x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f00000002c0)='/dev/usbmon#\x00', 0x0, 0x0) 19:14:13 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) r1 = mq_open(&(0x7f0000000000)='eth0\x00', 0x842, 0x0, 0x0) mq_notify(r1, &(0x7f0000000380)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) keyctl$invalidate(0x15, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) fchown(r1, r3, r5) getgroups(0x1, &(0x7f0000000040)=[r5]) statx(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x4000, 0x20, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'\x00', 0x7112}) r9 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) dup2(r8, r9) io_setup(0x5, &(0x7f0000000300)=0x0) io_submit(r10, 0x1, &(0x7f0000000540)=[&(0x7f0000000180)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r9, &(0x7f0000000000), 0xff8e}]) statx(r9, &(0x7f00000002c0)='./file0\x00', 0x4000, 0x4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f0000000400)=[0x0, r6, r7, r11]) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) 19:14:13 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) 19:14:13 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(0xffffffffffffffff, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247}, {&(0x7f0000000640)=""/138}, {&(0x7f0000000700)=""/164}, {&(0x7f00000007c0)=""/129}, {&(0x7f0000000880)=""/213}], 0x0, &(0x7f0000000a40)=""/4096}}, {{&(0x7f0000001a40)=@ipx, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247}, {&(0x7f0000001bc0)=""/178}, {&(0x7f0000001c80)=""/229}, {&(0x7f0000001d80)=""/235, 0xffffff42}], 0x0, &(0x7f0000001ec0)=""/179}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x0, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164}, {&(0x7f00000020c0)=""/78}, {&(0x7f0000002140)=""/86}], 0x0, &(0x7f0000002200)=""/51}}], 0x2fb70505e117bbd, 0x43, 0x0) 19:14:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0x4008ae8a, 0x0) dup2(r5, r4) [ 745.003912][ T9017] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 745.011773][ T9017] usb 2-1: can't read configurations, error -71 [ 745.319369][T16929] kvm: vcpu 129: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 19:14:14 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(0xffffffffffffffff, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247}, {&(0x7f0000000640)=""/138}, {&(0x7f0000000700)=""/164}, {&(0x7f00000007c0)=""/129}, {&(0x7f0000000880)=""/213}], 0x0, &(0x7f0000000a40)=""/4096}}, {{&(0x7f0000001a40)=@ipx, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247}, {&(0x7f0000001bc0)=""/178}, {&(0x7f0000001c80)=""/229}, {&(0x7f0000001d80)=""/235, 0xffffff42}], 0x0, &(0x7f0000001ec0)=""/179}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x0, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164}, {&(0x7f00000020c0)=""/78}, {&(0x7f0000002140)=""/86}], 0x0, &(0x7f0000002200)=""/51}}], 0x2fb70505e117bbd, 0x43, 0x0) 19:14:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}}, 0x0) 19:14:14 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) ftruncate(0xffffffffffffffff, 0x200004) 19:14:14 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0x248800) [ 745.973891][ T9017] usb 2-1: new high-speed USB device number 32 using dummy_hcd 19:14:14 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) syz_open_dev$char_raw(&(0x7f0000000040)='/dev/raw/raw#\x00', 0x1, 0x200) r2 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x7f, 0x800) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x2000002, 0x4010, r2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2c, &(0x7f0000000140)={0x22c00000, {{0x2, 0x4e22, @private=0xa010102}}, {{0x2, 0x4e22, @empty}}}, 0x104) [ 746.253688][ T9017] usb 2-1: Using ep0 maxpacket: 16 19:14:15 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(0xffffffffffffffff, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247}, {&(0x7f0000000640)=""/138}, {&(0x7f0000000700)=""/164}, {&(0x7f00000007c0)=""/129}, {&(0x7f0000000880)=""/213}], 0x0, &(0x7f0000000a40)=""/4096}}, {{&(0x7f0000001a40)=@ipx, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247}, {&(0x7f0000001bc0)=""/178}, {&(0x7f0000001c80)=""/229}, {&(0x7f0000001d80)=""/235, 0xffffff42}], 0x0, &(0x7f0000001ec0)=""/179}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x0, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164}, {&(0x7f00000020c0)=""/78}, {&(0x7f0000002140)=""/86}], 0x0, &(0x7f0000002200)=""/51}}], 0x2fb70505e117bbd, 0x43, 0x0) [ 746.375257][ T9017] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 746.388595][ T9017] usb 2-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 746.398047][ T9017] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.715655][ T9017] usb 2-1: config 0 descriptor?? [ 746.762650][ T9017] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 746.992792][ T8701] usb 2-1: USB disconnect, device number 32 [ 747.573829][ T8701] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 747.813841][ T8701] usb 2-1: Using ep0 maxpacket: 32 [ 747.934345][ T8701] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 747.945491][ T8701] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 747.955914][ T8701] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 747.965333][ T8701] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.025827][ T8701] usb 2-1: config 0 descriptor?? [ 748.069337][ T8701] hub 2-1:0.0: USB hub found [ 748.283849][ T8701] hub 2-1:0.0: 1 port detected [ 748.913887][ T8701] hub 2-1:0.0: activate --> -90 [ 749.333635][ T27] usb 2-1: USB disconnect, device number 33 [ 749.594108][ T8701] usb 2-1-port1: config error 19:14:18 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "a8d0f938"}, 0x0, 0x0, 0x0, 0x0}) 19:14:18 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) ftruncate(0xffffffffffffffff, 0x200004) 19:14:18 executing program 4: mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mount(0x0, &(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x1) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x30132, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x0, 0x1, 0x0) socket(0x0, 0x0, 0x0) creat(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x800000000000000) r0 = syz_open_procfs(0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) unlink(&(0x7f0000000040)='./file0\x00') 19:14:18 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "37b0aa6c"}, 0x0, 0x0, 0x0, 0x0}) 19:14:18 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req={0x59, 0x9, 0x0, 0x1}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x7112}) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) dup2(r1, r2) io_setup(0x5, &(0x7f0000000300)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000180)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0xff8e}]) ioctl$mixer_OSS_ALSAEMULVER(r2, 0x80044df9, &(0x7f00000000c0)) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfffff020}, {0x6, 0x0, 0xfc}, {0x8, 0x7, 0x80, 0x3}]}, 0x8) 19:14:18 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, 0x0, 0x0, 0x43, 0x0) [ 750.374541][ T8704] usb 1-1: new high-speed USB device number 16 using dummy_hcd 19:14:19 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, 0x0, 0x0, 0x43, 0x0) [ 750.496571][T17021] skbuff: bad partial csum: csum=8192/0 headroom=64 headlen=3712 [ 750.613709][ T8704] usb 1-1: Using ep0 maxpacket: 16 [ 750.673951][ T27] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 750.744743][ T8704] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 750.758197][ T8704] usb 1-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 750.767595][ T8704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:14:19 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) ftruncate(0xffffffffffffffff, 0x200004) 19:14:19 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="1bef6b0c4c954879fdd022b87c3d7371", 0x10}, {&(0x7f0000000140)="9b", 0x1}, {&(0x7f0000000180)="e0e58d4c3d3c89dd6de79001a7753240", 0x10}], 0x3}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001180)="affb9f389acda729fa0d74977eeb5e67e2ac986fbeb93c511f3d20310928", 0x1e}, {&(0x7f00000011c0)='(', 0x1}, {&(0x7f0000001240)="8c", 0x1}], 0x3}}], 0x2, 0x0) [ 750.913880][ T27] usb 2-1: Using ep0 maxpacket: 16 19:14:19 executing program 2: r0 = openat$zero(0xffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x404100, 0x0) write$input_event(r0, &(0x7f0000000080)={{0x77359400}, 0x59b5f17e93064af0, 0x6, 0x1}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) [ 750.976387][ T8704] usb 1-1: config 0 descriptor?? [ 751.036613][ T27] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 751.037407][ T8704] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 751.049702][ T27] usb 2-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 751.066293][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.229607][ T8704] usb 1-1: USB disconnect, device number 16 [ 751.270122][ T27] usb 2-1: config 0 descriptor?? [ 751.359871][ T27] usbhid 2-1:0.0: couldn't find an input interrupt endpoint 19:14:20 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, 0x0, 0x0, 0x43, 0x0) [ 751.581646][ T8989] usb 2-1: USB disconnect, device number 34 [ 751.833626][ T8704] usb 1-1: new high-speed USB device number 17 using dummy_hcd 19:14:20 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x7112}) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) dup2(r1, r2) io_setup(0x5, &(0x7f0000000300)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000180)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0xff8e}]) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000040)=0xffffffff, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) [ 752.103697][ T8704] usb 1-1: Using ep0 maxpacket: 32 [ 752.134059][ T8989] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 752.244891][ T8704] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 752.256018][ T8704] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 752.266086][ T8704] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 752.275302][ T8704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.374658][ T8989] usb 2-1: Using ep0 maxpacket: 32 [ 752.475466][ T8704] usb 1-1: config 0 descriptor?? [ 752.494913][ T8989] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 752.506585][ T8989] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 752.516952][ T8989] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 752.526301][ T8989] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.526435][ T8704] hub 1-1:0.0: USB hub found [ 752.590361][ T8989] usb 2-1: config 0 descriptor?? [ 752.636332][ T8989] hub 2-1:0.0: USB hub found [ 752.747563][ T8704] hub 1-1:0.0: 1 port detected [ 752.854752][ T8989] hub 2-1:0.0: 1 port detected [ 753.394897][ T8704] hub 1-1:0.0: activate --> -90 [ 753.537220][ T8701] hub 2-1:0.0: activate --> -90 [ 753.841350][ T12] usb 1-1: USB disconnect, device number 17 [ 753.997131][T16291] usb 2-1: USB disconnect, device number 35 [ 754.097424][ T8704] usb 1-1-port1: config error [ 754.233985][ T8701] usb 2-1-port1: config error 19:14:23 executing program 4: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="200000000000a3b3df71005527bd85e35b62e74bf60f278fccbab2df89f6d412f026312b6d5c49eea18b30d1e5ad3b8b2a7f9d8d7d62c44f3ead4b5e962bf31cd7f7e96e22c6483126936bddf9fffffffffffffff5c74a590855c7c480ef27480d"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 19:14:23 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) 19:14:23 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}], 0x3, 0x43, 0x0) [ 754.707021][ T12] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 754.963727][ T12] usb 1-1: Using ep0 maxpacket: 16 [ 755.074349][ T8701] usb 5-1: new high-speed USB device number 6 using dummy_hcd 19:14:23 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "37b0aa6c"}, 0x0, 0x0, 0x0, 0x0}) 19:14:23 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) 19:14:23 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x28, 0x4, 0x0, 0xfffff020}, {0x6, 0x0, 0x7f}]}, 0x8) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000520000/0x3000)=nil, &(0x7f0000731000/0x4000)=nil, 0x3000}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x7112}) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) dup2(r2, r3) io_setup(0x5, &(0x7f0000000300)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f0000000180)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r3, &(0x7f0000000000), 0xff8e}]) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000140), 0x4) write$binfmt_elf32(r1, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x2c1) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0x1, 0x100000001, 0x3, 0x6}) 19:14:23 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "a8d0f938"}, 0x0, 0x0, 0x0, 0x0}) 19:14:23 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}], 0x3, 0x43, 0x0) [ 755.217802][ T12] usb 1-1: device descriptor read/all, error -71 [ 755.313668][ T8701] usb 5-1: Using ep0 maxpacket: 16 [ 755.434752][ T8701] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 755.447908][ T8701] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 755.457412][ T8701] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.635722][ T8701] usb 5-1: config 0 descriptor?? 19:14:24 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}], 0x3, 0x43, 0x0) [ 755.656593][ T3672] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 755.740040][ T8701] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 755.882834][ T27] usb 5-1: USB disconnect, device number 6 [ 755.903837][ T3672] usb 2-1: Using ep0 maxpacket: 16 [ 756.025487][ T3672] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 756.039526][ T3672] usb 2-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 756.048922][ T3672] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:14:24 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) [ 756.153942][ T12] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 756.234624][ T3672] usb 2-1: config 0 descriptor?? [ 756.302639][ T3672] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 756.424124][ T12] usb 1-1: Using ep0 maxpacket: 16 19:14:25 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) [ 756.537983][ T3672] usb 2-1: USB disconnect, device number 36 [ 756.555419][ T12] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 756.568658][ T12] usb 1-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 756.578035][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.684133][ T27] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 756.778789][ T12] usb 1-1: config 0 descriptor?? 19:14:25 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x7112}) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) dup2(r1, r2) io_setup(0x5, &(0x7f0000000300)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000180)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0xff8e}]) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000040)=0x100) [ 756.839207][ T12] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 756.933420][ T27] usb 5-1: Using ep0 maxpacket: 16 [ 757.054527][ T27] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 757.067876][ T27] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 757.077343][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.096604][ T3672] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 757.114750][ T12] usb 1-1: USB disconnect, device number 19 [ 757.252194][ T27] usb 5-1: config 0 descriptor?? [ 757.311396][ T27] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 757.348556][ T3672] usb 2-1: Using ep0 maxpacket: 32 [ 757.474494][ T3672] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 757.485670][ T3672] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 757.495863][ T3672] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 757.505318][ T3672] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.558574][T16291] usb 5-1: USB disconnect, device number 7 [ 757.705319][ T12] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 757.708629][ T3672] usb 2-1: config 0 descriptor?? [ 757.764064][ T3672] hub 2-1:0.0: USB hub found 19:14:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0x8400ae8e, 0x0) dup2(r5, r4) 19:14:26 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) 19:14:26 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) [ 757.964144][ T3672] hub 2-1:0.0: 1 port detected [ 757.983804][ T12] usb 1-1: Using ep0 maxpacket: 32 [ 758.136209][ T12] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 758.147420][ T12] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 758.157715][ T12] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 758.166972][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.415250][ T12] usb 1-1: config 0 descriptor?? [ 758.485505][ T12] hub 1-1:0.0: USB hub found [ 758.494059][T17226] kvm: vcpu 129: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 758.670793][ T12] hub 1-1:0.0: 1 port detected [ 758.694344][ T3672] hub 2-1:0.0: activate --> -90 [ 759.116974][T16291] usb 2-1: USB disconnect, device number 37 [ 759.364483][ T12] hub 1-1:0.0: activate --> -90 [ 759.373610][ T3672] usb 2-1-port1: config error [ 759.780752][ T3672] usb 1-1: USB disconnect, device number 20 [ 760.043374][ T12] usb 1-1-port1: config error 19:14:29 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "37b0aa6c"}, 0x0, 0x0, 0x0, 0x0}) 19:14:29 executing program 2: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x821, 0x0, 0x25dfdbff}, 0xfffffffffffffda4}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000c40)=ANY=[@ANYBLOB="5c04000024000b0f000000000000000000000000c2b37550f5ff8df30bbc23011b9b941f46183aa7a2ec1ece648b0dd0a44bcc", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000080001007462660030040200040402000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000028000100cb000000000000007fffffff00"/1092], 0x45c}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x54, r1, 0x400, 0x70bd2c, 0x400, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x9}}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xa6c9bc53}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0xc5f2160ee79bd377) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) write$P9_RXATTRWALK(r0, &(0x7f0000000040)={0xf, 0x1f, 0x1, 0x361b00}, 0xf) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x7112}) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) dup2(0xffffffffffffffff, r5) io_setup(0x5, &(0x7f0000000300)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f0000000180)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r5, &(0x7f0000000000), 0xff8e}]) getsockopt$inet_mreqn(r5, 0x0, 0x24, &(0x7f00000002c0)={@multicast2}, &(0x7f0000000340)=0xc) mq_getsetattr(r0, &(0x7f0000000200)={0x7, 0xa0, 0x4, 0xb28}, &(0x7f0000000240)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) 19:14:29 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) 19:14:29 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000240)=0x7fe, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000cd2ff0)={0x2, 0x4e23}, 0x6b) recvmsg(r0, &(0x7f0000edffc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000603000)=""/81, 0xb15e2ac0d3828044}, 0x40002102) 19:14:29 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) 19:14:29 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) [ 760.558209][T17270] netlink: 1080 bytes leftover after parsing attributes in process `syz-executor.2'. 19:14:29 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1}) pwrite64(r2, 0x0, 0x0, 0x0) 19:14:29 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) 19:14:29 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, 0x0, 0x0, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) [ 760.918583][ T3672] usb 2-1: new high-speed USB device number 38 using dummy_hcd 19:14:29 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x7, 0x1}, {0x6, 0x0, 0x0, 0x1}]}, 0x8) [ 761.163569][ T3672] usb 2-1: Using ep0 maxpacket: 16 [ 761.173646][ T12] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 761.284614][ T3672] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 761.297932][ T3672] usb 2-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 761.307413][ T3672] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.414184][ T3672] usb 2-1: config 0 descriptor?? [ 761.439232][ T12] usb 1-1: Using ep0 maxpacket: 16 [ 761.461411][ T3672] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 761.584826][ T12] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 761.598294][ T12] usb 1-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 761.607696][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.660735][ T9017] usb 2-1: USB disconnect, device number 38 19:14:30 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, 0x0, 0x0, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) [ 761.842525][ T12] usb 1-1: config 0 descriptor?? [ 761.912090][ T12] usbhid 1-1:0.0: couldn't find an input interrupt endpoint 19:14:30 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000380)='./bus\x00') creat(&(0x7f0000000400)='./bus\x00', 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) [ 762.140517][T16291] usb 1-1: USB disconnect, device number 21 [ 762.275107][ T9017] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 762.533784][ T9017] usb 2-1: Using ep0 maxpacket: 32 [ 762.664572][ T9017] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 762.677687][ T9017] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 762.687825][ T9017] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 762.697102][ T9017] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.716212][ T9017] usb 2-1: config 0 descriptor?? [ 762.723926][T16291] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 762.757413][ T9017] hub 2-1:0.0: USB hub found [ 762.966706][ T9017] hub 2-1:0.0: 1 port detected [ 762.983806][T16291] usb 1-1: Using ep0 maxpacket: 32 [ 763.116223][T16291] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 763.127686][T16291] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 763.137794][T16291] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 763.147082][T16291] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.275565][T16291] usb 1-1: config 0 descriptor?? [ 763.325366][T16291] hub 1-1:0.0: USB hub found [ 763.553700][T16291] hub 1-1:0.0: 1 port detected [ 763.603616][ T9017] hub 2-1:0.0: activate --> -90 [ 763.806562][ T3216] usb 2-1: USB disconnect, device number 39 [ 763.823801][ T9017] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 764.214088][ T9017] hub 1-1:0.0: activate --> -90 [ 764.631402][ T8701] usb 1-1: USB disconnect, device number 22 [ 764.903382][ T9017] usb 1-1-port1: config error 19:14:33 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "37b0aa6c"}, 0x0, 0x0, 0x0, 0x0}) 19:14:33 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) ioctl$SIOCX25GCAUSEDIAG(r1, 0x89e6, &(0x7f0000000040)={0x1, 0x2}) 19:14:33 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, 0x0, 0x0, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) 19:14:33 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000380)='./bus\x00') creat(&(0x7f0000000400)='./bus\x00', 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) 19:14:33 executing program 4: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x0) socket$packet(0x11, 0x2, 0x300) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 19:14:33 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) [ 765.795368][ T8989] usb 2-1: new high-speed USB device number 40 using dummy_hcd 19:14:34 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}], 0x2, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) [ 765.925797][ T27] usb 1-1: new high-speed USB device number 23 using dummy_hcd 19:14:34 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000380)='./bus\x00') creat(&(0x7f0000000400)='./bus\x00', 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) [ 766.054791][ T8989] usb 2-1: Using ep0 maxpacket: 16 19:14:34 executing program 4: socket(0x11, 0x800000003, 0x0) socket(0x10, 0x3, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) pipe(&(0x7f0000000100)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000000000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0) [ 766.174360][ T8989] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 766.187667][ T8989] usb 2-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 766.197159][ T8989] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.214768][ T27] usb 1-1: Using ep0 maxpacket: 16 19:14:35 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff020}, {0x5}]}, 0x8) ptrace$peekuser(0x3, 0xffffffffffffffff, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @mcast1={0xff, 0x5}}]}}}]}, 0x4c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, r5, 0x42b, 0x0, 0x0, {{}, {}, {0x10, 0x17, {0x200020}}}}, 0x2c}}, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000dcfac87938abc28b28def9dc7e740c4e9cf60551f311d86ac5e6d5c4365a0d4b20a7ccc62cea9f9207fb3575a19630", @ANYRES16=r5, @ANYBLOB="080028bd7000fcdbdf2501000000000000000c410000000c001473797a3000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x41040) [ 766.337203][ T27] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 766.350437][ T27] usb 1-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 766.360158][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.408953][ T8989] usb 2-1: config 0 descriptor?? [ 766.464146][ T8989] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 766.535585][ T27] usb 1-1: config 0 descriptor?? [ 766.590589][ T27] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 766.660861][ T9017] usb 2-1: USB disconnect, device number 40 [ 766.870029][ T27] usb 1-1: USB disconnect, device number 23 19:14:35 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}], 0x2, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) [ 767.048526][T17407] tipc: Enabling of bearer <:> rejected, illegal name 19:14:35 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000380)='./bus\x00') ftruncate(0xffffffffffffffff, 0x208200) r0 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) [ 767.102767][T17410] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64220 sclass=netlink_route_socket pid=17410 comm=syz-executor.2 [ 767.235524][T17410] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64220 sclass=netlink_route_socket pid=17410 comm=syz-executor.2 [ 767.271665][ T9017] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 767.433499][ T27] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 767.533793][ T9017] usb 2-1: Using ep0 maxpacket: 32 [ 767.654166][ T9017] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 767.665541][ T9017] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 767.675677][ T9017] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 767.683144][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 767.684997][ T9017] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.803436][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 767.814768][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 767.824852][ T27] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 767.834163][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.010544][ T27] usb 1-1: config 0 descriptor?? [ 768.035325][ T9017] usb 2-1: config 0 descriptor?? [ 768.069034][ T27] hub 1-1:0.0: USB hub found [ 768.085767][ T9017] hub 2-1:0.0: USB hub found [ 768.273845][ T27] hub 1-1:0.0: 1 port detected [ 768.293997][ T9017] hub 2-1:0.0: 1 port detected [ 768.933616][ T9017] hub 2-1:0.0: activate --> -90 [ 769.004009][ T27] hub 1-1:0.0: activate --> -90 [ 769.144085][ T9017] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 769.152197][ T12] usb 2-1: USB disconnect, device number 41 [ 769.187066][ T9017] usb 2-1: Failed to suspend device, error -19 [ 769.419643][ T8700] usb 1-1: USB disconnect, device number 24 [ 769.686404][ T27] usb 1-1-port1: config error 19:14:38 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) 19:14:38 executing program 2: socket$packet(0x11, 0x2, 0x300) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x114, &(0x7f0000000040)}, 0x36) 19:14:38 executing program 4: socket(0x11, 0x800000003, 0x0) socket(0x10, 0x3, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) pipe(&(0x7f0000000100)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000000000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0) 19:14:38 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}], 0x2, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) 19:14:38 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000380)='./bus\x00') ftruncate(0xffffffffffffffff, 0x208200) r0 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) 19:14:38 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) 19:14:39 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @mcast1={0xff, 0x5}}]}}}]}, 0x4c}}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTALL(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r5, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '\xff\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4404) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @mcast1={0xff, 0x5}}]}}}]}, 0x4c}}, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x2, 0x0, 0x5, 0x6}, {0x1, 0x4, 0x6, 0x80000001}]}, 0x8) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0x3}, {0x6}]}, 0x8) 19:14:39 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {0x0}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) 19:14:39 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000380)='./bus\x00') ftruncate(0xffffffffffffffff, 0x208200) r0 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) [ 770.584080][ T27] usb 2-1: new high-speed USB device number 42 using dummy_hcd 19:14:39 executing program 4: socket(0x11, 0x800000003, 0x0) socket(0x10, 0x3, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) pipe(&(0x7f0000000100)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000000000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0) [ 770.723232][ T8700] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 770.824328][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 770.904764][T17469] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17469 comm=syz-executor.2 [ 770.944277][ T27] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 770.957474][ T27] usb 2-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 770.966913][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.976845][ T8700] usb 1-1: Using ep0 maxpacket: 16 [ 771.094346][ T8700] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 771.108009][ T8700] usb 1-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 771.117365][ T8700] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.210184][ T27] usb 2-1: config 0 descriptor?? [ 771.342526][ T27] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 771.409358][ T8700] usb 1-1: config 0 descriptor?? 