358973][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 874.395358][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 874.406058][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 874.415393][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 874.435364][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 874.444377][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 874.455344][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 874.475311][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 874.489879][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 874.499366][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 874.515329][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 874.535340][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 874.555382][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 874.572139][ T8707] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 874.580827][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 874.587304][ T8707] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 874.596103][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 874.612351][ T8707] usb 4-1: USB disconnect, device number 66 [ 874.618719][ C0] mceusb 4-1:0.0: Error: urb status = -71 04:39:20 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x4004550d, 0x0) 04:39:20 executing program 2: 04:39:20 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00') lseek(r0, 0x0, 0x0) 04:39:20 executing program 1: 04:39:20 executing program 5: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a66f1b40da0b7f31cc9d000000010902240001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000001000)={0x0, 0x0, 0x4, "bae5015e"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001bc0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000b00)={0x1c, &(0x7f0000000a40)={0x0, 0x0, 0x1, "1b"}, 0x0, 0x0}) 04:39:20 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8, &(0x7f00000001c0)={[{}, {}]}) 04:39:21 executing program 2: 04:39:21 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00') lseek(r0, 0x0, 0x0) 04:39:21 executing program 1: [ 875.465745][ T8707] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 875.767769][ T8705] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 875.796348][T10133] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 875.827373][ T8707] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 875.838393][ T8707] usb 6-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 875.847843][ T8707] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 04:39:21 executing program 2: [ 875.944050][ T8707] usb 6-1: config 0 descriptor?? 04:39:21 executing program 1: [ 876.031855][ T8705] usb 4-1: Using ep0 maxpacket: 16 [ 876.093142][T10133] usb 5-1: device descriptor read/64, error 18 04:39:21 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00') lseek(r0, 0x0, 0x0) [ 876.180425][ T8705] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 876.191275][ T8705] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 876.202575][ T8705] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 876.212912][ T8705] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 876.223273][ T8705] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 876.419618][ T8705] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 876.429041][ T8705] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 876.437406][ T8705] usb 4-1: Manufacturer: syz [ 876.465801][ T8707] rtl8192cu: Chip version 0x11 [ 876.504426][ T8705] usb 4-1: config 0 descriptor?? [ 876.549207][T10133] usb 5-1: device descriptor read/64, error 18 [ 876.776923][ T8705] Registered IR keymap rc-hauppauge [ 876.810605][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 876.825709][T10133] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 876.882874][ T8707] rtl_usb: Too few input end points found [ 876.910173][ T8707] usb 6-1: USB disconnect, device number 76 [ 876.934600][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 877.001194][ T8705] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 877.017007][ T8705] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input68 [ 877.041403][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 877.079359][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 877.116391][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 877.126199][T10133] usb 5-1: device descriptor read/64, error 18 [ 877.145566][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 877.179377][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 877.195314][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 877.225382][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 877.238361][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 877.246926][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 877.265412][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 877.279354][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 877.286937][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 877.305385][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 877.325384][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 877.346629][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 877.355575][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 877.376368][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 877.392006][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 877.399765][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 877.425417][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 877.432124][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 877.455452][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 877.471463][ T8705] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 877.479920][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 877.486373][ T8705] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 877.495410][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 877.513044][ T8705] usb 4-1: USB disconnect, device number 67 [ 877.519770][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 877.576030][T10133] usb 5-1: device descriptor read/64, error 18 [ 877.698572][T10133] usb usb5-port1: attempt power cycle 04:39:24 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x4004550d, 0x0) 04:39:24 executing program 2: 04:39:24 executing program 1: 04:39:24 executing program 0: 04:39:24 executing program 5: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a66f1b40da0b7f31cc9d000000010902240001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000001000)={0x0, 0x0, 0x4, "bae5015e"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001bc0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000b00)={0x1c, &(0x7f0000000a40)={0x0, 0x0, 0x1, "1b"}, 0x0, 0x0}) 04:39:24 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8, &(0x7f00000001c0)={[{}, {}]}) [ 878.409763][T10133] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 878.560483][T10133] usb 5-1: device descriptor read/8, error -71 04:39:24 executing program 0: 04:39:24 executing program 2: [ 878.780050][T10133] usb 5-1: device descriptor read/8, error -71 04:39:24 executing program 1: [ 878.866001][ T8707] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 878.886394][ T8705] usb 4-1: new high-speed USB device number 68 using dummy_hcd 04:39:24 executing program 2: [ 879.126057][ T8705] usb 4-1: Using ep0 maxpacket: 16 [ 879.229152][ T8707] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 879.239843][ T8707] usb 6-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 879.249432][ T8707] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.257343][ T8705] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 879.271090][ T8705] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 879.283631][ T8705] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 879.293867][ T8705] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 879.304133][ T8705] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 04:39:25 executing program 0: [ 879.325568][T10133] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 879.410232][ T8705] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 879.421529][ T8705] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 879.433530][ T8705] usb 4-1: Manufacturer: syz [ 879.452804][ T8707] usb 6-1: config 0 descriptor?? 04:39:25 executing program 2: [ 879.503868][ T8705] usb 4-1: config 0 descriptor?? [ 879.556760][T10133] usb 5-1: device descriptor read/8, error -61 [ 879.779576][ T8705] Registered IR keymap rc-hauppauge [ 879.813195][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 879.876140][T10133] usb 5-1: device descriptor read/8, error -61 [ 879.919402][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 879.972259][ T8705] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 879.986745][ T8707] rtl8192cu: Chip version 0x11 [ 879.987800][ T8705] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input69 [ 880.011161][T10133] usb usb5-port1: unable to enumerate USB device [ 880.138356][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 880.178948][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 880.195346][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 880.215403][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 880.235217][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 880.243686][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 880.255809][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 880.275234][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 880.294363][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 880.301962][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 880.315286][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 880.335267][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 880.351013][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 880.358619][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 880.375258][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 880.385683][ T8707] rtl_usb: Too few input end points found [ 880.390287][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 880.399061][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 880.411736][ T8707] usb 6-1: USB disconnect, device number 77 [ 880.425939][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 880.440519][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 880.451967][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 880.465340][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 880.485249][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 880.506548][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 880.525412][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 880.531914][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 880.555296][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 880.566328][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 880.584032][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 880.606633][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 880.616017][ T8705] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 880.628675][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 880.645345][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 880.659001][ T8705] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 880.667477][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 880.673678][ T8705] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 880.685342][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 880.705310][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 880.729108][ T8705] usb 4-1: USB disconnect, device number 68 [ 880.735489][ C1] mceusb 4-1:0.0: Error: urb status = -71 04:39:27 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x4004550d, 0x0) 04:39:27 executing program 1: 04:39:27 executing program 0: 04:39:27 executing program 2: 04:39:27 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f00000001c0)={[{0x1, 0x4e00, "ff"}, {}]}) 04:39:27 executing program 5: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a66f1b40da0b7f31cc9d000000010902240001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000001000)={0x0, 0x0, 0x4, "bae5015e"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001bc0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000b00)={0x1c, &(0x7f0000000a40)={0x0, 0x0, 0x1, "1b"}, 0x0, 0x0}) 04:39:27 executing program 2: 04:39:27 executing program 0: 04:39:27 executing program 1: [ 882.207161][ T8703] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 882.265468][ T9070] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 882.456894][ T8703] usb 4-1: Using ep0 maxpacket: 16 [ 882.495597][ T9071] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 882.590513][ T8703] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 882.601240][ T8703] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 882.612539][ T8703] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 882.622478][ T8703] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 04:39:28 executing program 1: 04:39:28 executing program 0: [ 882.632567][ T8703] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 882.658825][ T9070] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 882.669314][ T9070] usb 6-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 882.678842][ T9070] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 04:39:28 executing program 2: [ 882.767186][ T9070] usb 6-1: config 0 descriptor?? [ 882.776770][ T9071] usb 5-1: device descriptor read/64, error 18 [ 882.896970][ T8703] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 882.906541][ T8703] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 882.916159][ T8703] usb 4-1: Manufacturer: syz [ 883.017827][ T8703] usb 4-1: config 0 descriptor?? [ 883.207877][ T9071] usb 5-1: device descriptor read/64, error 18 [ 883.267803][ T8703] Registered IR keymap rc-hauppauge [ 883.285689][ T9070] rtl8192cu: Chip version 0x11 [ 883.301851][ T8703] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 883.425662][ T8703] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 883.464784][ T8703] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 883.481094][ T8703] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input70 [ 883.506492][ T9071] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 883.551615][ T8703] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 883.588152][ T8703] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 883.626074][ T8703] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 883.658925][ T8703] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 883.701065][ T8703] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 883.725344][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 883.736068][ T9070] rtl_usb: Too few input end points found [ 883.736411][ T8703] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 883.750388][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 883.765362][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 883.769077][ T9070] usb 6-1: USB disconnect, device number 78 [ 883.785358][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 883.805341][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 883.814484][ T8703] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 883.825269][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 883.825637][ T9071] usb 5-1: device descriptor read/64, error 18 [ 883.845392][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 883.853995][ T8703] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 883.865347][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 883.885345][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 883.893744][ T8703] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 883.905317][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 883.925344][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 883.931989][ T8703] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 883.945233][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 883.965380][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 883.974401][ T8703] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 883.983683][ T8703] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 883.993598][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 884.005263][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 884.017491][ T8703] usb 4-1: USB disconnect, device number 69 [ 884.025332][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 884.256539][ T9071] usb 5-1: device descriptor read/64, error 18 [ 884.375747][ T9071] usb usb5-port1: attempt power cycle [ 885.086048][ T9071] usb 5-1: new high-speed USB device number 110 using dummy_hcd 04:39:30 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401c1b"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x4004550d, 0x0) 04:39:30 executing program 0: 04:39:30 executing program 2: 04:39:30 executing program 1: 04:39:30 executing program 5: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a66f1b40da0b7f31cc9d000000010902240001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000001000)={0x0, 0x0, 0x4, "bae5015e"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001bc0)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000b00)={0x1c, &(0x7f0000000a40)={0x0, 0x0, 0x1, "1b"}, 0x0, 0x0}) 04:39:30 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f00000001c0)={[{0x1, 0x4e00, "ff"}, {}]}) [ 885.245769][ T9071] usb 5-1: device descriptor read/8, error -71 04:39:31 executing program 1: [ 885.465628][ T9071] usb 5-1: device descriptor read/8, error -71 04:39:31 executing program 2: 04:39:31 executing program 0: [ 885.596626][ T8707] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 885.675630][ T8703] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 885.875464][ T8707] usb 4-1: Using ep0 maxpacket: 16 04:39:31 executing program 2: [ 885.975679][ T9071] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 886.001686][ T8707] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 886.018385][ T8707] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 886.034684][ T8707] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 886.049377][ T8707] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 886.062633][ T8707] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 886.096931][ T8703] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 886.115708][ T8703] usb 6-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 886.130629][ T8703] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.186615][ T9071] usb 5-1: no configurations [ 886.200079][ T9071] usb 5-1: can't read configurations, error -22 04:39:31 executing program 1: 04:39:31 executing program 0: [ 886.275526][ T8703] usb 6-1: config 0 descriptor?? [ 886.310116][ T9071] usb usb5-port1: unable to enumerate USB device [ 886.436717][ T8707] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 886.447075][ T8707] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 886.455524][ T8707] usb 4-1: Manufacturer: syz [ 886.512816][ T8707] usb 4-1: config 0 descriptor?? [ 886.756155][ T8703] rtl8192cu: Chip version 0x11 [ 886.776098][ T8707] Registered IR keymap rc-hauppauge [ 886.810236][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 886.938170][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 886.985798][ T8707] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 887.002198][ T8707] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input71 [ 887.113984][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 887.156839][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 887.175777][ T8703] rtl_usb: Too few input end points found [ 887.228280][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 887.241684][ T8703] usb 6-1: USB disconnect, device number 79 [ 887.249060][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 887.265363][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 887.285308][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 887.293182][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 887.305322][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 887.325307][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 887.333371][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 887.345273][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 887.365320][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 887.372863][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 887.385305][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 887.405304][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 887.411931][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 887.425311][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 887.445313][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 887.453627][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 887.465306][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 887.485293][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 887.492500][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 887.505316][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 887.525281][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 887.532810][ T8707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 887.545331][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 887.565320][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 887.574680][ T8707] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 887.583924][ T8707] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 887.593006][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 887.605268][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 887.625305][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 887.645281][ C0] mceusb 4-1:0.0: Error: urb status = -71 [ 887.657428][ T8707] usb 4-1: USB disconnect, device number 70 [ 887.665412][ C0] mceusb 4-1:0.0: Error: urb status = -71 04:39:34 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401c1b"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x4004550d, 0x0) 04:39:34 executing program 2: 04:39:34 executing program 0: 04:39:34 executing program 1: 04:39:34 executing program 5: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a66f1b40da0b7f31cc9d000000010902240001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000001000)={0x0, 0x0, 0x4, "bae5015e"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001bc0)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000b00)={0x1c, &(0x7f0000000a40)={0x0, 0x0, 0x1, "1b"}, 0x0, 0x0}) 04:39:34 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f00000001c0)={[{0x1, 0x4e00, "ff"}, {}]}) [ 889.435818][ T9071] usb 6-1: new high-speed USB device number 80 using dummy_hcd 04:39:35 executing program 0: [ 889.585459][ T9070] usb 4-1: new high-speed USB device number 71 using dummy_hcd 04:39:35 executing program 2: 04:39:35 executing program 1: [ 889.816548][ T9071] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 889.827252][ T9071] usb 6-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 889.836710][ T9071] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.905687][ T9070] usb 4-1: Using ep0 maxpacket: 16 [ 889.965603][ T8707] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 889.976297][ T9071] usb 6-1: config 0 descriptor?? [ 890.056880][ T9070] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 890.067667][ T9070] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 890.079097][ T9070] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 890.089003][ T9070] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 890.099007][ T9070] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 890.211185][ T9070] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 890.220754][ T9070] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 890.229218][ T9070] usb 4-1: Manufacturer: syz [ 890.246828][ T8707] usb 5-1: no configurations [ 890.251976][ T8707] usb 5-1: can't read configurations, error -22 [ 890.322600][ T9070] usb 4-1: config 0 descriptor?? 04:39:36 executing program 0: [ 890.455729][ T8707] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 890.476104][ T9071] rtl8192cu: Chip version 0x11 04:39:36 executing program 2: [ 890.586268][ T9070] Registered IR keymap rc-hauppauge [ 890.620162][ T9070] mceusb 4-1:0.0: Error: mce write submit urb error = -90 04:39:36 executing program 1: [ 890.737226][ T8707] usb 5-1: no configurations [ 890.742035][ T8707] usb 5-1: can't read configurations, error -22 [ 890.785299][ T9070] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 890.799157][ T8707] usb usb5-port1: attempt power cycle [ 890.833173][ T9070] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 890.848722][ T9070] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input72 [ 890.898120][ T9071] rtl_usb: Too few input end points found [ 890.925512][ T9071] usb 6-1: USB disconnect, device number 80 [ 891.042530][ T9070] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 891.055356][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 891.075278][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 891.105303][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 891.125328][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 891.136074][ T9070] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 891.145402][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 891.165309][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 891.177247][ T9070] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 891.195315][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 891.215521][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 891.235293][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 891.247954][ T9070] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 891.255504][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 891.275333][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 891.295304][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 891.315303][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 891.324660][ T9070] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 891.335352][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 891.355259][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 891.375331][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 891.386146][ T9070] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 891.395345][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 891.415323][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 891.435320][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 891.444814][ T9070] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 891.466327][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 891.476206][ T9070] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 891.485411][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 891.505408][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 891.525437][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 891.532315][ T9070] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 891.546372][ T8707] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 891.555290][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 891.567674][ T9070] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 891.579749][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 891.595381][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 891.615307][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 891.635371][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 891.644836][ T9070] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 891.654540][ T9070] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 891.667770][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 891.685326][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 891.687132][ T8707] usb 5-1: no configurations [ 891.699225][ T8707] usb 5-1: can't read configurations, error -22 [ 891.715462][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 891.745374][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 891.775305][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 891.815350][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 891.835289][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 891.866356][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 891.896437][ C1] mceusb 4-1:0.0: Error: urb status = -71 [ 891.907389][ T9070] usb 4-1: USB disconnect, device number 71 [ 891.955880][ T8707] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 892.086852][ T8707] usb 5-1: no configurations [ 892.091944][ T8707] usb 5-1: can't read configurations, error -22 [ 892.129345][ T8707] usb usb5-port1: unable to enumerate USB device 04:39:38 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401c1b"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x4004550d, 0x0) 04:39:38 executing program 0: 04:39:38 executing program 2: 04:39:38 executing program 5: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a66f1b40da0b7f31cc9d000000010902240001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000001000)={0x0, 0x0, 0x4, "bae5015e"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001bc0)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000b00)={0x1c, &(0x7f0000000a40)={0x0, 0x0, 0x1, "1b"}, 0x0, 0x0}) 04:39:38 executing program 1: 04:39:38 executing program 3: 04:39:38 executing program 3: 04:39:38 executing program 0: 04:39:38 executing program 2: [ 892.906145][ T8703] Bluetooth: hci2: command 0x0406 tx timeout [ 892.990704][T10133] usb 6-1: new high-speed USB device number 81 using dummy_hcd 04:39:38 executing program 1: 04:39:38 executing program 3: [ 893.227011][ T9071] usb 5-1: new high-speed USB device number 116 using dummy_hcd 04:39:39 executing program 2: [ 893.377012][T10133] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 893.387437][T10133] usb 6-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 893.397064][T10133] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.538834][ T9071] usb 5-1: no configurations [ 893.543612][ T9071] usb 5-1: can't read configurations, error -22 [ 893.557282][T10133] usb 6-1: config 0 descriptor?? [ 893.736068][ T9071] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 894.030678][T10133] rtl8192cu: Chip version 0x11 [ 894.087136][ T9071] usb 5-1: no configurations [ 894.091945][ T9071] usb 5-1: can't read configurations, error -22 [ 894.133547][ T9071] usb usb5-port1: attempt power cycle [ 894.415705][T10133] rtl_usb: Too few input end points found [ 894.444575][T10133] usb 6-1: USB disconnect, device number 81 [ 894.880779][ T9071] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 895.016049][ T9071] usb 5-1: no configurations [ 895.020774][ T9071] usb 5-1: can't read configurations, error -22 [ 895.215829][ T9071] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 895.365716][ T9071] usb 5-1: no configurations [ 895.370478][ T9071] usb 5-1: can't read configurations, error -22 [ 895.397351][ T9071] usb usb5-port1: unable to enumerate USB device 04:39:41 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401c1b021b400000"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x4004550d, 0x0) 04:39:41 executing program 0: 04:39:41 executing program 1: 04:39:41 executing program 3: 04:39:41 executing program 2: 04:39:41 executing program 5: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a66f1b40da0b7f31cc9d000000010902240001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000001000)={0x0, 0x0, 0x4, "bae5015e"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001bc0)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 04:39:41 executing program 0: 04:39:41 executing program 2: 04:39:42 executing program 3: [ 896.416081][ T9071] usb 6-1: new high-speed USB device number 82 using dummy_hcd 04:39:42 executing program 1: 04:39:42 executing program 0: [ 896.625600][ T27] usb 5-1: new high-speed USB device number 120 using dummy_hcd 04:39:42 executing program 3: [ 896.827472][ T9071] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 896.838033][ T9071] usb 6-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 896.847454][ T9071] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.957674][ T27] usb 5-1: no configurations [ 896.962443][ T27] usb 5-1: can't read configurations, error -22 [ 896.981159][ T9071] usb 6-1: config 0 descriptor?? [ 897.176367][ T27] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 897.456714][ T9071] rtl8192cu: Chip version 0x11 [ 897.486684][ T27] usb 5-1: no configurations [ 897.491922][ T27] usb 5-1: can't read configurations, error -22 [ 897.499330][ T27] usb usb5-port1: attempt power cycle [ 897.876306][ T9071] rtl_usb: Too few input end points found [ 897.926313][ T9071] usb 6-1: USB disconnect, device number 82 [ 898.225509][ T27] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 898.386261][ T27] usb 5-1: no configurations [ 898.391046][ T27] usb 5-1: can't read configurations, error -22 [ 898.598410][ T27] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 898.755696][ T27] usb 5-1: no configurations [ 898.760470][ T27] usb 5-1: can't read configurations, error -22 [ 898.799477][ T27] usb usb5-port1: unable to enumerate USB device 04:39:45 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401c1b021b400000"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x4004550d, 0x0) 04:39:45 executing program 2: 04:39:45 executing program 1: 04:39:45 executing program 0: 04:39:45 executing program 3: 04:39:45 executing program 5: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a66f1b40da0b7f31cc9d000000010902240001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000001000)={0x0, 0x0, 0x4, "bae5015e"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001bc0)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 04:39:45 executing program 0: 04:39:45 executing program 2: 04:39:45 executing program 3: 04:39:45 executing program 1: [ 900.236887][ T27] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 900.408984][ T8703] usb 5-1: new high-speed USB device number 124 using dummy_hcd 04:39:46 executing program 0: [ 900.627064][ T27] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 900.638103][ T27] usb 6-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 900.647682][ T27] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.696678][ T8703] usb 5-1: no configurations [ 900.701499][ T8703] usb 5-1: can't read configurations, error -22 [ 900.822065][ T27] usb 6-1: config 0 descriptor?? 04:39:46 executing program 3: [ 900.916187][ T8703] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 901.196514][ T8703] usb 5-1: no configurations [ 901.201499][ T8703] usb 5-1: can't read configurations, error -22 [ 901.243064][ T8703] usb usb5-port1: attempt power cycle [ 901.309148][ T27] rtl8192cu: Chip version 0x11 [ 901.716067][ T27] rtl_usb: Too few input end points found [ 901.760242][ T27] usb 6-1: USB disconnect, device number 83 [ 901.975526][ T8703] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 902.107410][ T8703] usb 5-1: no configurations [ 902.112204][ T8703] usb 5-1: can't read configurations, error -22 [ 902.296088][ T8703] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 902.426210][ T8703] usb 5-1: no configurations [ 902.431028][ T8703] usb 5-1: can't read configurations, error -22 [ 902.455762][ T8703] usb usb5-port1: unable to enumerate USB device 04:39:48 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401c1b021b400000"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x4004550d, 0x0) 04:39:48 executing program 2: 04:39:48 executing program 1: 04:39:48 executing program 0: 04:39:48 executing program 3: 04:39:48 executing program 5: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a66f1b40da0b7f31cc9d000000010902240001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000001000)={0x0, 0x0, 0x4, "bae5015e"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001bc0)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 04:39:49 executing program 3: 04:39:49 executing program 2: 04:39:49 executing program 0: 04:39:49 executing program 1: [ 903.805639][ T9071] usb 6-1: new high-speed USB device number 84 using dummy_hcd 04:39:49 executing program 0: [ 904.126467][ T8703] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 904.186902][ T9071] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 904.198198][ T9071] usb 6-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 904.211017][ T9071] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 04:39:50 executing program 2: [ 904.418304][ T8703] usb 5-1: no configurations [ 904.423722][ T8703] usb 5-1: can't read configurations, error -22 [ 904.477881][ T9071] usb 6-1: config 0 descriptor?? [ 904.617210][ T8703] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 904.906694][ T8703] usb 5-1: no configurations [ 904.911596][ T8703] usb 5-1: can't read configurations, error -22 [ 904.919099][ T8703] usb usb5-port1: attempt power cycle [ 904.945735][ T9071] rtl8192cu: Chip version 0x11 [ 905.357174][ T9071] rtl_usb: Too few input end points found [ 905.400206][ T9071] usb 6-1: USB disconnect, device number 84 [ 905.636673][ T8703] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 905.786428][ T8703] usb 5-1: no configurations [ 905.791240][ T8703] usb 5-1: can't read configurations, error -22 [ 905.995839][ T8703] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 906.136670][ T8703] usb 5-1: no configurations [ 906.141574][ T8703] usb 5-1: can't read configurations, error -22 [ 906.186872][ T8703] usb usb5-port1: unable to enumerate USB device 04:39:52 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401c1b021b400000000001"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x4004550d, 0x0) 04:39:52 executing program 3: 04:39:52 executing program 1: 04:39:52 executing program 0: 04:39:52 executing program 2: 04:39:52 executing program 5: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a66f1b40da0b7f31cc9d000000010902240001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000001000)={0x0, 0x0, 0x4, "bae5015e"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001bc0)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000b00)={0x10, 0x0, 0x0, 0x0}) 04:39:53 executing program 3: 04:39:53 executing program 0: 04:39:53 executing program 2: [ 907.538096][T10133] usb 6-1: new high-speed USB device number 85 using dummy_hcd 04:39:53 executing program 1: [ 907.896882][ T27] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 907.916759][T10133] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 907.927281][T10133] usb 6-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 907.936886][T10133] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.108426][T10133] usb 6-1: config 0 descriptor?? 04:39:53 executing program 2: 04:39:53 executing program 0: [ 908.345624][ T27] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 908.353404][ T27] usb 5-1: can't read configurations, error -61 [ 908.555451][ T27] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 908.596601][T10133] rtl8192cu: Chip version 0x11 [ 909.006680][T10133] rtl_usb: Too few input end points found [ 909.022343][ T27] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 909.030440][ T27] usb 5-1: can't read configurations, error -61 [ 909.051225][T10133] usb 6-1: USB disconnect, device number 85 [ 909.063655][ T27] usb usb5-port1: attempt power cycle [ 909.815633][ T27] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 910.129133][ T27] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 910.137344][ T27] usb 5-1: can't read configurations, error -61 [ 910.369109][ T27] usb 5-1: new high-speed USB device number 9 using dummy_hcd 04:39:56 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401c1b021b400000000001"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x4004550d, 0x0) 04:39:56 executing program 3: 04:39:56 executing program 1: 04:39:56 executing program 2: 04:39:56 executing program 0: 04:39:56 executing program 5: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a66f1b40da0b7f31cc9d000000010902240001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000001000)={0x0, 0x0, 0x4, "bae5015e"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001bc0)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000b00)={0x10, 0x0, 0x0, 0x0}) [ 910.806015][ T27] usb 5-1: device descriptor read/all, error -71 [ 910.889620][ T27] usb usb5-port1: unable to enumerate USB device [ 911.456139][ T8703] usb 6-1: new high-speed USB device number 86 using dummy_hcd 04:39:57 executing program 3: 04:39:57 executing program 0: 04:39:57 executing program 2: [ 911.847787][ T8703] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 911.858405][ T8703] usb 6-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 911.867875][ T8703] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 04:39:57 executing program 1: [ 912.015742][ T8703] usb 6-1: config 0 descriptor?? [ 912.048520][T12836] usb 5-1: new high-speed USB device number 10 using dummy_hcd 04:39:57 executing program 0: 04:39:58 executing program 3: [ 912.456346][T12836] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 912.464104][T12836] usb 5-1: can't read configurations, error -61 [ 912.505903][ T8703] rtl8192cu: Chip version 0x11 [ 912.676246][T12836] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 912.908376][ T8703] rtl_usb: Too few input end points found [ 912.951126][ T8703] usb 6-1: USB disconnect, device number 86 [ 913.097100][T12836] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 913.104853][T12836] usb 5-1: can't read configurations, error -61 [ 913.191275][T12836] usb usb5-port1: attempt power cycle [ 913.961434][T12836] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 914.217403][T12836] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 914.225386][T12836] usb 5-1: can't read configurations, error -61 [ 914.395772][T12836] usb 5-1: new high-speed USB device number 13 using dummy_hcd 04:40:00 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401c1b021b400000000001"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x4004550d, 0x0) 04:40:00 executing program 2: 04:40:00 executing program 1: 04:40:00 executing program 0: 04:40:00 executing program 3: 04:40:00 executing program 5: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a66f1b40da0b7f31cc9d000000010902240001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000001000)={0x0, 0x0, 0x4, "bae5015e"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001bc0)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000b00)={0x10, 0x0, 0x0, 0x0}) [ 914.665921][T12836] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 914.674145][T12836] usb 5-1: can't read configurations, error -71 [ 914.743294][T12836] usb usb5-port1: unable to enumerate USB device 04:40:00 executing program 0: 04:40:00 executing program 3: 04:40:00 executing program 1: 04:40:00 executing program 2: [ 915.136849][ T8705] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 915.356154][T12836] usb 5-1: new high-speed USB device number 14 using dummy_hcd 04:40:01 executing program 3: 04:40:01 executing program 0: [ 915.521245][ T8705] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 915.531833][ T8705] usb 6-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 915.541313][ T8705] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.616204][ T8705] usb 6-1: config 0 descriptor?? [ 915.766310][T12836] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 915.774087][T12836] usb 5-1: can't read configurations, error -61 [ 915.965880][T12836] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 916.104181][ T8705] rtl8192cu: Chip version 0x11 [ 916.366694][T12836] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 916.374498][T12836] usb 5-1: can't read configurations, error -61 [ 916.390887][T12836] usb usb5-port1: attempt power cycle [ 916.525806][ T8705] rtl_usb: Too few input end points found [ 916.557061][ T8705] usb 6-1: USB disconnect, device number 87 [ 917.105892][T12836] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 917.386778][T12836] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 917.394654][T12836] usb 5-1: can't read configurations, error -61 [ 917.575450][T12836] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 917.825497][T12836] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 917.833261][T12836] usb 5-1: can't read configurations, error -61 [ 917.894815][T12836] usb usb5-port1: unable to enumerate USB device 04:40:03 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401c1b021b40000000000109"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x4004550d, 0x0) 04:40:03 executing program 2: 04:40:03 executing program 1: 04:40:03 executing program 3: 04:40:03 executing program 0: 04:40:03 executing program 5: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a66f1b40da0b7f31cc9d000000010902240001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000001000)={0x0, 0x0, 0x4, "bae5015e"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001bc0)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000b00)={0x10, &(0x7f0000000a40), 0x0, 0x0}) 04:40:04 executing program 1: 04:40:04 executing program 3: 04:40:04 executing program 2: 04:40:04 executing program 0: [ 918.459156][ T9600] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 918.835829][ T27] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 918.837344][ T9600] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 918.854291][ T9600] usb 6-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 918.863683][ T9600] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 919.013919][ T9600] usb 6-1: config 0 descriptor?? 04:40:04 executing program 0: 04:40:04 executing program 2: [ 919.269891][ T27] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 919.278759][ T27] usb 5-1: can't read configurations, error -61 [ 919.469143][ T27] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 919.492029][ T9600] rtl8192cu: Chip version 0x11 [ 919.696508][ T9600] rtl_usb: Too few input end points found [ 919.905826][ T27] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 919.913605][ T27] usb 5-1: can't read configurations, error -61 [ 919.916353][ T9600] usb 6-1: USB disconnect, device number 88 [ 919.955676][ T27] usb usb5-port1: attempt power cycle [ 920.676752][ T27] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 920.976415][ T27] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 920.984178][ T27] usb 5-1: can't read configurations, error -61 [ 921.165693][ T27] usb 5-1: new high-speed USB device number 21 using dummy_hcd 04:40:07 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401c1b021b40000000000109"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x4004550d, 0x0) 04:40:07 executing program 1: 04:40:07 executing program 3: 04:40:07 executing program 0: 04:40:07 executing program 2: 04:40:07 executing program 5: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a66f1b40da0b7f31cc9d000000010902240001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000001000)={0x0, 0x0, 0x4, "bae5015e"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001bc0)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000b00)={0x10, &(0x7f0000000a40), 0x0, 0x0}) [ 921.425492][ T27] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 921.433576][ T27] usb 5-1: can't read configurations, error -61 [ 921.449061][ T27] usb usb5-port1: unable to enumerate USB device 04:40:07 executing program 2: 04:40:07 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x80000000004) write(r2, &(0x7f000058bfe4)="29000000140003b7ff000000040860eb0100100006a40e07fff00fd57f25ffffff0100002a00f3ff09", 0x29) 04:40:07 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000500), 0x3}, 0x0, 0x9, 0x0, 0x3, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001740)=""/102400}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) dup(0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5453, 0x0) 04:40:07 executing program 0: [ 921.989322][ T27] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 922.302530][ T8705] usb 5-1: new high-speed USB device number 22 using dummy_hcd 04:40:08 executing program 2: [ 922.397001][ T27] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 922.408156][ T27] usb 6-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 922.419310][ T27] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 04:40:08 executing program 0: [ 922.671219][ T27] usb 6-1: config 0 descriptor?? [ 922.786404][ T8705] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 922.794170][ T8705] usb 5-1: can't read configurations, error -61 [ 922.985882][ T8705] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 923.156105][ T27] rtl8192cu: Chip version 0x11 [ 923.366397][ T27] rtl_usb: Too few input end points found [ 923.465933][ T8705] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 923.473704][ T8705] usb 5-1: can't read configurations, error -61 [ 923.482443][ T8705] usb usb5-port1: attempt power cycle [ 923.569157][ T9600] usb 6-1: USB disconnect, device number 89 [ 924.210888][ T8705] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 924.466078][ T8705] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 924.474103][ T8705] usb 5-1: can't read configurations, error -61 [ 924.695961][ T8705] usb 5-1: new high-speed USB device number 25 using dummy_hcd 04:40:10 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401c1b021b40000000000109"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x4004550d, 0x0) 04:40:10 executing program 3: 04:40:10 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000480)={0x2d, 0x4, 0x0, {0x0, 0x401, 0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2d) keyctl$invalidate(0x15, r0) 04:40:10 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0xd34, 0x0, 0x0, 0xfbff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40042406, &(0x7f0000000180)='fd/3\x00') r1 = creat(&(0x7f0000000140)='./bus\x00', 0xa) pwrite64(r1, &(0x7f0000000200)="18", 0x1, 0xe8d) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000080)={0x18d, 0xf, &(0x7f0000000240)}) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, &(0x7f0000000640)={0x9, 0x401, [{0x6, 0x0, 0x3}, {0x7f, 0x0, 0x8}, {0x1, 0x0, 0x6}, {0x4, 0x0, 0x1}, {0x7, 0x0, 0x9}, {0x2, 0x0, 0x4}, {0x7, 0x0, 0x7}, {0x20, 0x0, 0x2}, {0x9, 0x0, 0x7fffffff}]}) ioctl$TCSETA(r1, 0x5406, &(0x7f00000000c0)={0x21, 0x7, 0x4, 0x3f, 0xb, "69425c6f76bb9064"}) pipe2(&(0x7f0000000040), 0x4000) ioctl$TIOCL_PASTESEL(r0, 0x5412, &(0x7f0000000100)) 04:40:10 executing program 5: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a66f1b40da0b7f31cc9d000000010902240001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000001000)={0x0, 0x0, 0x4, "bae5015e"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001bc0)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000b00)={0x10, &(0x7f0000000a40), 0x0, 0x0}) 04:40:10 executing program 2: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)="9000000018001f15b9409b0dffff65580200be0a020c060500000300430008000300fc6cfac8388827a685a168d0bf46d32345653602648dcaaf6c26c291214549935ade4a460c89b6ec0cff3959547f509058ba86c902000f00000000000400160012000a00000000000000000000000001000000f31ae9e086ceb6ac62bb944cf2e79be6aba4183b00000000000000", 0x90, 0x400000000000000, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) [ 924.965626][ T8705] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 924.973394][ T8705] usb 5-1: can't read configurations, error -71 [ 925.025694][ T8705] usb usb5-port1: unable to enumerate USB device [ 925.152360][T18239] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 925.274174][T18243] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 04:40:11 executing program 3: r0 = perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000380)='\'\xc4\'\v\xec\xe4\t\xc5r\x12-\x90\xda\x9a\x94\x02\xec\xea\x10\x90\x03\xcb\xf8\x1b6\xa5(\xd6\xd3\x93\xd3\xdf\x85P\x19G7Q\v\xdcHv~Qa\xf3\xd4\xfc(\x83\xfb\xf8)\xf6\x8a$\xb1\x90\xeb\'~\xa0\xd8\xc8\xe8\x94#\xcd\xd5Kp\xbf\xc0\x8d7\x1b?A(\xe8^\x9c\xff\x0f\x1ck\xbc\x95\x05\xcd\x17\xf7\x15o\xd4\xdc4\x84uw\xa6w\x0f\xea`1\xec\xb4\x04\xd5\r\x8d\xde\x1f]\x15\xe5\xe8\xd00\xe5\x8d\x9c\x9ec+\x02\x1d\xffa5\x94\xab\xddNe\xfe\x8c\xc4q\xbb#f\xc1\xb9\x81W\xa4$)!\v\x9b\xa7\b\x91\xe5\xeb\x88\x1c\x0f\xb2.Tr\xe4\x99\x9e\x03\xb4\xd2\xf9KW\xce\xd1cC\xd5\xcf\x97\xa9\xeab\xda\xd6:\xa91q\xf7\xc5\xc0C\xd1\'\x89\xee\x84T:\x88x\xe2\x83\xf2r\xf4&t@\x9e\xa4qf\xdf\xf4\xb5\x01\\a\x85\xd3\xe0\xb7\n\xe7\xed\x84Q\xd7s\xcd4B\xcbQ\xa4\x9f[\x99\xdfJ%\xa8\xfc\xe3`\xc1JA\xc9\xbc\xd4~}\xce\xe8\xfejH\x8fb\xdd\xbcJ\vk\'\xe7Q\xfd\xaaA`\xb5\xa1\xe4\xf8\x9eG\xcfb\xe8@\x04\xe1\xf8\xacU)(S\xed\xffA\xfaqt\xb6-\x9b5\xf6\x1e\x13$e\n\xc7\x9b\xb0X\xb6\xd4\t\x99^^\xc2>J\x16\xd0\x8c\xecy*\xa0\a\xe9Ar\xa6\xb4n9j\xe5\xba\x8a\n\xce2\xcf_\x1b.t)\x8d09A[-\xf6\xe7\xe8\x1f\x92>\xb8\xd4>-\xacY\x9e\x88\x96\xa7\xfa\xdaoL\xa6\xec\xe8\xd5\xbfaf\xd7\xfc\x03\x91w)\xcd\x1f\xbe\xc9R\xcfz\x03\xec\br\x83\x8bM-\xf8X\xfd\"\xb4RV\x7f\xda\xd3\xd4h\x1c\xdb\xbe\xa4U\xec\xcd\'\xbc\xd22\x85{,\xe6-,6\x9d\x85\xb4fL\b\x98\xe9@\xee\xc2.\xb3\xd6w\x10\x94\xb5%D\xe8\r\xfe\x98G\x82\fx,\xa2J\x12\x03ec\xd5e-\x1f6\xe7\xb6\xd9\xcf0J\xed\xb7\x9b\xfd\xfc\x00EQ\x1f\x00D\xc95\xdeG +\x1bp\xf4\t\x94\x87\xf1ZbO\xa6\xe9\f`u\xda\xb3\x1d\xf9\x94\x80\xc1\x17\xde(_\xa7\xe7\x11\x9a\xac\x8c\xb1\xd71\xc5\xe9\xd3n\xc2\xa4\x98P\x9aF\xc2\x93\xad@\xa9h\x96\x1b]2\x88\xf3\xd8\xc798\x8c\x9f\xd4W4\xf1}\aD\xa0\xd8\xda\xf4\x1bEx(t|\xf4Y\xfaJ\xc2GS\xc9R\xb5\xda\xa8\x9b\xaa\x01\xe2~\xd8f.#\x94\xbf\x85z\xbf\xa0x62L\x1f\x91\xd2\x1e%\x88\x1f\f\xabb\x8ds\x93\x9e\xed\xd2\xdb\x02\x0e\xcf\xf5\xaf\xc8>+\x03e\xb7\xba\xb9}\xca\xfc\xe8\xed\x9b\xa2\x9ey\bMv\x8f\x8a8\xfd;\x9a5J\xee\x9a\xae\x83>$\x8a6\x05P\x8c\x05\xb8\r\xcf\xdd\x15/\xa9\xa1\xd4\x87{\xc9I4\xe3 i\xa4\xc5\xe5l\x03?\xfdM&\xc0a9}h\x8ef\x10!\xf0\x99\x80\xb72\xcc\x06\'+\xf0\xa1\a\xeeSGH\x12\x068S7s\xd3\xdaT\"\xa9jk\xed\xa2IyM\xa3&t\xfeA\xa9\"\xb4\xec\xdex\x00\x80`p\x91\x84\xbfK\xb6\x00\xa7\xa2\x06\xce\xc8X\x7f\xd1@\xf1\xcf\xdf\xae\xdb\r\xf6h\xdf\xc6+\xac\r\x9f\xc2D\xdf\xd6\xde`\xa4\xd1=\x1b\x8d\xf4\xbe#\tH\x06;a(`\xdcw\x1dc_\v\x046j\xf9`\r\xc0\a\x8d\x12:l\xc7j3E\xd7\xcaX\x97\xad\x93\xea\x99\xca\xd7m\xb8\x1e1\xb6Nz\"U/\x0eP\b=\x01W\xcd\xf1x\x85\xf4&\xe7\xf9W\x06\xa4\xf8&\xbc\xf4\xd0\xd2\xd1W\xee\x9a\xdd\xdbu\x0e\x9aV\xe2\xc5\x84`Bu\x12\xa8/=\x17\xc4F\x11\xdfm-)\xd9hc\xba\xb7\x91\xd9\x11\x9a,\x19\xf4]\xa7Y@B\x1f\xa8\x06\x88\x8e\xf4\xbc\xad\xc0M\x91rFJ\x03\xac \xb9\x0e\xb58g\xaf\x849\x9c|\xfdq6\xfb)\xc6H\x8f\xc5\xa7\x93\xfd\x89pzp\xb4\n\xbd\xb2\xb2\xa8!\xb2N\xbb3\x9co\x0e!\nD\x7f\xe7\xf8\xd8YN\xaf\x1c\xf7\xe2\xfd\xf6\x0f\x938\xbf\xfd\x0f\x97Z\x9d1\xf5\x11\xc6\xdb\f\x81uB\xd4/0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fsetxattr$security_evm(r2, &(0x7f0000000040)='security.evm\x00', &(0x7f0000000080)=@v2={0x5, 0x2, 0xe, 0x5, 0x62, "81faf34239bc11a5925080a803b2d2b55eb5221da11b84320eae394f530cad006aa6cc0796bc212fe17dd37374e3285a47de4dde6d29b648a3365dbf1065a8500e4b4f3d3530a940b4f26af27ca26b85af9aae0e500c76902a37208736a5a2223d24"}, 0x6b, 0x1) 04:40:11 executing program 1: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xab, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x5, 0x6, 0x401}, 0x14}}, 0x0) [ 925.757050][ T8706] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 925.767661][ T8706] usb 6-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 925.778093][ T8706] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 04:40:11 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f00000005c0)={@broadcast=[0xff, 0xff, 0xff, 0x33], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c, 0x58]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, @remote}}}}}}}, 0x0) 04:40:11 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_emit_ethernet(0x66, &(0x7f00000005c0)={@broadcast=[0xff, 0xff, 0xff, 0x33], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x30, 0x2c, 0x0, @empty={[0x3, 0x3c, 0x33]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0) syz_genetlink_get_family_id$devlink(0x0) [ 925.859985][ T8706] usb 6-1: config 0 descriptor?? [ 925.878044][ T9070] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 926.336829][ T9070] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 926.344896][ T9070] usb 5-1: can't read configurations, error -61 [ 926.362204][ T8706] rtl8192cu: Chip version 0x11 [ 926.586192][ T8706] rtl_usb: Too few input end points found [ 926.680702][ T9070] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 926.790294][ T8706] usb 6-1: USB disconnect, device number 90 [ 927.096791][ T9070] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 927.105472][ T9070] usb 5-1: can't read configurations, error -61 [ 927.149010][ T9070] usb usb5-port1: attempt power cycle [ 927.855809][ T9070] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 928.131380][ T9070] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 928.139202][ T9070] usb 5-1: can't read configurations, error -61 [ 928.315533][ T9070] usb 5-1: new high-speed USB device number 29 using dummy_hcd 04:40:14 executing program 4: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401c1b021b4000000000010902"], 0x0) syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r1, 0x4004550d, 0x0) 04:40:14 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f00000005c0)={@broadcast=[0xff, 0xff, 0xff, 0x33], @random="f674029167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0) 04:40:14 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_emit_ethernet(0x66, &(0x7f00000005c0)={@broadcast=[0xff, 0xff, 0xff, 0x33], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x30, 0x2c, 0x0, @empty={[0x3, 0x3c, 0x33]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0) 04:40:14 executing program 2: mkdir(0x0, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x0) setregid(0x0, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, 0x0) pivot_root(0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 04:40:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0xd34, 0x0, 0x0, 0xfbff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40042406, &(0x7f0000000180)='fd/3\x00') r1 = creat(&(0x7f0000000140)='./bus\x00', 0xa) pwrite64(r1, &(0x7f0000000200)="18", 0x1, 0xe8d) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000080)={0x18d, 0xf, &(0x7f0000000240)}) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, &(0x7f0000000640)={0x9, 0x401, [{0x6, 0x0, 0x3}, {0x7f, 0x0, 0x8}, {0x1, 0x0, 0x6}, {0x4, 0x0, 0x1}, {0x7, 0x0, 0x9}, {0x2, 0x0, 0x4}, {0x7, 0x0, 0x7}, {0x20, 0x0, 0x2}, {0x9, 0x0, 0x7fffffff}]}) ioctl$TCSETA(r1, 0x5406, &(0x7f00000000c0)={0x21, 0x7, 0x4, 0x3f, 0xb, "69425c6f76bb9064"}) pipe2(&(0x7f0000000040), 0x4000) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r2, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="0000843f720ac187", @ANYRES32=0x0, @ANYBLOB="1204ff0400"/16], 0x28}}, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000100)) 04:40:14 executing program 5: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%n'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') bpf$ITER_CREATE(0x21, 0x0, 0x0) getdents64(r0, &(0x7f0000000280)=""/4096, 0x20001280) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) [ 928.565803][ T9070] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 928.573567][ T9070] usb 5-1: can't read configurations, error -71 [ 928.676240][ T9070] usb usb5-port1: unable to enumerate USB device [ 928.846817][T18311] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 928.864851][T18311] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 928.877393][T18311] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 04:40:14 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%n'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r0, &(0x7f0000000280)=""/4096, 0x20001280) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 04:40:14 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f00000005c0)={@broadcast=[0xff, 0xff, 0xff, 0x33], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x8]}}}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0) 04:40:15 executing program 0: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xab, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000180)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000100)) 04:40:15 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) [ 929.591544][ T9071] usb 5-1: new high-speed USB device number 30 using dummy_hcd 04:40:15 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) exit_group(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f00000005c0)={@broadcast=[0xff, 0xff, 0xff, 0x33], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x8e, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0) [ 929.838681][T18331] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 930.007214][ T9071] usb 5-1: config 0 has no interfaces? [ 930.012929][ T9071] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 930.023377][ T9071] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 04:40:15 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) exit_group(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f00000005c0)={@broadcast=[0xff, 0xff, 0xff, 0x33], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c, 0x33]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0) syz_emit_ethernet(0x8e, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0) [ 930.261191][ T9071] usb 5-1: config 0 descriptor?? [ 930.517134][T18346] ptrace attach of "/root/syz-executor.1"[18345] was attempted by "/root/syz-executor.1"[18346] [ 930.710750][T18323] udc-core: couldn't find an available UDC or it's busy [ 930.718192][T18323] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 931.269694][ T8705] usb 5-1: USB disconnect, device number 30 04:40:17 executing program 4: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401c1b021b4000000000010902"], 0x0) syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r1, 0x4004550d, 0x0) 04:40:17 executing program 0: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xab, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x3, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}}, 0x14}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 04:40:17 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%n'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r0, &(0x7f0000000280)=""/4096, 0x20001280) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 04:40:17 executing program 1: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xab, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0) 04:40:17 executing program 2: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000380)='\'\xc4\'\v\xec\xe4\t\xc5r\x12-\x90\xda\x9a\x94\x02\xec\xea\x10\x90\x03\xcb\xf8\x1b6\xa5(\xd6\xd3\x93\xd3\xdf\x85P\x19G7Q\v\xdcHv~Qa\xf3\xd4\xfc(\x83\xfb\xf8)\xf6\x8a$\xb1\x90\xebS~\xa0\xd8\xc8\xe8\x94#\xcd\xd5Kp\xbf\xc0\x8d7\x1b?A(\xe8^\x9c\xff\x0f\x1ck\xbc\x95\x05\xcd\x17\xf7\x15o\xd4\xdc4\x84uw\xa6w\x0f\xea`1\xec\xb4\x04\xd5\r\x8d\xde\x1f]\x15\xe5\xe8\xd00\xe5\x8d\x9c\x9ec+\x02\x1d\xffa5\x94\xab\xddNe\xfe\x8c\xc4q\xbb#f\xc1\xb9\x81W\xa4$)!