19:14:40 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {0x0}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) [ 771.474677][ T8700] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 771.506517][T17310] usb 2-1: USB disconnect, device number 42 [ 771.563941][T17469] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17469 comm=syz-executor.2 19:14:40 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) [ 771.663967][ T8701] usb 1-1: USB disconnect, device number 25 [ 772.043237][T17310] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 772.233841][ T8701] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 772.283331][T17310] usb 2-1: Using ep0 maxpacket: 32 [ 772.405469][T17310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 772.417422][T17310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 772.427562][T17310] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 772.436893][T17310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.493344][ T8701] usb 1-1: Using ep0 maxpacket: 32 [ 772.534626][T17310] usb 2-1: config 0 descriptor?? [ 772.576673][T17310] hub 2-1:0.0: USB hub found [ 772.614947][ T8701] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 772.626180][ T8701] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 772.636316][ T8701] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 772.645703][ T8701] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.684235][ T8701] usb 1-1: config 0 descriptor?? [ 772.725651][ T8701] hub 1-1:0.0: USB hub found [ 772.794430][T17310] hub 2-1:0.0: 1 port detected [ 772.943660][ T8701] hub 1-1:0.0: 1 port detected [ 773.443386][T17310] hub 2-1:0.0: activate --> -90 [ 773.593395][ T8701] hub 1-1:0.0: activate --> -90 [ 773.646493][ T9017] usb 2-1: USB disconnect, device number 43 [ 773.663907][T17310] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 773.796621][ T27] usb 1-1: USB disconnect, device number 26 [ 773.813428][ T8701] hub 1-1:0.0: hub_ext_port_status failed (err = -71) 19:14:43 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) 19:14:43 executing program 4: socket(0x11, 0x800000003, 0x0) socket(0x10, 0x3, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) pipe(&(0x7f0000000100)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000000000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0) 19:14:43 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {0x0}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) 19:14:43 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x6, 0xfffff020}, {0x6, 0x0, 0x0, 0x9}]}, 0x8) 19:14:43 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) 19:14:43 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "a8d0f938"}, 0x0, 0x0, 0x0, 0x0}) 19:14:43 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) [ 774.793233][ T9017] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 774.943089][ T12] usb 1-1: new high-speed USB device number 27 using dummy_hcd 19:14:43 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f0000002140)=""/86, 0x56}], 0x2, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) 19:14:43 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x50, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) [ 775.063997][ T9017] usb 2-1: Using ep0 maxpacket: 16 19:14:44 executing program 2: r0 = openat$mice(0xffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x45c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404}, @TCA_TBF_PARMS={0x28, 0x1, {{0xcb, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}}}]}}]}, 0x45c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000180)={'syztnl0\x00', r1, 0x20, 0x7807, 0x8, 0x4240, {{0x19, 0x4, 0x1, 0x2c, 0x64, 0x68, 0x0, 0x20, 0x2f, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x17, 0xc6, [@remote, @loopback, @dev={0xac, 0x14, 0x14, 0x2a}, @empty, @local]}, @ssrr={0x89, 0x7, 0xec, [@empty]}, @timestamp_addr={0x44, 0x14, 0xe, 0x1, 0x1, [{@private=0xa010102, 0x2}, {@multicast2, 0x8}]}, @timestamp={0x44, 0x1c, 0xf6, 0x0, 0x9, [0x2, 0xbf4, 0x2, 0x2, 0x9, 0x7]}]}}}}}) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x45c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404}, @TCA_TBF_PARMS={0x28, 0x1, {{0xcb, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}}}]}}]}, 0x45c}}, 0x0) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x45c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404}, @TCA_TBF_PARMS={0x28, 0x1, {{0xcb, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}}}]}}]}, 0x45c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl2\x00', r8, 0x2f, 0x2, 0x2b, 0x2, 0x10, @mcast2, @private2, 0x0, 0x1, 0x401, 0x40}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x148, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x24000040}, 0x4000) r11 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) [ 775.195150][ T9017] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 775.208354][ T9017] usb 2-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 775.217778][ T9017] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.233070][ T12] usb 1-1: Using ep0 maxpacket: 16 [ 775.375029][ T12] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 775.388111][ T12] usb 1-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 775.397391][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.425145][ T9017] usb 2-1: config 0 descriptor?? [ 775.455163][ T12] usb 1-1: config 0 descriptor?? [ 775.470906][ T9017] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 775.510636][ T12] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 775.662616][T17569] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 775.686164][ T12] usb 2-1: USB disconnect, device number 44 [ 775.738756][T17572] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 775.758247][ T9017] usb 1-1: USB disconnect, device number 27 19:14:44 executing program 3: chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) [ 775.795566][T17574] IPVS: Error connecting to the multicast addr [ 775.890359][T17582] IPVS: Error connecting to the multicast addr 19:14:44 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f0000002140)=""/86, 0x56}], 0x2, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) [ 776.237264][ T12] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 776.323398][ T9017] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 776.483787][ T12] usb 2-1: Using ep0 maxpacket: 32 [ 776.574737][ T9017] usb 1-1: Using ep0 maxpacket: 32 [ 776.624597][ T12] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 776.635859][ T12] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 776.646017][ T12] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 776.655364][ T12] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.688036][ T12] usb 2-1: config 0 descriptor?? [ 776.736102][ T12] hub 2-1:0.0: USB hub found [ 776.761673][ T9017] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 776.773054][ T9017] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 776.783333][ T9017] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 776.792820][ T9017] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.879299][ T9017] usb 1-1: config 0 descriptor?? [ 776.939180][ T9017] hub 1-1:0.0: USB hub found [ 776.954867][ T12] hub 2-1:0.0: 1 port detected [ 777.153547][ T9017] hub 1-1:0.0: 1 port detected [ 777.794093][ T9017] hub 1-1:0.0: activate --> -90 [ 777.802453][ T8704] usb 2-1: USB disconnect, device number 45 [ 777.998764][ T12] usb 1-1: USB disconnect, device number 28 [ 778.005496][ T9017] hub 1-1:0.0: hub_ext_port_status failed (err = -71) 19:14:47 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) 19:14:47 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) memfd_create(&(0x7f0000000040)='.$\x00', 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) 19:14:47 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f0000002140)=""/86, 0x56}], 0x2, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) 19:14:47 executing program 4: r0 = open(&(0x7f0000000180)='./file1\x00', 0x141042, 0x0) fcntl$lock(r0, 0x6, &(0x7f00000000c0)) r1 = open(&(0x7f0000000180)='./file1\x00', 0x141042, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ftruncate(r1, 0x0) 19:14:47 executing program 3: chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) 19:14:47 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "a8d0f938"}, 0x0, 0x0, 0x0, 0x0}) 19:14:47 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {0x0}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) 19:14:47 executing program 4: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x2, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) add_key(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000180)={0x3, 0x1, 0x56d, 0xe1, 0x0, "8c9114c9baa93a2abc7872dd162fb78e650c51"}) add_key$keyring(&(0x7f0000000480)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000080) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x40140921, &(0x7f0000000000)={0x0, 0x8, 0x2, 0x0}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) [ 779.093086][ T27] usb 2-1: new high-speed USB device number 46 using dummy_hcd 19:14:47 executing program 2: socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x28, 0x0, 0x20, 0xfffff020}, {0x6}, {0x4, 0x1f, 0x0, 0x2ac}, {0x8000, 0x0, 0x4d, 0x1}, {0xfff, 0x3, 0x1, 0xffffffff}]}, 0x8) [ 779.343077][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 779.433960][ T8701] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 779.464610][ T27] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 779.478068][ T27] usb 2-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 779.487467][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.697209][ T27] usb 2-1: config 0 descriptor?? [ 779.713199][ T8701] usb 1-1: Using ep0 maxpacket: 16 [ 779.770249][ T27] usbhid 2-1:0.0: couldn't find an input interrupt endpoint 19:14:48 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {0x0}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) [ 779.834350][ T8701] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 779.847698][ T8701] usb 1-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 779.857044][ T8701] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:14:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 780.027264][ T27] usb 2-1: USB disconnect, device number 46 [ 780.064115][ T8701] usb 1-1: config 0 descriptor?? [ 780.112335][ T8701] usbhid 1-1:0.0: couldn't find an input interrupt endpoint 19:14:48 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000520000/0x3000)=nil, &(0x7f0000731000/0x4000)=nil, 0x3000}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) fstatfs(r1, &(0x7f0000000040)=""/36) [ 780.311905][ T8701] usb 1-1: USB disconnect, device number 29 [ 780.523482][ T27] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 780.773171][ T27] usb 2-1: Using ep0 maxpacket: 32 [ 780.873795][ T8701] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 780.895020][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 780.906440][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 780.917968][ T27] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 780.928648][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.103843][ T27] usb 2-1: config 0 descriptor?? [ 781.145283][ T8701] usb 1-1: Using ep0 maxpacket: 32 [ 781.153504][ T27] hub 2-1:0.0: USB hub found [ 781.265520][ T8701] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 781.277146][ T8701] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 781.287420][ T8701] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 781.296990][ T8701] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.353431][ T27] hub 2-1:0.0: 1 port detected [ 781.377735][ T8701] usb 1-1: config 0 descriptor?? [ 781.441214][ T8701] hub 1-1:0.0: USB hub found [ 781.643392][ T8701] hub 1-1:0.0: 1 port detected [ 781.677311][ T28] audit: type=1800 audit(1597518890.402:45): pid=17624 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16380 res=0 [ 781.697311][ T28] audit: type=1800 audit(1597518890.402:46): pid=17630 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16380 res=0 [ 782.206540][ T8700] usb 2-1: USB disconnect, device number 47 [ 782.303121][ T8701] hub 1-1:0.0: activate --> -90 [ 782.507456][ T9017] usb 1-1: USB disconnect, device number 30 [ 782.533070][ T8701] hub 1-1:0.0: hub_ext_port_status failed (err = -71) 19:14:51 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "37b0aa6c"}, 0x0, 0x0, 0x0, 0x0}) 19:14:51 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {0x0}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) 19:14:51 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000040)}, 0x8) 19:14:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:14:51 executing program 3: chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) 19:14:51 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "a8d0f938"}, 0x0, 0x0, 0x0, 0x0}) 19:14:52 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x2, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) 19:14:52 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x28, 0x20, 0x0, 0xfffff020}, {0x6, 0x0, 0xae}]}, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') socketpair(0x18, 0x4, 0x9, &(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}], 0x1c) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'\x00', 0x7112}) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) dup2(r4, r5) io_setup(0x5, &(0x7f0000000300)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f0000000180)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r5, &(0x7f0000000000), 0xff8e}]) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f00000000c0)=ANY=[@ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00'], &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000000c0)={r7, 0xffe1, 0x4, 0x0, 0x8000, 0x8d56}, 0x14) [ 783.653615][ T8701] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 783.893531][ T8701] usb 2-1: Using ep0 maxpacket: 16 [ 783.899063][ T8989] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 784.013838][ T8701] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 784.028463][ T8701] usb 2-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 784.038555][ T8701] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.173589][ T8989] usb 1-1: Using ep0 maxpacket: 16 19:14:53 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x2, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) [ 784.289563][ T8701] usb 2-1: config 0 descriptor?? [ 784.297340][ T8989] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 784.310754][ T8989] usb 1-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 784.320304][ T8989] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:14:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 784.387490][ T8701] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 784.474663][ T8989] usb 1-1: config 0 descriptor?? [ 784.521692][ T8989] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 784.604651][ T8700] usb 2-1: USB disconnect, device number 48 [ 784.723731][ T8701] usb 1-1: USB disconnect, device number 31 19:14:53 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x2, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) [ 785.103839][ T8700] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 785.313162][ T8701] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 785.343179][ T8700] usb 2-1: Using ep0 maxpacket: 32 19:14:54 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) sysfs$2(0x2, 0x0, &(0x7f0000000040)=""/14) [ 785.464329][ T8700] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 785.475990][ T8700] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 785.486156][ T8700] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 785.495469][ T8700] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.566906][ T8701] usb 1-1: Using ep0 maxpacket: 32 [ 785.675696][ T8700] usb 2-1: config 0 descriptor?? [ 785.706213][ T8701] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 785.717760][ T8701] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 785.727815][ T8701] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 785.737063][ T8701] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.756941][ T8700] hub 2-1:0.0: USB hub found [ 785.879386][ T8701] usb 1-1: config 0 descriptor?? [ 785.934610][ T8701] hub 1-1:0.0: USB hub found [ 785.953614][ T8700] hub 2-1:0.0: 1 port detected [ 786.135530][ T8701] hub 1-1:0.0: 1 port detected [ 786.194002][ T28] audit: type=1800 audit(1597518894.912:47): pid=17726 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=15811 res=0 [ 786.213818][ T28] audit: type=1800 audit(1597518894.922:48): pid=17729 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=15811 res=0 [ 786.809539][ T27] usb 2-1: USB disconnect, device number 49 [ 786.989901][ T8700] usb 1-1: USB disconnect, device number 32 19:14:56 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "37b0aa6c"}, 0x0, 0x0, 0x0, 0x0}) 19:14:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:14:56 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{0x0}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) 19:14:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @mcast1={0xff, 0x5}}]}}}]}, 0x4c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, r4, 0x42b, 0x0, 0x0, {{}, {}, {0x10, 0x17, {0x200020}}}}, 0x2c}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x100, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}}, 0x20040010) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) 19:14:56 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) 19:14:56 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "a8d0f938"}, 0x0, 0x0, 0x0, 0x0}) [ 787.748435][T17812] tipc: Enabling of bearer <:> rejected, illegal name [ 788.002304][T17826] tipc: Enabling of bearer <:> rejected, illegal name [ 788.024638][ T8700] usb 2-1: new high-speed USB device number 50 using dummy_hcd 19:14:56 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{0x0}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) [ 788.262798][ T8700] usb 2-1: Using ep0 maxpacket: 16 19:14:57 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f00000000c0)={r4}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000005c0)={r4, @in6={{0xa, 0x4e24, 0x1, @mcast2, 0xfff}}}, &(0x7f0000000080)=0x84) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3fc, 0x210, 0x0, 0x210, 0x31c, 0x31c, 0x31c, 0x4, &(0x7f0000000040), {[{{@uncond, 0xbc, 0x104}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3, 'syz1\x00', {0x9}}}}, {{@arp={@loopback, @rand_addr=0x64010100, 0xff000000, 0xff, 0x3, 0xc, {@empty, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x81, 0x8001, 0x2, 0x101, 0xffff, 0x4, 'veth1_to_bridge\x00', 'bond_slave_0\x00', {}, {0xff}, 0x0, 0x40}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}, 0x4, 0x1}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={[], 0x43}, @empty, @dev={0xac, 0x14, 0x14, 0x2c}, @dev={0xac, 0x14, 0x14, 0x23}, 0x5}}}], {{[], 0xbc, 0xe0}, {0x24}}}}, 0x448) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) [ 788.384984][ T8700] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 788.398253][ T8700] usb 2-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 788.407652][ T8700] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.493280][ T9017] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 788.571632][ T8700] usb 2-1: config 0 descriptor?? [ 788.633775][ T8700] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 788.753613][ T9017] usb 1-1: Using ep0 maxpacket: 16 [ 788.819333][ T27] usb 2-1: USB disconnect, device number 50 19:14:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:14:57 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{0x0}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) [ 788.915733][ T9017] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 788.928920][ T9017] usb 1-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 788.938266][ T9017] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.045774][ T9017] usb 1-1: config 0 descriptor?? [ 789.102933][ T9017] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 789.301565][ T8700] usb 1-1: USB disconnect, device number 33 [ 789.407176][ T27] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 789.653497][ T27] usb 2-1: Using ep0 maxpacket: 32 19:14:58 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000040)}, 0x8) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x7112}) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) dup2(r2, r3) io_setup(0x5, &(0x7f0000000300)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f0000000180)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r3, &(0x7f0000000000), 0xff8e}]) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'gretap0\x00', 0x0, 0x1, 0x20, 0x5, 0x6, {{0xe, 0x4, 0x0, 0x8, 0x38, 0x65, 0x0, 0x2, 0x29, 0x0, @multicast1, @rand_addr=0x64010102, {[@rr={0x7, 0x23, 0xef, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @private=0xa010102, @private=0xa010102, @private=0xa010101, @private=0xa010102, @rand_addr=0x64010102]}]}}}}}) bind$packet(r3, &(0x7f0000000280)={0x11, 0xc, r5, 0x1, 0x80, 0x6, @remote}, 0x14) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000520000/0x3000)=nil, &(0x7f0000731000/0x4000)=nil, 0x3000}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40246608, &(0x7f0000000080)={0xaec, 0xffff, 0x1, 0x1, 0x3, 0x6}) openat$urandom(0xffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x6a22c2, 0x0) personality(0x200000) 19:14:58 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3}}], 0x4, 0x43, 0x0) [ 789.773346][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 789.784708][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 789.794852][ T27] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 789.804236][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.883043][ T8700] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 790.008779][ T27] usb 2-1: config 0 descriptor?? [ 790.065678][ T27] hub 2-1:0.0: USB hub found [ 790.125873][ T8700] usb 1-1: Using ep0 maxpacket: 32 [ 790.247317][ T8700] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 790.258640][ T8700] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 790.268881][ T8700] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 790.278175][ T8700] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.303529][ T27] hub 2-1:0.0: 1 port detected [ 790.409563][ T8700] usb 1-1: config 0 descriptor?? [ 790.470951][ T8700] hub 1-1:0.0: USB hub found [ 790.663426][ T28] audit: type=1800 audit(1597518899.382:49): pid=17813 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16374 res=0 [ 790.683178][ T28] audit: type=1800 audit(1597518899.382:50): pid=17820 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16374 res=0 [ 790.726361][ T8700] hub 1-1:0.0: 1 port detected [ 791.157846][ T8990] usb 2-1: USB disconnect, device number 51 [ 791.576333][ T8704] usb 1-1: USB disconnect, device number 34 19:15:00 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "37b0aa6c"}, 0x0, 0x0, 0x0, 0x0}) 19:15:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:15:00 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3}}], 0x4, 0x43, 0x0) 19:15:00 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x7112}) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) dup2(r1, r2) io_setup(0x5, &(0x7f0000000300)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000180)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0xff8e}]) sendmsg$xdp(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="a10da461c41192c72c953c58f5993528fbc2eabac9276c4e242a9be25a336689de56cf740a7ca5be05bf4b6a38e6ffa097868c3b3fb32d2f12a6076912d0ec3bf7717253ba9a119a4beee73f56f0aabe2564985689d950aae13ad48ba77196b2255370036c6d8281586944cb206300d3123b749b1bdeb9d541f401797b29a4696f9953842a75696cb31d1cca26acac80afaf24bf11c2609f2016de947b87c5e3ebc84c4fecbbd3b25d5886a8c91dbc24ac0dc17ee993753e2909b04a74b35a12c982faac2018a93e3fed32e8c1bab23c903c5186f9d4c67d5f2bedea6721d8c7dbdc0bab", 0xe4}, {&(0x7f0000000040)="3cf19c1c916ff6e967a5828bfaa304b9b00a856fdca2f3cff7ff73c9cb03964a64187634d1ae997b7e97d6311805d06ae2feca40cf057d32a7112eed9ed3fc0397e50189", 0x44}, {&(0x7f0000000240)="a9e809c3fb703a01320ba4df4016c160eebb46156c69df4acf39d0b725f6fcb7f8b15bf58762f77818cba2804ade1bcdaace1c9a903f3487709e72f321d41c3aee6b0d40cfd7da60776587ce64726aff50b40b94da80cca34974d70d857ab9ce6c0de2a5646e42cb065b481d4a55b3a9ccc20df9228e97e9e59063276212e2e71e72c29c9678cd7ba756f1f80b1cb13fe8445b306c264c39b0c85561bbdff5d6b2c197523322", 0xa6}], 0x3, 0x0, 0x0, 0x804}, 0x80) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) 19:15:00 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) 19:15:00 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "a8d0f938"}, 0x0, 0x0, 0x0, 0x0}) [ 792.734161][ T9017] usb 2-1: new high-speed USB device number 52 using dummy_hcd 19:15:01 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3}}], 0x4, 0x43, 0x0) [ 792.992970][ T9017] usb 2-1: Using ep0 maxpacket: 16 [ 793.082686][ T8990] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 793.113781][ T9017] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 793.127453][ T9017] usb 2-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 793.136854][ T9017] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.298213][ T9017] usb 2-1: config 0 descriptor?? [ 793.323015][ T8990] usb 1-1: Using ep0 maxpacket: 16 [ 793.401939][ T9017] usbhid 2-1:0.0: couldn't find an input interrupt endpoint 19:15:02 executing program 2: r0 = openat$vcsa(0xffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x100, 0x0) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f0000000080)=0x9) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x7112}) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c000000020601010000000000000000000000001200f645ba03006269746d61703a69702c6d61630000d526771e0005000400000000000900020073797a3000000000050005000200000005"], 0x4c}}, 0x0) close(r5) r6 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000780)="01aa440a7f9939a20b4d450a8b17915f7e4af24f7fa5912aca495fff23cd02d45631dd83a8970e26d8a0582d8a6ce2dc8411a7faef47a8a10852a09ebc8c2ac01b89b772329ca95861c05400c802450d795703ab8639df167ab55bbf111aa27eaf50ed99e7def90a40ea159f14cb599f0bb8cfe5271b63746f27a258d157ca99af8db9ae905860aa743808c7e40b679d2fa4689ced954cfc8fa6796fd92de4bfad50e7f16162925cc6c866f6e05e29934fac974df764bc3b7f9b875f4df442a0deedbcc365e19916e5c756f158e6519366158131c0d6accf0c2b76adcab5ac0f58", 0xe1, r6) keyctl$read(0xb, r6, &(0x7f00000001c0)=""/28, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r3, 0x0, r5, 0x0, 0x4ffe0, 0x0) io_setup(0x5, &(0x7f0000000300)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f0000000180)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0xff8e}]) connect$rds(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e26, @rand_addr=0x64010101}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) [ 793.445404][ T8990] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 793.458523][ T8990] usb 1-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 793.467836][ T8990] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:15:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 793.553959][ T9017] usb 2-1: USB disconnect, device number 52 19:15:02 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x3, 0x43, 0x0) [ 793.642791][ T8990] usb 1-1: config 0 descriptor?? [ 793.690483][ T8990] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 793.901982][ T27] usb 1-1: USB disconnect, device number 35 [ 794.132847][ T9017] usb 2-1: new high-speed USB device number 53 using dummy_hcd 19:15:03 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x3, 0x43, 0x0) [ 794.394215][ T9017] usb 2-1: Using ep0 maxpacket: 32 [ 794.465723][ T27] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 794.533751][ T9017] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 794.544905][ T9017] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 794.555052][ T9017] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 794.564475][ T9017] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.696934][ T9017] usb 2-1: config 0 descriptor?? [ 794.713006][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 794.757458][ T9017] hub 2-1:0.0: USB hub found [ 794.833839][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 794.845011][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 794.855074][ T27] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 794.864335][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.963140][ T9017] hub 2-1:0.0: 1 port detected 19:15:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 795.043489][ T27] usb 1-1: config 0 descriptor?? [ 795.112041][ T27] hub 1-1:0.0: USB hub found [ 795.293253][ T27] hub 1-1:0.0: 1 port detected [ 795.299524][ T28] audit: type=1800 audit(1597518904.012:51): pid=17915 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=15859 res=0 [ 795.319680][ T28] audit: type=1800 audit(1597518904.012:52): pid=17925 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=15859 res=0 [ 795.799319][ T8704] usb 2-1: USB disconnect, device number 53 [ 796.162072][ T8700] usb 1-1: USB disconnect, device number 36 19:15:05 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "37b0aa6c"}, 0x0, 0x0, 0x0, 0x0}) 19:15:05 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x3, 0x43, 0x0) 19:15:05 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x7112}) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) mq_unlink(&(0x7f00000001c0)='/dev/net/tun\x00') dup2(r1, r2) io_setup(0x5, &(0x7f0000000300)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000180)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0xff8e}]) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000040)) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) 19:15:05 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) 19:15:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:15:05 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "a8d0f938"}, 0x0, 0x0, 0x0, 0x0}) 19:15:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:15:05 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) [ 797.173305][T16291] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 797.423312][T16291] usb 2-1: Using ep0 maxpacket: 16 [ 797.567483][T16291] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 797.580700][T16291] usb 2-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 797.590118][T16291] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.622888][ T27] usb 1-1: new high-speed USB device number 37 using dummy_hcd 19:15:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @mcast1={0xff, 0x5}}]}}}]}, 0x4c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @mcast1={0xff, 0x5}}]}}}]}, 0x4c}}, 0x0) sendmsg$AUDIT_USER_AVC(r7, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x110, 0x453, 0x206d7ed6e1f0ef, 0x70bd25, 0x4d4f, "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", ["", "", "", "", "", ""]}, 0x110}, 0x1, 0x0, 0x0, 0x24040000}, 0x1) r8 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r4, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r8}]}, 0x3c}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0xd8d4) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) [ 797.904275][ T27] usb 1-1: Using ep0 maxpacket: 16 [ 797.982623][T16291] usb 2-1: config 0 descriptor?? [ 798.024162][ T27] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 798.031152][T16291] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 798.037389][ T27] usb 1-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 798.037462][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.148987][ T27] usb 1-1: config 0 descriptor?? 19:15:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:15:07 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) [ 798.217560][ T27] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 798.337082][T16291] usb 2-1: USB disconnect, device number 54 [ 798.397667][ T27] usb 1-1: USB disconnect, device number 37 19:15:07 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x4, 0x10000) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000080)=0x1, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) [ 798.843225][T16291] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 798.992750][ T27] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 799.104135][T16291] usb 2-1: Using ep0 maxpacket: 32 [ 799.233424][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 799.243874][T16291] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 799.255763][T16291] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 799.266054][T16291] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 799.276363][T16291] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.353875][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 799.365159][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 799.367220][T16291] usb 2-1: config 0 descriptor?? [ 799.375367][ T27] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 799.389536][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.447822][T16291] hub 2-1:0.0: USB hub found [ 799.552770][ T27] usb 1-1: config 0 descriptor?? [ 799.600036][ T27] hub 1-1:0.0: USB hub found [ 799.632967][T16291] hub 2-1:0.0: 1 port detected [ 799.803646][ T27] hub 1-1:0.0: 1 port detected [ 799.819715][ T28] audit: type=1800 audit(1597518908.532:53): pid=18021 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16002 res=0 [ 799.871991][ T28] audit: type=1800 audit(1597518908.562:54): pid=18029 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16002 res=0 [ 800.489452][ T9017] usb 2-1: USB disconnect, device number 55 [ 800.659496][T16291] usb 1-1: USB disconnect, device number 38 19:15:09 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "37b0aa6c"}, 0x0, 0x0, 0x0, 0x0}) 19:15:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:15:09 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @mcast1={0xff, 0x5}}]}}}]}, 0x4c}}, 0x0) ioctl$sock_netdev_private(r6, 0x89f9, &(0x7f00000002c0)="426b51a9b0e02bf76a69b714fe91cc1b03a4886c3a92eeb6ff7d57536c84a5ddbcd3268d70bd72131d3b1f65dafeb6aa9612d67120aa9f0a4da4263f081a81a6a560418cc53add00793fc08a46229ea06715ce891a7a8b7a12df82c1dc7b38769c482ef1e8813f7607feeaff6a77b78e294cb1ad7ff4bb919e15b24d19b7635f5d990dc9f2d2c52a51b8690cc184554ab3ac4f711f20ed3e7f8cfa0c0f605cd7a0cdddaf520281a4af2db85e88ede5be9dfc875643d63808cd6b85517c88f297076c78f8c13cfe029dc5cdd99b3c2ccc36d29bb5709aa7519f45bafc4b5274001df1e538c47dd9d1b25ac8b5c5981f4d") sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @mcast1={0xff, 0x5}}]}}}]}, 0x4c}}, 0x0) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x45c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404}, @TCA_TBF_PARMS={0x28, 0x1, {{0xcb, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}}}]}}]}, 0x45c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', r8}) 19:15:09 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) 19:15:09 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) 19:15:09 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "a8d0f938"}, 0x0, 0x0, 0x0, 0x0}) [ 801.535031][T18122] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 801.666846][ T8990] usb 2-1: new high-speed USB device number 56 using dummy_hcd 19:15:10 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, 0x0, 0x0, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) 19:15:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 801.849172][T18114] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 801.894232][ T9017] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 801.933631][ T8990] usb 2-1: Using ep0 maxpacket: 16 [ 802.053532][ T8990] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 802.066802][ T8990] usb 2-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 802.076198][ T8990] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.143359][ T9017] usb 1-1: Using ep0 maxpacket: 16 19:15:10 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x8) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x1e32) [ 802.239360][ T8990] usb 2-1: config 0 descriptor?? [ 802.284718][ T9017] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 802.290157][ T8990] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 802.297743][ T9017] usb 1-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 802.297810][ T9017] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.372818][ T9017] usb 1-1: config 0 descriptor?? [ 802.421614][ T9017] usbhid 1-1:0.0: couldn't find an input interrupt endpoint 19:15:11 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, 0x0, 0x0, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) [ 802.576406][ T8990] usb 2-1: USB disconnect, device number 56 [ 802.621915][ T12] usb 1-1: USB disconnect, device number 39 19:15:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:15:11 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) [ 803.102594][ T8990] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 803.206109][ T12] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 803.343381][ T8990] usb 2-1: Using ep0 maxpacket: 32 [ 803.462929][ T12] usb 1-1: Using ep0 maxpacket: 32 [ 803.463556][ T8990] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 803.479369][ T8990] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 803.489456][ T8990] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 803.498810][ T8990] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.602877][ T12] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 803.614180][ T12] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 803.624234][ T12] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 803.633546][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.674557][ T8990] usb 2-1: config 0 descriptor?? [ 803.703558][ T12] usb 1-1: config 0 descriptor?? [ 803.715458][ T8990] hub 2-1:0.0: USB hub found [ 803.755874][ T12] hub 1-1:0.0: USB hub found [ 803.934429][ T8990] hub 2-1:0.0: 1 port detected [ 803.963462][ T12] hub 1-1:0.0: 1 port detected [ 804.315612][ T28] audit: type=1800 audit(1597518913.032:55): pid=18113 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16210 res=0 [ 804.336709][ T28] audit: type=1800 audit(1597518913.032:56): pid=18124 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16210 res=0 [ 804.599854][ T27] usb 2-1: USB disconnect, device number 57 [ 804.606337][ T8990] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 804.826002][T16291] usb 1-1: USB disconnect, device number 40 19:15:14 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "37b0aa6c"}, 0x0, 0x0, 0x0, 0x0}) 19:15:14 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, 0x0, 0x0, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) 19:15:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:15:14 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) openat$vimc1(0xffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000240)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000000280)={0x3, "c0441e70f17e70eb096821055fab9939fbec52caae5bdba944b3a27bb385735b", 0x5, 0x4, 0x80000001, 0x1, 0x4, 0x6, 0x6f, 0xd2}) syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r2, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x200, @media='eth\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) 19:15:14 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) 19:15:14 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "a8d0f938"}, 0x0, 0x0, 0x0, 0x0}) 19:15:14 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}], 0x3, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) [ 805.883546][T16291] usb 2-1: new high-speed USB device number 58 using dummy_hcd 19:15:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:15:14 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000140)={'team0\x00', {0x2, 0x4e20, @empty}}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000010000300"/20, @ANYRES32=r3, @ANYBLOB="00000000000000002c0012800e000100fa6f366772657461700000001800028014000600ff050000000000000000000000000001"], 0x4c}}, 0x0) r5 = gettid() tkill(r5, 0x1000000000016) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000040)=r5) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) r6 = open(&(0x7f0000000000)='./bus\x00', 0x1c14c0, 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r6, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(r6, 0x500e, 0x0) [ 806.138951][T16291] usb 2-1: Using ep0 maxpacket: 16 [ 806.256410][ T12] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 806.273884][T16291] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 806.287333][T16291] usb 2-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 806.296739][T16291] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.413232][T16291] usb 2-1: config 0 descriptor?? [ 806.473565][T16291] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 806.536114][ T12] usb 1-1: Using ep0 maxpacket: 16 19:15:15 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}], 0x3, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) [ 806.664308][ T12] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 806.677667][ T12] usb 1-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 806.687126][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.700960][ T27] usb 2-1: USB disconnect, device number 58 19:15:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 806.966290][ T12] usb 1-1: config 0 descriptor?? [ 807.010831][ T12] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 807.209135][ T12] usb 1-1: USB disconnect, device number 41 [ 807.282666][ T27] usb 2-1: new high-speed USB device number 59 using dummy_hcd 19:15:16 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}], 0x3, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) [ 807.524466][ T27] usb 2-1: Using ep0 maxpacket: 32 [ 807.646206][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 807.657469][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 807.667628][ T27] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 807.677113][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.799024][ T12] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 807.893591][ T27] usb 2-1: config 0 descriptor?? [ 807.934657][ T27] hub 2-1:0.0: USB hub found [ 808.052604][ T12] usb 1-1: Using ep0 maxpacket: 32 [ 808.153892][ T27] hub 2-1:0.0: 1 port detected [ 808.173859][ T12] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 808.186246][ T12] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 808.196413][ T12] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 808.205694][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.309430][ T12] usb 1-1: config 0 descriptor?? [ 808.368234][ T12] hub 1-1:0.0: USB hub found [ 808.481242][ T28] audit: type=1800 audit(1597518917.193:57): pid=18210 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16377 res=0 [ 808.543886][ T28] audit: type=1800 audit(1597518917.223:58): pid=18221 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16377 res=0 [ 808.574227][ T12] hub 1-1:0.0: 1 port detected [ 808.829734][ T8989] usb 2-1: USB disconnect, device number 59 [ 808.836552][ T27] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 809.425516][ T8704] usb 1-1: USB disconnect, device number 42 19:15:18 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "37b0aa6c"}, 0x0, 0x0, 0x0, 0x0}) 19:15:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:15:18 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) 19:15:18 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {0x0}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) 19:15:18 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "a8d0f938"}, 0x0, 0x0, 0x0, 0x0}) 19:15:18 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x12, &(0x7f0000000040)=0xffffffff, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) [ 810.382475][ T8700] usb 2-1: new high-speed USB device number 60 using dummy_hcd 19:15:19 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {0x0}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) 19:15:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:15:19 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e22, @rand_addr=0x64010100}, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x40}}, 0x20, 0x0, 0x0, 0x0, 0xff81, &(0x7f0000000040)='ip6_vti0\x00', 0x17, 0x2, 0x5}) socket$nl_route(0x10, 0x3, 0x0) read$snddsp(r1, &(0x7f0000000140)=""/214, 0xd6) [ 810.635374][ T8700] usb 2-1: Using ep0 maxpacket: 16 [ 810.753503][ T8700] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 810.766786][ T8700] usb 2-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 810.776217][ T8700] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.785788][ T8989] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 810.938823][ T8700] usb 2-1: config 0 descriptor?? [ 810.994034][ T8700] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 811.053292][ T8989] usb 1-1: Using ep0 maxpacket: 16 [ 811.173512][ T8989] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 811.186732][ T8989] usb 1-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 811.196057][ T8989] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.238705][ T8990] usb 2-1: USB disconnect, device number 60 19:15:20 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {0x0}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) [ 811.420197][ T8989] usb 1-1: config 0 descriptor?? 19:15:20 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x7112}) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000300)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000180)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0xff8e}]) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000240)=[{0x3, 0x3, {0x1, 0xf0, 0x2}, {0x0, 0x0, 0x6}, 0x1, 0xfd}, {0x1, 0x3, {0x1, 0xff, 0x3}, {0x0, 0x1, 0x4}, 0x1, 0xff}, {0x1, 0x1, {0x0, 0x0, 0x4}, {0x2, 0xf0, 0x1}, 0x0, 0x1}, {0x0, 0x3, {0x2, 0x0, 0x1}, {0x2, 0x1, 0x4}, 0xff, 0xfe}, {0x2, 0x0, {0x2, 0xff}, {0x1, 0xff, 0x2}, 0xfe, 0xff}], 0x8c) r4 = openat$nvram(0xffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0xdc420, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e22, 0x0, @private2}}, 0x0, 0x0, 0x21, 0x0, "abc76307d58c9ab172175d33ab020ca246dccc6966aacb86f2548c6955c742a873399b00e400a72d23561ec9ee5697b9c9f44ee26dbe04a3374da873ae6302512702f74573746b8e647b33cf952e6614"}, 0xd8) openat$vicodec0(0xffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) 19:15:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 811.513455][ T8989] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 811.667485][ T27] usb 1-1: USB disconnect, device number 43 [ 811.796848][ T8990] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 812.054121][ T8990] usb 2-1: Using ep0 maxpacket: 32 [ 812.174508][ T8990] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 812.185708][ T8990] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 812.195917][ T8990] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 812.205212][ T8990] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.222578][ T27] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 812.289012][ T8990] usb 2-1: config 0 descriptor?? [ 812.336093][ T8990] hub 2-1:0.0: USB hub found [ 812.465540][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 812.552892][ T8990] hub 2-1:0.0: 1 port detected [ 812.583525][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 812.594922][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 812.605023][ T27] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 812.614310][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.665821][ T27] usb 1-1: config 0 descriptor?? [ 812.704429][ T27] hub 1-1:0.0: USB hub found [ 812.923700][ T27] hub 1-1:0.0: 1 port detected [ 813.109232][ T28] audit: type=1800 audit(1597518921.823:59): pid=18304 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16384 res=0 [ 813.237148][ T8700] usb 2-1: USB disconnect, device number 61 [ 813.238348][ T28] audit: type=1800 audit(1597518921.853:60): pid=18312 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16384 res=0 [ 813.254098][ T8990] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 813.629960][T16291] usb 1-1: USB disconnect, device number 44 [ 813.633122][ T8700] hub 1-1:0.0: hub_ext_port_status failed (err = -71) 19:15:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:15:22 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "37b0aa6c"}, 0x0, 0x0, 0x0, 0x0}) 19:15:22 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x3, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) 19:15:22 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) 19:15:22 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff020}, {0x6, 0x0, 0x0, 0x9}]}, 0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x7112}) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000002680)) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r3 = dup2(r1, r2) io_setup(0x5, &(0x7f0000000300)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f0000000180)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0xff8e}]) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x20) fchown(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$vivid(&(0x7f0000000500)='/dev/video#\x00', 0x3, 0x2) r7 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000002700)={0xaa, 0x6c}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000520000/0x3000)=nil, &(0x7f0000731000/0x4000)=nil, 0x3000}) ioctl$UFFDIO_ZEROPAGE(r7, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) r8 = openat$vimc2(0xffffff9c, &(0x7f0000002580)='/dev/video2\x00', 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000000240)="25b9f67267adb06062b1020698e762cf6c59427e90fd6c11dc123ac5e96d2b42b6997fdb7efa726544d4e3a2bf87035a6280fbf016f8458b11e0e6348e37d9d7868577f6fe1b3fdedff80c882ed20ee5c1c958c3bd45c5c3c5ae10a4aa6e701d40352449b33e2aec5c5142229c685018ae454d92ce4d1889265fc0f9b1d5d9367ba7ee48c4e49d0a113ddd1b35ad03", 0x8f}, {&(0x7f0000001580)="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", 0x1000}, {&(0x7f0000000340)="d20a201c3f808bb3c367f9462fabb3a7bf9cd57c3d101abc8fc7e24736fe797b07be9549d32d1d9aba22968d76851abfb985565f4e96747e98ec9ae6a3195872eb44f01d8f4f7f73d9aeaaf5b982798ca31f0a5a05482cc29da1c06328a06496b888b05e88226fc32eed9c6362e6f3cb1695d52affd7e5e4c37fe05109adeac73711ec72", 0x84}, {&(0x7f0000000400)="0255cb5b9a1c623e269c9d51e8010b31839ac87088ae2d204604ce248ee3f6cb24d80b7b222b25f9b9bc1733d58517336094fa7180d672873ea626863ffab5145dfdf740f823b408a872159b509259ad83feab5a948326700dc467fd7643fe4ffcc809e787b95d23b7566e7f21371cf1dc4d247e7460cd86545802204bc4e4da9b7284c815ca1743dd", 0x89}], 0x5, &(0x7f0000002740)=ANY=[@ANYBLOB="1800000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="20395e29270000000100000001000000f958ec5e812a640a6415cbe75710ec59445992e28e46cc6453b59204866f350d83ed1fc4db798cd36d015b1416d37a502d85c223ce7cf2b5800000000000000000", @ANYRES32=r3, @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r5, @ANYBLOB="18d069ab21c3c6283f047d86", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x68}, 0x4000000) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000080)=r5) 19:15:22 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "a8d0f938"}, 0x0, 0x0, 0x0, 0x0}) [ 814.683194][ T8700] usb 2-1: new high-speed USB device number 62 using dummy_hcd 19:15:23 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x3, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) 19:15:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 814.923684][ T8700] usb 2-1: Using ep0 maxpacket: 16 [ 815.043792][ T8700] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 815.057123][ T8700] usb 2-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 815.066570][ T8700] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:15:23 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x4, 0x101000) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socket$l2tp(0x2, 0x2, 0x73) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x45c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404}, @TCA_TBF_PARMS={0x28, 0x1, {{0xcb, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}}}]}}]}, 0x45c}}, 0x0) bind$packet(r1, &(0x7f0000000080)={0x11, 0x7, r3, 0x1, 0x80, 0x6, @multicast}, 0x14) r5 = openat$nvme_fabrics(0xffffff9c, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x200, 0x0) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x45c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404}, @TCA_TBF_PARMS={0x28, 0x1, {{0xcb, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}}}]}}]}, 0x45c}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40014008}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delvlan={0x68, 0x71, 0x20, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r7}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x10}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x10, 0x4}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x86f0e4755e12f872}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x10, 0x4}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0xd6}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) [ 815.122338][ T8704] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 815.298249][ T8700] usb 2-1: config 0 descriptor?? [ 815.359520][ T8700] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 815.372828][ T8704] usb 1-1: Using ep0 maxpacket: 16 19:15:24 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x3, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) [ 815.503759][ T8704] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 815.517167][ T8704] usb 1-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 815.526516][ T8704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.547829][ T27] usb 2-1: USB disconnect, device number 62 [ 815.691855][ T8704] usb 1-1: config 0 descriptor?? [ 815.755529][ T8704] usbhid 1-1:0.0: couldn't find an input interrupt endpoint 19:15:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 815.824700][T18448] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 815.877699][T18444] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 815.939616][ T8700] usb 1-1: USB disconnect, device number 45 [ 815.990879][T18448] sch_tbf: burst 0 is lower than device lo mtu (65550) ! 19:15:24 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x8) [ 816.119018][ T27] usb 2-1: new high-speed USB device number 63 using dummy_hcd 19:15:25 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {0x0}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) [ 816.367047][ T27] usb 2-1: Using ep0 maxpacket: 32 [ 816.496295][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 816.507592][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 816.518005][ T27] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 816.527377][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.542558][ T8700] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 816.750800][ T27] usb 2-1: config 0 descriptor?? [ 816.793372][ T8700] usb 1-1: Using ep0 maxpacket: 32 [ 816.808061][ T27] hub 2-1:0.0: USB hub found [ 816.917502][ T8700] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 816.928797][ T8700] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 816.938968][ T8700] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 816.948272][ T8700] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.103307][ T27] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 817.119104][ T27] usbhid 2-1:0.0: can't add hid device: -22 [ 817.125725][ T27] usbhid: probe of 2-1:0.0 failed with error -22 [ 817.160558][ T8700] usb 1-1: config 0 descriptor?? [ 817.205102][ T8700] hub 1-1:0.0: USB hub found [ 817.310204][ T28] audit: type=1800 audit(1597518926.023:61): pid=18403 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16377 res=0 [ 817.330237][ T28] audit: type=1800 audit(1597518926.023:62): pid=18413 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16377 res=0 [ 817.422919][ T8700] hub 1-1:0.0: 1 port detected [ 818.119917][ T12] usb 1-1: USB disconnect, device number 46 [ 818.122432][ T8989] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 818.349309][T16291] usb 2-1: USB disconnect, device number 63 19:15:27 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "37b0aa6c"}, 0x0, 0x0, 0x0, 0x0}) 19:15:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 19:15:27 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x7112}) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) dup2(r1, r2) io_setup(0x5, &(0x7f0000000300)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000180)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0xff8e}]) read$eventfd(r2, &(0x7f0000000040), 0x8) 19:15:27 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {0x0}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) 19:15:27 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) 19:15:27 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "a8d0f938"}, 0x0, 0x0, 0x0, 0x0}) 19:15:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 19:15:27 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {0x0}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) [ 819.162767][ T12] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 819.423780][ T12] usb 2-1: Using ep0 maxpacket: 16 [ 819.493346][T16291] usb 1-1: new high-speed USB device number 47 using dummy_hcd 19:15:28 executing program 2: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x105000, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x2, 0x5d, 0x8, 0x8, 0x1}}) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) [ 819.553549][ T12] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 819.566935][ T12] usb 2-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 819.576310][ T12] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.732809][T16291] usb 1-1: Using ep0 maxpacket: 16 19:15:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 819.763845][ T12] usb 2-1: config 0 descriptor?? [ 819.810825][ T12] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 819.853400][T16291] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 819.866583][T16291] usb 1-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 819.875893][T16291] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.991446][T16291] usb 1-1: config 0 descriptor?? 19:15:28 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x3, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) [ 820.015713][ T12] usb 2-1: USB disconnect, device number 64 [ 820.059585][T16291] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 820.246375][T16291] usb 1-1: USB disconnect, device number 47 19:15:29 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @mcast1={0xff, 0x5}}]}}}]}, 0x4c}}, 0x0) ioctl$sock_SIOCDELDLCI(r2, 0x8981, &(0x7f0000000040)={'netpci0\x00'}) [ 820.592297][ T12] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 820.823392][T16291] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 820.859388][ T12] usb 2-1: Using ep0 maxpacket: 32 [ 820.996243][ T12] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 821.007554][ T12] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 821.017699][ T12] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 821.027041][ T12] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.082260][T16291] usb 1-1: Using ep0 maxpacket: 32 [ 821.144367][ T12] usb 2-1: config 0 descriptor?? [ 821.189457][ T12] hub 2-1:0.0: USB hub found [ 821.204564][T16291] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 821.215859][T16291] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 821.225915][T16291] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 821.235324][T16291] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.320237][T16291] usb 1-1: config 0 descriptor?? [ 821.365794][T16291] hub 1-1:0.0: USB hub found [ 821.496775][ T12] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 821.512875][ T12] usbhid 2-1:0.0: can't add hid device: -22 [ 821.575984][T16291] hub 1-1:0.0: 1 port detected [ 821.586541][ T12] usbhid: probe of 2-1:0.0 failed with error -22 [ 821.789729][ T28] audit: type=1800 audit(1597518930.503:63): pid=18508 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16368 res=0 [ 821.810176][ T28] audit: type=1800 audit(1597518930.503:64): pid=18516 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16368 res=0 [ 822.297130][T16291] usb 1-1: USB disconnect, device number 48 [ 822.323105][ T12] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 822.662816][ T8989] usb 2-1: USB disconnect, device number 65 19:15:31 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "37b0aa6c"}, 0x0, 0x0, 0x0, 0x0}) 19:15:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:15:31 executing program 2: socket$packet(0x11, 0x2, 0x300) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x7112}) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) dup2(r1, r2) io_setup(0x5, &(0x7f0000000300)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000180)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0xff8e}]) r4 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x246c3, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0185647, &(0x7f0000000140)={0x9e0000, 0x5, 0x5, r4, 0x0, &(0x7f00000000c0)={0xa00903, 0x2, [], @p_u16=&(0x7f0000000080)=0x6}}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x8) 19:15:31 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x3, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) 19:15:31 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) 19:15:31 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "a8d0f938"}, 0x0, 0x0, 0x0, 0x0}) [ 823.407418][ T8700] usb 2-1: new high-speed USB device number 66 using dummy_hcd 19:15:32 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x3, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) [ 823.523473][ T3216] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 823.663081][ T8700] usb 2-1: Using ep0 maxpacket: 16 [ 823.782277][ T3216] usb 1-1: Using ep0 maxpacket: 16 [ 823.782924][ T8700] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 823.800598][ T8700] usb 2-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 823.810093][ T8700] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.904778][ T3216] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 823.918063][ T3216] usb 1-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 823.927369][ T3216] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.150696][ T8700] usb 2-1: config 0 descriptor?? [ 824.181422][ T3216] usb 1-1: config 0 descriptor?? 