\v\x9b\xa7\b\x91\xe5\xeb\x88\x1c\x0f\xb2.Tr\xe4\x99\x9e\x03\xb4\xd2\xf9KW\xce\xd1cC\xd5\xcf\x97\xa9\xeab\xda\xd6:\xa91q\xf7\xc5\xc0C\xd1\'\x89\xee\x84T:\x88x\xe2\x83\xf2r\xf4&t@\x9e\xa4qf\xdf\xf4\xb5\x01\\a\x85\xd3\xe0\xb7\n\xe7\xed\x84Q\xd7s\xcd4B\xcbQ\xa4\x9f[\x99\xdfJ%\xa8\xfc\xe3`\xc1JA\xc9\xbc\xd4~}\xce\xe8\xfejH\x8fb\xdd\xbcJ\vk\'\xe7Q\xfd\xaaA`\xb5\xa1\xe4\xf8\x9eG\xcfb\xe8@\x04\xe1\xf8\xacU)(S\xed\xffA\xfaqt\xb6-\x9b5\xf6\x1e\x13$e\n\xc7\x9b\xb0X\xb6\xd4\t\x99^^\xc2>J\x16\xd0\x8c\xecy*\xa0\a\xe9Ar\xa6\xb4n9j\xe5\xba\x8a\n\xce2\xcf_\x1b.t)\x8d09A[-\xf6\xe7\xe8\x1f\x92>\xb8\xd4>-\xacY\x9e\x88\x96\xa7\xfa\xdaoL\xa6\xec\xe8\xd5\xbfaf\xd7\xfc\x03\x91w)\xcd\x1f\xbe\xc9R\xcfz\x03\xec\br\x83\x8bM-\xf8X\xfd\"\xb4RV\x7f\xda\xd3\xd4h\x1c\xdb\xbe\xa4U\xec\xcd\'\xbc\xd22\x85{,\xe6-,6\x9d\x85\xb4fL\b\x98\xe9@\xee\xc2.\xb3\xd6w\x10\x94\xb5%D\xe8\r\xfe\x98G\x82\fx,\xa2J\x12\x03ec\xd5e-\x1f6\xe7\xb6\xd9\xcf0J\xed\xb7\x9b\xfd\xfc\x00EQ\x1f\x00D\xc95\xdeG +\x1bp\xf4\t\x94\x87\xf1ZbO\xa6\xe9\f`u\xda\xb3\x1d\xf9\x94\x80\xc1\x17\xde(_\xa7\xe7\x11\x9a\xac\x8c\xb1\xd71\xc5\xe9\xd3n\xc2\xa4\x98P\x9aF\xc2\x93\xad@\xa9h\x96\x1b]2\x88\xf3\xd8\xc798\x8c\x9f\xd4W4\xf1}\aD\xa0\xd8\xda\xf4\x1bEx(t|\xf4Y\xfaJ\xc2GS\xc9R\xb5\xda\xa8\x9b\xaa\x01\xe2~\xd8f.#\x94\xbf\x85z\xbf\xa0x62L\x1f\x91\xd2\x1e%\x88\x1f\f\xabb\x8ds\x93\x9e\xed\xd2\xdb\x02\x0e\xcf\xf5\xaf\xc8>+\x03e\xb7\xba\xb9}\xca\xfc\xe8\xed\x9b\xa2\x9ey\bMv\x8f\x8a8\xfd;\x9a5J\xee\x9a\xae\x83>$\x8a6\x05P\x8c\x05\xb8\r\xcf\xdd\x15/\xa9\xa1\xd4\x87{\xc9I4\xe3 i\xa4\xc5\xe5l\x03?\xfdM&\xc0a9}h\x8ef\x10!\xf0\x99\x80\xb72\xcc\x06\'+\xf0\xa1\a\xeeSGH\x12\x068S7s\xd3\xdaT\"\xa9jk\xed\xa2IyM\xa3&t\xfeA\xa9\"\xb4\xec\xdex\x00\x80`p\x91\x84\xbfK\xb6\x00\xa7\xa2\x06\xce\xc8X\x7f\xd1@\xf1\xcf\xdf\xae\xdb\r\xf6h\xdf\xc6+\xac\r\x9f\xc2D\xdf\xd6\xde`\xa4\xd1=\x1b\x8d\xf4\xbe#\tH\x06;a(`\xdcw\x1dc_\v\x046j\xf9`\r\xc0\a\x8d\x12:l\xc7j3E\xd7\xcaX\x97\xad\x93\xea\x99\xca\xd7m\xb8\x1e1\xb6Nz\"U/\x0eP\b=\x01W\xcd\xf1x\x85\xf4&\xe7\xf9W\x06\xa4\xf8&\xbc\xf4\xd0\xd2\xd1W\xee\x9a\xdd\xdbu\x0e\x9aV\xe2\xc5\x84`Bu\x12\xa8/=\x17\xc4F\x11\xdfm-)\xd9hc\xba\xb7\x91\xd9\x11\x9a,\x19\xf4]\xa7Y@B\x1f\xa8\x06\x88\x8e\xf4\xbc\xad\xc0M\x91rFJ\x03\xac \xb9\x0e\xb58g\xaf\x849\x9c|\xfdq6\xfb)\xc6H\x8f\xc5\xa7\x93\xfd\x89pzp\xb4\n\xbd\xb2\xb2\xa8!\xb2N\xbb3\x9co\x0e!\nD\x7f\xe7\xf8\xd8YN\xaf\x1c\xf7\xe2\xfd\xf6\x0f\x938\xbf\xfd\x0f\x97Z\x9d1\xf5\x11\xc6\xdb\f\x81uB\xd4/0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) readahead(r0, 0x0, 0x0) 04:40:20 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f00000005c0)={@broadcast=[0xff, 0xff, 0xff, 0x33], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, @remote}}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0) 04:40:20 executing program 1: getpid() perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f00001f5000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000040)="0f07cfba2100b873baefba20008e658e65006c01df660f3a44e575f30f2251f30f1efa670f33", 0x26}], 0x1, 0x15, 0x0, 0x0) capset(0x0, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:40:20 executing program 5: clone(0x200000000204ab80, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x2001, 0x3, 0x2c0, 0x0, 0x150, 0x150, 0x150, 0x150, 0x228, 0x1e8, 0x1e8, 0x228, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'tftp-20000\x00'}}, @common=@unspec=@time={{0x38, 'time\x00'}, {0x0, 0x0, 0x0, 0x20000}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@local, @dev, 0x0, 0x0, 'batadv_slave_1\x00', 'caif0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x320) 04:40:20 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 04:40:21 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f00001f5000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000040)="0f07cfba2100b873baefba20008e658e65006c01df660f3a44e575f30f2251f30f1efa670f33", 0x26}], 0x1, 0x15, 0x0, 0x0) capset(0x0, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 04:40:21 executing program 5: r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x46, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000002cc0), 0x1a3, 0x0) 04:40:21 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e349, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4000, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000700)=@v1={0x0, @aes128, 0x10, "9cbe283a7965afda"}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x18, 0x4) sendto$inet6(r0, &(0x7f0000000080)="03042a015c0060004003002cfff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd00000000", 0x6b, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000680)={&(0x7f0000000300)=@nl=@proc, 0x80, &(0x7f0000000580)=[{0x0}, {0x0}], 0x2, &(0x7f00000005c0)=""/191, 0xbf}, 0x0) 04:40:21 executing program 1: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}}) [ 936.065915][ T8705] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 936.596949][ T8705] usb 5-1: config 0 has no interfaces? [ 936.602677][ T8705] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 936.612228][ T8705] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.796598][ T8705] usb 5-1: config 0 descriptor?? 04:40:22 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x10d082) r1 = memfd_create(&(0x7f0000000040)='\xbb\x02\xb1\xed\x96\xdb\xb1,\x116\xe0\x89]\xad\x01\xc3r%;\x99\xbck\xe7=\xfa\xe8HB\x00\x00\xd7h\xa4\x06jt\xea\xf9l\x00\x00\x00\x00!\xf8\xac\xdc\x00\x00\x00', 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000200)="c5", 0x1}], 0x1, 0x6, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4000, 0x9, 0x0, 0x10001, 0x1, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000180)) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3fbcbab16c80fab, 0x11, r0, 0x0) write(r0, &(0x7f0000000000), 0x52698b21) 04:40:22 executing program 3: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) write$P9_RMKDIR(r1, &(0x7f00000000c0)={0x14}, 0x14) lseek(r1, 0x0, 0x3) [ 937.243660][T18449] udc-core: couldn't find an available UDC or it's busy [ 937.252548][T18449] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 937.819453][ T8705] usb 5-1: USB disconnect, device number 32 04:40:24 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401c1b021b4000000000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x4004550d, 0x0) 04:40:24 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000300)={{0x2, 0x0, @loopback}, {0x0, @link_local}, 0x0, {0x2, 0x0, @local}, 'syzkaller1\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_inet_SIOCSARP(r1, 0x8954, &(0x7f0000000140)={{0x2, 0x0, @loopback}, {0x0, @link_local}, 0x0, {0x2, 0x0, @empty}, 'syzkaller1\x00'}) 04:40:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x15d4b87) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount(&(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000206) 04:40:24 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x0) 04:40:24 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "85ae122da8909f9795ba6d0d92b78e90c6b38e"}) 04:40:24 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x35, 0x35, 0x3, [@func_proto, @int, @typedef, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "01"}]}, {0x0, [0x0]}}, 0x0, 0x53}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 04:40:24 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6627f8c5b5b4f35a8d0afc5307003acf4e3840477887896decd447c4b5b17f0642dde99a4b5d8fc7636207d89ad11ca9d133b1f2c7d8e1d0ba6bb48ba5", 0x3d}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x37) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 04:40:24 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) r3 = dup2(r0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @local, 0x2}, 0x1c) 04:40:24 executing program 2: r0 = memfd_create(&(0x7f0000000900)='#\'%nodev\x00\x7f\xe5\xd0ql\x86\xcd\xe6\x14\x93\xb0\x7f_,y<', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) utime(0x0, &(0x7f00000000c0)) [ 939.329599][ T8705] usb 5-1: new high-speed USB device number 33 using dummy_hcd 04:40:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43b113c0000", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="6c0e000004000000000000000b0001006367726f7570000014000200100002000c"], 0x44}}, 0x0) 04:40:25 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x18, &(0x7f0000001140), &(0x7f0000001180)=0xc) [ 939.716514][ T8705] usb 5-1: config 0 has no interfaces? [ 939.722231][ T8705] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 939.731756][ T8705] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 04:40:25 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) listen(r0, 0x0) [ 939.819949][ T8705] usb 5-1: config 0 descriptor?? [ 940.075960][ T8705] usb 5-1: USB disconnect, device number 33 [ 940.084925][T18544] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 940.192147][T18549] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 04:40:26 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401c1b021b4000000000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x4004550d, 0x0) 04:40:26 executing program 3: r0 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x11, r0, 0x0, 0x0) 04:40:26 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newchain={0x24, 0x66, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 04:40:26 executing program 1: syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='mft_zone_multiplier=0x0000000000000002']) 04:40:27 executing program 2: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000200)={[], [{@uid_eq={'uid', 0x3d, 0xee00}}]}) [ 941.496462][T18571] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 941.614305][T18571] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 941.853901][T18582] ntfs: (device loop2): parse_options(): Invalid uid option argument: 00000000000000060928 [ 941.868758][ T8705] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 942.050564][T18582] ntfs: (device loop2): parse_options(): Invalid uid option argument: 00000000000000060928 04:40:27 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x29, 0x29, 0x4, [@func_proto, @int, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "01"}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x48}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 942.256385][ T8705] usb 5-1: config 0 has no interfaces? [ 942.262184][ T8705] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 942.272377][ T8705] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.349015][ T8705] usb 5-1: config 0 descriptor?? 04:40:28 executing program 5: r0 = socket(0xa, 0x2400000001, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5452, &(0x7f0000000000)) 04:40:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x15d4b87) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_procfs(0x0, 0x0) 04:40:28 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0xff64, 0x0}, 0xffffffffffffff36) 04:40:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) [ 942.600498][ T8705] usb 5-1: USB disconnect, device number 34 04:40:28 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="1f5583624999c4665398664c3fd64362f39caf1701d25c2f", 0x18}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x6) 04:40:28 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x15d4b87) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020662a, 0x0) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 04:40:29 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401c1b021b4000000000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x4004550d, 0x0) 04:40:29 executing program 2: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) socket$kcm(0x2, 0x3, 0x2) 04:40:29 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x5a, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffdc0, 0x20001732, &(0x7f00000003c0)={0x2, 0x4e20, @local}, 0x4a) recvfrom(r0, &(0x7f0000000100)=""/90, 0xffffffffffffff5e, 0x1010c, 0x0, 0x38) [ 944.111013][T18627] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 04:40:29 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffdc0, 0x20001732, &(0x7f00000003c0)={0x2, 0x4e20, @local}, 0x4a) recvfrom(r0, &(0x7f0000000100)=""/90, 0xffffffffffffff5e, 0x1010c, 0x0, 0x38) 04:40:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000080)='f2fs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f00000003c0)) [ 945.064778][T18637] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 945.072899][T18637] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 945.123662][T18637] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 945.131702][T18637] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 945.224366][T18642] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 945.236069][ T8706] usb 5-1: new high-speed USB device number 35 using dummy_hcd 04:40:31 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountstats\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x33d, 0x0, 0x0) 04:40:31 executing program 2: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x106e, 0x0, 0x0) msgsnd(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="03"], 0x4e, 0x0) msgctl$IPC_RMID(r0, 0x0) [ 945.676655][ T8706] usb 5-1: config 0 has no interfaces? [ 945.682446][ T8706] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 945.692023][ T8706] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 04:40:31 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000140)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x0, 0x2, {0x1, @raw_data="3d80b2c61266f7b7d041e7cda11d4ca4e9465dfc4738ad8d89e6665efecaedfedf3b100d3625a7b27ff0afe5ddee2bf3385b8a81bf03e1475f8b10f67bdc5d34bdbbff73317447210d33e57521c5b766a9de816ae4927e513bd28c9aca5a917fd371d531df9affb1a20509ebca4d01282a696183ef5b4df4f93a91dcc37e91d9b45db3eff1ad44974b40a94e12de68f1e988183a8803080f1fd6d771bde22857f669b1e7d79acc6a2de46fdf975c31105f821823f4f3411b137d8b0f7df57360ad9844805baf275a"}}) [ 945.818305][ T8706] usb 5-1: config 0 descriptor?? [ 946.063426][ T8706] usb 5-1: USB disconnect, device number 35 04:40:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000000)=@v={0x93, 0xb, 0x0, 0x0, @generic, 0x0, 0x2}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffdc0, 0x20001732, &(0x7f00000003c0)={0x2, 0x4e20, @local}, 0x4a) recvfrom(r0, &(0x7f0000000100)=""/90, 0xffffffffffffff5e, 0x1010c, 0x0, 0x38) 04:40:32 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountstats\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x33d, 0x0, 0x0) 04:40:32 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6627f8c5b5b4f35a8d0afc5307003acf4e3840477887896decd447c4b5b17f", 0x1f}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x37) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 04:40:32 executing program 3: [ 947.045791][T18674] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 04:40:32 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401c1b021b4000000000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x4004550d, 0x0) 04:40:32 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000001d80)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_EXPBUF(r0, 0xc0189436, 0x0) 04:40:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x15d4b87) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 04:40:33 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x3e, 0x0) write$nbd(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="06000000000000000000000004"], 0x68) 04:40:33 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(aegis128-generic)\x00'}, 0x58) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) 04:40:33 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f00000000c0), &(0x7f0000000100)=0x30) [ 948.075618][ T8705] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 948.456572][ T8705] usb 5-1: config 0 has no interfaces? [ 948.462457][ T8705] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 948.472297][ T8705] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.637079][ T8705] usb 5-1: config 0 descriptor?? 04:40:34 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control={0x43}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 04:40:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0xd3) [ 948.881256][ T8705] usb 5-1: USB disconnect, device number 36 04:40:34 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x37) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 04:40:34 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(aegis128-generic)\x00'}, 0x58) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) [ 949.455609][ T8705] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 949.846947][ T8705] usb 5-1: config 0 has no interfaces? [ 949.852575][ T8705] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 949.862259][ T8705] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 04:40:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/fib_trie\x00') r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) sendfile(r3, r2, 0x0, 0x1000206) 04:40:35 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={0x0}}, 0x0) [ 949.941951][ T8705] usb 5-1: config 0 descriptor?? [ 950.401723][ T8703] usb 5-1: USB disconnect, device number 37 04:40:36 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401c1b021b4000000000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x4004550d, 0x0) 04:40:36 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000740)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @dev}}}, 0x30) 04:40:36 executing program 3: r0 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r0, 0x2007fff) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="a6"], 0x1) r2 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) r3 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendfile(r2, r3, 0x0, 0x8482) 04:40:36 executing program 2: epoll_create(0x9) r0 = open(0x0, 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) r1 = creat(&(0x7f0000019200)='./bus\x00', 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xf, 0x10, r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000000)="290000005200190f0000460000040d000a0006d0be95cddf86c30000000000000000000000000bf369", 0x29}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(r2, &(0x7f0000007400)=[{{0x0, 0xfffffffffffffe22, 0x0}}], 0x3fffffffffffdc5, 0x40000002, 0x0) [ 951.611724][T18748] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 951.688348][ T28] audit: type=1804 audit(1598762437.324:17): pid=18752 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir679690407/syzkaller.aS2VH0/266/bus" dev="sda1" ino=16266 res=1 [ 951.724696][T18758] not chained 50000 origins [ 951.729289][T18758] CPU: 0 PID: 18758 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 951.737979][T18758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 951.748143][T18758] Call Trace: [ 951.751771][T18758] dump_stack+0x21c/0x280 [ 951.756146][T18758] kmsan_internal_chain_origin+0x6f/0x130 [ 951.761931][T18758] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 951.767797][T18758] ? kmsan_get_metadata+0x116/0x180 [ 951.773033][T18758] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 951.778872][T18758] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 951.785037][T18758] ? __wake_up+0x1ff/0x250 [ 951.789548][T18758] ? kmsan_get_metadata+0x116/0x180 [ 951.794786][T18758] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 951.800639][T18758] ? kmsan_get_metadata+0x116/0x180 [ 951.806652][T18758] ? kmsan_set_origin_checked+0x95/0xf0 [ 951.812232][T18758] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 951.818335][T18758] ? _copy_from_user+0x201/0x310 [ 951.823309][T18758] ? kmsan_get_metadata+0x116/0x180 [ 951.828557][T18758] __msan_chain_origin+0x50/0x90 [ 951.833563][T18758] __get_compat_msghdr+0x6db/0x9d0 [ 951.838739][T18758] get_compat_msghdr+0x108/0x2b0 [ 951.843719][T18758] do_recvmmsg+0xdbb/0x22c0 [ 951.848374][T18758] ? kmsan_get_metadata+0x116/0x180 [ 951.853725][T18758] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 951.859653][T18758] ? kmsan_get_metadata+0x116/0x180 [ 951.864906][T18758] ? kmsan_internal_set_origin+0x75/0xb0 [ 951.870600][T18758] ? __msan_poison_alloca+0xf0/0x120 [ 951.876005][T18758] ? __sys_recvmmsg+0xbb/0x610 [ 951.880791][T18758] ? __sys_recvmmsg+0xbb/0x610 [ 951.885588][T18758] __sys_recvmmsg+0x5dd/0x610 [ 951.890326][T18758] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 951.896446][T18758] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 951.902639][T18758] __do_fast_syscall_32+0x2af/0x480 [ 951.907884][T18758] do_fast_syscall_32+0x6b/0xd0 [ 951.912766][T18758] do_SYSENTER_32+0x73/0x90 [ 951.917303][T18758] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 951.923650][T18758] RIP: 0023:0xf7f45549 [ 951.927724][T18758] Code: Bad RIP value. [ 951.931803][T18758] RSP: 002b:00000000f551e0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 951.940236][T18758] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020007400 [ 951.948259][T18758] RDX: 00000000fffffdc5 RSI: 0000000040000002 RDI: 0000000000000000 [ 951.956254][T18758] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 951.964247][T18758] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 951.972241][T18758] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 951.980265][T18758] Uninit was stored to memory at: [ 951.985617][T18758] kmsan_internal_chain_origin+0xad/0x130 [ 951.991885][T18758] __msan_chain_origin+0x50/0x90 [ 951.996934][T18758] __get_compat_msghdr+0x6db/0x9d0 [ 952.002169][T18758] get_compat_msghdr+0x108/0x2b0 [ 952.007128][T18758] do_recvmmsg+0xdbb/0x22c0 [ 952.013038][T18758] __sys_recvmmsg+0x5dd/0x610 [ 952.018131][T18758] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 952.024223][T18758] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 952.030418][T18758] __do_fast_syscall_32+0x2af/0x480 [ 952.035640][T18758] do_fast_syscall_32+0x6b/0xd0 [ 952.040509][T18758] do_SYSENTER_32+0x73/0x90 [ 952.045045][T18758] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 952.051996][T18758] [ 952.054509][T18758] Uninit was stored to memory at: [ 952.059583][T18758] kmsan_internal_chain_origin+0xad/0x130 [ 952.065332][T18758] __msan_chain_origin+0x50/0x90 [ 952.070293][T18758] __get_compat_msghdr+0x6db/0x9d0 [ 952.075475][T18758] get_compat_msghdr+0x108/0x2b0 [ 952.080437][T18758] do_recvmmsg+0xdbb/0x22c0 [ 952.084998][T18758] __sys_recvmmsg+0x5dd/0x610 [ 952.089697][T18758] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 952.096399][T18758] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 952.102589][T18758] __do_fast_syscall_32+0x2af/0x480 [ 952.107816][T18758] do_fast_syscall_32+0x6b/0xd0 [ 952.112692][T18758] do_SYSENTER_32+0x73/0x90 [ 952.117219][T18758] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 952.123941][T18758] [ 952.126391][T18758] Uninit was stored to memory at: [ 952.133518][T18758] kmsan_internal_chain_origin+0xad/0x130 [ 952.139292][T18758] __msan_chain_origin+0x50/0x90 [ 952.144309][T18758] __get_compat_msghdr+0x6db/0x9d0 [ 952.150087][T18758] get_compat_msghdr+0x108/0x2b0 [ 952.155165][T18758] do_recvmmsg+0xdbb/0x22c0 [ 952.160136][T18758] __sys_recvmmsg+0x5dd/0x610 [ 952.164835][T18758] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 952.171018][T18758] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 952.177559][T18758] __do_fast_syscall_32+0x2af/0x480 [ 952.183042][T18758] do_fast_syscall_32+0x6b/0xd0 [ 952.187920][T18758] do_SYSENTER_32+0x73/0x90 [ 952.192479][T18758] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 952.199251][T18758] [ 952.201592][T18758] Uninit was stored to memory at: [ 952.207350][T18758] kmsan_internal_chain_origin+0xad/0x130 [ 952.213185][T18758] __msan_chain_origin+0x50/0x90 [ 952.219051][T18758] __get_compat_msghdr+0x6db/0x9d0 [ 952.224210][T18758] get_compat_msghdr+0x108/0x2b0 [ 952.229172][T18758] do_recvmmsg+0xdbb/0x22c0 [ 952.233696][T18758] __sys_recvmmsg+0x5dd/0x610 [ 952.238421][T18758] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 952.244537][T18758] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 952.250764][T18758] __do_fast_syscall_32+0x2af/0x480 [ 952.255992][T18758] do_fast_syscall_32+0x6b/0xd0 [ 952.260869][T18758] do_SYSENTER_32+0x73/0x90 [ 952.265397][T18758] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 952.271898][T18758] [ 952.274243][T18758] Uninit was stored to memory at: [ 952.279293][T18758] kmsan_internal_chain_origin+0xad/0x130 [ 952.285033][T18758] __msan_chain_origin+0x50/0x90 [ 952.289991][T18758] __get_compat_msghdr+0x6db/0x9d0 [ 952.295130][T18758] get_compat_msghdr+0x108/0x2b0 [ 952.300099][T18758] do_recvmmsg+0xdbb/0x22c0 [ 952.304651][T18758] __sys_recvmmsg+0x5dd/0x610 [ 952.309356][T18758] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 952.315445][T18758] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 952.321622][T18758] __do_fast_syscall_32+0x2af/0x480 [ 952.326840][T18758] do_fast_syscall_32+0x6b/0xd0 [ 952.331762][T18758] do_SYSENTER_32+0x73/0x90 [ 952.336286][T18758] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 952.342610][T18758] [ 952.344945][T18758] Uninit was stored to memory at: [ 952.350002][T18758] kmsan_internal_chain_origin+0xad/0x130 [ 952.355764][T18758] __msan_chain_origin+0x50/0x90 [ 952.360737][T18758] __get_compat_msghdr+0x6db/0x9d0 [ 952.365872][T18758] get_compat_msghdr+0x108/0x2b0 [ 952.370829][T18758] do_recvmmsg+0xdbb/0x22c0 [ 952.375357][T18758] __sys_recvmmsg+0x5dd/0x610 [ 952.380055][T18758] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 952.386142][T18758] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 952.392323][T18758] __do_fast_syscall_32+0x2af/0x480 [ 952.397544][T18758] do_fast_syscall_32+0x6b/0xd0 [ 952.402413][T18758] do_SYSENTER_32+0x73/0x90 [ 952.406934][T18758] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 952.413286][T18758] [ 952.415622][T18758] Uninit was stored to memory at: [ 952.420672][T18758] kmsan_internal_chain_origin+0xad/0x130 [ 952.426412][T18758] __msan_chain_origin+0x50/0x90 [ 952.431402][T18758] __get_compat_msghdr+0x6db/0x9d0 [ 952.436542][T18758] get_compat_msghdr+0x108/0x2b0 [ 952.441534][T18758] do_recvmmsg+0xdbb/0x22c0 [ 952.446065][T18758] __sys_recvmmsg+0x5dd/0x610 [ 952.450770][T18758] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 952.456860][T18758] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 952.463035][T18758] __do_fast_syscall_32+0x2af/0x480 [ 952.468258][T18758] do_fast_syscall_32+0x6b/0xd0 [ 952.473127][T18758] do_SYSENTER_32+0x73/0x90 [ 952.477656][T18758] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 952.484011][T18758] [ 952.486354][T18758] Local variable ----msg_sys@do_recvmmsg created at: [ 952.494289][T18758] do_recvmmsg+0xbf/0x22c0 [ 952.498720][T18758] do_recvmmsg+0xbf/0x22c0 [ 952.660167][ T28] audit: type=1804 audit(1598762438.294:18): pid=18757 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir679690407/syzkaller.aS2VH0/266/bus" dev="sda1" ino=16266 res=1 [ 952.775477][T18761] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 04:40:38 executing program 0: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2302"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 04:40:38 executing program 5: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2302"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 04:40:38 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/packet\x00') perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f0000000240)=0x202, 0x4000000000dc) 04:40:38 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r5, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x68, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_pedit={0x30, 0x0, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYBLOB="640000002800330f00"/20, @ANYRES32=r5, @ANYBLOB="0c0000000400ffff000000000b0001006367726f7570000034000200300001002c000000080001006908650004000280040006000c"], 0x64}}, 0x0) [ 953.326608][T12836] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 953.686384][T12836] usb 5-1: config 0 has no interfaces? [ 953.692083][T12836] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 953.701521][T12836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.720102][T18775] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 04:40:39 executing program 5: pipe(0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9049, 0x0, 0x1000000}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000003c0)={&(0x7f0000000140), 0x0, &(0x7f0000000240)="dd3ea3e28c33", 0x0, 0x40a, r2}, 0x38) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, 0x0, 0x48044) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) [ 953.828309][T18782] HTB: quantum of class FFFF0004 is big. Consider r2q change. [ 953.884498][T18785] HTB: quantum of class FFFF000C is big. Consider r2q change. [ 953.887037][T12836] usb 5-1: config 0 descriptor?? [ 953.952924][T18782] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 954.142210][T12836] usb 5-1: USB disconnect, device number 38 04:40:39 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x5420, 0x2071dff6) 04:40:39 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x200000000204a100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() ptrace$setregset(0x4205, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x0, 0x1, 0x0, 0x72d342265e82dd07}, 0x20) ptrace$setopts(0x4206, r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) tkill(r1, 0x27) wait4(0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, 0x0, 0x0) [ 954.746085][T12836] usb 5-1: new high-speed USB device number 39 using dummy_hcd 04:40:40 executing program 3: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='fd/3\x00') r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x145042, 0x0) r2 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)="fb", 0x1}], 0x1, 0x81804, 0x0) sendfile(r1, r2, 0x0, 0x200000f) [ 955.166856][T12836] usb 5-1: config 0 has no interfaces? [ 955.176088][T12836] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 955.189385][T12836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.315744][T12836] usb 5-1: config 0 descriptor?? [ 955.773460][T12836] usb 5-1: USB disconnect, device number 39 04:40:42 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401c1b021b4000000000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x4004550d, 0x0) 04:40:42 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) fstat(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000000)=0xc) ioprio_get$uid(0x3, 0x0) setresuid(r0, r1, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x247a04, 0x0) r2 = creat(&(0x7f0000019200)='./bus\x00', 0x0) r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000000100)=ANY=[], 0xffffffb7) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x7c93}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup3(r3, r2, 0x0) 04:40:42 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000070603000600000000000000000000000500010006"], 0x1c}}, 0x0) 04:40:42 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x5a000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) pkey_mprotect(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x2, 0xffffffffffffffff) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) ioprio_set$uid(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0x280003a8, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x983a0000, 0x103}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) 04:40:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execve(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) 04:40:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) [ 956.858510][ T28] audit: type=1804 audit(1598762442.494:19): pid=18827 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir329439913/syzkaller.8E4GOL/352/bus" dev="sda1" ino=16298 res=1 04:40:42 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) 04:40:42 executing program 3: unshare(0x44060400) r0 = socket(0x11, 0x800000003, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890c, &(0x7f0000000200)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @empty}, {0x2, 0x0, @local}, 0x32d}) 04:40:42 executing program 0: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000090000082505a8a40700000001010902240001010000000904000012070103000905010200ffe0000009058202", @ANYRESDEC], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = open(&(0x7f0000000240)='./file0\x00', 0x1070c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r1, &(0x7f0000001400)="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", 0x600) sendfile(r1, r2, 0x0, 0x1c542) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[], 0x0) [ 957.395518][ T27] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 957.741919][T18848] IPVS: ftp: loaded support on port[0] = 21 [ 957.770842][ T28] audit: type=1804 audit(1598762443.404:20): pid=18831 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir329439913/syzkaller.8E4GOL/352/bus" dev="sda1" ino=16298 res=1 [ 957.797654][ T27] usb 5-1: config 0 has no interfaces? [ 957.804032][ T27] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 957.813746][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.997699][ T27] usb 5-1: config 0 descriptor?? 04:40:43 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r1, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00(\x00 \x00'}) r2 = syz_open_pts(r1, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4086, 0xff6}], 0x1) 04:40:43 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x5a000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) pkey_mprotect(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x2, 0xffffffffffffffff) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) ioprio_set$uid(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0x280003a8, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x983a0000, 0x103}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) [ 958.107387][ T28] audit: type=1804 audit(1598762443.734:21): pid=18846 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir329439913/syzkaller.8E4GOL/352/bus" dev="sda1" ino=16298 res=1 [ 958.253516][ T27] usb 5-1: USB disconnect, device number 40 [ 958.315379][ T8705] usb 1-1: new high-speed USB device number 54 using dummy_hcd 04:40:44 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x5a000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) pkey_mprotect(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x2, 0xffffffffffffffff) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) ioprio_set$uid(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0x280003a8, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x983a0000, 0x103}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) [ 958.422264][T18848] IPVS: ftp: loaded support on port[0] = 21 [ 958.577441][T11141] tipc: TX() has been purged, node left! [ 958.616747][ T8705] usb 1-1: Using ep0 maxpacket: 8 [ 958.757987][ T8705] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 958.769407][ T8705] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 958.779731][ T8705] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 49 [ 958.789863][ T8705] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 958.890001][ T8705] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 958.899903][ T8705] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 958.908311][ T8705] usb 1-1: SerialNumber: syz [ 958.995654][ T27] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 959.089061][T18854] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 959.120417][T18854] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 959.148751][ T8705] hub 1-1:1.0: bad descriptor, ignoring hub [ 959.155507][ T8705] hub: probe of 1-1:1.0 failed with error -5 [ 959.409877][T18854] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 959.454679][T18854] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 959.456569][ T8706] Bluetooth: hci0: command 0x0406 tx timeout [ 959.474678][ T27] usb 5-1: config 0 has no interfaces? [ 959.480468][ T27] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 959.489800][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.625916][ T27] usb 5-1: config 0 descriptor?? [ 959.774711][ T28] audit: type=1804 audit(1598762445.404:22): pid=18918 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir920007983/syzkaller.0W13I1/83/file0" dev="sda1" ino=16292 res=1 [ 959.811187][ T8705] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 54 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 959.852310][T18854] udc-core: couldn't find an available UDC or it's busy [ 959.859622][T18854] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 959.949072][ T8705] usb 1-1: USB disconnect, device number 54 [ 959.993839][ T8705] usblp0: removed [ 960.093217][T10133] usb 5-1: USB disconnect, device number 41 [ 960.745970][ T8706] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 960.811554][T11141] tipc: TX() has been purged, node left! 04:40:46 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401c1b021b4000000000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x4004550d, 0x0) 04:40:46 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x40045431, 0x2071dff6) 04:40:46 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r1, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00(\x00 \x00'}) r2 = syz_open_pts(r1, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4086, 0xff6}], 0x1) 04:40:46 executing program 2: pipe(0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000003c0)={&(0x7f0000000140)="e5ce2b2840f1ec310cfd891eab4f1234867a5d31b5103e1f09d8bf0553b324bd028cb0f4ee3c3d4e4f40f771c0a5e7b9a839b659ee64e1", &(0x7f0000000780)=""/222, &(0x7f0000000240)="dd3ea3e28c33698260853cf1", &(0x7f00000002c0)="83985258caab9c52c1dcc68454b832798de32630c90a00865a9892542b01393da80395a8d346fadc1425ec4a259b246b893b127775594595eb72c2e9293c2a7c543ef147aa0a7d7d0d79245dc5e25ab0c7cd8466da73759f67f59a35581c34bb46b5bfe6cfd6c9f64497f2205274e5c303265c55ea1e9f0bb7a389fd6da92b83388688c1aa1ec5cb1685ef09ee5aafa3315c340beb", 0x40a}, 0x38) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8200, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000580)=""/247, &(0x7f0000000440)=0xf7) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 04:40:46 executing program 1: r0 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20001732, &(0x7f00000003c0)={0x2, 0x4e20, @local}, 0x10) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x200004) sendfile(r1, r0, 0x0, 0x80001d00c0d3) [ 960.997234][ T8706] usb 1-1: Using ep0 maxpacket: 8 [ 961.125783][ T8706] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 961.140580][ T8706] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 961.151089][ T8706] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 49 [ 961.161825][ T8706] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 04:40:47 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x0, 0x0, 0x6}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x20000000000000d8) 04:40:47 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r1, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00(\x00 \x00'}) r2 = syz_open_pts(r1, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4086, 0xff6}], 0x1) 04:40:47 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x690, 0x3b0, 0x2e0, 0x3b0, 0x3b0, 0x2e0, 0x5c0, 0x5c0, 0x5c0, 0x5c0, 0x5c0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x1f8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:etc_runtime_t:s0\x00'}}}, {{@ipv6={@loopback, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6f0) [ 961.726266][ T8706] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 961.735605][ T8706] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 04:40:47 executing program 2: prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000002000/0x4000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet(0x2, 0xa, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') r4 = socket$netlink(0x10, 0x3, 0x0) sendfile(r4, r3, 0x0, 0x7fffffff) [ 961.885640][ T8706] usb 1-1: can't set config #1, error -71 [ 961.906602][ T8703] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 961.990830][ T8706] usb 1-1: USB disconnect, device number 55 [ 962.050761][ T28] audit: type=1800 audit(1598762447.684:23): pid=18948 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.1" name="file1" dev="sda1" ino=16327 res=0 [ 962.175907][ T28] audit: type=1326 audit(1598762447.804:24): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=18959 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7f50549 code=0x0 [ 962.277491][ T8703] usb 5-1: config 0 has no interfaces? [ 962.283738][ T8703] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 962.293956][ T8703] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 04:40:48 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) ftruncate(r0, 0x40) r1 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1f, 0x0, &(0x7f0000000000)) [ 962.424589][ T8703] usb 5-1: config 0 descriptor?? 04:40:48 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x690, 0x3b0, 0x2e0, 0x3b0, 0x3b0, 0x2e0, 0x5c0, 0x5c0, 0x5c0, 0x5c0, 0x5c0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x1f8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:etc_runtime_t:s0\x00'}}}, {{@ipv6={@loopback, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6f0) 04:40:48 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r1, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00(\x00 \x00'}) r2 = syz_open_pts(r1, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4086, 0xff6}], 0x1) [ 962.670724][ T8703] usb 5-1: USB disconnect, device number 42 [ 963.265507][ T8703] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 963.626319][ T8703] usb 5-1: config 0 has no interfaces? [ 963.632031][ T8703] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 963.641553][ T8703] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.677538][ T8703] usb 5-1: config 0 descriptor?? [ 963.921011][ T8706] usb 5-1: USB disconnect, device number 43 04:40:50 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401c1b021b4000000000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x4004550d, 0x0) 04:40:50 executing program 2: prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000000000/0x3000)=nil) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet(0x2, 0xa, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') r4 = socket$netlink(0x10, 0x3, 0x0) sendfile(r4, r3, 0x0, 0x7fffffff) 04:40:50 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@random={'btrfs.', 'fuse\x00'}, 0x0, 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) dup3(r0, r1, 0x0) 04:40:50 executing program 3: pipe(0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000003c0)={&(0x7f0000000140)="e5ce2b2840f1ec310cfd891eab4f1234867a5d31b5103e1f09d8bf0553b324bd028cb0f4ee3c3d4e4f40f771c0a5e7b9a839b659ee64e16bf26dae16c044608241c4238a82b5cebf36a71252b4", &(0x7f0000000780)=""/222, 0x0, &(0x7f00000002c0)="83985258caab9c52c1dcc68454b832798de32630c90a00865a9892542b01393da80395a8d346fadc1425ec4a259b246b893b127775594595eb72c2e9293c2a7c543ef147aa0a7d7d0d79245dc5e25ab0c7cd8466da73759f67f59a35581c34bb46b5bfe6cfd6c9f64497f2205274e5c303265c55ea1e9f0bb7a389fd6da92b83388688c1aa1ec5cb1685ef09ee5aafa3315c340beb", 0x40a}, 0x38) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000580)=""/247, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 04:40:50 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r1, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00(\x00 \x00'}) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4086, 0xff6}], 0x1) 04:40:50 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) ftruncate(r0, 0x40) r1 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1f, 0x0, &(0x7f0000000000)) 04:40:51 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r1, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00(\x00 \x00'}) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4086, 0xff6}], 0x1) 04:40:51 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) ftruncate(r0, 0x40) r1 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1f, 0x0, &(0x7f0000000000)) 04:40:51 executing program 0: 04:40:51 executing program 3: pipe(0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9049, 0x0, 0x1000000}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000003c0)={&(0x7f0000000140)="e5ce2b2840f1ec310cfd891eab4f1234867a5d31b5103e1f09d8bf0553b324bd028cb0f4ee3c3d4e4f40f771c0a5e7b9a839b659ee64e16bf26dae16c044608241c4238a82b5cebf36a71252b450803056d5fb4bc22d85a2fb47c84394ffc111fd97fc6633738586d91e99a65067", &(0x7f0000000780)=""/222, &(0x7f0000000240)="dd3ea3e28c33698260853cf1", &(0x7f00000002c0)="83985258caab9c52c1dcc68454b832798de32630c90a00865a9892542b01393da80395a8d346fadc1425ec4a259b246b893b127775594595eb72c2e9293c2a7c543ef147aa0a7d7d0d79245dc5e25ab0c7cd8466da73759f67f59a35581c34bb46b5bfe6cfd6c9f64497f2205274e5c303265c55ea1e9f0bb7a389fd6da92b83388688c1aa1ec5cb1685ef09ee5aafa3315c340beb", 0x40a, r2}, 0x38) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) symlink(&(0x7f0000000400)='./file0\x00', &(0x7f0000000480)='./file0\x00') sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, 0x3e9, 0x100, 0x70bd26, 0x25dfdbff, {0x4, 0x0, 0x1, 0x0, 0xffff, 0x0, 0x1, 0x4, 0x0, 0x1}, ["", "", "", "", "", "", "", "", ""]}, 0x38}}, 0x48044) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8200, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000580)=""/247, &(0x7f0000000440)=0xf7) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 04:40:51 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000180)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) futex(&(0x7f000000cffc)=0x100000000000004, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x1, 0x0, 0x0, 0x0, 0x0) [ 965.956370][T10133] usb 5-1: new high-speed USB device number 44 using dummy_hcd 04:40:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x540f, 0x2071dff6) [ 966.346359][T10133] usb 5-1: config 0 has no interfaces? [ 966.352083][T10133] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 966.362452][T10133] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.512915][T10133] usb 5-1: config 0 descriptor?? [ 966.761679][T10133] usb 5-1: USB disconnect, device number 44 [ 967.371308][T10133] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 967.776127][T10133] usb 5-1: config 0 has no interfaces? [ 967.781767][T10133] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 967.791220][T10133] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.804269][T10133] usb 5-1: config 0 descriptor?? [ 968.048466][T10133] usb 5-1: USB disconnect, device number 45 04:40:54 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401c1b021b4000000000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x4004550d, 0x0) 04:40:54 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r1, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00(\x00 \x00'}) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4086, 0xff6}], 0x1) 04:40:54 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x541a, 0x2071dff6) 04:40:54 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000380)=0x1a, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x27fc, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmsg(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x2040) 04:40:54 executing program 0: 04:40:54 executing program 3: 04:40:55 executing program 0: 04:40:55 executing program 3: 04:40:55 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r1, &(0x7f0000001340)=ANY=[], 0xffffff78) r2 = syz_open_pts(r1, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4086, 0xff6}], 0x1) 04:40:55 executing program 1: [ 969.616267][T10133] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 970.012696][T10133] usb 5-1: config 0 has no interfaces? [ 970.018583][T10133] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 970.028297][T10133] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 04:40:55 executing program 0: 04:40:55 executing program 3: [ 970.239199][T10133] usb 5-1: config 0 descriptor?? [ 970.486441][T10133] usb 5-1: USB disconnect, device number 46 [ 971.069797][T10133] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 971.511703][T10133] usb 5-1: config 0 has no interfaces? [ 971.517561][T10133] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 971.527952][T10133] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.546296][T10133] usb 5-1: config 0 descriptor?? [ 971.806224][T10133] usb 5-1: USB disconnect, device number 47 04:40:58 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401c1b021b4000000000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x4004550d, 0x0) 04:40:58 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r1, &(0x7f0000001340)=ANY=[], 0xffffff78) r2 = syz_open_pts(r1, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4086, 0xff6}], 0x1) 04:40:58 executing program 1: 04:40:58 executing program 3: 04:40:58 executing program 0: 04:40:58 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000380)=0x1a, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x27fc, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmsg(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x2040) 04:40:58 executing program 0: 04:40:58 executing program 3: 04:40:58 executing program 1: 04:40:58 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r1, &(0x7f0000001340)=ANY=[], 0xffffff78) r2 = syz_open_pts(r1, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4086, 0xff6}], 0x1) [ 973.605744][ T8706] usb 5-1: new high-speed USB device number 48 using dummy_hcd 04:40:59 executing program 0: 04:40:59 executing program 3: [ 974.027559][ T8706] usb 5-1: config 0 has no interfaces? [ 974.033291][ T8706] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 974.043226][ T8706] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 974.187800][ T8706] usb 5-1: config 0 descriptor?? [ 974.442805][ T8706] usb 5-1: USB disconnect, device number 48 [ 975.065433][ T8706] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 975.436279][ T8706] usb 5-1: config 0 has no interfaces? [ 975.442021][ T8706] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 975.451472][ T8706] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.465582][ T8706] usb 5-1: config 0 descriptor?? [ 975.711234][T12836] usb 5-1: USB disconnect, device number 49 04:41:02 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401c1b021b4000000000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x4004550d, 0x0) 04:41:02 executing program 1: 04:41:02 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00(\x00 \x00'}) r2 = syz_open_pts(r1, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4086, 0xff6}], 0x1) 04:41:02 executing program 0: 04:41:02 executing program 3: 04:41:02 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000380)=0x1a, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x27fc, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmsg(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x2040) 04:41:02 executing program 3: 04:41:02 executing program 0: 04:41:02 executing program 1: 04:41:02 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00(\x00 \x00'}) r2 = syz_open_pts(r1, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4086, 0xff6}], 0x1) [ 977.395380][ T27] usb 5-1: new high-speed USB device number 50 using dummy_hcd 04:41:03 executing program 3: 04:41:03 executing program 0: [ 977.776262][ T27] usb 5-1: config 0 has no interfaces? [ 977.781980][ T27] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 977.792271][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.949947][ T27] usb 5-1: config 0 descriptor?? [ 978.202738][ T8705] usb 5-1: USB disconnect, device number 50 [ 978.805728][ T8705] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 979.176682][ T8705] usb 5-1: config 0 has no interfaces? [ 979.182522][ T8705] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 979.191958][ T8705] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.206320][ T8705] usb 5-1: config 0 descriptor?? [ 979.464685][ T8705] usb 5-1: USB disconnect, device number 51 04:41:06 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401c1b021b4000000000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x4004550d, 0x0) 04:41:06 executing program 1: 04:41:06 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000380)=0x1a, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x27fc, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmsg(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x2040) 04:41:06 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00(\x00 \x00'}) r2 = syz_open_pts(r1, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4086, 0xff6}], 0x1) 04:41:06 executing program 3: 04:41:06 executing program 0: 04:41:06 executing program 3: 04:41:06 executing program 0: 04:41:06 executing program 1: 04:41:06 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r1, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00(\x00 \x00'}) r2 = syz_open_pts(r1, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4086, 0xff6}], 0x1) [ 981.195999][T12836] usb 5-1: new high-speed USB device number 52 using dummy_hcd 04:41:06 executing program 3: 04:41:07 executing program 0: [ 981.677615][T12836] usb 5-1: config 0 has no interfaces? [ 981.683490][T12836] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 981.692875][T12836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 981.816612][T12836] usb 5-1: config 0 descriptor?? [ 982.076450][ T8703] usb 5-1: USB disconnect, device number 52 [ 982.675864][ T8703] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 983.076098][ T8703] usb 5-1: config 0 has no interfaces? [ 983.081980][ T8703] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 983.091379][ T8703] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.103305][ T8703] usb 5-1: config 0 descriptor?? [ 983.351965][ T8703] usb 5-1: USB disconnect, device number 53 04:41:09 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401c1b021b4000000000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x4004550d, 0x0) 04:41:09 executing program 1: 04:41:09 executing program 3: 04:41:09 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r1, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00(\x00 \x00'}) r2 = syz_open_pts(r1, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4086, 0xff6}], 0x1) 04:41:09 executing program 0: 04:41:09 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000380)=0x1a, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x27fc, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) recvmsg(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x2040) 04:41:10 executing program 3: 04:41:10 executing program 1: 04:41:10 executing program 0: 04:41:10 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000380)=0x1a, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x27fc, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) recvmsg(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x2040) 04:41:10 executing program 3: [ 985.055521][ T8703] usb 5-1: new high-speed USB device number 54 using dummy_hcd 04:41:11 executing program 1: [ 985.427013][ T8703] usb 5-1: config 0 has no interfaces? [ 985.432752][ T8703] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 985.442159][ T8703] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.578289][ T8703] usb 5-1: config 0 descriptor?? [ 985.821315][ T8703] usb 5-1: USB disconnect, device number 54 [ 986.425414][ T8703] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 986.786355][ T8703] usb 5-1: config 0 has no interfaces? [ 986.792067][ T8703] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 986.801529][ T8703] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.814065][ T8703] usb 5-1: config 0 descriptor?? [ 987.061622][ T8703] usb 5-1: USB disconnect, device number 55 [ 987.735449][ T8706] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 988.100295][ T8706] usb 5-1: config 0 has no interfaces? [ 988.106144][ T8706] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 988.115666][ T8706] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 988.131426][ T8706] usb 5-1: config 0 descriptor?? [ 988.385476][ T27] usb 5-1: USB disconnect, device number 56 04:41:14 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r1, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00(\x00 \x00'}) r2 = syz_open_pts(r1, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4086, 0xff6}], 0x1) 04:41:14 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401c1b021b4000000000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x4004550d, 0x0) 04:41:14 executing program 0: 04:41:14 executing program 3: 04:41:14 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000380)=0x1a, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x27fc, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) recvmsg(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x2040) 04:41:14 executing program 1: 04:41:15 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000380)=0x1a, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x27fc, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmsg(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x2040) 04:41:15 executing program 0: 04:41:15 executing program 3: 04:41:15 executing program 1: [ 989.826211][ T8706] usb 5-1: new high-speed USB device number 57 using dummy_hcd 04:41:15 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000380)=0x1a, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x27fc, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmsg(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x2040) 04:41:15 executing program 3: 04:41:15 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000240)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00(\x00 \x00'}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4086, 0xff6}], 0x1) [ 990.206760][ T8706] usb 5-1: config 0 has no interfaces? [ 990.212672][ T8706] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 990.222321][ T8706] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.378557][ T8706] usb 5-1: config 0 descriptor?? [ 990.624378][ T8706] usb 5-1: USB disconnect, device number 57 [ 991.217319][ T8706] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 991.595585][ T8706] usb 5-1: config 0 has no interfaces? [ 991.601285][ T8706] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 991.610737][ T8706] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.623914][ T8706] usb 5-1: config 0 descriptor?? [ 991.868903][ T8705] usb 5-1: USB disconnect, device number 58 [ 992.535502][ T8705] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 992.916209][ T8705] usb 5-1: config 0 has no interfaces? [ 992.922109][ T8705] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 992.931650][ T8705] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.944726][ T8705] usb 5-1: config 0 descriptor?? [ 993.192759][ T8706] usb 5-1: USB disconnect, device number 59 04:41:19 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401c1b021b4000000000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r2, 0x4004550d, 0x0) 04:41:19 executing program 1: 04:41:19 executing program 0: 04:41:19 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000380)=0x1a, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x27fc, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmsg(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x2040) 04:41:19 executing program 3: 04:41:19 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000240)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00(\x00 \x00'}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4086, 0xff6}], 0x1) 04:41:19 executing program 3: 04:41:19 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000380)=0x1a, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmsg(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x2040) 04:41:19 executing program 0: 04:41:19 executing program 1: 04:41:19 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000240)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00(\x00 \x00'}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4086, 0xff6}], 0x1) 04:41:20 executing program 3: [ 994.645883][ T8705] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 995.056666][ T8705] usb 5-1: config 0 has no interfaces? [ 995.062516][ T8705] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 995.072183][ T8705] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.186799][ T8705] usb 5-1: config 0 descriptor?? [ 995.432615][T10133] usb 5-1: USB disconnect, device number 60 [ 996.005748][T10133] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 996.416638][T10133] usb 5-1: config 0 has no interfaces? [ 996.423057][T10133] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 996.432530][T10133] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.453501][T10133] usb 5-1: config 0 descriptor?? [ 996.713865][ T9070] usb 5-1: USB disconnect, device number 61 [ 997.385446][ T9070] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 997.746463][ T9070] usb 5-1: config 0 has no interfaces? [ 997.752124][ T9070] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 997.761554][ T9070] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.774920][ T9070] usb 5-1: config 0 descriptor?? [ 998.033637][ T8705] usb 5-1: USB disconnect, device number 62 04:41:24 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401c1b021b4000000000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) ioctl$EVIOCGNAME(r2, 0x4004550d, 0x0) 04:41:24 executing program 0: 04:41:24 executing program 1: 04:41:24 executing program 3: 04:41:24 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000380)=0x1a, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmsg(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x2040) 04:41:24 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00(\x00 \x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4086, 0xff6}], 0x1) 04:41:24 executing program 3: 04:41:24 executing program 0: 04:41:24 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00(\x00 \x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4086, 0xff6}], 0x1) 04:41:24 executing program 1: [ 999.461736][ T9070] usb 5-1: new high-speed USB device number 63 using dummy_hcd 04:41:25 executing program 3: 04:41:25 executing program 0: [ 999.826539][ T9070] usb 5-1: config 0 has no interfaces? [ 999.833079][ T9070] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 999.850109][ T9070] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.084279][ T9070] usb 5-1: config 0 descriptor?? [ 1000.331895][ T9070] usb 5-1: USB disconnect, device number 63 [ 1000.909286][ T9070] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1001.276252][ T9070] usb 5-1: config 0 has no interfaces? [ 1001.281973][ T9070] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 1001.292758][ T9070] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.305961][ T9070] usb 5-1: config 0 descriptor?? [ 1001.549489][ T9070] usb 5-1: USB disconnect, device number 64 04:41:28 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401c1b021b4000000000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) ioctl$EVIOCGNAME(r2, 0x4004550d, 0x0) 04:41:28 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00(\x00 \x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4086, 0xff6}], 0x1) 04:41:28 executing program 1: 04:41:28 executing program 3: 04:41:28 executing program 0: 04:41:28 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000380)=0x1a, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmsg(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x2040) 04:41:28 executing program 0: 04:41:28 executing program 3: 04:41:28 executing program 5: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00(\x00 \x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4086, 0xff6}], 0x1) 04:41:28 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) alarm(0x2) [ 1003.315719][ T9070] usb 5-1: new high-speed USB device number 65 using dummy_hcd 04:41:29 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000c40)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000040)) 04:41:29 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001440)={0x8, {"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", 0x1000}}, 0x1006) [ 1003.676766][ T9070] usb 5-1: config 0 has no interfaces? [ 1003.682850][ T9070] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 1003.692392][ T9070] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.860565][ T9070] usb 5-1: config 0 descriptor?? [ 1004.111928][ T9070] usb 5-1: USB disconnect, device number 65 [ 1004.665609][ T9070] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1005.026549][ T9070] usb 5-1: config 0 has no interfaces? [ 1005.026729][ T9070] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 1005.026880][ T9070] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.031503][ T9070] usb 5-1: config 0 descriptor?? [ 1005.294270][T10133] usb 5-1: USB disconnect, device number 66 04:41:31 executing program 1: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000500}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000140)=0x5) 04:41:31 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401c1b021b4000000000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) ioctl$EVIOCGNAME(r2, 0x4004550d, 0x0) 04:41:31 executing program 5: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00(\x00 \x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4086, 0xff6}], 0x1) 04:41:31 executing program 0: perf_event_open(0x0, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x3, 0x0, 0x0, 0x0, 0x100}}) 04:41:31 executing program 3: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x4000040) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) sendto$inet(r0, &(0x7f0000000400)='N', 0x1, 0x20004005, 0x0, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x9, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) 04:41:31 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x27fc, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmsg(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x2040) 04:41:32 executing program 0: sysfs$2(0x2, 0x3, &(0x7f0000000000)=""/123) 04:41:33 executing program 5: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00(\x00 \x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4086, 0xff6}], 0x1) 04:41:33 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x27fc, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmsg(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x2040) 04:41:33 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000580)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20) [ 1008.745804][ T8703] usb 5-1: new high-speed USB device number 67 using dummy_hcd 04:41:34 executing program 5: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r1, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00(\x00 \x00'}) r2 = syz_open_pts(r1, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4086, 0xff6}], 0x1) 04:41:34 executing program 0: open_tree(0xffffffffffffff9c, 0x0, 0x88900) [ 1009.306513][ T8703] usb 5-1: config 0 has no interfaces? [ 1009.312327][ T8703] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 1009.322547][ T8703] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.418773][ T8703] usb 5-1: config 0 descriptor?? [ 1009.662159][ T8703] usb 5-1: USB disconnect, device number 67 04:41:35 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000100)={0x0, 0x1, &(0x7f0000000000)=[0x0], &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)}) [ 1010.281506][ T8703] usb 5-1: new high-speed USB device number 68 using dummy_hcd 04:41:36 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401c1b021b4000000000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r1) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x4004550d, 0x0) 04:41:36 executing program 3: syz_io_uring_setup(0x89, &(0x7f0000000100), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x1000)=nil, &(0x7f0000000180), 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 04:41:36 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x27fc, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmsg(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x2040) 04:41:36 executing program 5: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r1, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00(\x00 \x00'}) r2 = syz_open_pts(r1, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4086, 0xff6}], 0x1) 04:41:36 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000040)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}}, &(0x7f0000000100)=0xb0) 04:41:36 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup3(r1, r0, 0x80000) [ 1011.179343][ T8703] usb 5-1: unable to read config index 0 descriptor/all [ 1011.186767][ T8703] usb 5-1: can't read configurations, error -71 04:41:37 executing program 5: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r1, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00(\x00 \x00'}) r2 = syz_open_pts(r1, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4086, 0xff6}], 0x1) 04:41:37 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000380)=0x1a, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x27fc, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmsg(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x2040) 04:41:37 executing program 0: r0 = socket(0x11, 0x80002, 0x0) recvmsg$can_raw(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x10000) 04:41:37 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x72, &(0x7f0000001140), &(0x7f0000001180)=0xc) 04:41:37 executing program 1: openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x4000, 0x0) 04:41:37 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000380)=0x1a, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x27fc, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmsg(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x2040) [ 1012.155603][ T8703] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1012.559220][ T8703] usb 5-1: config 0 has no interfaces? [ 1012.568018][ T8703] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 1012.578985][ T8703] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.717094][ T8703] usb 5-1: config 0 descriptor?? [ 1012.977607][ T27] usb 5-1: USB disconnect, device number 69 [ 1013.548183][ T27] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1014.077132][ T27] usb 5-1: config 0 has no interfaces? [ 1014.082865][ T27] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 1014.092365][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.109353][ T27] usb 5-1: config 0 descriptor?? [ 1014.350447][ T8705] usb 5-1: USB disconnect, device number 70 04:41:40 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401c1b021b4000000000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r1) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x4004550d, 0x0) 04:41:40 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r1, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00(\x00 \x00'}) r2 = syz_open_pts(r1, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4086, 0xff6}], 0x1) 04:41:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x3, 0xfffc, 0x0, 0x3e}}) 04:41:40 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x8, 0x0, &(0x7f0000000180)) 04:41:40 executing program 1: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x4000040) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[], 0x2bcf) sendto$inet(r1, &(0x7f0000000400)='N', 0x1, 0x20004005, 0x0, 0x0) recvmsg(r1, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x9, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) 04:41:40 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000380)=0x1a, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x27fc, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmsg(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x2040) 04:41:41 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000380)=0x1a, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x27fc, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmsg(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x2040) 04:41:41 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="0200000002002600000000000400000000000000100000000000000020"], 0x24, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000040)='./file0\x00', 0x0) 04:41:41 executing program 3: add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0) 04:41:41 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r1, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00(\x00 \x00'}) r2 = syz_open_pts(r1, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4086, 0xff6}], 0x1) [ 1016.107065][ T8705] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1016.476643][ T8705] usb 5-1: config 0 has no interfaces? [ 1016.482429][ T8705] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 1016.491960][ T8705] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 04:41:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x3, 0x0, 0x0, 0x3e, 0x100}}) syz_open_pts(0xffffffffffffffff, 0x0) 04:41:42 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/udp6\x00') r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000140)) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x5, 0x7, 0x80, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000140)={r3}) dup3(r0, r2, 0x0) [ 1016.724557][ T8705] usb 5-1: config 0 descriptor?? [ 1016.971395][ T8705] usb 5-1: USB disconnect, device number 71 [ 1017.536334][ T8705] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1017.896377][ T8705] usb 5-1: config 0 has no interfaces? [ 1017.902084][ T8705] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 1017.911965][ T8705] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.992731][ T8705] usb 5-1: config 0 descriptor?? [ 1018.241757][ T8705] usb 5-1: USB disconnect, device number 72 04:41:44 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401c1b021b4000000000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r1) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x4004550d, 0x0) 04:41:44 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r1, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00(\x00 \x00'}) r2 = syz_open_pts(r1, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4086, 0xff6}], 0x1) 04:41:44 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa2026, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:41:44 executing program 3: r0 = socket(0x21, 0x2, 0x2) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x6e328ea50cf4ebef) 04:41:44 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000140), 0x12) 04:41:44 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000380)=0x1a, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x27fc, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmsg(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x2040) 04:41:45 executing program 0: socket(0x2000000000000021, 0x2, 0x10000000000002) socket$phonet_pipe(0x23, 0x5, 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600)='/dev/snd/seq\x00', 0x4a982) r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 04:41:45 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r1, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00(\x00 \x00'}) r2 = syz_open_pts(r1, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4086, 0xff6}], 0x1) 04:41:45 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, &(0x7f0000000180)=0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000040)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}}, &(0x7f0000000100)=0xb0) 04:41:45 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x78, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x4c, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc1dfe52fffeafc42}, @TCA_TBF_PBURST={0x8, 0x7, 0xf13}, @TCA_TBF_RATE64={0xc, 0x4, 0x63e473ff12dd6647}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x5}}]}}]}, 0x78}}, 0x0) [ 1019.945517][ T8705] usb 5-1: new high-speed USB device number 73 using dummy_hcd 04:41:46 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r1, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00(\x00 \x00'}) r2 = syz_open_pts(r1, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4086, 0xff6}], 0x1) [ 1020.306428][ T8705] usb 5-1: config 0 has no interfaces? [ 1020.312260][ T8705] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 1020.321800][ T8705] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.404611][T19627] sch_tbf: burst 3859 is lower than device lo mtu (65550) ! [ 1020.470952][ T8705] usb 5-1: config 0 descriptor?? [ 1020.560612][T19630] sch_tbf: burst 3859 is lower than device lo mtu (65550) ! [ 1020.724141][ T9600] usb 5-1: USB disconnect, device number 73 04:41:46 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @remote, 0x75}], 0x1c) [ 1021.329098][ T9600] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1021.732872][ T9600] usb 5-1: config 0 has no interfaces? [ 1021.738901][ T9600] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 1021.748602][ T9600] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.810494][ T9600] usb 5-1: config 0 descriptor?? [ 1022.060138][T10133] usb 5-1: USB disconnect, device number 74 04:41:48 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r1, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00(\x00 \x00'}) r2 = syz_open_pts(r1, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4086, 0xff6}], 0x1) 04:41:48 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x35c, 0x20010003, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) tkill(r2, 0x1000000000016) 04:41:48 executing program 3: sysfs$1(0x1, &(0x7f0000000040)='\xba\x00') 04:41:48 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000380)=0x1a, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x27fc, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmsg(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x2040) 04:41:48 executing program 1: keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000100), &(0x7f0000000140)={'enc=', 'oaep', ' hash=', {'cmac-aes-ce\x00'}}, 0x0, 0x0) 04:41:48 executing program 4: syz_mount_image$fuse(&(0x7f0000000580)='fuse\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRESDEC]) 04:41:49 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x4, 0x0, 0x28) 04:41:49 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x10, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r1, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00(\x00 \x00'}) r2 = syz_open_pts(r1, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4086, 0xff6}], 0x1) [ 1023.471492][T19666] fuse: Bad value for 'fd' [ 1023.536532][T19666] fuse: Bad value for 'fd' 04:41:49 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) 04:41:49 executing program 4: r0 = socket(0x15, 0x5, 0x0) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) 04:41:49 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xc0101282, 0x0) 04:41:49 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x10, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r1, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00(\x00 \x00'}) r2 = syz_open_pts(r1, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4086, 0xff6}], 0x1) 04:41:49 executing program 0: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x0) 04:41:50 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000001340)='user\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000001540)='O', 0x1, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000600)="ff", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r2}, 0x0, 0x0, 0x0) 04:41:50 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x5000f4) r1 = open(&(0x7f0000000040)='./bus\x00', 0x24000, 0x0) perf_event_open(&(0x7f0000002340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x4) [ 1025.095762][ T28] audit: type=1804 audit(1598762510.724:25): pid=19689 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir444458012/syzkaller.46sYtB/234/bus" dev="sda1" ino=16114 res=1 [ 1025.120871][ T28] audit: type=1800 audit(1598762510.724:26): pid=19689 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16114 res=0 [ 1025.328383][ T28] audit: type=1804 audit(1598762510.794:27): pid=19691 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir444458012/syzkaller.46sYtB/234/bus" dev="sda1" ino=16114 res=1 [ 1025.353839][ T28] audit: type=1800 audit(1598762510.794:28): pid=19691 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16114 res=0 04:41:51 executing program 2: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000380)=0x1a, 0x4) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x27fc, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x2040) 04:41:51 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x511201, 0x0) 04:41:51 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x10, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r1, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00(\x00 \x00'}) r2 = syz_open_pts(r1, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4086, 0xff6}], 0x1) 04:41:51 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'gretap0\x00', &(0x7f00000001c0)={'ip_vti0\x00', 0x0, 0x7840, 0x1, 0x4, 0x5, {{0x9, 0x4, 0x1, 0x13, 0x24, 0x6, 0x0, 0x80, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, {[@lsrr={0x83, 0x3}, @end, @lsrr={0x83, 0xb, 0xf1, [@dev={0xac, 0x14, 0x14, 0x20}, @multicast2]}]}}}}}) socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x37cb1133) socket$inet(0x2, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080), 0x4) 04:41:51 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0) 04:41:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0xc01, 0x3, 0x2a0, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x208, 0x3c8, 0x3c8, 0x208, 0x3c8, 0x3, 0x0, {[{{@uncond, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@dev, 'lo\x00'}}}, {{@ip={@private, @multicast2, 0x0, 0x0, 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0x108, 0x0, {}, [@common=@unspec=@statistic={{0x38, 'statistic\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x300) 04:41:51 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x0, 0x13, r0, 0x0) 04:41:51 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00(\x00 \x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4086, 0xff6}], 0x1) 04:41:51 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x82, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) 04:41:51 executing program 1: r0 = socket(0x29, 0x5, 0x0) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, 0x0, 0x0) 04:41:51 executing program 0: socketpair(0x23, 0x0, 0x0, &(0x7f0000000040)) 04:41:52 executing program 2: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000380)=0x1a, 0x4) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x27fc, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x2040) 04:41:52 executing program 3: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe07f0009058202"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 04:41:52 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00(\x00 \x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4086, 0xff6}], 0x1) 04:41:52 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x72, 0x0, &(0x7f0000001180)) 04:41:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x3}}) 04:41:52 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000500}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) 04:41:52 executing program 2: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000380)=0x1a, 0x4) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x27fc, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x2040) [ 1027.337820][ T8705] usb 4-1: new high-speed USB device number 72 using dummy_hcd 04:41:53 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00(\x00 \x00'}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4086, 0xff6}], 0x1) [ 1027.595632][ T8705] usb 4-1: Using ep0 maxpacket: 8 04:41:53 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000000060199700004c2c00fe80000070000000000000001e219be2cb"], 0x7e) [ 1027.715925][ T8705] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 04:41:53 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup3(r3, r2, 0x80000) [ 1027.716069][ T8705] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 04:41:53 executing program 1: r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) write$FUSE_BMAP(r0, &(0x7f0000000140)={0x18}, 0x18) dup(0xffffffffffffffff) fallocate(r1, 0x0, 0x0, 0x5000f4) r2 = open(&(0x7f0000000040)='./bus\x00', 