19:15:33 executing program 2: socket$packet(0x11, 0x2, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x7112}) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x20) dup2(r0, r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="ffffff7f000200000013", @ANYRES32=r3, @ANYBLOB="00000000000000002c0012800e0001006970366772657401fdffffff180002801400000001"], 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, r6, 0x42b, 0x0, 0x0, {{}, {}, {0x10, 0x17, {0x200020}}}}, 0x2c}}, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="28040040", @ANYRES16=r6, @ANYBLOB="160f28bd7000fcdbdf2501000000000000000c410000000c001473797a3000000000"], 0x28}}, 0x100) io_setup(0x5, &(0x7f0000000300)=0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000400)=ANY=[], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e21, @remote}}, 0x2, 0x0, 0x5, 0x9, 0x1a, 0x7, 0x2}, &(0x7f00000002c0)=0x9c) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f0000000180)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r1, &(0x7f0000000000), 0xff8e}]) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000040)=0x6) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x200000000000006e, &(0x7f0000000100)}, 0x5) [ 824.239623][ T8700] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 824.290282][ T3216] usbhid 1-1:0.0: couldn't find an input interrupt endpoint 19:15:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 824.400384][ T3672] usb 2-1: USB disconnect, device number 66 [ 824.455900][ T8700] usb 1-1: USB disconnect, device number 49 19:15:33 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {0x0}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) [ 824.736999][T18643] tipc: Enabling of bearer <:> rejected, illegal name [ 824.948350][T18643] tipc: Enabling of bearer <:> rejected, illegal name [ 824.972516][ T3672] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 825.022651][ T8700] usb 1-1: new high-speed USB device number 50 using dummy_hcd 19:15:33 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {0x0}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) [ 825.212819][ T3672] usb 2-1: Using ep0 maxpacket: 32 19:15:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 825.274615][ T8700] usb 1-1: Using ep0 maxpacket: 32 [ 825.334358][ T3672] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 825.345723][ T3672] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 825.356200][ T3672] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 825.365650][ T3672] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.423968][ T8700] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 825.435154][ T8700] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 825.445199][ T8700] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 825.454551][ T8700] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.578360][ T3672] usb 2-1: config 0 descriptor?? [ 825.616861][ T8700] usb 1-1: config 0 descriptor?? [ 825.638828][ T3672] hub 2-1:0.0: USB hub found [ 825.671874][ T8700] hub 1-1:0.0: USB hub found [ 825.922491][ T3672] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 825.938773][ T3672] usbhid 2-1:0.0: can't add hid device: -22 [ 825.945349][ T3672] usbhid: probe of 2-1:0.0 failed with error -22 [ 825.974768][ T8700] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 825.990565][ T8700] usbhid 1-1:0.0: can't add hid device: -22 [ 825.997151][ T8700] usbhid: probe of 1-1:0.0 failed with error -22 [ 826.078338][ T28] audit: type=1800 audit(1597518934.793:65): pid=18606 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=15989 res=0 [ 826.157253][ T28] audit: type=1800 audit(1597518934.813:66): pid=18615 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=15989 res=0 19:15:35 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "37b0aa6c"}, 0x0, 0x0, 0x0, 0x0}) 19:15:35 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) 19:15:35 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {0x0}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) 19:15:35 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[]) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) 19:15:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:15:35 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "a8d0f938"}, 0x0, 0x0, 0x0, 0x0}) [ 827.082697][T16291] usb 2-1: USB disconnect, device number 67 [ 827.162719][ T12] usb 1-1: USB disconnect, device number 50 19:15:36 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x3, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) [ 827.552686][ T3672] usb 2-1: new high-speed USB device number 68 using dummy_hcd 19:15:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 827.792566][ T3672] usb 2-1: Using ep0 maxpacket: 16 [ 827.913135][ T3672] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 827.926390][ T3672] usb 2-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 827.935806][ T3672] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:15:36 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x7112}) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) syncfs(r2) dup2(r1, r2) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40400) io_setup(0x5, &(0x7f0000000300)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000180)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0xff8e}]) bind(0xffffffffffffffff, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) r6 = openat$nvram(0xffffff9c, &(0x7f00000001c0)='/dev/nvram\x00', 0xf81, 0x0) syz_io_uring_setup(0x3d67, &(0x7f0000000200)={0x0, 0xc417, 0x4, 0x0, 0x58, 0x0, r6}, &(0x7f00007ff000/0x800000)=nil, &(0x7f0000efb000/0x4000)=nil, &(0x7f00000002c0), &(0x7f0000000340)) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5c04000024000b0f00"/20, @ANYRES32=r4, @ANYBLOB="000000000c00ffff0000000008000100746266003004020004040200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004eae752b2a31eef66200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000028000100cb000000000000007fffffff00"/1092], 0x45c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'syztnl1\x00', r4, 0x2f, 0x2, 0x20, 0x8, 0x0, @private2={0xfc, 0x2, [], 0x1}, @remote, 0x1, 0x0, 0x1, 0x7}}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x18, r7, 0x1, 0x3, 0x6, @link_local}, 0x14) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) [ 827.962316][ T3216] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 828.125586][ T3672] usb 2-1: config 0 descriptor?? [ 828.177117][ T3672] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 828.238949][ T3216] usb 1-1: Using ep0 maxpacket: 16 [ 828.369099][ T8700] usb 2-1: USB disconnect, device number 68 [ 828.383946][ T3216] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 828.397777][ T3216] usb 1-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 828.407130][ T3216] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:15:37 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x3, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) 19:15:37 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[]) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) [ 828.633669][ T3216] usb 1-1: config 0 descriptor?? 19:15:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 828.683809][ T3216] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 828.878537][ T3216] usb 1-1: USB disconnect, device number 51 [ 829.473383][ T3216] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 829.742593][ T3216] usb 1-1: Using ep0 maxpacket: 32 [ 829.873865][ T3216] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 829.885381][ T3216] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 829.895495][ T3216] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 829.904730][ T3216] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.971218][ T3216] usb 1-1: config 0 descriptor?? [ 830.025440][ T3216] hub 1-1:0.0: USB hub found [ 830.312564][ T3216] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 830.327290][ T3216] usbhid 1-1:0.0: can't add hid device: -22 [ 830.334489][ T3216] usbhid: probe of 1-1:0.0 failed with error -22 19:15:40 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "37b0aa6c"}, 0x0, 0x0, 0x0, 0x0}) 19:15:40 executing program 2: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) bind$nfc_llcp(r0, &(0x7f0000000040)={0x27, 0x1, 0x2, 0x2, 0x7, 0x7d, "c20744e9b8ad2ea25cd465a0b3ed97856a52128206baa1ce59a3b065d15e0fbe4661547f651145e31de3faa047a5f63006d0ba7b0fd35e72b5d8c28d3f681b", 0x24}, 0x58) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) 19:15:40 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x3, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) 19:15:40 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "a8d0f938"}, 0x0, 0x0, 0x0, 0x0}) 19:15:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:15:40 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[]) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) [ 831.572736][ T3216] usb 1-1: USB disconnect, device number 52 19:15:40 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{0x0}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) [ 832.035395][ T3216] usb 2-1: new high-speed USB device number 69 using dummy_hcd 19:15:41 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) [ 832.322891][ T3216] usb 2-1: Using ep0 maxpacket: 16 [ 832.464026][ T3216] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 832.477238][ T3216] usb 2-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 832.486891][ T3216] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:15:41 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$bsg(0xffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x101000, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) dup2(0xffffffffffffffff, r3) io_setup(0x4, &(0x7f00000001c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f0000000180)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r1}]) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r7 = socket(0x27, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5c04000024000b0f0000001900000000b9960000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000080001007462660030040200040402000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000028000100cb000000000000007fffffff0000000000000000000000000000000000000000a71f0000"], 0x45c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000700)={'ip6_vti0\x00', &(0x7f0000000680)={'ip6gre0\x00', r6, 0x29, 0x4, 0x7, 0x7, 0x40, @ipv4={[], [], @broadcast}, @private0, 0x80, 0x1, 0x9, 0x80000000}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c40)={&(0x7f0000000240)=ANY=[@ANYBLOB="20020088d05ba55c9e2e1e6310e10000000047dcc77f926bfe9361cfe86f0400", @ANYRES16=0x0, @ANYBLOB="000128bd7000ffdbdf25150000000c00018008000100", @ANYRES32=r8, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x4000840}, 0x8010) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="5c04000024321dc5e55120ceebc658d315bb4bf1000b000009fd000000000000000000", @ANYRES32=r9, @ANYBLOB="00000000ffffffff00000000080001007462660030040200040402000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000028000100cb000000000000007fffffff00"/1092], 0x45c}}, 0x0) bind$packet(r1, &(0x7f0000000080)={0x11, 0xea, r9, 0x1, 0x80, 0x6, @dev={[], 0x26}}, 0x14) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) [ 832.665208][ T3216] usb 2-1: config 0 descriptor?? [ 832.672729][ T8704] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 832.710219][ T3216] usbhid 2-1:0.0: couldn't find an input interrupt endpoint 19:15:41 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB]) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) [ 832.907711][ T3216] usb 2-1: USB disconnect, device number 69 [ 832.932244][ T8704] usb 1-1: Using ep0 maxpacket: 16 [ 833.066460][ T8704] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 833.079662][ T8704] usb 1-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 833.089117][ T8704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.206455][T18812] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12836 sclass=netlink_route_socket pid=18812 comm=syz-executor.2 [ 833.255637][ T8704] usb 1-1: config 0 descriptor?? 19:15:42 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 19:15:42 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{0x0}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) [ 833.300698][ T8704] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 833.453258][T18813] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12836 sclass=netlink_route_socket pid=18813 comm=syz-executor.2 [ 833.502833][ T3216] usb 1-1: USB disconnect, device number 53 [ 834.073954][ T3216] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 834.313651][ T3216] usb 1-1: Using ep0 maxpacket: 32 [ 834.433371][ T3216] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 834.444872][ T3216] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 834.455072][ T3216] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 834.464386][ T3216] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.584335][ T3216] usb 1-1: config 0 descriptor?? [ 834.625205][ T3216] hub 1-1:0.0: USB hub found [ 834.936564][ T3216] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 834.952817][ T3216] usbhid 1-1:0.0: can't add hid device: -22 [ 834.959307][ T3216] usbhid: probe of 1-1:0.0 failed with error -22 19:15:44 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "37b0aa6c"}, 0x0, 0x0, 0x0, 0x0}) 19:15:44 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) 19:15:44 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "a8d0f938"}, 0x0, 0x0, 0x0, 0x0}) 19:15:44 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 19:15:44 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{0x0}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) 19:15:44 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB]) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) [ 836.227446][ T27] usb 1-1: USB disconnect, device number 54 19:15:45 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0x8}, {0x6, 0x0, 0x0, 0x40}]}, 0x8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x7112}) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) dup2(r0, r1) io_setup(0x5, &(0x7f0000000300)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f0000000180)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r1, &(0x7f0000000000), 0xff8e}]) getsockname$unix(r1, &(0x7f0000000040), &(0x7f00000000c0)=0x6e) 19:15:45 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) 19:15:45 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 836.732996][ T8989] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 836.972214][ T8989] usb 2-1: Using ep0 maxpacket: 16 [ 837.082511][ T12] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 837.101177][ T8989] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 837.114597][ T8989] usb 2-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 837.123999][ T8989] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.310854][ T8989] usb 2-1: config 0 descriptor?? [ 837.362522][ T12] usb 1-1: Using ep0 maxpacket: 16 [ 837.378721][ T8989] usbhid 2-1:0.0: couldn't find an input interrupt endpoint 19:15:46 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) [ 837.503762][ T12] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 837.516862][ T12] usb 1-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 837.526418][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:15:46 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 837.613572][ T8989] usb 2-1: USB disconnect, device number 70 19:15:46 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB]) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) [ 837.850509][ T12] usb 1-1: config 0 descriptor?? [ 837.901069][ T12] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 838.098092][ T12] usb 1-1: USB disconnect, device number 55 19:15:47 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "37b0aa6c"}, 0x0, 0x0, 0x0, 0x0}) 19:15:47 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000040)="4f87751b063eaea278e75f4521f4cdde76ca84137f01b741c81b1ee0b703954048fd4fd9bb0758bdce0414", 0x2b) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) 19:15:47 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) 19:15:47 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 19:15:47 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "a8d0f938"}, 0x0, 0x0, 0x0, 0x0}) 19:15:47 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=a']) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) 19:15:48 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x3, 0x43, 0x0) 19:15:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 839.432141][ T12] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 839.522680][T18916] tmpfs: Bad value for 'huge' 19:15:48 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0xffffffff, 0x1000, 0x1, 0x844}) [ 839.672177][ T12] usb 2-1: Using ep0 maxpacket: 16 [ 839.772183][ T8700] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 839.792674][ T12] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 839.805947][ T12] usb 2-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 839.815345][ T12] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.951606][ T12] usb 2-1: config 0 descriptor?? 19:15:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 840.017796][ T12] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 840.022097][ T8700] usb 1-1: Using ep0 maxpacket: 16 [ 840.145742][ T8700] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 840.159224][ T8700] usb 1-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 840.168594][ T8700] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:15:48 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x3, 0x43, 0x0) [ 840.208248][T18906] udc-core: couldn't find an available UDC or it's busy [ 840.216077][T18906] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 840.353654][ T8700] usb 1-1: config 0 descriptor?? [ 840.417937][ T8700] usbhid 1-1:0.0: couldn't find an input interrupt endpoint 19:15:49 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x7112}) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) dup2(r1, r2) io_setup(0x5, &(0x7f0000000300)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000180)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0xff8e}]) getsockopt$inet6_dccp_int(r2, 0x21, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 840.633995][ T8989] usb 1-1: USB disconnect, device number 56 19:15:50 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "37b0aa6c"}, 0x0, 0x0, 0x0, 0x0}) 19:15:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:15:50 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x3, 0x43, 0x0) 19:15:50 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r2 = socket(0x11, 0x800000003, 0x0) r3 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400000, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x45c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404}, @TCA_TBF_PARMS={0x28, 0x1, {{0xcb, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}}}]}}]}, 0x45c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wg1\x00', r4}) 19:15:51 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "a8d0f938"}, 0x0, 0x0, 0x0, 0x0}) [ 842.293726][ T8704] usb 2-1: USB disconnect, device number 71 [ 842.378721][T18966] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 842.476561][ T28] audit: type=1800 audit(1597518951.193:67): pid=18916 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=15993 res=0 [ 842.522390][ T12] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 842.550704][T18969] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 842.656730][ T28] audit: type=1800 audit(1597518951.223:68): pid=18919 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=15993 res=0 19:15:51 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=a']) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) 19:15:51 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) 19:15:51 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 842.762208][ T12] usb 1-1: Using ep0 maxpacket: 16 19:15:51 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000100)}, 0x8) [ 842.883228][ T12] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 842.896273][ T12] usb 1-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 842.906225][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.084353][ T12] usb 1-1: config 0 descriptor?? 19:15:51 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) [ 843.140006][ T12] usbhid 1-1:0.0: couldn't find an input interrupt endpoint 19:15:51 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 843.243272][ T8700] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 843.337820][ T3216] usb 1-1: USB disconnect, device number 57 [ 843.393424][T18986] tmpfs: Bad value for 'huge' 19:15:52 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000520000/0x3000)=nil, &(0x7f0000731000/0x4000)=nil, 0x3000}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) r1 = msgget(0x1, 0x0) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f0000000140)=""/27) r2 = dup2(0xffffffffffffffff, r0) read$snddsp(r2, &(0x7f0000000080)=""/143, 0x8f) socket$packet(0x11, 0x2, 0x300) r3 = openat$ipvs(0xffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x8, &(0x7f0000000180)=[{0x0, 0x8, 0x2f}, {0x6, 0x2, 0x81, 0x1f}, {0x1, 0x4, 0x22, 0x1fbc}, {0x5, 0x20, 0x8, 0x8}, {0x400, 0x3f, 0x0, 0x2}, {0x6, 0x0, 0x3, 0xcb2}, {0x1, 0x1, 0x3, 0x6}, {0x8, 0x8, 0x26, 0xffff}]}, 0x8) [ 843.486955][ T8700] usb 2-1: Using ep0 maxpacket: 16 [ 843.613093][ T8700] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 843.626506][ T8700] usb 2-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 843.635922][ T8700] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.853152][ T8700] usb 2-1: config 0 descriptor?? [ 843.913865][ T8700] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 844.099613][T18976] udc-core: couldn't find an available UDC or it's busy [ 844.107354][T18976] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 19:15:52 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "37b0aa6c"}, 0x0, 0x0, 0x0, 0x0}) 19:15:52 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=a']) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) 19:15:52 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) 19:15:52 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 844.692744][T19012] tmpfs: Bad value for 'huge' [ 845.122369][ T8700] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 845.382278][ T8700] usb 1-1: Using ep0 maxpacket: 16 [ 845.503930][ T8700] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 845.517584][ T8700] usb 1-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 845.526941][ T8700] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.587099][ T8700] usb 1-1: config 0 descriptor?? [ 845.643808][ T8700] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 845.841003][T19017] udc-core: couldn't find an available UDC or it's busy [ 845.848390][T19017] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 19:15:54 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "a8d0f938"}, 0x0, 0x0, 0x0, 0x0}) 19:15:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:15:54 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, 0x0, 0x0, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) 19:15:54 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=alwa']) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) 19:15:54 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000040)}, 0x8) [ 846.149174][ T8990] usb 2-1: USB disconnect, device number 72 [ 846.457766][T19037] tmpfs: Bad value for 'huge' 19:15:55 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, 0x0, 0x0, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) 19:15:55 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x80082, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) 19:15:55 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=alwa']) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) [ 847.244470][ T12] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 847.309986][T19056] QAT: Invalid ioctl [ 847.372367][T19059] tmpfs: Bad value for 'huge' [ 847.495804][ T12] usb 2-1: Using ep0 maxpacket: 16 [ 847.613295][ T12] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 847.626882][ T12] usb 2-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 847.636867][ T12] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.859036][T19065] QAT: Invalid ioctl [ 847.970965][ T12] usb 2-1: config 0 descriptor?? [ 848.051545][ T12] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 848.068180][ T8990] usb 1-1: USB disconnect, device number 58 19:15:56 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "37b0aa6c"}, 0x0, 0x0, 0x0, 0x0}) 19:15:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:15:56 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, 0x0, 0x0, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) [ 848.216406][T19052] udc-core: couldn't find an available UDC or it's busy [ 848.224424][T19052] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 19:15:57 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x29, 0x0, 0x7, 0x340f}, {0x465, 0xfe}]}, 0x8) [ 849.023189][ T27] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 849.272504][ T27] usb 1-1: Using ep0 maxpacket: 16 [ 849.396796][ T27] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 849.410041][ T27] usb 1-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 849.419415][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.507722][ T27] usb 1-1: config 0 descriptor?? [ 849.560297][ T27] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 849.778408][T19082] udc-core: couldn't find an available UDC or it's busy [ 849.785619][T19082] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 19:15:58 executing program 1: syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "a8d0f938"}, 0x0, 0x0, 0x0, 0x0}) 19:15:58 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}], 0x4, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) 19:15:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:15:58 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x7112}) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) dup2(r1, r2) io_setup(0x5, &(0x7f0000000300)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000180)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0xff8e}]) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000000140)=""/197) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000340)=ANY=[@ANYRES32=r6, @ANYBLOB="44f9d0dfa08c640008000000000002680b77b328a36b783cd4c6d93b50f7b73b37b40228030545a67a7921cb705244032243767d6740da3407729be4914165df7e654d84241aa4d747ad435d15c4e3b45c0ccba195cb06568215387c8ba9a8cd5157f83cac2b07f1505f82a07eb6aa04525122b34856bbe6b9e3ac1eed7beba09cbe"], &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240)={r6, @in6={{0xa, 0x4e22, 0x2, @private0={0xfc, 0x0, [], 0x1}, 0x5}}, 0x2, 0x400, 0x611, 0x101, 0x30, 0xff, 0xce}, 0x9c) [ 849.878290][T16291] usb 2-1: USB disconnect, device number 73 [ 850.314656][ T28] audit: type=1800 audit(1597518959.033:69): pid=19059 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16382 res=0 [ 850.399493][ T28] audit: type=1800 audit(1597518959.063:70): pid=19063 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16382 res=0 19:15:59 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}], 0x4, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) 19:15:59 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=alwa']) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) 19:15:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 851.012307][T16291] usb 2-1: new high-speed USB device number 74 using dummy_hcd 19:15:59 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}], 0x4, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) [ 851.232864][T19127] tmpfs: Bad value for 'huge' [ 851.253520][T16291] usb 2-1: Using ep0 maxpacket: 32 [ 851.373071][T16291] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 851.383695][T16291] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 851.396999][T16291] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 851.406316][T16291] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.552873][T16291] usb 2-1: config 0 descriptor?? [ 851.596917][T16291] hub 2-1:0.0: bad descriptor, ignoring hub [ 851.603299][T16291] hub: probe of 2-1:0.0 failed with error -5 19:16:00 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "37b0aa6c"}, 0x0, 0x0, 0x0, 0x0}) 19:16:00 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x7112}) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) dup2(r1, r2) io_setup(0x10000005, &(0x7f0000000300)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000180)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0xff8e}]) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000040)) 19:16:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:16:00 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {0x0}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) [ 851.896583][ T8989] usb 1-1: USB disconnect, device number 59 [ 852.925530][ T8989] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 853.173123][ T8989] usb 1-1: Using ep0 maxpacket: 16 [ 853.293761][ T8989] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 853.307102][ T8989] usb 1-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 853.316596][ T8989] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.540194][ T8989] usb 1-1: config 0 descriptor?? [ 853.637595][ T8989] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 853.789956][T19171] udc-core: couldn't find an available UDC or it's busy [ 853.797693][T19171] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 854.155036][ T28] audit: type=1800 audit(1597518962.873:71): pid=19127 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=15872 res=0 [ 854.175010][ T28] audit: type=1800 audit(1597518962.873:72): pid=19133 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=15872 res=0 19:16:03 executing program 1: syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "a8d0f938"}, 0x0, 0x0, 0x0, 0x0}) 19:16:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:16:03 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {0x0}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) 19:16:03 executing program 2: r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) [ 854.393128][ T3216] usb 2-1: USB disconnect, device number 74 19:16:03 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=alway']) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) 19:16:03 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DEL(r4, 0x0, 0x484, &(0x7f00000002c0)={0xff, @dev={0xac, 0x14, 0x14, 0xc}, 0x4e23, 0x1, 'wrr\x00', 0x41, 0xff, 0x5}, 0x2c) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @mcast1={0xff, 0x5}}]}}}]}, 0x4c}}, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x94, r5, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x40}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004008}, 0x40001) 19:16:03 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {0x0}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) 19:16:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 855.184628][T19197] IPVS: set_ctl: invalid protocol: 255 172.20.20.12:20003 [ 855.244300][T19203] tmpfs: Bad value for 'huge' [ 855.422853][ T8989] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 855.438478][T19197] IPVS: set_ctl: invalid protocol: 255 172.20.20.12:20003 [ 855.693100][ T8989] usb 2-1: Using ep0 maxpacket: 32 [ 855.814133][ T8989] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 855.824543][ T8989] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 855.837842][ T8989] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 855.847157][ T8989] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.974319][ T8989] usb 2-1: config 0 descriptor?? [ 856.023909][ T8989] hub 2-1:0.0: bad descriptor, ignoring hub [ 856.030104][ T8989] hub: probe of 2-1:0.0 failed with error -5 19:16:04 executing program 0: syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "37b0aa6c"}, 0x0, 0x0, 0x0, 0x0}) 19:16:04 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f0000000880)=""/213, 0xd5}], 0x4, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) 19:16:04 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=alway']) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) 19:16:04 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000040)}, 0xffffffffffffffa4) [ 856.121576][ T8990] usb 1-1: USB disconnect, device number 60 [ 856.530451][T19223] tmpfs: Bad value for 'huge' [ 857.082243][ T8990] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 857.322951][ T8990] usb 1-1: Using ep0 maxpacket: 32 [ 857.443626][ T8990] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 857.454011][ T8990] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 857.467232][ T8990] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 857.476478][ T8990] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.873227][ T8990] usb 1-1: config 0 descriptor?? [ 857.923760][ T8990] hub 1-1:0.0: bad descriptor, ignoring hub [ 857.930033][ T8990] hub: probe of 1-1:0.0 failed with error -5 19:16:07 executing program 1: syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "a8d0f938"}, 0x0, 0x0, 0x0, 0x0}) 19:16:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:16:07 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f0000000880)=""/213, 0xd5}], 0x4, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) 19:16:07 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x7112}) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = dup2(r0, r1) io_setup(0x5, &(0x7f0000000300)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000180)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r1, &(0x7f0000000340)="993d3608ae6e9c2a21e192a94cb17f1322b0cb549471a0321c718f5270f8f2c54d80ecac3f62d5c50874df76f824ecdfbdb666cadf48eb08fc76dcc0ad77629484bda6553e8b980a60277d1457d86c8a1bce06ab98ccc6e95b7d66c420f657d64af4053b74306d958528e93498285c3a7d3c9509e2cb7d6ab9c91ecf9598a58c667e88d3aad6e4e5c316a2a364780d6e5adb12d5dd3eb84a7f48f3bd7e", 0x9d, 0x6}]) write$cgroup_freezer_state(r1, &(0x7f0000000040)='THAWED\x00', 0x7) socket$packet(0x11, 0x2, 0x300) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x7) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000520000/0x3000)=nil, &(0x7f0000731000/0x4000)=nil, 0x3000}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) dup2(r4, r1) [ 858.774217][ T8990] usb 2-1: USB disconnect, device number 75 19:16:08 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f0000000880)=""/213, 0xd5}], 0x4, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) 19:16:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 859.445076][ T28] audit: type=1800 audit(1597518968.163:73): pid=19230 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16109 res=0 [ 859.465189][ T28] audit: type=1800 audit(1597518968.163:74): pid=19223 