0x24000, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffff8) perf_event_open(&(0x7f0000002340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x4) 04:41:53 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000380)=0x1a, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x27fc, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmsg(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x2040) [ 1027.716195][ T8705] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1027.716317][ T8705] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1027.716448][ T8705] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1027.716611][ T8705] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 04:41:53 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r1, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00(\x00 \x00'}) r2 = syz_open_pts(r1, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4086, 0xff6}], 0x1) [ 1027.716726][ T8705] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.738599][T19734] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1027.757651][ T8705] hub 4-1:1.0: bad descriptor, ignoring hub [ 1027.757908][ T8705] hub: probe of 4-1:1.0 failed with error -5 [ 1027.964847][T19734] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1028.200775][ T8705] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 72 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1028.238012][ T8705] usb 4-1: USB disconnect, device number 72 [ 1028.246013][ T8705] usblp0: removed [ 1028.758892][ T28] audit: type=1804 audit(1598762514.394:29): pid=19782 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir329439913/syzkaller.8E4GOL/392/bus" dev="sda1" ino=16371 res=1 [ 1028.759166][ T28] audit: type=1800 audit(1598762514.394:30): pid=19782 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16371 res=0 [ 1028.868690][ T28] audit: type=1804 audit(1598762514.504:31): pid=19778 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir329439913/syzkaller.8E4GOL/392/bus" dev="sda1" ino=16371 res=1 04:41:54 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDSETLED(r1, 0x5393, 0x0) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 04:41:54 executing program 0: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_int(r0, 0x84, 0x71, 0x0, 0x0) 04:41:54 executing program 1: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) sendto$inet(r0, &(0x7f0000000400)='N', 0x1, 0x20004005, 0x0, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x9, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) 04:41:54 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r1, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00(\x00 \x00'}) r2 = syz_open_pts(r1, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4086, 0xff6}], 0x1) [ 1028.868990][ T28] audit: type=1800 audit(1598762514.504:32): pid=19778 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16371 res=0 [ 1028.977849][ T8705] usb 4-1: new high-speed USB device number 73 using dummy_hcd 04:41:55 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x3f00, 0x0}, &(0x7f0000000180)=0x10) 04:41:55 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r1, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00(\x00 \x00'}) r2 = syz_open_pts(r1, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4086, 0xff6}], 0x1) 04:41:55 executing program 4: syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty=0xe0000001}, {0x0, 0x4e22, 0x8}}}}}, 0x0) 04:41:56 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x24, 0x0, &(0x7f0000000180)) 04:41:56 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000380)=0x1a, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x27fc, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmsg(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x2040) 04:41:56 executing program 1: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket(0x18, 0x0, 0x0) socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0) 04:41:56 executing program 4: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0) dup(r1) socket$inet(0x2, 0x4000000000000001, 0x0) socket(0x18, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0) 04:41:56 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r1, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00(\x00 \x00'}) r2 = syz_open_pts(r1, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4086, 0xff6}], 0x1) [ 1032.746515][ T28] audit: type=1800 audit(1598762518.374:33): pid=19807 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="memory.events" dev="sda1" ino=16381 res=0 04:41:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:41:58 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 04:41:58 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc", 0x3b}], 0x4, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}}, 0x78) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 04:41:58 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r1, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00(\x00 \x00'}) r2 = syz_open_pts(r1, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4086, 0xff6}], 0x1) 04:41:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) flock(r2, 0x8) [ 1033.007654][T19807] syz-executor.3 (19807) used greatest stack depth: 4504 bytes left 04:41:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x1, 0x9, 0x5}, 0x14}}, 0x0) 04:41:59 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r1, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00(\x00 \x00'}) r2 = syz_open_pts(r1, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4086, 0xff6}], 0x1) 04:41:59 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000380)=0x1a, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x27fc, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmsg(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x2040) 04:41:59 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_INGRESS={0x8}]}}]}, 0x3c}}, 0x0) 04:41:59 executing program 3: r0 = socket(0x22, 0x2, 0x4) bind$rose(r0, 0x0, 0x0) [ 1033.704432][T19854] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2305 sclass=netlink_route_socket pid=19854 comm=syz-executor.0 04:41:59 executing program 0: r0 = semget(0x3, 0x1, 0x280) semctl$IPC_RMID(r0, 0x0, 0x0) 04:41:59 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r1, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00(\x00 \x00'}) r2 = syz_open_pts(r1, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4086, 0xff6}], 0x1) 04:41:59 executing program 3: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe07f00090582021a"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 04:42:00 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52", 0x42}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 1034.879511][T12836] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1035.155691][T12836] usb 4-1: Using ep0 maxpacket: 8 [ 1035.299017][T12836] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1035.310285][T12836] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1035.320625][T12836] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 1035.332221][T12836] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1035.345559][T12836] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1035.354799][T12836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.548233][T19871] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1035.572842][T19871] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1035.677830][T12836] hub 4-1:1.0: bad descriptor, ignoring hub [ 1035.684059][T12836] hub: probe of 4-1:1.0 failed with error -5 [ 1035.883895][T19871] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1035.908365][T19871] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1036.192647][T12836] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 74 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 04:42:02 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="020000000200260000000000040000"], 0x24, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000040)='./file0\x00', 0x0) 04:42:02 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/73, 0x49}], 0x1) 04:42:02 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r1, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00(\x00 \x00'}) r2 = syz_open_pts(r1, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4086, 0xff6}], 0x1) 04:42:02 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000380)=0x1a, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x27fc, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmsg(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x2040) [ 1036.523035][T12836] usb 4-1: USB disconnect, device number 74 [ 1036.563406][T12836] usblp0: removed 04:42:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) [ 1037.296115][ T9070] usb 4-1: new high-speed USB device number 75 using dummy_hcd 04:42:03 executing program 3: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe07f00090582021a"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 04:42:03 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r1, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00(\x00 \x00'}) r2 = syz_open_pts(r1, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4086, 0xff6}], 0x1) 04:42:03 executing program 0: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe07f00090582021a"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 04:42:03 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000002c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_LEDBIT(r0, 0x40045564, 0x0) 04:42:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x3e, 0x0) write$nbd(r2, &(0x7f0000000040)={0x6000000, 0x0, 0x0, 0x0, 0x2, "7307f2177f0000000000000015d530000000feff3921a0fcb3ac401de11c1743caeb837106f4e954a5b84df6449fe66884b3bc16079f565cea173db80437f6242b1b42d346f555dd6c020a7200"/88}, 0x68) [ 1038.677093][T19929] input: syz0 as /devices/virtual/input/input73 [ 1038.835788][T12836] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1038.915510][ T9070] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1038.924308][T19934] input: syz0 as /devices/virtual/input/input74 [ 1039.010378][T19940] dlm: no locking on control device [ 1039.079700][T19945] dlm: no locking on control device [ 1039.098603][T12836] usb 1-1: Using ep0 maxpacket: 8 [ 1039.167029][ T9070] usb 4-1: Using ep0 maxpacket: 8 [ 1039.236311][T12836] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1039.247691][T12836] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1039.257989][T12836] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 1039.268123][T12836] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1039.281368][T12836] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1039.287167][ T9070] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1039.290601][T12836] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.303524][ T9070] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1039.321249][ T9070] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 04:42:05 executing program 4: timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f00000000c0)) timer_delete(0x0) 04:42:05 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000380)=0x1a, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x27fc, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmsg(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x2040) [ 1039.331440][ T9070] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1039.344782][ T9070] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1039.354131][ T9070] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 04:42:05 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, 0x0) write$binfmt_aout(r1, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00(\x00 \x00'}) r2 = syz_open_pts(r1, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4086, 0xff6}], 0x1) 04:42:05 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/udp6\x00') r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x5, 0x7, 0x80, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000140)={r2}) dup3(r0, r1, 0x0) [ 1039.757577][T19926] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1039.765810][T19926] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1039.767651][T19921] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1039.807725][T12836] hub 1-1:1.0: bad descriptor, ignoring hub [ 1039.813971][T12836] hub: probe of 1-1:1.0 failed with error -5 [ 1039.845460][T19921] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1039.868148][ T9070] hub 4-1:1.0: bad descriptor, ignoring hub [ 1039.874412][ T9070] hub: probe of 4-1:1.0 failed with error -5 04:42:05 executing program 4: prctl$PR_TASK_PERF_EVENTS_DISABLE(0x28) [ 1040.032655][T19926] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1040.080359][T19926] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1040.094445][T19921] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1040.168363][T19921] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1040.416251][T12836] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 56 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1040.479397][ T9070] usblp 4-1:1.0: usblp1: USB Bidirectional printer dev 76 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 04:42:06 executing program 1: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0) 04:42:06 executing program 4: syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x3, 0xb}]}}}}}}, 0x0) [ 1040.897378][ T9070] usb 1-1: USB disconnect, device number 56 [ 1040.926681][ T27] usb 4-1: USB disconnect, device number 76 [ 1040.967150][ T9070] usblp0: removed [ 1040.979507][ T27] usblp1: removed 04:42:07 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) 04:42:07 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, 0x0) write$binfmt_aout(r1, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00(\x00 \x00'}) r2 = syz_open_pts(r1, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4086, 0xff6}], 0x1) 04:42:07 executing program 0: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe07f00090582021a"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 04:42:07 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "912a5d29492d2cc1"}) ioctl$TIOCL_SETSEL(r1, 0x5412, &(0x7f0000000000)={0x3}) read(r0, &(0x7f0000000480)=""/4096, 0x1000) 04:42:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1040}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:42:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x3, 0x0, 0x0, 0x0, 0x100}}) 04:42:07 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000380)=0x1a, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x27fc, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmsg(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x2040) [ 1042.395766][ T9070] usb 1-1: new high-speed USB device number 57 using dummy_hcd 04:42:08 executing program 1: semctl$SETALL(0x0, 0x0, 0x13, &(0x7f0000000080)=[0x0]) msgctl$MSG_INFO(0x0, 0x3, &(0x7f00000000c0)=""/179) [ 1042.635455][ T9070] usb 1-1: Using ep0 maxpacket: 8 04:42:08 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, 0x0) write$binfmt_aout(r1, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00(\x00 \x00'}) r2 = syz_open_pts(r1, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4086, 0xff6}], 0x1) [ 1042.756359][ T9070] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 04:42:08 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x0, "912a5d29492d2cc1"}) ioctl$TIOCL_SETSEL(r0, 0x5412, &(0x7f0000000000)={0x3}) [ 1042.756503][ T9070] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1042.756639][ T9070] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 1042.756787][ T9070] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1042.756908][ T9070] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1042.756982][ T9070] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 04:42:09 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x3, 0x0, 0x0, 0x3e, 0x100}}) [ 1042.777468][T20001] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1042.778038][T20001] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1042.797474][ T9070] hub 1-1:1.0: bad descriptor, ignoring hub [ 1042.797727][ T9070] hub: probe of 1-1:1.0 failed with error -5 [ 1043.010631][T20001] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1043.011230][T20001] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1043.240778][ T9070] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 57 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1043.576612][ T9600] usb 1-1: USB disconnect, device number 57 [ 1043.585865][ T9600] usblp0: removed 04:42:09 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x5}, 0x8) 04:42:09 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00(\x00 \x00'}) r2 = syz_open_pts(r1, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4086, 0xff6}], 0x1) 04:42:09 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x13, r0, 0x0) 04:42:09 executing program 0: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe07f00090582021a"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 04:42:10 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00(\x00 \x00'}) r2 = syz_open_pts(r1, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4086, 0xff6}], 0x1) 04:42:10 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x3, 0x0, 0x0, 0x3e, 0x100}}) 04:42:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x3, 0x0, 0x0, 0x3e}}) [ 1045.076137][ T9070] usb 1-1: new high-speed USB device number 58 using dummy_hcd 04:42:11 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000380)=0x1a, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x27fc, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmsg(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x2040) 04:42:11 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0xc, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8}]}}]}, 0x38}}, 0x0) 04:42:11 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00(\x00 \x00'}) r2 = syz_open_pts(r1, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4086, 0xff6}], 0x1) [ 1045.315784][ T9070] usb 1-1: Using ep0 maxpacket: 8 [ 1045.436943][ T9070] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 04:42:11 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x3, 0x0, 0x0, 0x3e}}) [ 1045.437152][ T9070] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 04:42:11 executing program 3: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) [ 1045.437291][ T9070] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 1045.437437][ T9070] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 04:42:11 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r1, 0x0, 0xffffff78) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00(\x00 \x00'}) r2 = syz_open_pts(r1, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4086, 0xff6}], 0x1) [ 1045.437555][ T9070] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1045.437626][ T9070] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.467709][T20059] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1045.468297][T20059] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1045.487869][ T9070] hub 1-1:1.0: bad descriptor, ignoring hub [ 1045.488118][ T9070] hub: probe of 1-1:1.0 failed with error -5 04:42:12 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000380)=0x1a, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x27fc, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmsg(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x2040) 04:42:12 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r1, 0x0, 0xffffff78) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00(\x00 \x00'}) r2 = syz_open_pts(r1, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4086, 0xff6}], 0x1) [ 1045.692703][T20059] raw-gadget gadget: fail, usb_ep_enable returned -22 04:42:12 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c43b113c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) [ 1045.693253][T20059] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1045.930455][ T9070] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 58 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1046.257016][ T9070] usb 1-1: USB disconnect, device number 58 [ 1046.264558][ T9070] usblp0: removed 04:42:12 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x3, 0x0, 0x0, 0x3e}}) 04:42:12 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x3, 0x0, 0x0, 0x3e, 0x100}}) 04:42:12 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4610, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1047.275926][T20100] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 04:42:13 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000380)=0x1a, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x27fc, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmsg(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x2040) 04:42:13 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r1, 0x0, 0xffffff78) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00(\x00 \x00'}) r2 = syz_open_pts(r1, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4086, 0xff6}], 0x1) 04:42:13 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) 04:42:13 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x3, 0x0, 0x0, 0x3e}}) 04:42:13 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=@dstopts, 0x8) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000540)={&(0x7f0000000400)={0xa}, 0x2000040c, &(0x7f0000000500)={0x0}}, 0x0) 04:42:13 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) bind$inet(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000380)=0x1a, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x27fc, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmsg(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x2040) 04:42:14 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r1, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00(\x00 \x00'}) r2 = syz_open_pts(r1, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4086, 0xff6}], 0x1) 04:42:14 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 04:42:14 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x3, 0x0, 0x0, 0x3e, 0x100}}) 04:42:14 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=@dstopts, 0x8) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000540)={&(0x7f0000000400)={0xa}, 0x2000040c, &(0x7f0000000500)={0x0}}, 0x0) 04:42:14 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) bind$inet(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000380)=0x1a, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x27fc, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmsg(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x2040) 04:42:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x3, {0x3, 0x0, 0x0, 0x3e}}) [ 1049.070823][T20140] input: syz1 as /devices/virtual/input/input75 04:42:14 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000040)={0xd, 0x8}) 04:42:15 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r1, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00(\x00 \x00'}) r2 = syz_open_pts(r1, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4086, 0xff6}], 0x1) 04:42:15 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x3, {0x3, 0x0, 0x0, 0x3e, 0x100}}) 04:42:15 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0xffff) 04:42:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x3, {0x3, 0x0, 0x0, 0x3e}}) 04:42:15 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) bind$inet(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000380)=0x1a, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x27fc, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmsg(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x2040) 04:42:15 executing program 0: r0 = socket(0xa, 0x80001, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp, @sack_perm, @mss, @sack_perm], 0x4) 04:42:15 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r1, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00(\x00 \x00'}) r2 = syz_open_pts(r1, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4086, 0xff6}], 0x1) 04:42:15 executing program 3: pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0xd8, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xa8, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x98, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xcf, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffc, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}]}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8001, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x9}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0xd8}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 04:42:15 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x3, {0x3, 0x0, 0x0, 0x3e, 0x100}}) 04:42:16 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000380)=0x1a, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x27fc, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmsg(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x2040) 04:42:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x3, {0x3, 0x0, 0x0, 0x3e}}) 04:42:16 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x3, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) 04:42:16 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r1, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(r1, 0x40045431, 0x0) r2 = syz_open_pts(r1, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4086, 0xff6}], 0x1) 04:42:16 executing program 3: openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 04:42:16 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000380)=0x1a, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x27fc, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmsg(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x2040) 04:42:16 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x3, 0x0, 0x0, 0x3e}}) 04:42:16 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x3, {0x3, 0x0, 0x0, 0x3e, 0x100}}) 04:42:16 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = dup2(r0, r0) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={0x0, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={'nr', 0x0}, 0x0, 'syz1\x00', @null, 0x0, 0x0, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @bcast, @bcast, @bcast]}) 04:42:17 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000380)=0x1a, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x27fc, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmsg(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x2040) 04:42:17 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r1, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(r1, 0x40045431, 0x0) r2 = syz_open_pts(r1, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4086, 0xff6}], 0x1) 04:42:17 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x16, &(0x7f0000000000)={@mcast1}, 0x14) 04:42:17 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x3, 0x0, 0x0, 0x3e}}) 04:42:17 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x302, 0x0) 04:42:17 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x3, 0x0, 0x0, 0x3e, 0x100}}) 04:42:18 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000380)=0x1a, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x27fc, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmsg(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x2040) 04:42:18 executing program 3: r0 = socket$phonet(0x23, 0x2, 0x1) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, 0x0, &(0x7f0000000080)) 04:42:18 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r1, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(r1, 0x40045431, 0x0) r2 = syz_open_pts(r1, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4086, 0xff6}], 0x1) 04:42:18 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x3, 0x0, 0x0, 0x3e}}) 04:42:18 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x3232, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x72, 0xe, 0xcf, 0x0, 0x41e, 0x4051, 0x5b28, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x88, 0x30, 0xed}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000200)={0x18, &(0x7f0000000040)={0x0, 0x0, 0x17, {0x17, 0x0, "adce03e68af45f7932383ef3f445a1299ad2ba436b"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 04:42:18 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x3, 0x0, 0x0, 0x3e, 0x100}}) 04:42:18 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000380)=0x1a, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x27fc, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmsg(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x2040) 04:42:18 executing program 3: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket(0x0, 0x803, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) sendto$inet(r0, &(0x7f0000000400)='N', 0x1, 0x20004005, 0x0, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x9, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) 04:42:19 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r1, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00(\x00 \x00'}) r2 = syz_open_pts(0xffffffffffffffff, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4086, 0xff6}], 0x1) 04:42:19 executing program 4: perf_event_open(0x0, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x3, 0x0, 0x0, 0x3e}}) [ 1053.418831][ T3225] usb 1-1: new high-speed USB device number 59 using dummy_hcd 04:42:19 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000380)=0x1a, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x27fc, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmsg(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x2040) 04:42:19 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x3, 0x0, 0x0, 0x3e, 0x100}}) [ 1053.786726][ T3225] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1053.786856][ T3225] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1053.786971][ T3225] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.40 [ 1053.787039][ T3225] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 04:42:19 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r1, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00(\x00 \x00'}) r2 = syz_open_pts(0xffffffffffffffff, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4086, 0xff6}], 0x1) [ 1053.794383][ T3225] usb 1-1: config 0 descriptor?? [ 1054.125966][ T3225] usbhid 1-1:0.0: can't add hid device: -71 [ 1054.126534][ T3225] usbhid: probe of 1-1:0.0 failed with error -71 [ 1054.131220][ T3225] usb 1-1: USB disconnect, device number 59 04:42:20 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x27fc, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmsg(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x2040) [ 1054.585640][ T3225] usb 1-1: new high-speed USB device number 60 using dummy_hcd 04:42:20 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x3, 0x0, 0x0, 0x3e}}) 04:42:20 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x1a, 0x0, &(0x7f0000001180)) [ 1054.946424][ T3225] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1054.946551][ T3225] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1054.946666][ T3225] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.40 [ 1054.946737][ T3225] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.950867][ T3225] usb 1-1: config 0 descriptor?? [ 1055.451657][ T3225] ryos 0003:1E7D:3232.