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16109 res=0 19:16:08 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=alway']) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) [ 859.762475][ T3216] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 860.002888][ T3216] usb 2-1: Using ep0 maxpacket: 32 19:16:08 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {0x0}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) [ 860.122875][ T3216] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 860.133466][ T3216] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 860.146758][ T3216] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 860.156099][ T3216] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:16:09 executing program 0: syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "37b0aa6c"}, 0x0, 0x0, 0x0, 0x0}) [ 860.348784][ T3216] usb 2-1: config 0 descriptor?? [ 860.394098][ T3216] hub 2-1:0.0: bad descriptor, ignoring hub [ 860.400302][ T3216] hub: probe of 2-1:0.0 failed with error -5 [ 860.415627][T16291] usb 1-1: USB disconnect, device number 61 19:16:09 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0x9}, {0x6}]}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000080)=""/174) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) utimensat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {r2, r3/1000+10000}}, 0x100) 19:16:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 860.468255][T19287] tmpfs: Bad value for 'huge' 19:16:09 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {0x0}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) [ 861.332747][ T8700] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 861.572623][ T8700] usb 1-1: Using ep0 maxpacket: 32 [ 861.693429][ T8700] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 861.704463][ T8700] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 861.717709][ T8700] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 861.726963][ T8700] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.773931][ T8700] usb 1-1: config 0 descriptor?? [ 861.851575][ T8700] hub 1-1:0.0: bad descriptor, ignoring hub [ 861.857980][ T8700] hub: probe of 1-1:0.0 failed with error -5 19:16:11 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "a8d0f938"}, 0x0, 0x0, 0x0, 0x0}) 19:16:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:16:11 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) openat$vimc1(0xffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) 19:16:11 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {0x0}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) [ 862.873833][ T8704] usb 2-1: USB disconnect, device number 76 19:16:11 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x4, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) 19:16:12 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$mice(0xffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x1aa000) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000600000066000000000000000600000000000000995a000000000000c829000000000000"]) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r2, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a45321, &(0x7f0000000140)={{0x9, 0x5}, 'port0\x00', 0x2, 0x0, 0x3, 0xdc, 0x7f, 0x5, 0x8000, 0x0, 0x2}) [ 863.340753][ T28] audit: type=1800 audit(1597518972.053:75): pid=19287 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16085 res=0 [ 863.360740][ T28] audit: type=1800 audit(1597518972.053:76): pid=19296 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16085 res=0 19:16:12 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(0x0) r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) 19:16:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 863.866538][ T8704] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 864.122656][ T8704] usb 2-1: Using ep0 maxpacket: 32 [ 864.243061][ T8704] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 864.254001][ T8704] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 864.267255][ T8704] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 864.276597][ T8704] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:16:13 executing program 0: syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "37b0aa6c"}, 0x0, 0x0, 0x0, 0x0}) 19:16:13 executing program 2: socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @host}, 0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x8}]}, 0x8) 19:16:13 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x4, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) 19:16:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 864.563510][T16291] usb 1-1: USB disconnect, device number 62 [ 864.617087][ T8704] usb 2-1: config 0 descriptor?? [ 864.667407][ T8704] hub 2-1:0.0: bad descriptor, ignoring hub [ 864.675305][ T8704] hub: probe of 2-1:0.0 failed with error -5 [ 865.462180][ T8704] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 865.702057][ T8704] usb 1-1: Using ep0 maxpacket: 32 [ 865.852477][ T8704] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 865.862875][ T8704] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 865.877978][ T8704] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 865.887220][ T8704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.064265][ T8704] usb 1-1: config 0 descriptor?? [ 866.114375][ T8704] hub 1-1:0.0: bad descriptor, ignoring hub [ 866.120582][ T8704] hub: probe of 1-1:0.0 failed with error -5 19:16:15 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "a8d0f938"}, 0x0, 0x0, 0x0, 0x0}) 19:16:15 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(0x0) r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) 19:16:15 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x4, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) 19:16:15 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x7112}) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) dup2(r1, r2) io_setup(0x5, &(0x7f0000000300)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000180)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0xff8e}]) ioctl$VIDIOC_TRY_FMT(r2, 0xc0cc5640, &(0x7f0000000140)={0x9, @pix_mp={0x7fff, 0x7, 0x34524742, 0x5, 0xc, [{0x7ff, 0x28b7ed07}, {0x1, 0x80}, {0x5, 0x85}, {0x86be, 0x1}, {0x200, 0x5}, {0x3ff, 0xbb}, {0x7fff, 0xffff8b12}, {0xffffffec, 0x5}], 0xc3, 0x7, 0x8, 0x2, 0x1}}) 19:16:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 867.325239][ T8700] usb 2-1: USB disconnect, device number 77 19:16:16 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {0x0}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) 19:16:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:16:16 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(0x0) r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) [ 868.493717][ T8700] usb 2-1: new high-speed USB device number 78 using dummy_hcd 19:16:17 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "37b0aa6c"}, 0x0, 0x0, 0x0, 0x0}) 19:16:17 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x7112}) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$VT_RELDISP(r2, 0x5605) dup2(r1, r2) io_setup(0x5, &(0x7f0000000300)=0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000001c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xcb85, @bcast, @bpq0='bpq0\x00', 0x3, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000180)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r2}]) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000040)=0x800) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff020}, {0x8, 0x0, 0x4}]}, 0x8) [ 868.732114][ T8700] usb 2-1: Using ep0 maxpacket: 32 19:16:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 868.778943][ T12] usb 1-1: USB disconnect, device number 63 19:16:17 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {0x0}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) [ 868.852210][ T8700] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 868.862636][ T8700] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 868.875906][ T8700] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 868.885264][ T8700] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.108707][ T8700] usb 2-1: config 0 descriptor?? [ 869.175543][ T8700] hub 2-1:0.0: bad descriptor, ignoring hub [ 869.181999][ T8700] hub: probe of 2-1:0.0 failed with error -5 [ 869.697658][ T12] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 869.958807][ T12] usb 1-1: Using ep0 maxpacket: 32 [ 870.092141][ T12] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 870.102557][ T12] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 870.115824][ T12] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 870.125082][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.311418][ T12] usb 1-1: config 0 descriptor?? [ 870.354193][ T12] hub 1-1:0.0: bad descriptor, ignoring hub [ 870.360425][ T12] hub: probe of 1-1:0.0 failed with error -5 19:16:20 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "a8d0f938"}, 0x0, 0x0, 0x0, 0x0}) 19:16:20 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(0x0, 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) 19:16:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:16:20 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x12c, 0x6, 0x2, 0xfffff021}, {0x6, 0x27, 0x0, 0x2}]}, 0x8) 19:16:20 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {0x0}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) [ 871.736060][ T8990] usb 2-1: USB disconnect, device number 78 19:16:20 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) r1 = gettid() tkill(r1, 0x1000000000016) r2 = gettid() tkill(r2, 0x1000000000016) r3 = gettid() tkill(r3, 0x1000000000016) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'\x00', 0x7112}) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) dup2(r4, r5) io_setup(0x5, &(0x7f0000000300)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f0000000180)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r5, &(0x7f0000000000), 0xff8e}]) r7 = clone3(&(0x7f0000000240)={0x100000000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0xf}, &(0x7f0000000140)=""/38, 0x26, &(0x7f0000000180)=""/106, &(0x7f0000000200)=[r1, 0xffffffffffffffff, r2, 0x0, r3], 0x5, {r5}}, 0x58) prctl$PR_SET_PTRACER(0x59616d61, r7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) 19:16:21 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(0x0, 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) 19:16:21 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x4, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) [ 872.612313][ T8989] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 872.862374][ T8989] usb 2-1: Using ep0 maxpacket: 32 19:16:21 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "37b0aa6c"}, 0x0, 0x0, 0x0, 0x0}) 19:16:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 872.983605][ T8989] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 872.994293][ T8989] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 873.007632][ T8989] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 873.016954][ T8989] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.032860][ T12] usb 1-1: USB disconnect, device number 64 [ 873.147514][ T8989] usb 2-1: config 0 descriptor?? [ 873.195399][ T8989] hub 2-1:0.0: bad descriptor, ignoring hub [ 873.202484][ T8989] hub: probe of 2-1:0.0 failed with error -5 19:16:22 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x4, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) 19:16:22 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(0x0, 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) [ 874.063282][ T8700] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 874.302179][ T8700] usb 1-1: Using ep0 maxpacket: 32 [ 874.423787][ T8700] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 874.434653][ T8700] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 874.447905][ T8700] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 874.457189][ T8700] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.532944][ T8700] usb 1-1: config 0 descriptor?? [ 874.574897][ T8700] hub 1-1:0.0: bad descriptor, ignoring hub [ 874.581001][ T8700] hub: probe of 1-1:0.0 failed with error -5 19:16:24 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "a8d0f938"}, 0x0, 0x0, 0x0, 0x0}) 19:16:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:16:24 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000380)='./bus\x00') creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x208200) r0 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) 19:16:24 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x4, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) 19:16:24 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000040)}, 0x8) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141142, 0x40) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000520000/0x3000)=nil, &(0x7f0000731000/0x4000)=nil, 0x3000}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, &(0x7f0000000080)) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x6) [ 875.932780][ T8700] usb 2-1: USB disconnect, device number 79 19:16:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:16:25 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {0x0}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) 19:16:25 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000380)='./bus\x00') creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x208200) r0 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) [ 876.711976][ T12] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 877.002577][ T12] usb 2-1: device descriptor read/64, error 18 19:16:25 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "37b0aa6c"}, 0x0, 0x0, 0x0, 0x0}) 19:16:25 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {0x0}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) [ 877.330103][T16291] usb 1-1: USB disconnect, device number 65 [ 877.432569][ T12] usb 2-1: device descriptor read/64, error 18 19:16:26 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000380)='./bus\x00') creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x208200) r0 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) 19:16:26 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) clock_gettime(0x0, &(0x7f0000001f00)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001e80)=[{{&(0x7f0000000040)=@ax25={{}, [@rose, @rose, @netrom, @null, @default, @null, @null, @netrom]}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)=""/187, 0xbb}, {&(0x7f00000000c0)=""/42, 0x2a}], 0x2, &(0x7f0000000240)=""/154, 0x9a}, 0x78c}, {{&(0x7f0000000300)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000380)=""/106, 0x6a}, {&(0x7f0000000400)=""/100, 0x64}], 0x2}, 0x7}, {{&(0x7f00000004c0)=@ax25={{0x3, @default}, [@remote, @remote, @rose, @default, @default, @remote, @remote, @null]}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000540)=""/178, 0xb2}, {&(0x7f0000000600)=""/216, 0xd8}, {&(0x7f0000000700)=""/201, 0xc9}, {&(0x7f0000000800)=""/6, 0x6}, {&(0x7f0000000840)=""/170, 0xaa}, {&(0x7f0000000900)=""/200, 0xc8}], 0x6, &(0x7f0000000a40)=""/126, 0x7e}, 0x3}, {{&(0x7f0000000ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000000b40)=""/59, 0x3b}, {&(0x7f0000000b80)=""/236, 0xec}, {&(0x7f0000000c80)=""/28, 0x1c}, {&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000001cc0)=""/46, 0x2e}, {&(0x7f0000001d00)=""/209, 0xd1}], 0x6, &(0x7f0000001e40)=""/48, 0x30}, 0x1}], 0x4, 0x60, &(0x7f0000001f40)={r2, r3+60000000}) getsockopt$packet_int(r4, 0x107, 0xe, &(0x7f0000001f80), &(0x7f0000001fc0)=0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) [ 877.702634][ T12] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 877.902038][ T8989] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 877.984793][ T12] usb 2-1: device descriptor read/64, error 18 [ 878.152189][ T8989] usb 1-1: Using ep0 maxpacket: 32 [ 878.273015][ T8989] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 878.283655][ T8989] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 878.296948][ T8989] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 878.306260][ T8989] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.393189][ T12] usb 2-1: device descriptor read/64, error 18 [ 878.453336][ T8989] usb 1-1: config 0 descriptor?? [ 878.494302][ T8989] hub 1-1:0.0: bad descriptor, ignoring hub [ 878.500513][ T8989] hub: probe of 1-1:0.0 failed with error -5 [ 878.513085][ T12] usb usb2-port1: attempt power cycle [ 879.275178][ T12] usb 2-1: new high-speed USB device number 82 using dummy_hcd 19:16:28 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "a8d0f938"}, 0x0, 0x0, 0x0, 0x0}) 19:16:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:16:28 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {0x0}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) 19:16:28 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) 19:16:28 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x7112}) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) dup2(r0, r1) io_setup(0x5, &(0x7f0000000300)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f0000000180)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r1, &(0x7f0000000000), 0xff8e}]) r3 = accept4$bt_l2cap(r1, &(0x7f0000000000), &(0x7f0000000080)=0xe, 0x800) io_setup(0x5, &(0x7f0000000300)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f0000000180)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0xff8e}]) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000005180)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'\x00', 0x7112}) r6 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) dup2(r5, r6) io_setup(0x5, &(0x7f0000000300)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f0000000180)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r6, &(0x7f0000000000), 0xff8e}]) r8 = accept4$bt_l2cap(r6, 0x0, &(0x7f0000002d00), 0xc0000) sendmmsg$sock(r3, &(0x7f0000005040)=[{{&(0x7f00000000c0)=@in6={0xa, 0x4e21, 0x10000, @private1={0xfc, 0x1, [], 0x1}, 0x1}, 0x80, &(0x7f0000001380)=[{&(0x7f0000000140)="cb41bde3b67fa49ae5cefaf633c4f65107202c4ed7c8ac546f1ba3370b2ea1c9a6df87555b3ce52e2bf4365155f6ccbaa26c4c2ae41ab5bcd30153699d952f8ccb8fe23f3efced4ac741d1", 0x4b}, {&(0x7f00000001c0)="53b2d46b7806ef688b92182ef7b2b9602ca2743df09247996fc4f3e350451de7b26cb141f31879666ecfcd1e72f630beef90683c933c27e902436194297cc51318c2494af6c0e2f50c41683241e4bbf169e1acdd142ec1a8b3610d6950c39e11620bd04a3ff3bbfc91c8f253a3240b77bb20bc68e3a1e3d2612a2d5eb22fc13c0dc66957a35c0addc0b81bafcac255973d62fc1cf48deb4247", 0x99}, {&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="25bdc4f4be42b9d6a3fc2b208408d69c0efa0e000c1b468f7f5173b5ec18785f20fa1cdd761ce507dcffc17f2de2e51a5329197a3206a35bcfa548", 0x3b}, {&(0x7f00000012c0)="80801d6b011d85d8ddfc06cd9856dd1e0e49d1e5c32b4a598f123d6ceccd5636b42b02eb4aad78329afe8a7325c785836f9d3b8102f3a276c086a128030ff786029ac4b15e8e9ea59d306604e64b2b824c4f0b7d0dd19268aa0c59f0ac8a", 0x5e}, {&(0x7f0000001340)="687712cab516aee3656c3b6ae9c3f451491429b178fcdecca2eb67dc687b0513e9fa8855114096d6eb3e", 0x2a}], 0x6}}, {{&(0x7f00000013c0)=@tipc=@name={0x1e, 0x2, 0x0, {{0x41, 0x2}, 0x3}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001440)="6d30ba0a20ac492c6263f1f307c18257926b8c0f19269c7a5e3ae20614d5493704f9274424e1c2c1268ea217c474561a7fe5f6c55183f8ad730ca1c4715410104a29b3a6fe2193bbcbd0bf9f5b4a486aa6b41e6040d0de11fa1f8f6075d6282a8d98f6421737b20053497ce83c358ed4b6481e6568083a88ae0baf8f220f6fef96fdee36d9391fe66885d7c01e1b0f8ce8beda0c4a62d59bcf92b5d0de55d4a5f172fc55e61ad18639a3f506fbfc973da460b4567abeaa04503bdd16b825a4742c44aa4d3df073f7", 0xc8}, {&(0x7f0000001540)="5127f920d093f5f6ea2347b004fddb57572902ce580be50591ede697b0e5cfee1ebb228d27a52a95282393a330f45b413346709f7e7017fe5bd878d0b2de371080fd5be79304adfde650cdb2e4c24e64bf", 0x51}, {&(0x7f00000015c0)="1ee4e88d77b7eb5fff301d552991ef3e3e8dfafa2dd9890c40ba939d3e956d2dd1f4f1837e8b1eb001482b1964179c11e6e93b310080cbb05ef1e5c1a7eac283ab1f4586abe73355d6ef5f5bb41e3acae76d476f993e4257370829e58ae24a359af0fdd79eb7dcbe26a1266acf8a3eece60c7c05ca369bb84dc84ea02ae9379642928b19aab292b1bffa5012d33be0735a7ecf6e03237f70aea547edc6ecbf28e296", 0xa2}], 0x3, &(0x7f00000016c0)=[@timestamping={{0x10, 0x1, 0x25, 0xfc}}], 0x10}}, {{&(0x7f0000001700)=@xdp={0x2c, 0xa, 0x0, 0x17}, 0x80, &(0x7f0000002780)=[{&(0x7f0000001780)="8aff751b0987906dfea8156b96d332c233311efa9cc8f41f905036ef19d01d95b71fc3b9451126b52c547d6b96436193a62f8124a9aed3e472d14fe84e2d352ee9d5385f471184e2b5bad4cc2d928276f1d97ecf9e80f59b2e032808341e657b530001ce176ee0730c5adbcd6becb573500fd8cfb835657e16a34552adcaf813c1e3d8c9696d191617ac549fd284aeb411d166708a6771cee0948b947b01037ec5ab40aaff3964b57fe6c22822af89313242eadc239a4f370fbf2203ecc956831e88edfb7531a13cf6b1ec5a7a90a4acdf89b088a9640b00f37411863ad680c4f7222f29fc7b94de2ab599dcfafdef3a0ce99589ef70f2681a95fe1b6ee049207e5284e6a8e1b7d681215fc6fbe7c2263a40d05471de2d81dffafdfc86675a6b6629381af73306998044a6b1adc3d46ed195357cdeea8553f9d7a1bb5b0a3ab7bef880a91eca7f67da69bb732ffe323309402d616115698fc7ba4cc1b2c4436845e0f839f12ca79ac5c32c4c9bd74f5ad69534473fb6ed518b0ab5b3453b9f93ab608fd52ba0c96a2c138a96205faebb6226a2933c0c8bfdffa4240c8b3284dfd167fbf75fc8a6ffc9dbc1651d8841be1162ead6172c0b58a703644d47d3b1d15d4ca702793580387241c0a3cf9c284869df30d8bef9ddc1817d5cd38ed067940b3b3dcec2744b7847620e50c8920e89eeddad1273321584db025450b8b823906177b91fc7db56fee4206034b6262e116f1e7d6e1e3e234a619acc1259aca7bc764d130b35e439ab514efe217cf715ffb353f025d91f159ccdf436691839c40f733875377eb0072d1a3c0c621e1302b57c868453d40c8cc6ba5601ce9986a6bc337f5b37e9f1826737dd25e294e487779a64db9402e64b38ebfcb2451cb96c07799a4e7a58656c19a609754cf7a7ce46c32c843984ff843c3b7cfcd8c4568e97919a85e9a4c0ee40b8d370529e0ea875b84f369a775463d402f1e3f584830395bf12310145f8a017b382d0d03afc4701e1351b5f37dfb497dcb8936d6dc7b0e92b41a89a45d70ff46ed61d2f583d84786671abc73634432c0cd3f78951cc10d4352f87ac4bd8e7946b9d2b760042ea56d34c53ddba161266be07234cfd0daa4c9a5c1af2a0c07a1afb4ef546a2fd58874627d5bd7040e52d1f63d439f7fcbb0d22e37ceca06dfe405267d030670874d1f909c164a7711822c319587b4367348008016d2c348be20de81a1cfcb65cace1fd03d4cd161673626234daab4aef50eda0d37fd2c80880cc7c92ad6008f1273d9caf162c64deb866f147c4d156325e8d3e44d6a30304665ea5f7ef2bd7f68997d7bffce6ff0e4fb6fb04942316e277ee55b18928c61fef29982e3d7ecdd3ddd92bf35a70b8324a2c226936150cd990f261700b47000149e1aa674eb4cd1b83120fcdd5e4a6d0d40e9893e3a861dc1c56e061680a90dd330c07ce381412938b21361f059fd856308e97cfeb7249b21347a27b4ecd133a4f85a87eaaf2e92555142cca34d8eb7d81fc97582283160a9263c283f69832bbb82d8f2db39ccc0585a9eacff5ef1eb5f2d942a6b888e98b99d548b3288840fe70fd42234d0ea17179a49f856f8b6b58d544a8b42c76a95e19232e110f09b14fc2c4b0605656a25fef034190f858f2dda54dc0b3fcc699cd009b7511e695dd6c0bd3a2fdaae3e559e8db13c397aaaf90cb21b4a7c689b17eb2bd1733f6e5d78275869420e729089e59115231458b0e1257db264a735a3839da5774796db2d6244cf03598b52dbddb20541fe6aa8f46843d855da640120a5bb314ac95b77aa595118de209e581b70952d4a516fce05ff3b135feebc3bd9716294a3468214a98796de41168a0266f90b4f57dbedb86acc7d22b3d3ceb17ba990f8056d4647aaffb71f0d3b4877ac19b82f8d46d4b2ccc75e8c50087b70569dcd9bad8727b40c7064a5d766d1db8cad3e16c219c90e29f53652e0466704b1c4cbe1301b9780f4be572d1929dfbcf7401e55f4a04ce7f49977ce127849a4d525e6d11e6bd7d99c6f01ef7b490e463ce0e9ef9a437768e06f68fceecfa78ed4a1adaf0dc81efcc35929db33bd1a47ce65e5fafc0eb010cfc4ae4d8bb6ecc3119588cf9e4d1030d938edfd46dd4ab7c4b5f7777068aa6d2918f8b3d38fa690c5f1b685e99f58aae93ade3e37c4dd2170893f38bd3a97bb789f44b0c92772cfc632ef7a8852f3ec2ff4f1d4a643b6a909075f0543e8ed9da7ce3a5904d477dacff008316668805db87f5a87d928cf0b9333dab1f4e2bb90b4b840a0984b65de857ddf1625a3d78db090082f093399bca98f4fe10d9de125496f894e22d62df676bde1a84e86f69a41deed80eadae5859717160eade3591648ccde10929b42111d90665a8e2409d013b02c40c0fda216653d80858e0dbad9b4fb8c9609e6c19cdee67e3e6accdbfb68d77f3d1f239091a5fc4be79764b0c5b240bd6466867474ddaff818ec0d0f4b25cbe0f943811c56e91085bcd8add2af6eb38dc9f87699a45494bfbed89ec1f843e9d622d3be3dd4f6648f67c2130a03a3e5fce988a42d78495bb510abfca8e5339fe7be02d79a0349bbd3f4ad9cbba4dd5562a4395d895a2ca6bcd64ceac40afffc8d4da2802743b882054a3fc10184b60c57b0623d39ffa14e65158b406a65ea05c12ec136a3714f1a9b29679561dd8cfbb3680db57f633e0c23f3279fb28aacd04dca54bcd884ff81fd39843c3f5166bef19164b99c613f380f2b6be42b0415ffdbeb5beb02fe3ac5bfe3a152d6d6a7723c8c493c7e08a432d92e0ca5c1b75a19a1540cebc25e4a0d0d405823db05e09f3a6f837628526671dd7bf33ef5b584097dc69e46336bc4fc05ecc938f4f3e49d9a03619d35f18cdff19428b0777f1e7093091306bcd6953e7459f25ff7a267acd6c4f28b3d0286a4039d3fd11fdd5ccdc12096a2ebfbde2f56b11f6c0d78b9e1ed6364ff9abba8d27b6241cddd94ddcb42a98174055e10242e2d3ee757fd23e8a060cd4920fd456f07eed9887beacf843a9f753f6eaa78e077125012fbd2f53ec69a46340669b42e95138c6b8191d27ec059abc45e886a9d0167dc052d5a58d72942aedc87a884f7b353921489e7d0c146daca33c52f9509fa041e2784dfbc66907426b1b9886c09dbe58788e09776af9145cfe2f91787f413e6cbfdcb0b26e367d42a3ad2390c2bb55bd74ece1cd4de20153a690bcf697c707b5f5c553e82522a0061d06740fc2b468410d30918b410de5b0113b39b2f0d557fa1d38a3c6a9b16acffe4a39bbd136cef26ce4b6079e6d9f5e8932ce30ec28bab01e0a6c21e1a3227b71b17c99bc64832ce2ea73334aadb30f4814683cc2e8f5410246d3c586b954b102b2859e2dfd306bc00ef9bd6fa1b841efb2e1751d4d6ca01e38c1fd0bc7dc343a2b7a8063df1230ef9083f72ececc971d0475025881342a038005ee7351309a7352e7b3f27634e5290102d46e614cbd2d620402a8a31e324a3994fe43871a917f423667dfa2f8544788d7ee58d8561baca32f8a2f723437af9566d832a07aefb3f463723bbe74b768e7877db64adcc8102bfd1baf965498806a024dbd66f94cec6ca3b0778a7dc6f8a506b3e6e4d75fb64ce9216bc1ee7e6f7a9b08af0ad27977f1c67ddf83b6225639ad4561bff1388b242eda8ba63c512f1c43c0fa4466d7c10e58354dc4e8ed9f7a62adb9be0c06dea76dcb5a1b3017bc3229bc0ceae4cde3a72c353cdb2b80487937bacfb74a841dcf1bd886729c556b3a35748bdcf0e0f4c0da4bb656206ab11b0e8ed91ed04663f9e85d75cff108f0c61c211505041b90c9be022a0fa65007ddcee2a29eea48dbc833e9f6d44a235ba8d4415f746e214f3c375af32691b7b909e68d42ec7f6e876ae9c56f51c8fa8405b82adac17cb95b133f717481aafaefc8b28dc5383b36349c7b0c43523b340a3d8d15f04b75ca918ab34c97e5d075e11fe80f612a139c893f66f44f17cc603f46a1cc1ded26437a4fd3a9bf2a19660c78f20501c366d0a8096a45bf1eef75ff06eb1b7cde0195e6afb4f195e163b13e11ea90a3fc970c687e04f0fd557adeb2f36288d05ac42a0d53b73080c25c3d484dbd6bcaf29af5081c591c0a93d548b8ec40e16b398649ce578bed0f5564093a2242d3e22b3b7a13c3f1c77470063f741e3df032fc9941f7df93a5c1f9fbd3f363f966cec9144d30f90680eb1f50a897dba2559cf750ecfa606760e726400a32546643e317b55ed330b254a860c7b0f07b06f2541e20b99902eb4da58182b78a07fce6f8a6589abed01597f3a8acae7bf5b726dff6d3ae881c4f6d82783765360d12fb773d08a22c958d5cf0b6171baf751e2b967bbb93dec0a64597486c13e91634f9a57309d3e6aad9031cf462c9fc735125a67cb21ac50b7ba50333d5585c8684a26659a612c0e3ca6487ea79e41b405ea8f79c4983790b2f7c7a7b1c7383b9a6486ca8b97b77f67423f16f41cbb8e3556c759d6b12e7ce9a39a0c1b52b816631a2a05d71116dfd3116934ba694267ee23d174803fc886bf93e8c5c5ea6b9d7ccf6af3f0277e965aaedc0f211b8061d200651b396f7f45c2f425c16a09922cf96710ce77b6dbb1639eed3837cac4467c8f220d4f8aa1eae7c68abc9ca78cbff09e010256483b2815f611c968a727ea72912ebfdc2e9647cd33fa79af9b38c49d859c4c93eaf77bc064642cd9b920e0a4e716fe55e57de63f08083826ed0249503601715ea43fec88515975f42f018a1400fba222d65e7251b4d84c6ee5291af00175ee1b2e7b64018bef73f67e096e99c74eedb23379c742f6249585f5a030450bfd30b38d2c3df007f9346db5bba2486c43693eb33ca4a9f344d0bd64e43aae8572fdc6d131b511359589036b5326d81ae80a2f358c022eec7f8f6fde4a5110e8539ae546b7b8d5bf694073a11991b5f9c5074690fcaa1962ab01c2f5905c388ebf8eca89e144e793ad5325e588563b002ab92304ac446034943378db6ce873aaa1e5b4e0b6d0f75f1d9b1083e9708ef3bdcaa665c624527215b186a7dd6780df8db004af2e36afdbe5ff843908f2e9e745114b6390fde1ced6d82d7cee7754e31892443328891b898e04a325e4b2b88587e38ce8345e9152a961917cdf8158839b613bceb35fdbd0ff630756a4748d6e00d31903b0406ae9b362fa59eeda8e513b2f77d4fcc2ad0201961730fd0212fe63b8f9e1792692598c7ff5ac471ee1d2b373f67d2dea44dbc28afd4d2c195d08fd4e2f6331f97f7178c2de8923bb710e80727b4b33b8b8776b171db192503ba06228232ce76aa09d671b07abecb4063cc4409efe1063fc48799f2e7e83c5b30fe8863fe906caf8819fb8b5de0bfb70551601da49e48f55d9795eaccb434b0c452f22158d776664e024d3857c21563ff9f7adf214fc20d33e7136cd0709af77e5fab72f83e4f12ac59d4ff91665f26a0aa5ccc82724f49ccf071e92f1c35b0686e0581cf62e105fa6362abc2fd5d550c987de3bb8105a54b32c1208c95742127743778fd2067093d65a9efe401b320a29aaa4ce007f70a4df068d2c2b4a83b1a54f8114f5cb3bdab54a2873198a5d48147fb25d39ddf187ebcf709f07366b2fed84d64a44ef7faf2d28317016582c1ac2e7086caad733855ef56f40e7e7cd82cfec32a5e51286beed1ce11ccde1d75c38d115a55f5ad77299d1d4c0b34e351049a5f303dba2ba67312926f402b9325b360daf6771ae28008e0a93140904e406586f4537564c036bd558e92cf72", 0x1000}], 0x1, &(0x7f00000027c0)=[@mark={{0x10, 0x1, 0x24, 0x7}}, @txtime={{0x14, 0x1, 0x3d, 0x7fff}}], 0x24}}, {{&(0x7f0000002800)=@l2={0x1f, 0x1, @any, 0x3, 0x2}, 0x80, &(0x7f0000002cc0)=[{&(0x7f0000002880)="54100c8dc84d828b335817c910284b3d8c1747b953921027ffa0fda3705b87c9548d3c7157f6d3146bea5a064d91e843e3401ec72cc6a64a2c9e630d82190374816be08b65c79c5ded7f74", 0x4b}, {&(0x7f0000002900)="f3af6085f0e614f8ba733fa1aa29f66da4793c43d7ee6b558c9ed4e67dc32d2c007fcaa91887f54215d60fd6e989eeebb4ec0a4fda4bb509e802f88149ae58a1b96001c2ceb422d38c1ffc92fb2762ebdef5417a2b7bf98b073242209dff4d5cff1db072e75fd20ff19d77107d23017d3cd9c6021c5e79629cc2664201c063b48742d12997b1d997940e92c47c475e296dada807b0", 0x95}, {&(0x7f00000029c0)="6ec769abf476804958813415037e6fa8cd93844715324241445902c5f52cb5e0d2d6eb2b023164216bda4ae47dbb15e2480ee91417cecf628868e12a603d16ea27faf4b4d5ae68c24ea8212b04a3c059440c6c2dffbd05ec0bc86533022bfb13da121a9d395a8ce1c5756cc0baf338bf9c9cef53df9ad0fdf1c031d2d53ab3046aa3a25bd65a92657326489e25dde8cfb83761d244d2cfc6aae43a4baebed227043662a54b0bb162232de92bb7", 0xad}, {&(0x7f0000002a80)="b3d8e7fa356a50f34c054108bad901133b5fe1b03b3742b6e4ef", 0x1a}, {&(0x7f0000002ac0)="e9264d2e8e64dac57281945824f04d51ffdd8f07fa8eeb762f22dacba17e14fa16504be5b3c4ccc5c26c92240e0d", 0x2e}, {&(0x7f0000002b00)="07c9ee891c104154735dec970cfa301cde197c7f9447c86a390e5bb3d62ac37aa80cc51a9fb92a6637dca07597bdf19ba0c772421616bf27e4c4fc625264c6fdc4f58c7a4e7a6358345556dcde46eb96fa6c78b9c9667a19e466c49535f590d600a363cd565e0c75bd55fff0b851245b63df171dd8f0d25c3d032c1986794e8340ba4bd0f4061df0c21c3a7ed8788b28cdc32c6944a0ff47b5192ec7b385107cd4bce42321bbd89163b8098d245813db85787131d4c5b2cd25b4d7a498cab71caa2577a1585b2a88ff44a3ac8b32ef", 0xcf}, {&(0x7f0000002c00)="867b008bda32a5e63020331c8c9a3eb3eb0274e19ef39f821322cd09d44642f36516d17774651bd6c6d6f05860af1f394edd350d7a1e6426f226d0db33bfa293e8ea1c1838a33f52522e12387529a8e64bbea0324715c7382c0c25be89958a99a93d2b1cdd2ce373b66778b31b6bfe3c8ad98417d623db6c07ce8cea15a09559041e3ecbc2c181a103fee48e3633446834e165bedcfb633de7f8ab3874ff7ece37e7146b904eb602af02b6ad7eda3b35b60249da21367ea9de77fd04", 0xbc}], 0x7}}, {{&(0x7f0000002d40)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x3, 0x0, 0x4, 0x4, {0xa, 0x4e22, 0xae, @mcast2, 0x8}}}, 0x80, &(0x7f0000003300)=[{&(0x7f0000002dc0)="14217fba1ffe2594050e44dab57fa2e87f6f6a00e9ca66ceaac8c43ccbee6cc727f36ec112c168a82e2723d05750c83ec4744c0dc71685593920d9d0b7fc68e47c0eb02a4fb3e07ab310fe9fe10b38ee8f1ed80dbbdef55ae9f41c1da61c351c69f85f8f4e044257cb6aba998d15da9ddac42698cd61ee3d191b3564b6eef7dec0a2403b1c81d4be638ebaa24f82425202b43d5ebd6663e5640e98175ccf6e6207b73ba5919b9fb4385049c52983a463802b56d2a7c53c15f147df55f0276f4497b973", 0xc3}, {&(0x7f0000002ec0)="01717ba0e6d8067f48d827df4f13167d110a6f3af045eecf6ccd3e1fb7584c38dfe37903b06b04ffb1a2d880b04d6a16bdf77743668b9a0d1af7e592bf979e804168dcb8e09fa7f177af1a5b", 0x4c}, {&(0x7f0000002f40)="c01a41a665aaec89b19a4343cb92e8ed23fe15657353a008733aab3f9f599b54dfe714d5ddc0af58cb2b118803ed7a2258d6177b26fab51b22669287e99edc874041b26f565eee4d17d3482f34a468449903f45217b0cf7e3559ed1451d3faedc40b3f54985373750aebb98b7228ffcd46b2cbc35131fed890d03074778730f04a66dd248de3ad154d8dd68c0e484b8093ca4eb21a9b6df23adb30c56730ed297f4632e8813118ab8d2b2c92", 0xac}, {&(0x7f0000003000)="9aa74a3dd0644456fdbe94642c72c405e297f6d4e53acb825f7e7d1a0735cbe5cf43e2dfd41e05d1ea1a4452887648b90638e96e6d887877f45bbaccb105a8f7dbf1b8128c2fe5b53993ed6ae2f17f2ca11439a8ecec3b71ebf4b5ef8df304ec36053a352596218f4dde6d75e31b2dea24fd82b2c91aef55d50dc5e35439fab7ad96592dcb845b4d13d4222fcde01346d6290b318a481b1bde48e57bb306a4bddaacd547c1b330136df00053b799348e32ab68aebc", 