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:3232] on usb-dummy_hcd.0-1/input0 [ 1055.741734][ T3225] usb 1-1: USB disconnect, device number 60 [ 1056.819030][T12836] usb 1-1: new high-speed USB device number 61 using dummy_hcd 04:42:22 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0) 04:42:22 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x3, 0x0, 0x0, 0x3e, 0x100}}) 04:42:22 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r1, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00(\x00 \x00'}) r2 = syz_open_pts(0xffffffffffffffff, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4086, 0xff6}], 0x1) 04:42:22 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x27fc, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmsg(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x2040) 04:42:22 executing program 3: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0)='/dev/snd/midiC#D#\x00', 0x2, 0x121001) write$midi(r0, &(0x7f00000001c0)="c5", 0x1) 04:42:22 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x3, 0x0, 0x0, 0x3e}}) [ 1057.245784][T12836] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1057.253682][T12836] usb 1-1: can't read configurations, error -71 04:42:23 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x3, 0x0, 0x0, 0x3e}}) 04:42:23 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r1, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00(\x00 \x00'}) syz_open_pts(r1, 0x0) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4086, 0xff6}], 0x1) 04:42:23 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x27fc, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmsg(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x2040) 04:42:23 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffc, 0x0, "0000b60080008000"}) ioctl$TIOCL_SETSEL(r0, 0x5412, &(0x7f0000000000)={0x3}) 04:42:23 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x3, {0x3, 0x0, 0x0, 0x3e, 0x100}}) 04:42:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x3, 0x0, 0x0, 0x0, 0x100}}) syz_open_pts(0xffffffffffffffff, 0x0) 04:42:23 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000380), 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x27fc, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmsg(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x2040) 04:42:24 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x3, {0x3, 0x0, 0x0, 0x3e}}) 04:42:24 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x25, 0x0, &(0x7f0000000180)) 04:42:24 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r1, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00(\x00 \x00'}) syz_open_pts(r1, 0x0) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4086, 0xff6}], 0x1) 04:42:24 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x3, {0x3, 0x0, 0x0, 0x3e, 0x100}}) 04:42:24 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000380), 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x27fc, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmsg(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x2040) 04:42:24 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x84, 0x9, 0x0, 0x0) 04:42:25 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x3, {0x3, 0x0, 0x0, 0x3e}}) 04:42:25 executing program 3: clone3(&(0x7f0000001340)={0x80, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 04:42:25 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r1, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00(\x00 \x00'}) syz_open_pts(r1, 0x0) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4086, 0xff6}], 0x1) 04:42:25 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) 04:42:25 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x3, {0x3, 0x0, 0x0, 0x3e, 0x100}}) 04:42:25 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000380), 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x27fc, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmsg(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x2040) 04:42:25 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000040)={'IDLETIMER\x00'}, &(0x7f0000000080)=0x1e) 04:42:25 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x3, {0x3, 0x0, 0x0, 0x3e}}) 04:42:26 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r1, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00(\x00 \x00'}) r2 = syz_open_pts(r1, 0x0) readv(r2, 0x0, 0x0) 04:42:26 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0], 0x0, 0x0, 0x1, 0x1}) 04:42:26 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) 04:42:26 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000380)=0x1a, 0x4) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x27fc, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmsg(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x2040) 04:42:26 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) 04:42:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, 0x0, 0x0) 04:42:26 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r1, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00(\x00 \x00'}) r2 = syz_open_pts(r1, 0x0) readv(r2, 0x0, 0x0) 04:42:27 executing program 0: r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x9) 04:42:27 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) 04:42:27 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002808100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) 04:42:27 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) 04:42:27 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r1, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00(\x00 \x00'}) r2 = syz_open_pts(r1, 0x0) readv(r2, 0x0, 0x0) 04:42:27 executing program 0: r0 = getpid() capget(&(0x7f0000000000)={0x20071026, r0}, &(0x7f0000000040)) 04:42:28 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) 04:42:28 executing program 3: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x4000040) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) sendto$inet(r0, &(0x7f0000000400)='N', 0x1, 0x20004005, 0x0, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x9, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) 04:42:28 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000380)=0x1a, 0x4) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x27fc, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmsg(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x2040) 04:42:28 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) 04:42:28 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r1, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00(\x00 \x00'}) r2 = syz_open_pts(r1, 0x0) readv(r2, &(0x7f0000000100), 0x0) [ 1062.780219][T20410] capability: warning: `syz-executor.0' uses deprecated v2 capabilities in a way that may be insecure 04:42:28 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x3}}) 04:42:28 executing program 0: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000240)=[{}], 0x1, 0x3, 0x0, 0x0) 04:42:29 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x3, 0x0, 0x0, 0x0, 0x100}}) 04:42:29 executing program 3: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x4000040) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) sendto$inet(r0, &(0x7f0000000400)='N', 0x1, 0x20004005, 0x0, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x9, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) 04:42:29 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r1, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00(\x00 \x00'}) r2 = syz_open_pts(r1, 0x0) readv(r2, &(0x7f0000000100), 0x0) 04:42:29 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x3}}) 04:42:29 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x80000000004) write(r1, &(0x7f000058bfe4)="29000000140003b7ff000000040860eb0100100006a40e07fff00fd57f25ffffff0100002a00f3ff09", 0x29) 04:42:30 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x3}}) 04:42:30 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r1, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00(\x00 \x00'}) r2 = syz_open_pts(r1, 0x0) readv(r2, &(0x7f0000000100), 0x0) 04:42:30 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000380)=0x1a, 0x4) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x27fc, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmsg(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x2040) 04:42:30 executing program 3: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x4000040) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) sendto$inet(r0, &(0x7f0000000400)='N', 0x1, 0x20004005, 0x0, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x9, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) 04:42:30 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = dup(r0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) connect$inet(r0, &(0x7f0000e5c000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) 04:42:30 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a40)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd, 0x1, 'fq_codel\x00'}, {0xc, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8}]}}]}, 0x40}}, 0x0) 04:42:31 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r1, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00(\x00 \x00'}) r2 = syz_open_pts(r1, 0x0) readv(r2, &(0x7f0000000100)=[{0x0}], 0x1) 04:42:31 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x7, &(0x7f0000000080), 0x4) 04:42:31 executing program 0: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d257146d0e0206e73ba8f4952bedc6760253ef", 0xff9a, 0x400}], 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="646174613d6a6f75726e616c2c00dc1512a9feefa9824b1c1fd005998c2872db1a5d227a999fcde58e2400b86c5b506106bf61fda38a9b8e7e60df63e7e215ae67a7d8cf321b8582bcf59ff70f8cd6c3db9f3d5f2de4b6e38ffd5544a5b57d095c4a05fee6a23dfa6a2b3023271983a41c6ac354cd667f3476adce263bc710cfebb9a623b80547dc22a21b36a585deb9fac6b7de9c7bb05442fb"]) 04:42:32 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r1, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00(\x00 \x00'}) r2 = syz_open_pts(r1, 0x0) readv(r2, &(0x7f0000000100)=[{0x0}], 0x1) 04:42:32 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) close(0xffffffffffffffff) 04:42:32 executing program 3: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x4000040) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) sendto$inet(r0, &(0x7f0000000400)='N', 0x1, 0x20004005, 0x0, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x9, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) 04:42:32 executing program 1: openat$audio1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x4001, 0x0) [ 1067.014233][T20457] not chained 60000 origins [ 1067.019004][T20457] CPU: 0 PID: 20457 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 1067.028926][T20457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1067.039853][T20457] Call Trace: [ 1067.043204][T20457] dump_stack+0x21c/0x280 [ 1067.047708][T20457] kmsan_internal_chain_origin+0x6f/0x130 [ 1067.053611][T20457] ? kmsan_get_metadata+0x116/0x180 [ 1067.059762][T20457] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1067.066188][T20457] ? kmsan_get_metadata+0x116/0x180 [ 1067.071795][T20457] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1067.077815][T20457] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1067.084302][T20457] ? sched_clock_cpu+0x65/0x8e0 [ 1067.089367][T20457] ? kmsan_get_metadata+0x116/0x180 [ 1067.094721][T20457] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1067.100843][T20457] ? kmsan_get_metadata+0x116/0x180 [ 1067.106816][T20457] ? kmsan_set_origin_checked+0x95/0xf0 [ 1067.112665][T20457] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1067.118885][T20457] ? _copy_from_user+0x201/0x310 [ 1067.124053][T20457] ? kmsan_get_metadata+0x116/0x180 [ 1067.129575][T20457] __msan_chain_origin+0x50/0x90 [ 1067.134677][T20457] __get_compat_msghdr+0x6db/0x9d0 [ 1067.139880][T20457] get_compat_msghdr+0x108/0x2b0 [ 1067.145408][T20457] __sys_sendmmsg+0x755/0xf70 [ 1067.150764][T20457] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1067.157074][T20457] ? __msan_poison_alloca+0xf0/0x120 [ 1067.162726][T20457] ? kmsan_copy_to_user+0x81/0x90 [ 1067.168432][T20457] ? _copy_to_user+0x1bf/0x260 [ 1067.173406][T20457] ? put_old_timespec32+0x231/0x2d0 [ 1067.178866][T20457] ? kmsan_get_metadata+0x116/0x180 [ 1067.184323][T20457] ? kmsan_get_metadata+0x116/0x180 [ 1067.189705][T20457] ? kmsan_get_metadata+0x116/0x180 [ 1067.195060][T20457] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 1067.200592][T20457] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 1067.206874][T20457] __do_fast_syscall_32+0x2af/0x480 [ 1067.212639][T20457] do_fast_syscall_32+0x6b/0xd0 [ 1067.217813][T20457] do_SYSENTER_32+0x73/0x90 [ 1067.222640][T20457] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1067.229443][T20457] RIP: 0023:0xf7f45549 [ 1067.233918][T20457] Code: Bad RIP value. [ 1067.238340][T20457] RSP: 002b:00000000f553f0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 1067.246908][T20457] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020007fc0 [ 1067.255464][T20457] RDX: 00000000000001a8 RSI: 0000000000000000 RDI: 0000000000000000 [ 1067.263494][T20457] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1067.271604][T20457] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1067.279773][T20457] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1067.287932][T20457] Uninit was stored to memory at: [ 1067.293072][T20457] kmsan_internal_chain_origin+0xad/0x130 [ 1067.299056][T20457] __msan_chain_origin+0x50/0x90 [ 1067.305059][T20457] __get_compat_msghdr+0x6db/0x9d0 [ 1067.310414][T20457] get_compat_msghdr+0x108/0x2b0 [ 1067.324218][T20457] __sys_sendmmsg+0x755/0xf70 [ 1067.329128][T20457] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 1067.334955][T20457] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 1067.340544][T20457] __do_fast_syscall_32+0x2af/0x480 [ 1067.345838][T20457] do_fast_syscall_32+0x6b/0xd0 [ 1067.351173][T20457] do_SYSENTER_32+0x73/0x90 [ 1067.355718][T20457] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1067.362507][T20457] [ 1067.364875][T20457] Uninit was stored to memory at: [ 1067.370346][T20457] kmsan_internal_chain_origin+0xad/0x130 [ 1067.376376][T20457] __msan_chain_origin+0x50/0x90 [ 1067.381444][T20457] __get_compat_msghdr+0x6db/0x9d0 [ 1067.386913][T20457] get_compat_msghdr+0x108/0x2b0 [ 1067.391994][T20457] __sys_sendmmsg+0x755/0xf70 [ 1067.397072][T20457] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 1067.402824][T20457] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 1067.408463][T20457] __do_fast_syscall_32+0x2af/0x480 [ 1067.413703][T20457] do_fast_syscall_32+0x6b/0xd0 [ 1067.418656][T20457] do_SYSENTER_32+0x73/0x90 [ 1067.423535][T20457] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1067.430110][T20457] [ 1067.432475][T20457] Uninit was stored to memory at: [ 1067.437558][T20457] kmsan_internal_chain_origin+0xad/0x130 [ 1067.443455][T20457] __msan_chain_origin+0x50/0x90 [ 1067.448582][T20457] __get_compat_msghdr+0x6db/0x9d0 [ 1067.453727][T20457] get_compat_msghdr+0x108/0x2b0 [ 1067.458702][T20457] __sys_sendmmsg+0x755/0xf70 [ 1067.463429][T20457] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 1067.469093][T20457] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 1067.474673][T20457] __do_fast_syscall_32+0x2af/0x480 [ 1067.479914][T20457] do_fast_syscall_32+0x6b/0xd0 [ 1067.484801][T20457] do_SYSENTER_32+0x73/0x90 [ 1067.489329][T20457] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1067.495659][T20457] [ 1067.497997][T20457] Uninit was stored to memory at: [ 1067.503133][T20457] kmsan_internal_chain_origin+0xad/0x130 [ 1067.508905][T20457] __msan_chain_origin+0x50/0x90 [ 1067.513908][T20457] __get_compat_msghdr+0x6db/0x9d0 [ 1067.519046][T20457] get_compat_msghdr+0x108/0x2b0 [ 1067.524007][T20457] __sys_sendmmsg+0x755/0xf70 [ 1067.528716][T20457] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 1067.534728][T20457] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 1067.540406][T20457] __do_fast_syscall_32+0x2af/0x480 [ 1067.545810][T20457] do_fast_syscall_32+0x6b/0xd0 [ 1067.550815][T20457] do_SYSENTER_32+0x73/0x90 [ 1067.555439][T20457] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1067.562298][T20457] [ 1067.564678][T20457] Uninit was stored to memory at: [ 1067.569803][T20457] kmsan_internal_chain_origin+0xad/0x130 [ 1067.575599][T20457] __msan_chain_origin+0x50/0x90 [ 1067.580579][T20457] __get_compat_msghdr+0x6db/0x9d0 [ 1067.585736][T20457] get_compat_msghdr+0x108/0x2b0 [ 1067.590987][T20457] __sys_sendmmsg+0x755/0xf70 [ 1067.595738][T20457] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 1067.601163][T20457] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 1067.606755][T20457] __do_fast_syscall_32+0x2af/0x480 [ 1067.612065][T20457] do_fast_syscall_32+0x6b/0xd0 [ 1067.617041][T20457] do_SYSENTER_32+0x73/0x90 [ 1067.621717][T20457] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1067.628116][T20457] [ 1067.630550][T20457] Uninit was stored to memory at: [ 1067.635732][T20457] kmsan_internal_chain_origin+0xad/0x130 [ 1067.641591][T20457] __msan_chain_origin+0x50/0x90 [ 1067.646626][T20457] __get_compat_msghdr+0x6db/0x9d0 [ 1067.651829][T20457] get_compat_msghdr+0x108/0x2b0 [ 1067.656887][T20457] __sys_sendmmsg+0x755/0xf70 [ 1067.661597][T20457] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 1067.667051][T20457] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 1067.672657][T20457] __do_fast_syscall_32+0x2af/0x480 [ 1067.677988][T20457] do_fast_syscall_32+0x6b/0xd0 [ 1067.682920][T20457] do_SYSENTER_32+0x73/0x90 [ 1067.687500][T20457] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1067.694339][T20457] [ 1067.697102][T20457] Uninit was stored to memory at: [ 1067.702238][T20457] kmsan_internal_chain_origin+0xad/0x130 [ 1067.708252][T20457] __msan_chain_origin+0x50/0x90 [ 1067.713341][T20457] __get_compat_msghdr+0x6db/0x9d0 [ 1067.718575][T20457] get_compat_msghdr+0x108/0x2b0 [ 1067.723605][T20457] __sys_sendmmsg+0x755/0xf70 [ 1067.728358][T20457] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 1067.733798][T20457] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 1067.739574][T20457] __do_fast_syscall_32+0x2af/0x480 [ 1067.744902][T20457] do_fast_syscall_32+0x6b/0xd0 [ 1067.749958][T20457] do_SYSENTER_32+0x73/0x90 [ 1067.754555][T20457] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1067.760918][T20457] [ 1067.763301][T20457] Local variable ----msg_sys@__sys_sendmmsg created at: [ 1067.770417][T20457] __sys_sendmmsg+0xbb/0xf70 [ 1067.775058][T20457] __sys_sendmmsg+0xbb/0xf70 04:42:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) copy_file_range(r0, &(0x7f0000000300), r1, &(0x7f0000000340), 0x0, 0x0) [ 1070.129316][ T28] audit: type=1800 audit(1598762555.724:34): pid=20472 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.4" name="memory.events" dev="sda1" ino=16384 res=0 04:42:36 executing program 3: syz_open_dev$hidraw(&(0x7f0000000100)='/dev/hidraw#\x00', 0x0, 0x641) 04:42:36 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r1, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00(\x00 \x00'}) r2 = syz_open_pts(r1, 0x0) readv(r2, &(0x7f0000000100)=[{0x0}], 0x1) 04:42:36 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000380)=0x1a, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, &(0x7f0000000080)=0x27fc, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmsg(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x2040) 04:42:36 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x84, 0xd, 0x0, 0x0) 04:42:36 executing program 4: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 04:42:36 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x3, 0x2) ioctl$VIDIOC_G_ENC_INDEX(r0, 0x8818564c, 0x0) 04:42:37 executing program 3: r0 = socket$inet(0xa, 0x5, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@local, @in6=@private0}}, {{@in=@broadcast}, 0x0, @in=@remote}}, &(0x7f0000000100)=0xfffffffffffffe0b) 04:42:37 executing program 4: mincore(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0) 04:42:37 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 04:42:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x30}}, 0x0) 04:42:38 executing program 5: socket(0x2000000000000021, 0x2, 0x10000000000002) socket$phonet_pipe(0x23, 0x5, 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600)='/dev/snd/seq\x00', 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 04:42:38 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyprintk\x00', 0x101003, 0x0) splice(r1, 0x0, r0, 0x0, 0x8, 0x0) 04:42:38 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x0, 0x0, {0x0, 0xa}, {0x1, 0x1ff}, @cond}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001f113b4ee9cd283caf790000540b", @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) [ 1073.169132][T20524] netlink: 2076 bytes leftover after parsing attributes in process `syz-executor.4'. 04:42:39 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000380)=0x1a, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, &(0x7f0000000080)=0x27fc, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmsg(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x2040) 04:42:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 04:42:39 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0xffff}, 0x8) 04:42:39 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) 04:42:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="9fea"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:42:39 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) [ 1074.351567][T20534] sctp: [Deprecated]: syz-executor.3 (pid 20534) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1074.351567][T20534] Use struct sctp_sack_info instead 04:42:40 executing program 3: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) sendto$inet(r0, &(0x7f0000000400)='N', 0x1, 0x20004005, 0x0, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x0) 04:42:40 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0000b60080008000"}) ioctl$TIOCL_SETSEL(r0, 0x5412, &(0x7f0000000000)={0x3}) 04:42:40 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0x37cb1133) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 04:42:40 executing program 4: socket$inet_smc(0x2b, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video1\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000001240)={0x0, r2+30000000}, 0x0) 04:42:40 executing program 5: socket$inet_smc(0x2b, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video1\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 04:42:41 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0x400448dd, 0x0) 04:42:42 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x3232, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x72, 0xe, 0xcf, 0x0, 0x41e, 0x4051, 0x5b28, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x88, 0x30, 0xed}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x16, {0x16, 0x0, "adce03e68af45f7932383ef3f445a1299ad2ba43"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 04:42:42 executing program 3: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0) dup(r1) socket$inet(0x2, 0x4000000000000001, 0x0) socket(0x18, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 04:42:42 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000580)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000540)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18) 04:42:42 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000500}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) 04:42:42 executing program 1: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000500}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000140)=0x5) 04:42:42 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000380)=0x1a, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, &(0x7f0000000080)=0x27fc, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmsg(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x2040) [ 1077.625511][ T3225] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 1077.987394][ T3225] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1077.998718][ T3225] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1078.008986][ T3225] usb 6-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.40 [ 1078.018977][ T3225] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 04:42:44 executing program 4: syz_mount_image$ocfs2(&(0x7f0000000140)='ocfs2\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000340)=',\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1079.286172][ T2328] ion_buffer_destroy: buffer still mapped in the kernel [ 1079.347726][ T3225] usb 6-1: config 0 descriptor?? 04:42:45 executing program 3: getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, &(0x7f0000000480)) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000000)=""/140) [ 1079.676328][ T3225] usbhid 6-1:0.0: can't add hid device: -71 [ 1079.683097][ T3225] usbhid: probe of 6-1:0.0 failed with error -71 [ 1079.714316][ T3225] usb 6-1: USB disconnect, device number 91 04:42:45 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000001340)='user\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000001540)='O', 0x1, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000600)="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"/281, 0x119, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r2}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={'tgr128-generic\x00\x00\x00\x00\x00\x00\x00\x00?