0xb5}, {&(0x7f00000030c0)="bdeafd80e08312e5bb556d39677769abc43e48b02dd77ff016529feceb9d22e8fa41754d3f24a2d6e4d0c51aed222cc5b84e3c1df4641c042a76eeb443ce3742892856452824f67ef26bd6129da31abf2d852a05f1b9878e1789e4635805c8fa45f59c54076dade186b75659629fdd1b04a2d180cf4494894b3328", 0x7b}, {&(0x7f0000003140)="3661a0597d4c0ac31cda55a5ed22bfb64ea2fb98bf3af808d750bc1706aa596b85d6dca9d8852456d0e579a385b449d2c441f133cddccfdc071b6a480faa7016db0f5fb9acab949b73792203e0fcb57986f45487b09d63058765ce6a8ed171320ff55b2dcb07c18c78b1c71892", 0x6d}, {&(0x7f00000031c0)="e8c30c56f8ffd67d6d507ef4ee7bad6ba0bac50833431f4a8122b230c0cd2110b85ceff8963c1f3a1f67c5a36a42162827c177ef4fd1b31b51a248ec6a1b12e5523d0b61d3fd37dd012917268334704c117add8b966b5198cc609e2e6b40ccf39eb577e2156b96fc1ee4", 0x6a}, {&(0x7f0000003240)="2babf01690c9183fb5781ab954d5ca54a8b58a04a18a162511cc8e9e9e2ced957be6464cf36892785d8e1790151c1682da6089da289c7c8a42b33ab146599cd8d5a4f1cff92f27c5512ab9be72f80754d70e9dc18294700e05f7e95bb37d6f776aef155523c06f4ed4129ac1d65e4d27e4c975e7c62aa40b3522dd547ab20c724d852df17b4f0f5461a20cfc6256877c1a0057e749894897aef841b81ac501c17ed325dcd3b7c24685f3db", 0xab}], 0x8, &(0x7f0000003340)=[@timestamping={{0x10, 0x1, 0x25, 0x8}}, @timestamping={{0x10, 0x1, 0x25, 0x80000000}}, @mark={{0x10, 0x1, 0x24, 0x4}}, @txtime={{0x14, 0x1, 0x3d, 0xfffffffffffffffb}}], 0x44}}, {{&(0x7f00000033c0)=@rc={0x1f, @none, 0x5}, 0x80, &(0x7f00000036c0)=[{&(0x7f0000003440)="753a96991f1cb1c66227cc541ef4632e013186f0dd8703db9adcd6ec6d45e7a0607e6bdddf4e058627fe0c06dc28581f6f5ca07463f6efa9e2da39b03712a2159cdbce12c86c8df80acfa675b64046d773ffe3006365356e65826ff107839d130b0541a5af6cc2ab1cba8b0acac5a998cb64", 0x72}, {&(0x7f00000034c0)="b367a9b8a4b230ae7578bfb0fc7f5a2cb60bb148d5fbdd6badddd797077731c41572a5cae26ad3c8da09cc305ac591ef1e19a6230d0a87941452ffd7881fa8f015f93eb7a91f9f2f3204d3cfed130e4a4c6a7a5db9795d31d685852dc3f361cdbb05c92632bd4ab60a519866cd07849e1561faf7d4ec64629a2aedde5ba745dd13b2d1c558aa003197046f05ba161a5240f0fd7fc0378cf04267d668d06762a0e1a82a7829405e3b085e4bf10e887ef0b404712b18d1c5671bb1885a25879f20fe99", 0xc2}, {&(0x7f00000035c0)="2fccd4fe38107c5f5436b183300e11a77da4f24e3bcad614cb1ee37b88de9a53bc1090c92698157e60b7fd9a4237987ca8f32577cfaf8ee991d81001058e0bbae8f64b96b9484d4346665e59af868efba25d5b5a668f4f7a15be0fa4d1c4051d9f50852137e179221e9d4291a41043f6cfff4eaf2156bf99ed3eef7d36aabc40238c62f49e2d287304aaeaa34faa851145f874d323d3cdff14d960740628ed55c1ce3440744708c2340166c4a5607ca4a135b5a51fa7bc273c5559b1b022d1552214492b1011b309ffb27a00f0074b78641c4eb6c5f5ea54ca", 0xd9}], 0x3, &(0x7f0000003700)=[@timestamping={{0x10, 0x1, 0x25, 0x10000}}], 0x10}}, {{&(0x7f0000003740)=@generic={0x15a459f232ca43a3, "2261443d2b01dd0f2d3b1fa9d0ce03e3906f1581d1fcd979eaac75f35705b67f4ace2dc80d1256bc0f9e9fe6133022289d22db10c64edab9c1b1046dadea3a9542ea0666a7da05f4f827ca9b6f3e3e0176dd136f6816380d182f2ef9c6702615882c8d17c0c51fa4b629a4edb7a95d4d029260c7abda70fe6f026a1e8cde"}, 0x80, &(0x7f0000004880)=[{&(0x7f00000037c0)="ac925690cbf8aae05c23820278ff0993b2e7d682ecc32d5b013e9daab1295264474bed520c8d69917966c65d524d084f3741f46ded92d4d04c5941906b264efee9322d7b11170b4f80f4f817d9696f43e7776a10be72500182b82c747358d32fdbddb6289b2ae799d3b1f0c8733fa8b16b17944e538995e3fe6315b7e570aaa7d9337a8a2c76c8121454e6bb156349930288e10b", 0x94}, {&(0x7f0000003880)="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", 0x1000}], 0x2, &(0x7f00000048c0)=[@mark={{0x10, 0x1, 0x24, 0xf6}}, @timestamping={{0x10}}, @timestamping={{0x10, 0x1, 0x25, 0xc0c8}}, @txtime={{0x14, 0x1, 0x3d, 0xffff}}, @timestamping={{0x10, 0x1, 0x25, 0x1000}}, @txtime={{0x14, 0x1, 0x3d, 0x5}}, @mark={{0x10, 0x1, 0x24, 0x81}}, @txtime={{0x14, 0x1, 0x3d, 0x8}}], 0x8c}}, {{0x0, 0x0, &(0x7f00000049c0)=[{&(0x7f0000004980)="4a65d0cdbffb354986dfdcf692e75bba0fd4d4e7c877a76dd85db33d2f10ddab75b912724f178ec3196217576fa4cc25b9108080b83f99ac7cdbadfd4f", 0x3d}], 0x1, &(0x7f0000004a00)=[@mark={{0x10, 0x1, 0x24, 0x4}}, @timestamping={{0x10, 0x1, 0x25, 0x4}}, @timestamping={{0x10, 0x1, 0x25, 0x3}}, @timestamping={{0x10, 0x1, 0x25, 0x7fffffff}}, @timestamping={{0x10, 0x1, 0x25, 0x10001}}, @txtime={{0x14, 0x1, 0x3d, 0x6}}, @timestamping={{0x10, 0x1, 0x25, 0x7fffffff}}], 0x74}}, {{0x0, 0x0, &(0x7f0000004f80)=[{&(0x7f0000004a80)="807e526158b6fdd048ad435a92236038d251851e22142dffc462e1ab2c938b39c47cdd940518f9f060a93698539392b13ee5f52c36899fd7a1fd3800919780ce36878bd19f67865cf1f3e0d648b5929fd7b272bcd1ae379f871985794a3304b14550a588e5d363c62486b5e0cbcc70bfe89fa655961b30ceff2d69f98ea9bc1165151b42b505ec777e39adb28cc24deb5874d3a11ff42b5d074554767bcf636e2363cf6562898d13822cdbd4caa49580b99551ff6f4288ef7cf47fc2e84f3f5fcc040100611c757bc9e2bd042a8228f03fd742940cad9894b11f50b5b9778a4b13", 0xe1}, {&(0x7f0000004b80)="7e9520c4395b10b2e1391b5a", 0xc}, {&(0x7f0000004bc0)="7fe7d37bd697416922b548f6f6f8eda8b2408fc0271e087706e3a32682cf4086a7b3f5df08e4b198d0ff725c0133088717ed54c92f439bd4011e52b6373dce5f45fe0f0337a92dbe11bd4afa67c1ed44fa1c057511ed78f5a06804f80705578febc1ddfb53d16400a581fdda14223610b763463c3dabcf255c8b2ce73b824b7d799ffe9f4888b13f811b04", 0x8b}, {&(0x7f0000004c80)="97e6dbe75e29b1060497534e94cbef44d1408f7edf5553d8524a0b6cc56db1dc378398a8ab8278d921e16eebc3576dbf7613c65abb1bbbf0078510504bde86c44cdf8cdb8960b62b6cf4c7fde8cac8a832aabc5fd1765a00ba28efc29bbfd963ad1020083442cccb432a7eb1c4a6c89679437bcc79cb6a4b18380745c995d56a430673485e7ae8aef4f4a652c525a16cb1001b01571e8441", 0x98}, {&(0x7f0000004d40)="76886f4c3cdfc0075ff38f8b85bf5e961ff3a11d844bc1308ca3a752822f72f5bcaec93f3100029de0d75a487595ed568951edabba427571af2b9cd7f1a443b6b391e6798558b9e7a2bfad440114be92c9e235ac66a85432cc904601a08d7a52f01766acb860df829298ef00f1bf4a9315adb6ef458dc31c648735caaf3f0528ebce620276d0a2e0f6043c4647b92993c1ff6445644ff45446e04a0a915e9a2ca2f0749dbe65fff899bd823f41a6e851dcc00ac7266ba275a70c5760e495668371b9f930ddc3755fc14b49f493ae6c", 0xcf}, {&(0x7f0000004e40)="87184d364f2f153391491220b9a54d14", 0x10}, {&(0x7f0000004e80)="66dfa505598c4e9726ec02abdb494f6bbb4275b5d04df6dc2eb7ddf69125f2a66db2613877d2e766fe864a51", 0x2c}, {&(0x7f0000004ec0)="237f74cdb5f88740aad575180eaa3fb48f33583fc6ac67e1ad93e2532fd8093771bc80ea705badf289dfb8a39e8048e59963f5b5006f53bbe069ab2759da14b5b90cff6ddd81c791f599e4be0525e368b5edbf428796bf8a9c748e99a4a74fa47b17a5dd9296cf992db0d007dd101577dc8a87e022da982343a4df6d2de4d6685a05bb64bdf2580daa475eaa909b13877b7406579b831df6d9b7bb2659892bf7e83bde9ef739050af0812804558d", 0xae}], 0x8, &(0x7f0000004fc0)=[@txtime={{0x14}}, @mark={{0x10, 0x1, 0x24, 0xc2ae}}, @mark={{0x10, 0x1, 0x24, 0x6}}, @mark={{0x10, 0x1, 0x24, 0x80000001}}], 0x44}}], 0x9, 0x8001) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000040)={0x0, &(0x7f0000000100)}, 0x8) [ 879.682843][ T12] usb 2-1: device descriptor read/8, error -71 [ 879.904398][ T12] usb 2-1: device descriptor read/8, error -71 19:16:28 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x4, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) 19:16:29 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) 19:16:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 880.692012][ T12] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 880.913229][ T12] usb 2-1: Invalid ep0 maxpacket: 0 [ 880.920018][ T12] usb usb2-port1: unable to enumerate USB device 19:16:29 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "37b0aa6c"}, 0x0, 0x0, 0x0, 0x0}) 19:16:29 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x4b1e, 0x10001]}, 0x8, 0x80000) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f00000015c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001580)={&(0x7f0000000140)={0x142c, r2, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_MODES_OURS={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xd, 0x4, "bf78dfb47c0a6767ce"}]}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_MODES_OURS={0x4}, @ETHTOOL_A_EEE_MODES_OURS={0x1018, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xdcf}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x80000000}]}, @ETHTOOL_A_EEE_MODES_OURS={0x3cc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xfd, 0x4, "f00b59921ff1d4fa6d76b1a888a0580decebcaef559948f8129d614ee2d4e649e6b3c7fdefcb72c6c1eb9041e1f471b1d6df0b10d9067bc67e1202db4ebb177028da244818dd03d2f185792059682e86e6c7456f915910032abaa819c92fada28081e045c09c3cba1ed61719319bfe7d33226d5102a63e2cd6306c8f3b2862b57454b866fdf46f24cb7e4ead93b5bb251282e117cb62c9eed3bd3017a8e303703fa7b1e2e96540ba15c8a05e6e930389bf0260fc5a7ca06b00076697730bbb3d4f58d7ef60c891d8c7b58a4eb1cfbcd264943660f9905ecf5cc80429ba29b66d96e031ff541ad5503b70bca4a96e032494e6b551cecbf9a0d1"}, @ETHTOOL_A_BITSET_MASK={0x7a, 0x5, "497f798fff59a29c3e35b77cd1b67828bd76e4df110393645981ef32af678495a1052dfe1df404e83ff916e633c16d1505f59aff6b31f07bbb25b79ff63eab5548bfe87b0152a58101c75ca14db80c7734e17eae251e7143fe09303a454cc25f9023279f9d5d27949b77d9e2416fc9225e34c9daa9be"}, @ETHTOOL_A_BITSET_BITS={0x140, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1718}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xaf}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, ']/,}{@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}]}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xed}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '$!##,\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '@&[/$]+\a\xac\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\\.*%-('}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10}]}]}, @ETHTOOL_A_BITSET_MASK={0x3f, 0x5, "bc68e417603a72ff82dd62e5928897c5a29bd9c365acd38436d7fdacc4ed424c72662f8352d7f6e8990c241f7f8f3ab872deb5a4b1313c5b906f6c"}, @ETHTOOL_A_BITSET_MASK={0x4f, 0x5, "1ddfcd97078579e75ddab9acaa0281c105757c4b204d13617b4ceea0a76b40467b46d578790a0bf820e619bd200be8322c5a08a31167f9bbefec10bc750fd71a477c0cda02d56a8891ab8f"}, @ETHTOOL_A_BITSET_VALUE={0x7c, 0x4, "30c42b0edc09f6d64dae8254f14f0247c3e7f1247cef8d992c09e001ca1cf9eee17d7ba2998eba67c4f997fdd9c08f77c8bd606745d3a426f7e47da33b0c7e5f59d66b73785f5b42a92ab4bf70c971050a60b8c7a5f0dbc8035fcd03bb076e4846abdb4acb7edfc7c1b14cfde6581d4bfa9373f093c68649"}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}]}, 0x142c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) 19:16:30 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x4, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) 19:16:30 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) [ 881.332541][ T8989] usb 1-1: USB disconnect, device number 66 [ 881.812475][ T8990] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 882.092722][ T8990] usb 1-1: device descriptor read/64, error 18 [ 882.483034][ T8990] usb 1-1: device descriptor read/64, error 18 [ 882.752780][ T8990] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 883.042083][ T8990] usb 1-1: device descriptor read/64, error 18 19:16:32 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "a8d0f938"}, 0x0, 0x0, 0x0, 0x0}) 19:16:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:16:32 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x4, 0xfffff021}, {0x6}]}, 0x8) 19:16:32 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(0x0, 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) 19:16:32 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x4, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) [ 883.433642][ T8990] usb 1-1: device descriptor read/64, error 18 [ 883.553086][ T8990] usb usb1-port1: attempt power cycle 19:16:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:16:32 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) 19:16:32 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x7112}) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r3, 0x0) ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f00000001c0)=0x1) dup2(r1, r2) io_setup(0x5, &(0x7f0000000300)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f0000000180)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0xff8e}]) ioctl$VIDIOC_ENUMINPUT(r2, 0xc04c561a, &(0x7f0000000040)={0xfffff001, "3908673323c3b9fd31b3804d58966b0b597497addfb97af597c33e9f95241a8c", 0x2, 0x4, 0x2, 0xb700, 0x2000000, 0x8}) [ 884.202202][ T8989] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 884.263437][ T8990] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 884.353708][ T8990] usb 1-1: Invalid ep0 maxpacket: 0 [ 884.471903][ T8989] usb 2-1: device descriptor read/64, error 18 [ 884.512838][ T8990] usb 1-1: new high-speed USB device number 70 using dummy_hcd 19:16:33 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "37b0aa6c"}, 0x0, 0x0, 0x0, 0x0}) 19:16:33 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(0x0, 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) [ 884.862185][ T8989] usb 2-1: device descriptor read/64, error 18 19:16:33 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) [ 884.922856][ T8990] usb 1-1: device descriptor read/8, error -71 19:16:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 885.132392][ T8990] usb 1-1: device descriptor read/8, error -71 [ 885.138949][ T8989] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 885.252973][ T8990] usb usb1-port1: unable to enumerate USB device [ 885.412169][ T8989] usb 2-1: device descriptor read/64, error 18 [ 885.772010][ T8990] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 885.813316][ T8989] usb 2-1: device descriptor read/64, error 18 [ 885.932541][ T8989] usb usb2-port1: attempt power cycle [ 886.042404][ T8990] usb 1-1: device descriptor read/64, error 18 [ 886.434478][ T8990] usb 1-1: device descriptor read/64, error 18 [ 886.642466][ T8989] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 886.702658][ T8990] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 886.732711][ T8989] usb 2-1: Invalid ep0 maxpacket: 0 [ 886.902162][ T8989] usb 2-1: new high-speed USB device number 87 using dummy_hcd 19:16:35 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "a8d0f938"}, 0x0, 0x0, 0x0, 0x0}) 19:16:35 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x1, 0x0, 0x0, 0xfffff023}, {0x6, 0x8}]}, 0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x7112}) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) dup2(r1, r2) io_setup(0x5, &(0x7f0000000300)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000180)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0xff8e}]) ioctl$EVIOCSABS3F(r2, 0x401845ff, &(0x7f0000000040)={0x4, 0xffff583d, 0xf390, 0x9, 0x5a21a912, 0x1}) 19:16:35 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(0x0, 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) 19:16:35 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) 19:16:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 886.982159][ T8990] usb 1-1: device descriptor read/64, error 18 [ 887.093905][ T8989] usb 2-1: device descriptor read/8, error -71 [ 887.302749][ T8989] usb 2-1: device descriptor read/8, error -71 [ 887.372603][ T8990] usb 1-1: device descriptor read/64, error 18 [ 887.424084][ T8989] usb usb2-port1: unable to enumerate USB device [ 887.492571][ T8990] usb usb1-port1: attempt power cycle 19:16:36 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) 19:16:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:16:36 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) [ 887.995483][ T8989] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 888.223233][ T8990] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 888.242174][ T8989] usb 2-1: Using ep0 maxpacket: 16 [ 888.363036][ T8989] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 888.376398][ T8989] usb 2-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 888.385850][ T8989] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.415474][ T8989] usb 2-1: config 0 descriptor?? [ 888.460485][ T8989] usbhid 2-1:0.0: couldn't find an input interrupt endpoint 19:16:37 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "37b0aa6c"}, 0x0, 0x0, 0x0, 0x0}) 19:16:37 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) 19:16:37 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x9, 0x0, 0x9}]}, 0x8) 19:16:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 888.622521][ T8990] usb 1-1: device descriptor read/8, error -71 [ 888.833147][ T8990] usb 1-1: device descriptor read/8, error -71 [ 888.875797][T19789] udc-core: couldn't find an available UDC or it's busy [ 888.883257][T19789] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 889.622053][ T8990] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 889.744744][ T8990] usb 1-1: Invalid ep0 maxpacket: 0 [ 889.769645][ T8990] usb usb1-port1: unable to enumerate USB device [ 890.545792][ T8990] usb 2-1: USB disconnect, device number 88 19:16:39 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "a8d0f938"}, 0x0, 0x0, 0x0, 0x0}) 19:16:39 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) 19:16:39 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) 19:16:39 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x7112}) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) splice(r2, &(0x7f00000001c0), r0, &(0x7f0000000200)=0x1, 0x69a, 0xf) dup2(r1, r2) io_setup(0x5, &(0x7f0000000300)) futimesat(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{}, {0x0, 0xea60}}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) 19:16:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:16:39 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) 19:16:40 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x3, 0x43, 0x0) 19:16:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 891.612507][ T12] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 891.888675][ T12] usb 2-1: Using ep0 maxpacket: 16 [ 892.033200][ T12] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 892.046525][ T12] usb 2-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 892.055904][ T12] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.265971][ T12] usb 2-1: config 0 descriptor?? [ 892.310221][ T12] usbhid 2-1:0.0: couldn't find an input interrupt endpoint 19:16:41 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "37b0aa6c"}, 0x0, 0x0, 0x0, 0x0}) 19:16:41 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0x8000}, {0x2}]}, 0x8) 19:16:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:16:41 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x3, 0x43, 0x0) [ 892.707802][T19856] udc-core: couldn't find an available UDC or it's busy [ 892.715179][T19856] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 893.292366][ T8704] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 893.532191][ T8704] usb 1-1: Using ep0 maxpacket: 16 [ 893.652478][ T8704] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 893.665826][ T8704] usb 1-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 893.675243][ T8704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.692806][ T8704] usb 1-1: config 0 descriptor?? [ 893.743268][ T8704] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 894.143063][T19889] udc-core: couldn't find an available UDC or it's busy [ 894.150149][T19889] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 19:16:43 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "a8d0f938"}, 0x0, 0x0, 0x0, 0x0}) 19:16:43 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) 19:16:43 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000040)) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000520000/0x3000)=nil, &(0x7f0000731000/0x4000)=nil, 0x3000}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc01cf509, &(0x7f0000000080)={r0, 0x4, 0x6, 0x3ff}) ioctl$CHAR_RAW_RESETZONE(r2, 0x40101283, &(0x7f00000000c0)={0x5, 0x8}) 19:16:43 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x3, 0x43, 0x0) 19:16:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 894.376948][ T3672] usb 2-1: USB disconnect, device number 89 19:16:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:16:43 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247}, {&(0x7f0000000640)=""/138}, {&(0x7f0000000700)=""/164}, {&(0x7f00000007c0)=""/129}, {&(0x7f0000000880)=""/213}], 0x0, &(0x7f0000000a40)=""/4096}}, {{&(0x7f0000001a40)=@ipx, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247}, {&(0x7f0000001bc0)=""/178}, {&(0x7f0000001c80)=""/229}, {&(0x7f0000001d80)=""/235, 0xffffff42}], 0x0, &(0x7f0000001ec0)=""/179}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x0, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164}, {&(0x7f00000020c0)=""/78}, {&(0x7f0000002140)=""/86}], 0x0, &(0x7f0000002200)=""/51}}], 0x2fb70505e117bbd, 0x0, 0x0) 19:16:43 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) [ 895.382690][ T3672] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 895.622102][ T3672] usb 2-1: Using ep0 maxpacket: 16 [ 895.743122][ T3672] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 895.756479][ T3672] usb 2-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 895.765986][ T3672] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.961453][ T3672] usb 2-1: config 0 descriptor?? [ 896.010952][ T3672] usbhid 2-1:0.0: couldn't find an input interrupt endpoint 19:16:44 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "37b0aa6c"}, 0x0, 0x0, 0x0, 0x0}) 19:16:44 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x6}) r2 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x6}) r3 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f00000000c0)={0x6}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000001140)="bcf0bda93cddc5b74080fa88", 0xfffffdef, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f00000000c0)={r4, 0x1000, &(0x7f0000000140)=""/4096}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) 19:16:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 896.233469][ T8704] usb 1-1: USB disconnect, device number 75 19:16:45 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) [ 896.407888][T19925] udc-core: couldn't find an available UDC or it's busy [ 896.415091][T19925] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 897.112729][ T3672] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 897.352093][ T3672] usb 1-1: Using ep0 maxpacket: 16 [ 897.481072][ T3672] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 897.494443][ T3672] usb 1-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 897.503788][ T3672] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.585294][ T3672] usb 1-1: config 0 descriptor?? [ 897.630154][ T3672] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 898.032333][T19960] udc-core: couldn't find an available UDC or it's busy [ 898.039416][T19960] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 19:16:47 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "a8d0f938"}, 0x0, 0x0, 0x0, 0x0}) 19:16:47 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247}, {&(0x7f0000000640)=""/138}, {&(0x7f0000000700)=""/164}, {&(0x7f00000007c0)=""/129}, {&(0x7f0000000880)=""/213}], 0x0, &(0x7f0000000a40)=""/4096}}, {{&(0x7f0000001a40)=@ipx, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247}, {&(0x7f0000001bc0)=""/178}, {&(0x7f0000001c80)=""/229}, {&(0x7f0000001d80)=""/235, 0xffffff42}], 0x0, &(0x7f0000001ec0)=""/179}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x0, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164}, {&(0x7f00000020c0)=""/78}, {&(0x7f0000002140)=""/86}], 0x0, &(0x7f0000002200)=""/51}}], 0x2fb70505e117bbd, 0x0, 0x0) 19:16:47 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) 19:16:47 executing program 2: socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r1 = socket$caif_stream(0x25, 0x1, 0x5) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @mcast1={0xff, 0x5}}]}}}]}, 0x4c}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r5, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x95eb}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffff01}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xd70}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x10000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x8) 19:16:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 898.256429][ T8704] usb 2-1: USB disconnect, device number 90 19:16:47 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) 19:16:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:16:48 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x28, 0x80, 0x0, 0xfffff020}, {0x6, 0x0, 0x0, 0xfffffffd}]}, 0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x7112}) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) dup2(r1, r2) io_setup(0x5, &(0x7f0000000300)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000180)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0xff8e}]) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x45c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404}, @TCA_TBF_PARMS={0x28, 0x1, {{0xcb, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}}}]}}]}, 0x45c}}, 0x0) sendto$packet(r2, &(0x7f0000000040)="83a81968d8021a87d8321dbc22847241d127544a087f1a68093b9b2a398e90cc85cf663add83a1ff16576e3c42335f37ebcff3dd78c5451e2848b42029261901e1b52fbddc04fd2ee20755c060a28a20ccff3af36537885d22e87e2881363759fc38bb8f8af56b39e403be6caf957fde9902ce8d72a3e53da93d153ccf2dcf175e7e2391f7a32bc1874c4edc6b6ccf4c651047c6ca9fecde036151851674ac6f9c999ff4ae607fd129cb54", 0xab, 0x0, &(0x7f0000000140)={0x11, 0xc, r5, 0x1, 0x40, 0x6, @local}, 0x14) [ 899.486532][ T8989] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 899.733388][ T8989] usb 2-1: Using ep0 maxpacket: 16 [ 899.852820][ T8989] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 899.866104][ T8989] usb 2-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 899.875537][ T8989] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.997375][ T8990] usb 1-1: USB disconnect, device number 76 19:16:48 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "37b0aa6c"}, 0x0, 0x0, 0x0, 0x0}) 19:16:48 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247}, {&(0x7f0000000640)=""/138}, {&(0x7f0000000700)=""/164}, {&(0x7f00000007c0)=""/129}, {&(0x7f0000000880)=""/213}], 0x0, &(0x7f0000000a40)=""/4096}}, {{&(0x7f0000001a40)=@ipx, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247}, {&(0x7f0000001bc0)=""/178}, {&(0x7f0000001c80)=""/229}, {&(0x7f0000001d80)=""/235, 0xffffff42}], 0x0, &(0x7f0000001ec0)=""/179}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x0, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164}, {&(0x7f00000020c0)=""/78}, {&(0x7f0000002140)=""/86}], 0x0, &(0x7f0000002200)=""/51}}], 0x2fb70505e117bbd, 0x0, 0x0) [ 900.047190][T20004] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 900.123555][ T8989] usb 2-1: config 0 descriptor?? [ 900.198904][ T8989] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 900.276209][T20023] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 900.368987][ T8989] usb 2-1: USB disconnect, device number 91 19:16:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:16:49 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) [ 901.022416][ T8704] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 901.282141][ T8704] usb 1-1: Using ep0 maxpacket: 16 19:16:50 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "a8d0f938"}, 0x0, 0x0, 0x0, 0x0}) 19:16:50 executing program 2: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) ioctl$SNDCTL_FM_LOAD_INSTR(r0, 0x40285107) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, &(0x7f0000000080)=0x1000) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x1, 0x3, 0x81, 0xffff0000}, {0xc13, 0x81, 0x4}]}, 0x8) 19:16:50 executing program 5: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x20, r4, 0x5, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r3}, {0x4}}]}, 0x20}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x20004881) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) [ 901.415974][ T8704] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 901.429046][ T8704] usb 1-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 901.438370][ T8704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:16:50 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) 19:16:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 901.604646][ T8704] usb 1-1: config 0 descriptor?? [ 901.660089][ T8704] usbhid 1-1:0.0: couldn't find an input interrupt endpoint 19:16:50 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x20000000000000cd, &(0x7f0000000100)=[{0x9, 0x0, 0x0, 0xfffff020}, {0x6, 0xfd}]}, 0x8) ioctl$SNDCTL_DSP_GETIPTR(0xffffffffffffffff, 0x800c5011, &(0x7f0000000000)) [ 902.063074][T20035] udc-core: couldn't find an available UDC or it's busy [ 902.070175][T20035] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 902.102045][T16291] usb 2-1: new high-speed USB device number 92 using dummy_hcd 19:16:51 executing program 5: openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) dup(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip_mr_cache\x00') openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x20000400) pselect6(0x40, &(0x7f0000000040)={0x3}, 0x0, &(0x7f0000000180)={0x1ff}, 0x0, 0x0) 19:16:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 902.362582][T16291] usb 2-1: Using ep0 maxpacket: 16 [ 902.483312][T16291] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 902.496633][T16291] usb 2-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 902.506087][T16291] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.710468][T16291] usb 2-1: config 0 descriptor?? [ 902.812121][T16291] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 902.986355][ T8990] usb 2-1: USB disconnect, device number 92 19:16:52 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "37b0aa6c"}, 0x0, 0x0, 0x0, 0x0}) 19:16:52 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) 19:16:52 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x7112}) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) dup2(r1, r2) io_setup(0x5, &(0x7f0000000300)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000180)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0xff8e}]) ioctl$VIDIOC_DQBUF(r2, 0xc04c5611, &(0x7f0000000040)={0x1, 0x8, 0x4, 0x40, 0x4, {}, {0x0, 0x8, 0x9, 0x40, 0x2, 0x40, "65f64958"}, 0xa3cc, 0x4, @userptr=0x5, 0x7f}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) 19:16:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 903.766467][ T8704] usb 1-1: USB disconnect, device number 77 19:16:52 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "a8d0f938"}, 0x0, 0x0, 0x0, 0x0}) 19:16:52 executing program 5: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x501000, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000180)={0x0, 0x1, 0x0, 0xe1, 0xb, "8c9114c9baa93a2abc7872dd162fb78e650c51"}) add_key$keyring(&(0x7f0000000480)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r1, 0x40140921, &(0x7f0000000000)={0x0, 0x8, 0x2, 0x0}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) 19:16:53 executing program 5: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2c080580, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 19:16:53 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) [ 904.472447][T16291] usb 2-1: new high-speed USB device number 93 using dummy_hcd 19:16:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 904.562099][ T3216] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 904.722213][T16291] usb 2-1: Using ep0 maxpacket: 16 [ 904.836222][ T3216] usb 1-1: Using ep0 maxpacket: 16 [ 904.883068][T16291] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 904.896241][T16291] usb 2-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 904.905718][T16291] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.993546][ T3216] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 905.006761][ T3216] usb 1-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 905.016096][ T3216] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.115832][T16291] usb 2-1: config 0 descriptor?? [ 905.165500][T16291] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 905.224048][ T3216] usb 1-1: config 0 descriptor?? 19:16:54 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001200)={0x2, 0x2000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r4, 0x0) ioctl$SIOCAX25ADDFWD(r4, 0x89ea, &(0x7f00000001c0)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'\x00', 0x7112}) r6 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) dup2(r1, r6) io_setup(0x5, &(0x7f0000000300)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f0000000180)={0x0, 0x0, 0x80000000000000, 0x1, 0x1, r6, &(0x7f0000000000), 0x5d18, 0x1}]) setsockopt$SO_J1939_ERRQUEUE(r6, 0x6b, 0x4, &(0x7f0000000140), 0x4) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001280)=ANY=[@ANYBLOB="4c001b18df5fad6bb473ecb542c400000300c0ba81e4804529137b00fb91335052756801345220e5ea112e346d9e41add286571faf64ed405716fbca3a1815612813eb065a6fd36865d86716f46575f2f84f45cee945d4aa18419b7da772f3cfabe2f909609517c18ef20304ca5a90fa9c14510000", @ANYRES32=r7, @ANYRESHEX=r1], 0x4c}}, 0x0) recvmsg(r3, &(0x7f0000001240)={&(0x7f0000000340)=@x25={0x9, @remote}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/188, 0xbc}, {&(0x7f0000001340)=""/4111, 0x100f}], 0x2, &(0x7f0000001200)}, 0x20) [ 905.272059][ T3216] usbhid 1-1:0.0: couldn't find an input interrupt endpoint 19:16:54 executing program 5: [ 905.371915][ T3216] usb 2-1: USB disconnect, device number 93 [ 905.469792][T16291] usb 1-1: USB disconnect, device number 78 19:16:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:16:55 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "37b0aa6c"}, 0x0, 0x0, 0x0, 0x0}) 19:16:55 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = open(0x0, 0x141042, 0x0) ftruncate(r2, 0x200004) 19:16:55 executing program 5: 19:16:55 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "a8d0f938"}, 0x0, 0x0, 0x0, 0x0}) 19:16:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:16:55 executing program 5: 19:16:55 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = open(0x0, 0x141042, 0x0) ftruncate(r2, 0x200004) 19:16:55 executing program 2: [ 907.242358][T17310] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 907.292446][ T3216] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 907.482390][T17310] usb 2-1: Using ep0 maxpacket: 16 [ 907.532980][ T3216] usb 1-1: Using ep0 maxpacket: 16 19:16:56 executing program 5: [ 907.603521][T17310] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 907.616771][T17310] usb 2-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 907.626269][T17310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.663818][ T3216] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 907.677348][ T3216] usb 1-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 907.686660][ T3216] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.806136][ T3216] usb 1-1: config 0 descriptor?? [ 907.825693][T17310] usb 2-1: config 0 descriptor?? [ 907.851039][ T3216] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 907.870154][T17310] usbhid 2-1:0.0: couldn't find an input interrupt endpoint 19:16:56 executing program 2: [ 908.067989][ T3672] usb 2-1: USB disconnect, device number 94 [ 908.077586][ T3216] usb 1-1: USB disconnect, device number 79 19:16:56 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = open(0x0, 0x141042, 0x0) ftruncate(r2, 0x200004) 19:16:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 908.664689][ T3672] usb 2-1: new high-speed USB device number 95 using dummy_hcd 19:16:57 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "37b0aa6c"}, 0x0, 0x0, 0x0, 0x0}) 19:16:57 executing program 5: r0 = gettid() pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r1, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) write$P9_RFSYNC(r1, &(0x7f0000004dc0)={0x7}, 0x7) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) timer_create(0x0, &(0x7f0000000780)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x13) 19:16:57 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)=0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x4037e, 0x0) write$binfmt_elf64(r2, &(0x7f0000000640)=ANY=[], 0xffffffb7) sendfile(r2, r2, &(0x7f00000001c0), 0x808100000002) getdents64(r2, &(0x7f0000000080)=""/245, 0xf5) close(r2) timer_settime(r1, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000080), 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) tkill(r0, 0x13) [ 908.912254][ T3672] usb 2-1: Using ep0 maxpacket: 16 [ 909.033084][ T3672] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 909.046292][ T3672] usb 2-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 909.055710][ T3672] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.276111][ T3672] usb 2-1: config 0 descriptor?? [ 909.320524][ T3672] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 909.902286][T16291] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 910.152003][T16291] usb 1-1: Using ep0 maxpacket: 16 [ 910.272370][T16291] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 910.286092][T16291] usb 1-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 910.295418][T16291] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.389227][T16291] usb 1-1: config 0 descriptor?? [ 910.454504][T16291] usbhid 1-1:0.0: couldn't find an input interrupt endpoint 19:16:59 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "a8d0f938"}, 0x0, 0x0, 0x0, 0x0}) 19:16:59 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x200004) 19:16:59 executing program 2: unshare(0x6c060000) socket$inet6_sctp(0xa, 0x0, 0x84) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000), 0x4) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000000c0)={@void, @val, @mpls={[], @ipv4=@icmp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x14, 0x7, 0x1, 0x0, [{@multicast1}, {@loopback}]}]}}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x3}}}}, 0x46) 19:16:59 executing program 5: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4001}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000e838ddcb9ffa14c7000000f3f400", @ANYRES32], 0x58}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01}, 0x78}}, 0x0) 19:16:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 910.608256][ T8989] usb 2-1: USB disconnect, device number 95 [ 910.669537][T16291] usb 1-1: USB disconnect, device number 80 [ 910.785887][T20288] IPVS: ftp: loaded support on port[0] = 21 19:16:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:16:59 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x200004) 19:17:00 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in=@broadcast, 0x0, 0x6c}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x4}}, 0xe8) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}, 0xa00}], 0x400000000000107, 0x0) 19:17:00 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "37b0aa6c"}, 0x0, 0x0, 0x0, 0x0}) [ 911.762596][ T3672] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 912.003130][ T3672] usb 2-1: Using ep0 maxpacket: 16 [ 912.122852][ T3672] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 912.136174][ T3672] usb 2-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 912.145584][ T3672] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:17:01 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x200004) 19:17:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 912.339308][ T9016] tipc: TX() has been purged, node left! [ 912.448696][ T3672] usb 2-1: config 0 descriptor?? [ 912.599803][ T3672] usbhid 2-1:0.0: couldn't find an input interrupt endpoint 19:17:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket(0x11, 0x2, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x5, 0x0, 0x0, r3}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x5}]}]}, 0x34}}, 0x0) [ 912.740786][ T3672] usb 2-1: USB disconnect, device number 96 [ 912.765789][ T3216] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 913.031979][ T3216] usb 1-1: Using ep0 maxpacket: 16 [ 913.174069][ T3216] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 913.187226][ T3216] usb 1-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 913.196593][ T3216] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.302645][ T3672] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 913.456714][ T3216] usb 1-1: config 0 descriptor?? [ 913.542083][ T3672] usb 2-1: Using ep0 maxpacket: 16 [ 913.565970][ T3216] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 913.662885][ T3672] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 913.676098][ T3672] usb 2-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 913.686682][ T3672] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.739794][ T3216] usb 1-1: USB disconnect, device number 81 [ 914.017042][ T3672] usb 2-1: config 0 descriptor?? [ 914.117769][ T3672] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 914.305279][ T3216] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 914.562972][ T3216] usb 1-1: Using ep0 maxpacket: 16 [ 914.726177][ T3216] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 914.739229][ T3216] usb 1-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 914.749604][ T3216] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.834099][ T3216] usb 1-1: config 0 descriptor?? [ 914.882754][ T3216] usbhid 1-1:0.0: couldn't find an input interrupt endpoint 19:17:04 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "a8d0f938"}, 0x0, 0x0, 0x0, 0x0}) 19:17:04 executing program 5: 19:17:04 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(0xffffffffffffffff, 0x200004) 19:17:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:17:04 executing program 2: [ 915.344697][T17310] usb 2-1: USB disconnect, device number 97 19:17:04 executing program 5: 19:17:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 19:17:04 executing program 2: [ 916.213932][ T3672] usb 2-1: new high-speed USB device number 98 using dummy_hcd 19:17:05 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "37b0aa6c"}, 0x0, 0x0, 0x0, 0x0}) 19:17:05 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(0xffffffffffffffff, 0x200004) [ 916.300545][ T8704] usb 1-1: USB disconnect, device number 82 19:17:05 executing program 5: [ 916.472550][ T3672] usb 2-1: Using ep0 maxpacket: 16 19:17:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 916.593041][ T3672] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 916.606326][ T3672] usb 2-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 916.615811][ T3672] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.887564][ T3672] usb 2-1: config 0 descriptor?? [ 917.022983][ T3672] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 917.159517][ T3672] usb 2-1: USB disconnect, device number 98 [ 917.165032][ T8704] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 917.443276][ T8704] usb 1-1: Using ep0 maxpacket: 16 [ 917.573558][ T8704] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 917.586617][ T8704] usb 1-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 917.595959][ T8704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.664502][ T8704] usb 1-1: config 0 descriptor?? [ 917.696069][ T3672] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 917.720175][ T8704] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 917.917511][ T8704] usb 1-1: USB disconnect, device number 83 [ 917.942483][ T3672] usb 2-1: Using ep0 maxpacket: 16 [ 918.063674][ T3672] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 918.076888][ T3672] usb 2-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 918.086479][ T3672] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.128132][ T3672] usb 2-1: config 0 descriptor?? [ 918.177743][ T3672] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 918.502124][ T8704] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 918.742001][ T8704] usb 1-1: Using ep0 maxpacket: 16 [ 918.892238][ T8704] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 918.905337][ T8704] usb 1-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 918.915663][ T8704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.992104][ T8704] usb 1-1: config 0 descriptor?? [ 919.040064][ T8704] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 919.650047][ T8704] usb 2-1: USB disconnect, device number 99 19:17:08 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "a8d0f938"}, 0x0, 0x0, 0x0, 0x0}) 19:17:08 executing program 2: 19:17:08 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(0xffffffffffffffff, 0x200004) 19:17:08 executing program 5: 19:17:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 19:17:08 executing program 5: 19:17:08 executing program 2: [ 920.424190][ T8989] usb 1-1: USB disconnect, device number 84 19:17:09 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "37b0aa6c"}, 0x0, 0x0, 0x0, 0x0}) 19:17:09 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x0) 19:17:09 executing program 4: [ 920.833044][ T3672] usb 2-1: new high-speed USB device number 100 using dummy_hcd 19:17:09 executing program 2: 19:17:09 executing program 5: [ 921.083204][ T3672] usb 2-1: Using ep0 maxpacket: 16 [ 921.202872][ T3672] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 921.216058][ T3672] usb 2-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 921.225494][ T3672] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.232119][ T3216] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 921.470831][ T3672] usb 2-1: config 0 descriptor?? [ 921.482127][ T3216] usb 1-1: Using ep0 maxpacket: 16 [ 921.533531][ T3672] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 921.623556][ T3216] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 921.637121][ T3216] usb 1-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 921.646436][ T3216] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.729189][ T3672] usb 2-1: USB disconnect, device number 100 [ 921.801018][ T3216] usb 1-1: config 0 descriptor?? [ 921.895111][ T3216] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 922.060366][ T8704] usb 1-1: USB disconnect, device number 85 [ 922.302148][ T3672] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 922.543462][ T3672] usb 2-1: Using ep0 maxpacket: 16 [ 922.663183][ T3672] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 922.676577][ T3672] usb 2-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 922.686324][ T3672] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.692046][ T8704] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 922.744195][ T3672] usb 2-1: config 0 descriptor?? [ 922.790567][ T3672] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 922.942215][ T8704] usb 1-1: Using ep0 maxpacket: 16 [ 923.083113][ T8704] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 923.096232][ T8704] usb 1-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 923.105562][ T8704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.220818][ T8704] usb 1-1: config 0 descriptor?? [ 923.320893][ T8704] usbhid 1-1:0.0: couldn't find an input interrupt endpoint 19:17:12 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "a8d0f938"}, 0x0, 0x0, 0x0, 0x0}) 19:17:12 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x52, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast1, {[@ra={0x94, 0x4}, @end, @rr={0x7, 0xf, 0x0, [@private, @dev, @rand_addr]}]}}}}}}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x58}}, 0x0) 19:17:12 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0xee01}}) msgsnd(0x0, &(0x7f0000000340)={0x3}, 0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) 19:17:12 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x0) 19:17:12 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x9c, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @multicast2, @multicast1, {[@ra={0x94, 0x4}, @end, @rr={0x7, 0xf, 0x0, [@private, @dev, @rand_addr]}, @cipso={0x86, 0x53, 0x0, [{0x0, 0xc, "51d48808530dfb390a80"}, {0x0, 0xa, "b798c3479ff47444"}, {0x0, 0xe, "ae0dc5f2009a607c2d6904a3"}, {0x0, 0x10, "519f3183fb0839f210a0576c73d0"}, {0x0, 0xe, "1eeec88ddc184f60902976b6"}, {0x0, 0x8, "1e916a2891e6"}, {0x0, 0x3, '\v'}]}, @timestamp={0x44, 0x4}, @generic={0x0, 0x6, "b1e203bf"}, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@broadcast}]}]}}}}}}}, 0x0) [ 924.215914][ T8990] usb 2-1: USB disconnect, device number 101 19:17:13 executing program 2: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002180)=@newtaction={0xe80, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe6c, 0x1, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe80}}, 0x0) 19:17:13 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "37b0aa6c"}, 0x0, 0x0, 0x0, 0x0}) [ 924.785609][ T8990] usb 1-1: USB disconnect, device number 86 19:17:13 executing program 5: clone(0x840100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1468, 0x1170, 0x1170, 0x1170, 0x1170, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={[0x0, 0x0, 0x0, 0x4], [], @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}, @common=@unspec=@cgroup1={{0x1030, 'cgroup\x00'}, {0x7, 0x2, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14c8) socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(0xffffffffffffffff) 19:17:13 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x0) [ 925.332796][ T8989] usb 2-1: new high-speed USB device number 102 using dummy_hcd 19:17:14 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2000050, 0x0) creat(&(0x7f0000000180)='./file0/file0\x00', 0xbc9dc8fbd81cb4b1) creat(&(0x7f00000002c0)='./file0/file0\x00', 0x0) [ 925.572355][ T8989] usb 2-1: Using ep0 maxpacket: 16 [ 925.662687][ T3216] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 925.693038][ T8989] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 925.706257][ T8989] usb 2-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 925.716068][ T8989] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:17:14 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, &(0x7f0000000080)) [ 925.922055][ T3216] usb 1-1: Using ep0 maxpacket: 16 [ 925.963220][ T8989] usb 2-1: config 0 descriptor?? [ 926.027456][ T8989] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 926.063129][ T3216] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 19:17:14 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @remote}, 0x2}}, 0x2e) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, 0x0) [ 926.076324][ T3216] usb 1-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 926.086297][ T3216] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.208036][ T3672] usb 2-1: USB disconnect, device number 102 [ 926.253499][ T3216] usb 1-1: config 0 descriptor?? [ 926.310269][ T3216] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 926.507872][ T3216] usb 1-1: USB disconnect, device number 87 [ 926.792694][ T3672] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 927.032915][ T3672] usb 2-1: Using ep0 maxpacket: 16 [ 927.123206][ T3216] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 927.154244][ T3672] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 927.167544][ T3672] usb 2-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 927.177042][ T3672] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.261592][ T3672] usb 2-1: config 0 descriptor?? [ 927.310420][ T3672] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 927.392031][ T3216] usb 1-1: Using ep0 maxpacket: 16 [ 927.532204][ T3216] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 927.545287][ T3216] usb 1-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 927.554731][ T3216] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.604074][ T3216] usb 1-1: config 0 descriptor?? [ 927.650402][ T3216] usbhid 1-1:0.0: couldn't find an input interrupt endpoint 19:17:17 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "a8d0f938"}, 0x0, 0x0, 0x0, 0x0}) 19:17:17 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000580)=ANY=[], 0x28) getsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, &(0x7f0000000180)) 19:17:17 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) recvmmsg(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000001600)=[{0x0}, {&(0x7f0000000100)=""/218, 0xcc}], 0x2}}], 0x1, 0x0, 0x0) 19:17:17 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)) fcntl$notify(r2, 0x402, 0xb1c661d398500c73) fcntl$setownex(r2, 0xf, &(0x7f0000000240)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffa) 19:17:17 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_buf(r0, 0x29, 0x7, &(0x7f0000000500)="c32ac3fe", 0x4) [ 928.754422][ T8989] usb 2-1: USB disconnect, device number 103 [ 929.087552][T20673] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 929.117915][ T28] audit: type=1800 audit(1597519037.833:77): pid=20672 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16273 res=0 [ 929.133831][T16291] usb 1-1: USB disconnect, device number 88 19:17:17 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "37b0aa6c"}, 0x0, 0x0, 0x0, 0x0}) 19:17:18 executing program 5: clone(0x2000a1047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) sendfile(r0, r1, 0x0, 0xe2f8) 19:17:18 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @remote}, 0x2}}, 0x2e) ioctl$PPPIOCGFLAGS(r0, 0x80047437, 0x0) [ 929.537488][ T28] audit: type=1800 audit(1597519038.253:78): pid=20678 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16273 res=0 19:17:18 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) recvmmsg(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000001600)=[{0x0}, {&(0x7f0000000100)=""/218, 0xcc}], 0x2}}], 0x1, 0x0, 0x0) 19:17:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x3d9, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x40) [ 929.842867][ T3216] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 930.062855][ T27] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 930.092591][ T3216] usb 2-1: Using ep0 maxpacket: 16 19:17:18 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$IPC_SET(0x0, 0x1, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x403, 0x13, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x7}}}, @sadb_address={0x5, 0x9, 0xff, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x2], 0x0, 0x0}, 0x400300}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}]}, 0x98}}, 0x0) [ 930.223061][ T3216] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 930.236460][ T3216] usb 2-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 930.245879][ T3216] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.302748][ T27] usb 1-1: Using ep0 maxpacket: 16 19:17:19 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x403, 0x13, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x7}}}, @sadb_address={0x5, 0x9, 0xff, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x2], 0x0, 0x0}, 0x400300}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}]}, 0x98}}, 0x0) [ 930.423309][ T27] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 930.436713][ T27] usb 1-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 930.446195][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.451056][ T3216] usb 2-1: config 0 descriptor?? [ 930.503913][ T3216] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 930.664117][ T27] usb 1-1: config 0 descriptor?? [ 930.702103][ T3216] usb 2-1: USB disconnect, device number 104 [ 930.720853][ T27] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 930.933616][ T27] usb 1-1: USB disconnect, device number 89 [ 931.503200][ T27] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 931.792062][ T27] usb 1-1: Using ep0 maxpacket: 16 [ 931.912475][ T27] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 931.925728][ T27] usb 1-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 931.935094][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.210695][ T27] usb 1-1: config 0 descriptor?? [ 932.280152][ T27] usbhid 1-1:0.0: couldn't find an input interrupt endpoint 19:17:21 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "a8d0f938"}, 0x0, 0x0, 0x0, 0x0}) 19:17:21 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) recvmmsg(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000001600)=[{0x0}, {&(0x7f0000000100)=""/218, 0xcc}], 0x2}}], 0x1, 0x0, 0x0) 19:17:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000140)={'nat\x00', 0x0, 0x0, 0x0, [], 0x2, 0x0, 0x0, [{}, {}]}, 0x98) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:17:22 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) recvmmsg(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000001600)=[{0x0}, {&(0x7f0000000100)=""/218, 0xcc}], 0x2}}], 0x1, 0x0, 0x0) 19:17:22 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x3) 19:17:22 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "37b0aa6c"}, 0x0, 0x0, 0x0, 0x0}) [ 933.956834][ T8989] usb 1-1: USB disconnect, device number 90 [ 934.033764][ T3216] usb 2-1: new high-speed USB device number 105 using dummy_hcd 19:17:23 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$IPC_SET(0x0, 0x1, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x403, 0x13, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x7}}}, @sadb_address={0x5, 0x9, 0xff, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x2], 0x0, 0x0}, 0x400300}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}]}, 0x98}}, 0x0) [ 934.522695][ T3216] usb 2-1: device descriptor read/64, error -71 19:17:23 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000001600)=[{0x0}, {&(0x7f0000000100)=""/218, 0xcc}], 0x2}}], 0x1, 0x0, 0x0) 19:17:23 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) getpid() r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000800, 0x20000000fb], 0x100000, 0x200400}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:17:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@ipv4_deladdr={0x17, 0x15, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x20}, 0xa}, 0x0) [ 934.853007][T16291] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 934.922285][ T3216] usb 2-1: Using ep0 maxpacket: 16 19:17:23 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000fb], 0x100000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 935.076328][ T3216] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 935.089558][ T3216] usb 2-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 935.098948][ T3216] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.123782][T16291] usb 1-1: Using ep0 maxpacket: 16 [ 935.283246][T16291] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 935.296528][T16291] usb 1-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 935.305823][T16291] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.336749][ T3216] usb 2-1: config 0 descriptor?? [ 935.350977][T16291] usb 1-1: config 0 descriptor?? 19:17:24 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x103041, 0x0) r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}, @IFLA_TXQLEN={0x8}]}, 0x48}}, 0x0) [ 935.399546][ T3216] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 935.443832][T16291] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 935.600608][T16291] usb 2-1: USB disconnect, device number 105 [ 935.629112][ T3216] usb 1-1: USB disconnect, device number 91 [ 935.826765][T20811] batman_adv: Cannot find parent device [ 936.162246][T16291] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 936.212747][ T3216] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 936.412317][T16291] usb 2-1: Using ep0 maxpacket: 32 [ 936.473630][ T3216] usb 1-1: Using ep0 maxpacket: 16 [ 936.543389][T16291] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 936.556637][T16291] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 936.566347][T16291] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.599076][T16291] usb 2-1: config 0 descriptor?? [ 936.623848][ T3216] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 936.637277][ T3216] usb 1-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 936.646789][ T3216] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.657728][T16291] hub 2-1:0.0: bad descriptor, ignoring hub [ 936.664022][T16291] hub: probe of 2-1:0.0 failed with error -5 [ 936.676992][T16291] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 936.733376][ T3216] usb 1-1: config 0 descriptor?? [ 936.790600][ T3216] usbhid 1-1:0.0: couldn't find an input interrupt endpoint 19:17:25 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "a8d0f938"}, 0x0, 0x0, 0x0, 0x0}) 19:17:25 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000001600)=[{0x0}, {&(0x7f0000000100)=""/218, 0xcc}], 0x2}}], 0x1, 0x0, 0x0) 19:17:25 executing program 5: getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, &(0x7f00000004c0)) r0 = socket$inet6(0xa, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mremap(&(0x7f000042d000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f00001ba000/0x3000)=nil) 19:17:25 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast1}}}}}}, 0x0) 19:17:25 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000fb], 0x100000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 937.032923][ T3216] usb 2-1: USB disconnect, device number 106 [ 937.762213][ T3216] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 938.012248][ T3216] usb 2-1: Using ep0 maxpacket: 16 [ 938.132647][ T3216] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 938.145893][ T3216] usb 2-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 938.155250][ T3216] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:17:26 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "37b0aa6c"}, 0x0, 0x0, 0x0, 0x0}) 19:17:26 executing program 5: r0 = mq_open(&(0x7f0000001380)='eth0\x00', 0x1, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_move_chan_req={{0xe, 0x3f, 0x3}, {0x3f, 0x90}}, @l2cap_cmd_rej_unk={{0x1, 0x7f, 0x2}, {0xfffa}}, @l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x80, 0x9, 0x80}}]}}, 0x1f) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ftruncate(r1, 0x48280) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ftruncate(r3, 0x48280) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x590100000000, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) io_submit(r2, 0x20000000000002bb, &(0x7f0000000540)=[&(0x7f0000000340)={0x590100000000, 0x400000000000, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x0, 0x0, 0x0, r3}]) getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'btrfs.', 'eth0\x00'}, &(0x7f0000000240)=""/240, 0xf0) r5 = openat(r1, &(0x7f0000000080)='./file0\x00', 0x0, 0x43) ftruncate(r0, 0xffff) mq_timedreceive(r5, &(0x7f00000000c0)=""/111, 0x6f, 0x1, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) close(r0) mq_unlink(&(0x7f0000000000)='eth0\x00') 19:17:26 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0xb, 0x800, 0x8, 0x161, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x40) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001180)={r0, &(0x7f0000000040), &(0x7f00000021c0)=""/4096}, 0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001080)={r0, &(0x7f0000000040), &(0x7f0000000080)=""/4096}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r0, &(0x7f0000000040)=0x42, r1, &(0x7f00000010c0)=0x1, 0x7f, 0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000001a80)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001a40)={&(0x7f0000001c40)={0x3c, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x20, 0x17, {0x17, 0x800, @l2={'eth', 0x3a, 'veth0_to_batadv\x00'}}}}, [""]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000001c00)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="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"], 0x88}, 0x1, 0x0, 0x0, 0x40044}, 0xc840) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c000005e7ffffffffffffff0000000000", @ANYRES32=0x0, @ANYBLOB="0040020000000000280012800b0001006d616373656300001800028005000600000000000c0001000000008f030000000a000500070000000000000008000a00", @ANYRES32=r6, @ANYBLOB], 0x5c}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00') sendmsg$NL80211_CMD_START_SCHED_SCAN(r3, &(0x7f0000001980)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001940)={&(0x7f00000031c0)={0x33c, r7, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x2c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x7f}, {0x8, 0x0, 0x9}, {0x8, 0x0, 0x6c73}, {0x8, 0x0, 0x2}, {0x8, 0x0, 0x8}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x34, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x101}, {0x8, 0x0, 0x5b2b147e}, {0x8, 0x0, 0xfffff800}, {0x8, 0x0, 0xdc}, {0x8, 