\x00'}}) 04:42:45 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) [ 1080.196571][ T3225] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 1080.574553][ T3225] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1080.585865][ T3225] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1080.596149][ T3225] usb 6-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.40 [ 1080.605501][ T3225] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 04:42:46 executing program 1: msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8) 04:42:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setgid(0x0) [ 1080.831308][ T3225] usb 6-1: config 0 descriptor?? [ 1080.957063][ T3225] usb 6-1: can't set config #0, error -71 [ 1080.982496][ T3225] usb 6-1: USB disconnect, device number 92 04:42:46 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000380)=0x1a, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmsg(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x2040) 04:42:46 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) ioctl$KDSETLED(r1, 0x5393, 0x0) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) [ 1081.284327][T20604] (syz-executor.4,20604,0):ocfs2_parse_options:1481 ERROR: Invalid heartbeat mount options [ 1081.294774][T20604] (syz-executor.4,20604,0):ocfs2_fill_super:1190 ERROR: status = -22 04:42:47 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x0, 0x33) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 04:42:47 executing program 3: add_key$fscrypt_provisioning(&(0x7f0000000000)='fscrypt-provisioning\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) 04:42:50 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) sendto$inet(r0, &(0x7f0000000400)='N', 0x1, 0x20004005, 0x0, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x9, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) 04:42:50 executing program 4: r0 = socket$isdn_base(0x22, 0x3, 0x0) listen(r0, 0x0) 04:42:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x2c, r1, 0x1, 0x0, 0x0, {0x18}, [@ETHTOOL_A_DEBUG_HEADER={0x0, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX, @ETHTOOL_A_HEADER_FLAGS, @ETHTOOL_A_HEADER_DEV_INDEX, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX, @ETHTOOL_A_HEADER_DEV_INDEX, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS, @ETHTOOL_A_HEADER_DEV_INDEX]}]}, 0x2c}}, 0x0) 04:42:50 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r0, 0x5406, 0x0) 04:42:50 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000380)=0x1a, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmsg(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x2040) [ 1084.344651][ T28] audit: type=1800 audit(1598762569.974:35): pid=20636 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.5" name="memory.events" dev="sda1" ino=16193 res=0 [ 1084.651990][T20654] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1084.793200][T20662] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 04:42:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8}]}, 0x1c}}, 0x0) 04:42:50 executing program 4: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x40, 0x0) 04:42:50 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, 0x0) 04:42:51 executing program 1: r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000002c0)=[@in={0x2, 0x0, @multicast1}], 0x10) 04:42:51 executing program 5: openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 04:42:51 executing program 4: prctl$PR_TASK_PERF_EVENTS_DISABLE(0x22) 04:42:52 executing program 3: syz_mount_image$ocfs2(&(0x7f0000000140)='ocfs2\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000340)=',\x00') write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 04:42:52 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in={{0x2, 0x0, @local}}}, &(0x7f0000000400)=0x90) 04:42:52 executing program 1: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000680)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x26f) r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xc4, 0x1) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) 04:42:52 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) sendto$inet(r0, &(0x7f0000000400)='N', 0x1, 0x20004005, 0x0, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x9, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) 04:42:52 executing program 4: syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000440)={[], [{@seclabel='seclabel'}]}) 04:42:53 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000380)=0x1a, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmsg(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x2040) 04:42:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000003b80)=[{{&(0x7f0000000000)=@can={0x1d, r4}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000080)="4049cd7bcd35eb302e07573e1f052858dca630fe", 0x14}], 0x1}}], 0x1, 0x0) 04:42:53 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x44, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x44}}, 0x0) [ 1087.601989][T20705] hfs: can't find a HFS filesystem on dev loop4 [ 1087.676664][T20705] hfs: can't find a HFS filesystem on dev loop4 04:42:53 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000040)=""/20) 04:42:53 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r0, 0x29, 0x11, 0x0, 0x300) 04:42:53 executing program 4: openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x0, 0x0) 04:42:53 executing program 1: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) 04:42:53 executing program 3: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_mreq(r0, 0x0, 0x0, 0x0, 0x0) 04:42:54 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) 04:42:54 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=']) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000080)='autofs\x00', 0x0, &(0x7f0000000400)) 04:42:54 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5ea", 0x22}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 04:42:54 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x12, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) [ 1089.065610][ T8703] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1089.206104][T20736] autofs4:pid:20736:autofs_fill_super: called with bogus options [ 1089.228699][T20738] autofs4:pid:20738:autofs_fill_super: called with bogus options [ 1089.315738][ T8703] usb 2-1: Using ep0 maxpacket: 16 [ 1089.497087][ T8703] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1089.577332][ T8703] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 04:42:55 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000380)=0x1a, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080), 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmsg(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x2040) 04:42:55 executing program 0: r0 = socket(0xa, 0x3, 0xff) sendmmsg$unix(r0, &(0x7f0000002780)=[{&(0x7f0000000000)=@abs, 0x6e, 0x0}], 0x1, 0x0) 04:42:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90760, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000001c0), 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000001000/0x3000)=nil, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x3, 0x0, 0x0, 0x400, 0x100}}) 04:42:55 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="34000000100001045393", @ANYRES32, @ANYBLOB], 0x34}}, 0x0) [ 1089.760217][ T8703] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1089.769666][ T8703] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.778221][ T8703] usb 2-1: Product: syz [ 1089.782565][ T8703] usb 2-1: Manufacturer: syz [ 1089.787426][ T8703] usb 2-1: SerialNumber: syz [ 1090.099650][ T3225] usb 2-1: USB disconnect, device number 56 [ 1090.148889][T20756] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 04:42:55 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) [ 1090.282883][T20762] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 04:42:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1468, 0x1170, 0x1170, 0x1170, 0x1170, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={[0x0, 0x0, 0x0, 0x4], [], @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}, @common=@unspec=@cgroup1={{0x1030, 'cgroup\x00'}, {0x0, 0x2, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14c8) [ 1090.865809][T10133] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1091.106509][T10133] usb 2-1: Using ep0 maxpacket: 16 [ 1091.267380][T10133] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1091.357081][T10133] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1091.527005][T10133] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1091.536681][T10133] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.544847][T10133] usb 2-1: Product: syz [ 1091.549405][T10133] usb 2-1: Manufacturer: syz [ 1091.554160][T10133] usb 2-1: SerialNumber: syz 04:42:57 executing program 1: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000180)={0x0, 0x0, 0xc, &(0x7f0000000080)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7}]}}) 04:42:57 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x20000000000000, 0x0) read$FUSE(r0, &(0x7f0000000140)={0x2020}, 0x2020) 04:42:57 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x3e, 0x0) write$nbd(r0, &(0x7f0000000040)={0x6000000, 0x0, 0x0, 0x0, 0x0, "a3ef07749fa55f625aa6af3c7307f2177f0000000000000015d530000000feff3921a0fcb3ac401de11c1743caeb837106f4e954a5b84df64405000000b3bc16079f565cea173db80437f6122b1b42d346f555dd6c020a72"}, 0x74) 04:42:57 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x66, &(0x7f0000000280)={r2}, &(0x7f0000000100)=0x8) [ 1091.796679][T10133] usb 2-1: can't set config #1, error -71 [ 1091.850778][T10133] usb 2-1: USB disconnect, device number 57 [ 1092.039463][T20782] dlm: Unknown command passed to DLM device : 0 [ 1092.039463][T20782] 04:42:58 executing program 4: get_mempolicy(0x0, &(0x7f0000000940), 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x0) 04:42:58 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 04:42:58 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000380)=0x1a, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080), 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmsg(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x2040) 04:42:58 executing program 3: r0 = creat(&(0x7f0000019200)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup3(r1, r0, 0x0) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r4, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 04:42:58 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6627f8c5b5b4f35a8d0afc5307003acf4e3840477887896d", 0x18}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x37) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 1092.690943][ T28] audit: type=1804 audit(1598762578.324:36): pid=20791 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir679690407/syzkaller.aS2VH0/369/bus" dev="sda1" ino=16379 res=1 [ 1092.716090][ T28] audit: type=1804 audit(1598762578.344:37): pid=20791 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir679690407/syzkaller.aS2VH0/369/bus" dev="sda1" ino=16379 res=1 [ 1092.765833][T10133] usb 2-1: new high-speed USB device number 58 using dummy_hcd 04:42:58 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, r0, 0x0) [ 1093.006304][T10133] usb 2-1: Using ep0 maxpacket: 16 04:42:58 executing program 4: socket(0x2000000000000021, 0x2, 0x10000000000002) socket$phonet_pipe(0x23, 0x5, 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600)='/dev/snd/seq\x00', 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x9}, 0x0, 0x0) [ 1093.209177][T10133] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1093.399247][T10133] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1093.408861][T10133] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.417233][T10133] usb 2-1: Product: syz [ 1093.421559][T10133] usb 2-1: Manufacturer: syz [ 1093.426455][T10133] usb 2-1: SerialNumber: syz 04:42:59 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) [ 1093.861323][ T27] usb 2-1: USB disconnect, device number 58 [ 1094.616052][ T27] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1094.855544][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 1095.058206][ T27] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1095.246547][ T27] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1095.256106][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.266754][ T27] usb 2-1: Product: syz [ 1095.271117][ T27] usb 2-1: Manufacturer: syz [ 1095.276107][ T27] usb 2-1: SerialNumber: syz 04:43:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="23000000190007041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 04:43:01 executing program 3: move_pages(0x0, 0x3, &(0x7f0000000180)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil], &(0x7f0000000000)=[0x5], 0x0, 0x0) 04:43:01 executing program 4: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x42b81, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)) 04:43:01 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000380)=0x1a, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080), 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmsg(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x2040) [ 1095.467487][ T27] usb 2-1: can't set config #1, error -71 [ 1095.493405][ T27] usb 2-1: USB disconnect, device number 59 04:43:01 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 04:43:01 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x13f}}, 0x20) dup3(r0, r1, 0x0) 04:43:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x3, 0xfffc, 0x0, 0x3e}}) syz_open_pts(0xffffffffffffffff, 0x0) [ 1096.230063][T20840] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 04:43:02 executing program 4: r0 = socket(0x11, 0x2, 0x0) bind$bt_rfcomm(r0, 0x0, 0x0) 04:43:02 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) 04:43:02 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fdatasync(0xffffffffffffffff) 04:43:02 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) [ 1097.518554][T20854] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 04:43:03 executing program 4: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x3e, 0x0) write$nbd(r0, &(0x7f0000000040)={0x6000000, 0x0, 0x0, 0x0, 0x6, "7307f2177f0000000000000015d530000000feff3921a0fcb3ac401de11c1743caeb837106f4e954a5b84df6449fe66884b3bc16079f565cea173db80437f6242b1b42d346f555dd6c020a7200"/88}, 0x68) 04:43:03 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0x80081272, 0x0) 04:43:03 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000380)=0x1a, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x27fc, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmsg(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x2040) 04:43:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x5, 0x7, 0x80, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000140)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x5, 0x7, 0x80, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000140)={r4}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000180)={r3}) 04:43:03 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 04:43:03 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5412, 0x0) 04:43:04 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) read$dsp(r0, 0x0, 0x0) [ 1098.299482][T20871] dlm: no locking on control device 04:43:04 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) dup2(r1, r0) 04:43:04 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) 04:43:04 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000380)=0x1a, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x27fc, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmsg(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x2040) 04:43:04 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@sack_info={r3, 0x0, 0x7ff}, 0xc) 04:43:04 executing program 1: getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, &(0x7f0000000480)) get_mempolicy(0x0, &(0x7f0000000940), 0x200, &(0x7f0000ffb000/0x3000)=nil, 0x4) 04:43:04 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000100)={0x0, 0x0, 0x8008}, 0x20) 04:43:05 executing program 3: r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) write$FUSE_BMAP(r0, &(0x7f0000000140)={0x18}, 0x18) dup(0xffffffffffffffff) fallocate(r1, 0x0, 0x0, 0x5000f4) r2 = open(&(0x7f0000000040)='./bus\x00', 0x24000, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffff8) perf_event_open(&(0x7f0000002340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x4) 04:43:05 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000380)=0x1a, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x27fc, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmsg(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x2040) 04:43:05 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) 04:43:05 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f00000000c0)="3f1145") 04:43:05 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg$inet(r0, &(0x7f0000003440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0x63}}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@end, @timestamp={0x44, 0x4}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x38}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000004c0)="fd", 0x1}], 0x1}}], 0x2, 0x480c4) 04:43:05 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDSETLED(0xffffffffffffffff, 0x5393, 0x0) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) close(0xffffffffffffffff) [ 1100.189683][ T28] audit: type=1804 audit(1598762585.824:38): pid=20911 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir679690407/syzkaller.aS2VH0/376/bus" dev="sda1" ino=16374 res=1 [ 1100.215303][ T28] audit: type=1800 audit(1598762585.824:39): pid=20911 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=16374 res=0 04:43:06 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000380)=0x1a, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x27fc, 0x4) connect$inet(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmsg(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x2040) [ 1100.519979][ T28] audit: type=1804 audit(1598762585.934:40): pid=20911 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir679690407/syzkaller.aS2VH0/376/bus" dev="sda1" ino=16374 res=1 [ 1100.545158][ T28] audit: type=1800 audit(1598762585.934:41): pid=20911 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=16374 res=0 04:43:06 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ee0eec40b8071a403d3d31d04e110902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000100)={0x0, 0x0, 0x1, 'b'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 04:43:06 executing program 3: futex$FUTEX_WAIT_MULTIPLE(0x0, 0xd, 0x0, 0x0, 0x0, 0x0) 04:43:06 executing program 0: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000000)) 04:43:06 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg$inet(r0, &(0x7f0000003440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0x63}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000100)="4daa37139457c6b95e0316ccc4c9a4ad1f184627fc1bf9042a414792a37df6e628c13ed7e6a63ae6701695be6f41f1fda2dc5fe093b5e37e65ebe5442727e73d43b9e0a94f708e1653c985f62d22f0e1ed92c9c8cd0736c22c9ea82a984135e9524ec83bc36b6812f6f5852c5f02bbee019bd598cbbc14ecb9d735db4d7bab118d28cd8ea29e7e91cede17f735419f380fc7571d15139121ecd10b3d0c6d120b7870c76fa5592dc9c7a60953fdfa5a90a23a40760bd714a48874685f5d", 0xbd}, {&(0x7f00000001c0)="2d57118241952a9aa7596b1a1d947b6e010ceb0dcd0d2d978a5cbcf41a90afe6930fcd6fc76df7ccbbca9c85380fd8116eb58018ac25ab8cb8d9ce4a921d82e9a6dd", 0x42}, {&(0x7f0000000240)="f7649a7c2ef1b79b0dbe4cabc25f16693cbf17ca838a01a9e848f4521cf7ff74a38d5634d9d4213e7096af7f8f68aa2382a87304eb8eb0a349644b743640873d4c589d90c01987439403a60333fdf8adfd6136c1fc5b50fa06a3406be219d0", 0x5f}, {&(0x7f00000002c0)="daad95f5898f888099c0d30baf878c619c23bcef2a8aa9d4048dcfd2024162af3cc5a3480b90c75989af4f798a0deb81e316e28bbc21a6ef76f6d92cfb9b368313476b56df0d0eba6ba0a57bd3b7ca7a8c09ceee83f756054f81f43b40cb2a4cca6186b28b7f22022f982d405569c66397a9c76757f58fb1", 0x78}, {&(0x7f0000000040)="403d15a11d1abd4e", 0x8}], 0x5, &(0x7f00000003c0)=[@ip_retopts={{0x24, 0x0, 0x7, {[@end, @timestamp={0x44, 0x10, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x48}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000004c0)="fd219a7148139025601a2be99bba1afbb6a0b7983fc9d95f69a17873171b90ac5f5ca661449fcc31f7be94692f7e552611e23ec5f031e334aea5a7acb92131acd8ccb0ca1625b01caeecd0e50b34393b3f5aa1bead0cdcd49a4036ee4d048f30a556fba4ac69e0815146ed8f8c4c82d00d8580a968ca87255e66a9b763272f4d30c926c2e3a1836629f96db45f3faf220cbb47740da67f014ae44fccf058557fed629475639232cada6ed56d2503ef45791c461acec2a52ef2cc8468c9f2c007baad1c39c9c42dc299a9fb3c3c6b581764d2c2af", 0xd4}, {&(0x7f00000005c0)="c398a74ca125277c7c636c53f4c36a08d48e4d041f36ee6e1e8cf90f1de5fb35efb0ae91720167f6f83e43c29f2f401767ffef46fbeb96c284b1abeaea56b03ccb667645148cc508e1225550784aba173b6df8a7f0a3f0326544da84fe63508d8055a29e47903d1e98dfe8fb6f4352b9f9d0161a97a94e10c90d35e357645cf776b1c037cf8af3eb7734a80eddc75b6aa537918446a6dd9506e1ad2085d1225040a2281c07f6", 0xa6}, {&(0x7f0000000700)="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", 0x7a2}], 0x3}}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f00000018c0)="ff", 0x1}], 0x300}}], 0x3, 0x480c4) 04:43:06 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000380)=0x1a, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x27fc, 0x4) connect$inet(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmsg(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x2040) [ 1101.425911][T12836] usb 6-1: new high-speed USB device number 93 using dummy_hcd 04:43:07 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x3, 0xfffc, 0x0, 0x3e}}) syz_open_pts(0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 04:43:07 executing program 4: socket$inet_smc(0x2b, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video1\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000001240)={0x0, r2+30000000}, 0x0) [ 1101.717435][T12836] usb 6-1: too many configurations: 17, using maximum allowed: 8 04:43:07 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000380)=0x1a, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x27fc, 0x4) connect$inet(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmsg(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x2040) 04:43:07 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth0\x00', 0x10) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 04:43:08 executing program 3: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1102.605681][T12836] usb 6-1: New USB device found, idVendor=07b8, idProduct=401a, bcdDevice=3d.3d [ 1102.614951][T12836] usb 6-1: New USB device strings: Mfr=49, Product=208, SerialNumber=78 [ 1102.623802][T12836] usb 6-1: Product: syz [ 1102.628268][T12836] usb 6-1: Manufacturer: syz [ 1102.633027][T12836] usb 6-1: SerialNumber: syz [ 1102.646487][T12836] usb 6-1: config 0 descriptor?? [ 1103.397892][T12836] ===================================================== [ 1103.405076][T12836] BUG: KMSAN: uninit-value in batadv_hard_if_event+0x28d7/0x3bd0 [ 1103.412838][T12836] CPU: 0 PID: 12836 Comm: kworker/0:6 Not tainted 5.8.0-rc5-syzkaller #0 [ 1103.421271][T12836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1103.431451][T12836] Workqueue: usb_hub_wq hub_event [ 1103.436507][T12836] Call Trace: [ 1103.439844][T12836] dump_stack+0x21c/0x280 [ 1103.444231][T12836] kmsan_report+0xf7/0x1e0 [ 1103.448702][T12836] __msan_warning+0x58/0xa0 [ 1103.453262][T12836] batadv_hard_if_event+0x28d7/0x3bd0 [ 1103.458723][T12836] ? batadv_hardif_remove_interface+0x4c0/0x4c0 [ 1103.465100][T12836] raw_notifier_call_chain+0x123/0x290 [ 1103.470716][T12836] register_netdevice+0x3120/0x37d0 [ 1103.476001][T12836] register_netdev+0xbe/0x100 [ 1103.480815][T12836] rtl8150_probe+0x12d9/0x15b0 [ 1103.485649][T12836] ? read_eprom_word+0xe80/0xe80 [ 1103.490711][T12836] usb_probe_interface+0xece/0x1550 [ 1103.495983][T12836] ? usb_register_driver+0x900/0x900 [ 1103.501413][T12836] really_probe+0xf20/0x20b0 [ 1103.506064][T12836] ? kmsan_get_metadata+0x116/0x180 [ 1103.511319][T12836] driver_probe_device+0x293/0x390 [ 1103.516489][T12836] __device_attach_driver+0x63f/0x830 [ 1103.521948][T12836] bus_for_each_drv+0x2ca/0x3f0 [ 1103.526857][T12836] ? coredump_store+0xf0/0xf0 [ 1103.531581][T12836] __device_attach+0x4e2/0x7f0 [ 1103.536400][T12836] device_initial_probe+0x4a/0x60 [ 1103.541463][T12836] bus_probe_device+0x177/0x3d0 [ 1103.546360][T12836] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1103.552206][T12836] device_add+0x3b0e/0x40d0 [ 1103.556783][T12836] usb_set_configuration+0x380f/0x3f10 [ 1103.562293][T12836] ? usb_set_configuration+0xb41/0x3f10 [ 1103.567923][T12836] usb_generic_driver_probe+0x138/0x300 [ 1103.573523][T12836] ? usb_choose_configuration+0xe70/0xe70 [ 1103.579329][T12836] usb_probe_device+0x311/0x490 [ 1103.584229][T12836] ? usb_register_device_driver+0x540/0x540 [ 1103.590179][T12836] really_probe+0xf20/0x20b0 [ 1103.594811][T12836] ? kmsan_get_metadata+0x116/0x180 [ 1103.600050][T12836] driver_probe_device+0x293/0x390 [ 1103.605204][T12836] __device_attach_driver+0x63f/0x830 [ 1103.610639][T12836] bus_for_each_drv+0x2ca/0x3f0 [ 1103.615561][T12836] ? coredump_store+0xf0/0xf0 [ 1103.620287][T12836] __device_attach+0x4e2/0x7f0 [ 1103.625106][T12836] device_initial_probe+0x4a/0x60 [ 1103.630174][T12836] bus_probe_device+0x177/0x3d0 [ 1103.635076][T12836] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1103.640916][T12836] device_add+0x3b0e/0x40d0 [ 1103.645488][T12836] usb_new_device+0x1bd4/0x2a30 [ 1103.650396][T12836] hub_event+0x5e7b/0x8a70 [ 1103.654903][T12836] ? kmsan_get_metadata+0x116/0x180 [ 1103.660137][T12836] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1103.665974][T12836] ? led_work+0x7c0/0x7c0 [ 1103.670424][T12836] process_one_work+0x1688/0x2140 [ 1103.675523][T12836] worker_thread+0x10bc/0x2730 [ 1103.680313][T12836] ? kmsan_get_metadata+0x116/0x180 [ 1103.685569][T12836] kthread+0x551/0x590 [ 1103.689684][T12836] ? process_one_work+0x2140/0x2140 [ 1103.694931][T12836] ? kthread_blkcg+0x110/0x110 [ 1103.699734][T12836] ret_from_fork+0x1f/0x30 [ 1103.704263][T12836] [ 1103.706598][T12836] Uninit was stored to memory at: [ 1103.712086][T12836] kmsan_internal_chain_origin+0xad/0x130 [ 1103.717838][T12836] kmsan_memcpy_memmove_metadata+0x272/0x2e0 [ 1103.723861][T12836] kmsan_memcpy_metadata+0xb/0x10 [ 1103.728915][T12836] __msan_memcpy+0x43/0x50 [ 1103.733440][T12836] rtl8150_probe+0x1236/0x15b0 [ 1103.738230][T12836] usb_probe_interface+0xece/0x1550 [ 1103.743453][T12836] really_probe+0xf20/0x20b0 [ 1103.748065][T12836] driver_probe_device+0x293/0x390 [ 1103.753204][T12836] __device_attach_driver+0x63f/0x830 [ 1103.758624][T12836] bus_for_each_drv+0x2ca/0x3f0 [ 1103.763502][T12836] __device_attach+0x4e2/0x7f0 [ 1103.768467][T12836] device_initial_probe+0x4a/0x60 [ 1103.774038][T12836] bus_probe_device+0x177/0x3d0 [ 1103.779621][T12836] device_add+0x3b0e/0x40d0 [ 1103.784150][T12836] usb_set_configuration+0x380f/0x3f10 [ 1103.789984][T12836] usb_generic_driver_probe+0x138/0x300 [ 1103.795558][T12836] usb_probe_device+0x311/0x490 [ 1103.800443][T12836] really_probe+0xf20/0x20b0 [ 1103.805057][T12836] driver_probe_device+0x293/0x390 [ 1103.810198][T12836] __device_attach_driver+0x63f/0x830 [ 1103.816141][T12836] bus_for_each_drv+0x2ca/0x3f0 [ 1103.821016][T12836] __device_attach+0x4e2/0x7f0 [ 1103.825803][T12836] device_initial_probe+0x4a/0x60 [ 1103.830856][T12836] bus_probe_device+0x177/0x3d0 [ 1103.835749][T12836] device_add+0x3b0e/0x40d0 [ 1103.840292][T12836] usb_new_device+0x1bd4/0x2a30 [ 1103.845165][T12836] hub_event+0x5e7b/0x8a70 [ 1103.849605][T12836] process_one_work+0x1688/0x2140 [ 1103.854659][T12836] worker_thread+0x10bc/0x2730 [ 1103.859450][T12836] kthread+0x551/0x590 [ 1103.863544][T12836] ret_from_fork+0x1f/0x30 [ 1103.867964][T12836] [ 1103.870313][T12836] Local variable ----node_id.i@rtl8150_probe created at: [ 1103.877374][T12836] rtl8150_probe+0xea7/0x15b0 [ 1103.882086][T12836] rtl8150_probe+0xea7/0x15b0 [ 1103.887645][T12836] ===================================================== [ 1103.895477][T12836] Disabling lock debugging due to kernel taint [ 1103.904119][T12836] Kernel panic - not syncing: panic_on_warn set ... [ 1103.911121][T12836] CPU: 0 PID: 12836 Comm: kworker/0:6 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 1103.922848][T12836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1103.935475][T12836] Workqueue: usb_hub_wq hub_event [ 1103.943391][T12836] Call Trace: [ 1103.947926][T12836] dump_stack+0x21c/0x280 [ 1103.953597][T12836] panic+0x4d7/0xef7 [ 1103.959542][T12836] ? add_taint+0x17c/0x210 [ 1103.964813][T12836] kmsan_report+0x1df/0x1e0 [ 1103.971333][T12836] __msan_warning+0x58/0xa0 [ 1103.977642][T12836] batadv_hard_if_event+0x28d7/0x3bd0 [ 1103.984256][T12836] ? batadv_hardif_remove_interface+0x4c0/0x4c0 [ 1103.992689][T12836] raw_notifier_call_chain+0x123/0x290 [ 1104.001293][T12836] register_netdevice+0x3120/0x37d0 [ 1104.008411][T12836] register_netdev+0xbe/0x100 [ 1104.013580][T12836] rtl8150_probe+0x12d9/0x15b0 [ 1104.018693][T12836] ? read_eprom_word+0xe80/0xe80 [ 1104.024472][T12836] usb_probe_interface+0xece/0x1550 [ 1104.030778][T12836] ? usb_register_driver+0x900/0x900 [ 1104.036142][T12836] really_probe+0xf20/0x20b0 [ 1104.041632][T12836] ? kmsan_get_metadata+0x116/0x180 [ 1104.047802][T12836] driver_probe_device+0x293/0x390 [ 1104.055120][T12836] __device_attach_driver+0x63f/0x830 [ 1104.061515][T12836] bus_for_each_drv+0x2ca/0x3f0 [ 1104.066407][T12836] ? coredump_store+0xf0/0xf0 [ 1104.071853][T12836] __device_attach+0x4e2/0x7f0 [ 1104.078465][T12836] device_initial_probe+0x4a/0x60 [ 1104.088315][T12836] bus_probe_device+0x177/0x3d0 [ 1104.093566][T12836] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1104.099958][T12836] device_add+0x3b0e/0x40d0 [ 1104.106180][T12836] usb_set_configuration+0x380f/0x3f10 [ 1104.112243][T12836] ? usb_set_configuration+0xb41/0x3f10 [ 1104.118306][T12836] usb_generic_driver_probe+0x138/0x300 [ 1104.125611][T12836] ? usb_choose_configuration+0xe70/0xe70 [ 1104.132323][T12836] usb_probe_device+0x311/0x490 [ 1104.146129][T12836] ? usb_register_device_driver+0x540/0x540 [ 1104.152643][T12836] really_probe+0xf20/0x20b0 [ 1104.158179][T12836] ? kmsan_get_metadata+0x116/0x180 [ 1104.165640][T12836] driver_probe_device+0x293/0x390 [ 1104.171612][T12836] __device_attach_driver+0x63f/0x830 [ 1104.177236][T12836] bus_for_each_drv+0x2ca/0x3f0 [ 1104.183898][T12836] ? coredump_store+0xf0/0xf0 [ 1104.189334][T12836] __device_attach+0x4e2/0x7f0 [ 1104.194162][T12836] device_initial_probe+0x4a/0x60 [ 1104.199850][T12836] bus_probe_device+0x177/0x3d0 [ 1104.204847][T12836] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1104.210698][T12836] device_add+0x3b0e/0x40d0 [ 1104.217203][T12836] usb_new_device+0x1bd4/0x2a30 [ 1104.222150][T12836] hub_event+0x5e7b/0x8a70 [ 1104.227632][T12836] ? kmsan_get_metadata+0x116/0x180 [ 1104.233411][T12836] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1104.240398][T12836] ? led_work+0x7c0/0x7c0 [ 1104.245381][T12836] process_one_work+0x1688/0x2140 [ 1104.251189][T12836] worker_thread+0x10bc/0x2730 [ 1104.257045][T12836] ? kmsan_get_metadata+0x116/0x180 [ 1104.263052][T12836] kthread+0x551/0x590 [ 1104.268038][T12836] ? process_one_work+0x2140/0x2140 [ 1104.273389][T12836] ? kthread_blkcg+0x110/0x110 [ 1104.279634][T12836] ret_from_fork+0x1f/0x30 [ 1104.286152][T12836] Kernel Offset: disabled [ 1104.290702][T12836] Rebooting in 86400 seconds..