0x0, 0x5}, {0x8, 0x0, 0x400}]}, @NL80211_ATTR_IE={0xac, 0x2a, "71b217aee3df60fe8d83aa994e2c06ecb8cffb8b492da9916ff9aa9150d9ecb31749f42286d1f653e6a8bece8b8f6e357f0c14999be096bc63ac3279db2db77ea27dedd0c66a91957fefefefece54724cdc88858f273a437df1f63577397b398009d095022c562432ffd0d5f9d4871d5e5ff8bdc5aeb3bfc46df9b4d8c3a31f3ad5a7fbe281a306b49595764115b9fc4eadc93610323cc2c3cf779b3855d6dd77d2999f26c69c9d5"}, @NL80211_ATTR_IE={0x1fd, 0x2a, "32309225eec093f35229e7e0cbb436b795607e63fc8a83792d095f13d48f698ddf720118246e586b7c0c507ae8a8ad78f5b5ea783b707bceee3237422d5207a7d59274bec42310681d5cae4950bd18ccb64209f12de48a550c2efd8afea98b7561040bf555ed73da7fb67b75b15d7d845a20c6302aaf75820bf60b48f259a22356e89195ab06acb774bf07a5d4cce69c2e0da7aa154a1dce09f2c68b8c6eed58cee88215fc3636769be29175f69188dd05eed90f701bb7fe40f31fc4e10b9db8cfa0bbef4831ddbf7fbf6901bcb77cfc5a66656baaf0b12ed61d19961126fb6e07f78929c894dcd5a7ced443bb3b1f8bc7643a85df8ce190e3cde79ff96f844a68c23cc519953ec34b34d915e49538c9eda90513a593a027f8132b3f12c09c7459b7f1020dd5f871a3c04edd75f44a26e330c114f34797543f662af498e30e1fc785b9ea794cbc0fc334470db75a008289565387fa2664306adbb8e5fe57ca741da49c92bd84a92972d0e8e5938a3217b7e38396131e42cbb5b1f3fcee83148e488fb29c6fb605dd44a81349ea2c3818ff8af7d4d0f62726a18899a5ed846e625ea62baea6a1f93dac80f6e15fcba178ca80ff30f8dc9634041e8d2ac422987495d4ea65589ec4496e3a9db014bbf750d01995dd751a2730a6277e378c4c25b27b667bff068b866d91825092713fdd791085e559f032257155"}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x6}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1000}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}]}, 0x33c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000c1) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000001200)={0x18, 0x0, 0x4, {0xcab0}}, 0x18) socket(0x18, 0x800, 0x3) getsockname$packet(r3, &(0x7f0000001a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001d00)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5}, @IFLA_GENEVE_PORT={0x6}, @IFLA_GENEVE_TTL={0x5, 0x3, 0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x5c}}, 0x40) 19:17:26 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000005c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x1e, &(0x7f00000000c0)=""/4107, &(0x7f0000001140)=0x100b) sendfile(r2, r1, 0x0, 0x100000005) 19:17:26 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000001600)=[{0x0}, {&(0x7f0000000100)=""/218, 0xcc}], 0x2}}], 0x1, 0x0, 0x0) [ 938.218737][ T3672] usb 1-1: USB disconnect, device number 92 [ 938.337272][ T3216] usb 2-1: config 0 descriptor?? [ 938.401456][ T3216] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 938.556305][ T28] audit: type=1804 audit(1597519047.273:79): pid=20866 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir324314646/syzkaller.YtKuoD/398/cgroup.controllers" dev="sda1" ino=16374 res=1 [ 938.596332][T20868] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20868 comm=syz-executor.3 [ 938.649643][T20871] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=20871 comm=syz-executor.3 [ 938.658332][ T3216] usb 2-1: USB disconnect, device number 107 [ 938.782259][T20868] device geneve2 entered promiscuous mode 19:17:27 executing program 5: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x4000000008}) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000140), 0x24, 0x0) [ 939.153934][ T27] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 939.244100][ T3216] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 939.299154][T20875] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=20875 comm=syz-executor.3 [ 939.318249][T20871] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20871 comm=syz-executor.3 [ 939.404455][ T27] usb 1-1: Using ep0 maxpacket: 16 [ 939.492123][ T3216] usb 2-1: Using ep0 maxpacket: 32 [ 939.543178][ T27] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 939.556329][ T27] usb 1-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 939.565759][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 939.633626][ T3216] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 939.647294][ T3216] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 939.656699][ T3216] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:17:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x8001) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) [ 939.832903][ T27] usb 1-1: config 0 descriptor?? [ 939.893356][ T3216] usb 2-1: config 0 descriptor?? [ 939.931805][ T27] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 939.934566][ T3216] hub 2-1:0.0: bad descriptor, ignoring hub [ 939.945720][ T3216] hub: probe of 2-1:0.0 failed with error -5 [ 939.958333][ T3216] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 940.081194][ T3672] usb 1-1: USB disconnect, device number 93 [ 940.633204][ T3672] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 940.872573][ T3672] usb 1-1: Using ep0 maxpacket: 32 [ 940.993980][ T3672] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 941.007092][ T3672] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 941.016558][ T3672] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.273724][ T3672] usb 1-1: config 0 descriptor?? [ 941.315287][ T3672] hub 1-1:0.0: bad descriptor, ignoring hub [ 941.321510][ T3672] hub: probe of 1-1:0.0 failed with error -5 [ 941.334252][ T3672] usbhid 1-1:0.0: couldn't find an input interrupt endpoint 19:17:30 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "a8d0f938"}, 0x0, 0x0, 0x0, 0x0}) 19:17:30 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) recvmmsg(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000001600)=[{0x0}, {&(0x7f0000000100)=""/218, 0xcc}], 0x2}}], 0x1, 0x0, 0x0) 19:17:30 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) getpid() r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x1c, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000800, 0x20000000fb], 0x100000, 0x200400}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x80181, 0x0) ioctl$KDGETKEYCODE(r3, 0x4b4c, &(0x7f0000000180)={0x4, 0x7ff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:17:30 executing program 3: close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r0 = syz_open_procfs(0x0, 0x0) fcntl$notify(r0, 0x402, 0xb1c661d398500c73) ftruncate(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000000)={0x0, 0x3}) r2 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r2, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, @planes=&(0x7f0000000000)={0x0, 0x0, @userptr}, 0xff00}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$VIDIOC_G_MODULATOR(r2, 0xc0445636, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 19:17:30 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x1c, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000800, 0x20000000fb], 0x100000, 0x200400}) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000180)={0x4, 0x7ff}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 941.583623][ T3216] usb 2-1: USB disconnect, device number 108 [ 942.536074][ T3216] usb 2-1: new high-speed USB device number 109 using dummy_hcd 19:17:31 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "37b0aa6c"}, 0x0, 0x0, 0x0, 0x0}) 19:17:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002180)=@newtaction={0xe68, 0x1a, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x0, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 19:17:31 executing program 4: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x3}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r1, r0, 0x0) 19:17:31 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) recvmmsg(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000001600)=[{0x0}, {&(0x7f0000000100)=""/218, 0xcc}], 0x2}}], 0x1, 0x0, 0x0) [ 942.802029][ T3216] usb 2-1: Using ep0 maxpacket: 16 [ 942.854121][T16291] usb 1-1: USB disconnect, device number 94 19:17:31 executing program 5: ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f00000001c0)="ed711c9df76ca5ea9c6cc18039e28162519012fcdec5ec12d78f54c3a25b57e51826b785cb470f5b12aff073", 0x2c}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x2c, r1, 0x42b, 0x0, 0x0, {{}, {}, {0x10}}}, 0x2c}}, 0x0) [ 942.953891][ T3216] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 942.967056][ T3216] usb 2-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 942.976820][ T3216] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.205896][ T3216] usb 2-1: config 0 descriptor?? [ 943.255153][ T3216] usbhid 2-1:0.0: couldn't find an input interrupt endpoint 19:17:32 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2000050, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x2}) pwrite64(r0, 0x0, 0x0, 0x2) 19:17:32 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) getpid() r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000800, 0x20000000fb], 0x100000, 0x200400}) openat$hwrng(0xffffffffffffff9c, 0x0, 0x80181, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 943.484528][ T8702] usb 2-1: USB disconnect, device number 109 [ 943.852914][ T3672] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 944.062183][ T8702] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 944.092854][ T3672] usb 1-1: Using ep0 maxpacket: 16 [ 944.236148][ T3672] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 944.249368][ T3672] usb 1-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 944.258784][ T3672] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.288049][ T3672] usb 1-1: config 0 descriptor?? [ 944.340757][ T3672] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 944.342137][ T8702] usb 2-1: Using ep0 maxpacket: 32 [ 944.506398][ T8702] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 944.519755][ T8702] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 944.529194][ T8702] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.549493][ T3672] usb 1-1: USB disconnect, device number 95 [ 944.835929][ T8702] usb 2-1: config 0 descriptor?? [ 944.879822][ T8702] hub 2-1:0.0: bad descriptor, ignoring hub [ 944.886482][ T8702] hub: probe of 2-1:0.0 failed with error -5 [ 944.898910][ T8702] usbhid 2-1:0.0: couldn't find an input interrupt endpoint 19:17:33 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc3040000000001090224000100"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "a8d0f938"}, 0x0, 0x0, 0x0, 0x0}) 19:17:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@can_delroute={0x14c, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "b8bfd1fb12b86688"}, 0x5}}, @CGW_CS_CRC8={0x11e, 0x6, {0x70, 0x0, 0x0, 0x0, 0x0, "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", 0x0, "cb1aae77526df647501ef182c68963422e181175"}}]}, 0x14c}}, 0x0) 19:17:33 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20040218, &(0x7f00000002c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 19:17:33 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) recvmmsg(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000001600)=[{0x0}, {&(0x7f0000000100)=""/218, 0xcc}], 0x2}}], 0x1, 0x0, 0x0) 19:17:33 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) getpid() r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000800, 0x20000000fb], 0x100000, 0x200400}) openat$hwrng(0xffffffffffffff9c, 0x0, 0x80181, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 945.142085][ T3672] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 945.265817][ T8702] usb 2-1: USB disconnect, device number 110 [ 945.382810][ T3672] usb 1-1: Using ep0 maxpacket: 32 [ 945.503076][ T3672] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 945.516234][ T3672] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 945.525875][ T3672] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 945.757710][ T3672] usb 1-1: config 0 descriptor?? [ 945.836076][ T3672] hub 1-1:0.0: bad descriptor, ignoring hub [ 945.842443][ T3672] hub: probe of 1-1:0.0 failed with error -5 [ 945.855027][ T3672] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 945.932941][ T8989] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 946.173341][ T8989] usb 2-1: Using ep0 maxpacket: 16 [ 946.293036][ T8989] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 946.306205][ T8989] usb 2-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 946.315672][ T8989] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.428411][ T8989] usb 2-1: config 0 descriptor?? [ 946.480532][ T8989] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 946.713197][ T3672] usb 2-1: USB disconnect, device number 111 19:17:35 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "37b0aa6c"}, 0x0, 0x0, 0x0, 0x0}) 19:17:35 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ocfs2(&(0x7f0000000100)='ocfs2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000046c0)='\x00') 19:17:35 executing program 5: syz_emit_ethernet(0xbe, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, @multicast2, @multicast1, {[@ra={0x94, 0x4}, @end, @rr={0x7, 0xf, 0x0, [@private, @dev, @rand_addr]}, @cipso={0x86, 0x53, 0x0, [{0x0, 0xc, "51d48808530dfb390a80"}, {0x0, 0xa, "b798c3479ff47444"}, {0x0, 0xe, "ae0dc5f2009a607c2d6904a3"}, {0x0, 0x10, "519f3183fb0839f210a0576c73d0"}, {0x0, 0xe, "1eeec88ddc184f60902976b6"}, {0x0, 0x8, "1e916a2891e6"}, {0x0, 0x3, '\v'}]}, @timestamp={0x44, 0x4}, @generic={0x0, 0x6, "b1e203bf"}, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@broadcast}]}]}}}}}}}, 0x0) 19:17:35 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) recvmmsg(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000001600)=[{0x0}, {&(0x7f0000000100)=""/218, 0xcc}], 0x2}}], 0x1, 0x0, 0x0) 19:17:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000807e00"}) r3 = syz_open_pts(r2, 0x1) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x0, 0x0, "539ba821dbf1ddf02bf44aa098d02ce78fe03c"}) write(r3, &(0x7f0000000180)="d5", 0x1) [ 947.208727][ T8704] usb 1-1: USB disconnect, device number 96 [ 947.267970][T21069] (syz-executor.3,21069,1):ocfs2_parse_options:1481 ERROR: Invalid heartbeat mount options [ 947.278265][T21069] (syz-executor.3,21069,1):ocfs2_fill_super:1190 ERROR: status = -22 [ 947.287332][ T3672] usb 2-1: new high-speed USB device number 112 using dummy_hcd 19:17:36 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x9b, 0x7, 0x7, 0x0, 0x33, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000106d, 0x40}, [], "377ee7529f3a"}, 0x46) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 947.542211][ T3672] usb 2-1: Using ep0 maxpacket: 32 19:17:36 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000807e00"}) r1 = syz_open_pts(r0, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0xfffffff7, 0x9, 0x0, 0x0, 0x0, "539ba821dbf1ddf02bf44ab998d02ce78fe03c"}) write(r1, &(0x7f0000000100)="102a3a930a61cc34764e2477a549e9ab84026c7b7d7aa5c17d8135457c464491c9103cae64221f5fbd399f0f22c662412a4991f57df530cf63913bebf9905efadf6d0d86", 0x44) [ 947.663453][ T3672] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 947.676609][ T3672] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 947.686057][ T3672] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 947.955629][ T3672] usb 2-1: config 0 descriptor?? [ 948.026986][ T3672] hub 2-1:0.0: bad descriptor, ignoring hub [ 948.033409][ T3672] hub: probe of 2-1:0.0 failed with error -5 [ 948.046485][ T3672] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 948.057850][ T8989] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 948.302720][ T8989] usb 1-1: Using ep0 maxpacket: 16 [ 948.426092][ T8989] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 948.439320][ T8989] usb 1-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 948.448715][ T8989] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.528184][ T8989] usb 1-1: config 0 descriptor?? [ 948.581006][ T8989] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 948.778675][ T3672] usb 1-1: USB disconnect, device number 97 [ 949.412549][ T3672] usb 1-1: new high-speed USB device number 98 using dummy_hcd 19:17:38 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc3040000000001090224000100"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "a8d0f938"}, 0x0, 0x0, 0x0, 0x0}) 19:17:38 executing program 3: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) futex(&(0x7f0000000240)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) semget$private(0x0, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) 19:17:38 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) open(&(0x7f0000000000)='./file0\x00', 0x870596b8a61e827e, 0x0) 19:17:38 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) recvmmsg(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000001600)=[{0x0}, {&(0x7f0000000100)=""/218, 0xcc}], 0x2}}], 0x1, 0x0, 0x0) 19:17:38 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000807e00"}) r1 = syz_open_pts(r0, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0xfffffff7, 0x9, 0x0, 0x0, 0x0, "539ba821dbf1ddf02bf44ab998d02ce78fe03c"}) write(r1, &(0x7f0000000100)="102a3a930a61cc34764e2477a549e9ab84026c7b7d7aa5c17d8135457c464491c9103cae64221f5fbd399f0f22c662412a4991f57df530cf63913bebf9905efadf6d0d86", 0x44) [ 949.603261][ T3216] usb 2-1: USB disconnect, device number 112 [ 949.661488][ T3672] usb 1-1: Using ep0 maxpacket: 32 [ 949.803809][ T3672] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 949.817019][ T3672] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 949.826822][ T3672] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.156507][ T3672] usb 1-1: config 0 descriptor?? [ 950.268038][ T3672] hub 1-1:0.0: bad descriptor, ignoring hub [ 950.275018][ T3672] hub: probe of 1-1:0.0 failed with error -5 [ 950.287802][ T3672] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 950.992142][ T3216] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 951.262730][ T3216] usb 2-1: Using ep0 maxpacket: 16 [ 951.382412][ T3216] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 951.397006][ T3216] usb 2-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 951.406384][ T3216] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.446190][ T3216] usb 2-1: config 0 descriptor?? 19:17:40 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc3040000000001090224000100"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "37b0aa6c"}, 0x0, 0x0, 0x0, 0x0}) 19:17:40 executing program 5: semget(0x2, 0x4, 0x14) 19:17:40 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000807e00"}) r1 = syz_open_pts(r0, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0xfffffff7, 0x9, 0x0, 0x0, 0x0, "539ba821dbf1ddf02bf44ab998d02ce78fe03c"}) write(r1, &(0x7f0000000100)="102a3a930a61cc34764e2477a549e9ab84026c7b7d7aa5c17d8135457c464491c9103cae64221f5fbd399f0f22c662412a4991f57df530cf63913bebf9905efadf6d0d86", 0x44) 19:17:40 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) recvmmsg(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000001600)=[{0x0}, {&(0x7f0000000100)=""/218, 0xcc}], 0x2}}], 0x1, 0x0, 0x0) 19:17:40 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000880)={0x0, 0x0, 0xc, &(0x7f00000001c0)={0x5, 0xf, 0xc, 0x1, [@generic={0x7, 0x10, 0x2, "bab282a4"}]}}) [ 951.503373][ T3216] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 951.623702][ T3672] usb 1-1: USB disconnect, device number 98 [ 951.702887][ T3216] usb 2-1: USB disconnect, device number 113 19:17:40 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xe, 0x68, 0x60, 0x8, 0x82d, 0x100, 0xf2a3, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x98, 0x18, 0x7e}}]}}]}}, 0x0) 19:17:40 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000807e00"}) r1 = syz_open_pts(r0, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0xfffffff7, 0x9, 0x0, 0x0, 0x0, "539ba821dbf1ddf02bf44ab998d02ce78fe03c"}) write(r1, &(0x7f0000000100)="102a3a930a61cc34764e2477a549e9ab84026c7b7d7aa5c17d8135457c464491c9103cae64221f5fbd399f0f22c662412a4991f57df530cf63913bebf9905efadf6d0d86", 0x44) [ 952.125669][ T8989] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 952.274444][ T3216] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 952.523163][T17310] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 952.526685][ T3216] usb 2-1: Using ep0 maxpacket: 32 [ 952.584422][ T8989] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 952.595590][ T8989] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 952.605731][ T8989] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 952.615755][ T8989] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 952.625771][ T8989] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 952.635681][ T8989] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 952.690816][ T3216] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 952.704046][ T3216] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 952.713456][ T3216] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.792276][T17310] usb 1-1: Using ep0 maxpacket: 16 [ 952.802932][T16291] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 952.861719][ T3216] usb 2-1: config 0 descriptor?? [ 952.913295][T17310] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 952.926544][T17310] usb 1-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 952.930316][ T3216] hub 2-1:0.0: bad descriptor, ignoring hub [ 952.935869][T17310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.942073][ T3216] hub: probe of 2-1:0.0 failed with error -5 [ 952.962559][ T3216] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 953.024456][ T8989] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 953.033779][ T8989] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 953.042068][ T8989] usb 4-1: Product: syz [ 953.046386][ T8989] usb 4-1: Manufacturer: syz [ 953.052263][ T8989] usb 4-1: SerialNumber: syz [ 953.084094][T17310] usb 1-1: config 0 descriptor?? [ 953.102200][T16291] usb 6-1: Using ep0 maxpacket: 8 [ 953.131604][T17310] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 953.224612][T16291] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=f2.a3 [ 953.234037][T16291] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.338138][ T3216] usb 1-1: USB disconnect, device number 99 [ 953.392887][ T8989] cdc_ncm 4-1:1.0: bind() failure [ 953.408954][ T8989] cdc_ncm 4-1:1.1: bind() failure [ 953.482879][ T8989] usb 4-1: USB disconnect, device number 2 [ 953.535886][T16291] usb 6-1: palm_os_3_probe - error -71 getting connection information [ 953.544661][T16291] visor: probe of 6-1:1.0 failed with error -71 [ 953.597592][T16291] usb 6-1: USB disconnect, device number 2 [ 953.982882][ T3216] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 954.152962][ T8989] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 954.242524][ T3216] usb 1-1: Using ep0 maxpacket: 32 [ 954.332510][ T8704] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 954.386385][ T3216] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 954.399643][ T3216] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 954.409032][ T3216] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:17:43 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc3040000000001090224000100"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "a8d0f938"}, 0x0, 0x0, 0x0, 0x0}) 19:17:43 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000807e00"}) r1 = syz_open_pts(r0, 0x1) write(r1, &(0x7f0000000100)="102a3a930a61cc34764e2477a549e9ab84026c7b7d7aa5c17d8135457c464491c9103cae64221f5fbd399f0f22c662412a4991f57df530cf63913bebf9905efadf6d0d86", 0x44) 19:17:43 executing program 2: bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0xcc) recvmmsg(0xffffffffffffffff, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000001600)=[{0x0}, {&(0x7f0000000100)=""/218, 0xcc}], 0x2}}], 0x1, 0x0, 0x0) [ 954.584230][ T3216] usb 1-1: config 0 descriptor?? [ 954.592890][ T8989] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 954.604698][ T8989] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 954.614764][ T8989] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 954.624780][ T8989] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 954.634780][ T8989] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 954.642438][ T8704] usb 6-1: Using ep0 maxpacket: 8 [ 954.644677][ T8989] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 954.650341][T16291] usb 2-1: USB disconnect, device number 114 [ 954.704913][ T3216] hub 1-1:0.0: bad descriptor, ignoring hub [ 954.711142][ T3216] hub: probe of 1-1:0.0 failed with error -5 [ 954.724674][ T3216] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 954.803627][ T8704] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=f2.a3 [ 954.814073][ T8704] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:17:43 executing program 2: bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0xcc) recvmmsg(0xffffffffffffffff, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000001600)=[{0x0}, {&(0x7f0000000100)=""/218, 0xcc}], 0x2}}], 0x1, 0x0, 0x0) 19:17:43 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="02010571ec0400000000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) [ 955.122508][ T8704] usb 6-1: palm_os_3_probe - error -71 getting connection information [ 955.131098][ T8704] visor: probe of 6-1:1.0 failed with error -71 [ 955.213102][ T8704] usb 6-1: USB disconnect, device number 3 [ 955.272706][ T8989] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 955.282126][ T8989] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.396499][ T8989] usb 4-1: can't set config #1, error -71 [ 955.444189][ T8989] usb 4-1: USB disconnect, device number 3 [ 955.515773][T16291] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 955.812209][T16291] usb 2-1: Using ep0 maxpacket: 16 [ 955.956393][T16291] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 955.969507][T16291] usb 2-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 955.978900][T16291] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:17:44 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc3040000000001090224000100"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "37b0aa6c"}, 0x0, 0x0, 0x0, 0x0}) [ 956.128701][T21229] loop3: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 [ 956.128817][T21229] loop3: partition table partially beyond EOD, truncated 19:17:44 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000807e00"}) r1 = syz_open_pts(r0, 0x1) write(r1, &(0x7f0000000100)="102a3a930a61cc34764e2477a549e9ab84026c7b7d7aa5c17d8135457c464491c9103cae64221f5fbd399f0f22c662412a4991f57df530cf63913bebf9905efadf6d0d86", 0x44) 19:17:44 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20040218, &(0x7f00000002c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 956.227127][T21229] loop3: p1 size 2 extends beyond EOD, truncated 19:17:45 executing program 2: bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0xcc) recvmmsg(0xffffffffffffffff, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000001600)=[{0x0}, {&(0x7f0000000100)=""/218, 0xcc}], 0x2}}], 0x1, 0x0, 0x0) [ 956.327120][ T8989] usb 1-1: USB disconnect, device number 100 [ 956.374688][T16291] usb 2-1: config 0 descriptor?? [ 956.420669][T16291] usbhid 2-1:0.0: couldn't find an input interrupt endpoint 19:17:45 executing program 5: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000100)='threaded\x00', 0xd6f0e2de) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) readv(r0, 0x0, 0x0) lseek(r0, 0x0, 0x0) 19:17:45 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000807e00"}) r1 = syz_open_pts(r0, 0x1) write(r1, &(0x7f0000000100)="102a3a930a61cc34764e2477a549e9ab84026c7b7d7aa5c17d8135457c464491c9103cae64221f5fbd399f0f22c662412a4991f57df530cf63913bebf9905efadf6d0d86", 0x44) [ 956.620332][T17310] usb 2-1: USB disconnect, device number 115 [ 956.670716][T21229] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 956.684847][T21229] loop3: p3 size 2 extends beyond EOD, truncated [ 956.730294][T21229] loop3: p4 size 32768 extends beyond EOD, truncated [ 956.751575][T21229] loop3: p5 size 1073741824 extends beyond EOD, truncated [ 956.773515][T21229] loop3: p6 size 1073741824 extends beyond EOD, truncated [ 956.818116][T21229] loop3: p7 size 1073741824 extends beyond EOD, truncated [ 956.870613][T21229] loop3: p8 size 1073741824 extends beyond EOD, truncated [ 956.905480][T21229] loop3: p9 size 1073741824 extends beyond EOD, truncated 19:17:45 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) recvmmsg(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000001600)=[{0x0}, {&(0x7f0000000100)=""/218, 0xcc}], 0x2}}], 0x1, 0x0, 0x0) [ 956.918681][T16291] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 956.978117][T21229] loop3: p10 size 1073741824 extends beyond EOD, truncated [ 957.020781][T21229] loop3: p11 size 1073741824 extends beyond EOD, truncated [ 957.089045][T21229] loop3: p12 size 1073741824 extends beyond EOD, truncated [ 957.147282][T21229] loop3: p13 size 1073741824 extends beyond EOD, truncated [ 957.172881][T16291] usb 1-1: Using ep0 maxpacket: 16 [ 957.197458][T17310] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 957.220792][T21229] loop3: p14 size 1073741824 extends beyond EOD, truncated [ 957.235563][T21229] loop3: p15 size 1073741824 extends beyond EOD, truncated [ 957.248017][T21229] loop3: p16 size 1073741824 extends beyond EOD, truncated [ 957.275780][T21229] loop3: p17 size 1073741824 extends beyond EOD, truncated [ 957.289382][T21229] loop3: p18 size 1073741824 extends beyond EOD, truncated [ 957.302476][T16291] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 957.316315][T16291] usb 1-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 957.325610][T16291] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.327490][T21229] loop3: p19 size 1073741824 extends beyond EOD, truncated [ 957.431323][T21229] loop3: p20 size 1073741824 extends beyond EOD, truncated [ 957.442407][T17310] usb 2-1: Using ep0 maxpacket: 32 [ 957.501601][T21229] loop3: p21 size 1073741824 extends beyond EOD, truncated [ 957.510873][T16291] usb 1-1: config 0 descriptor?? [ 957.528813][T21229] loop3: p22 size 1073741824 extends beyond EOD, truncated [ 957.563576][T17310] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 957.576932][T17310] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 957.580461][T16291] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 957.586402][T17310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.630620][T21229] loop3: p23 size 1073741824 extends beyond EOD, truncated [ 957.697207][T21229] loop3: p24 size 1073741824 extends beyond EOD, truncated [ 957.712909][T17310] usb 2-1: config 0 descriptor?? [ 957.755173][T17310] hub 2-1:0.0: bad descriptor, ignoring hub [ 957.761391][T17310] hub: probe of 2-1:0.0 failed with error -5 [ 957.781044][T16291] usb 1-1: USB disconnect, device number 101 [ 957.781158][T21229] loop3: p25 size 1073741824 extends beyond EOD, truncated [ 957.820976][T17310] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 957.863727][T21229] loop3: p26 size 1073741824 extends beyond EOD, truncated [ 957.951351][T21229] loop3: p27 size 1073741824 extends beyond EOD, truncated [ 958.003096][T21229] loop3: p28 size 1073741824 extends beyond EOD, truncated [ 958.034727][T21229] loop3: p29 size 1073741824 extends beyond EOD, truncated [ 958.070345][T21229] loop3: p30 size 1073741824 extends beyond EOD, truncated [ 958.081550][T21229] loop3: p31 size 1073741824 extends beyond EOD, truncated [ 958.098856][T21229] loop3: p32 size 1073741824 extends beyond EOD, truncated [ 958.110786][T21229] loop3: p33 size 1073741824 extends beyond EOD, truncated [ 958.121562][T21229] loop3: p34 size 1073741824 extends beyond EOD, truncated [ 958.132703][T21229] loop3: p35 size 1073741824 extends beyond EOD, truncated [ 958.144616][T21229] loop3: p36 size 1073741824 extends beyond EOD, truncated [ 958.155970][T21229] loop3: p37 size 1073741824 extends beyond EOD, truncated [ 958.176068][T21229] loop3: p38 size 1073741824 extends beyond EOD, truncated [ 958.187640][T21229] loop3: p39 size 1073741824 extends beyond EOD, truncated [ 958.199953][T21229] loop3: p40 size 1073741824 extends beyond EOD, truncated [ 958.218280][T21229] loop3: p41 size 1073741824 extends beyond EOD, truncated [ 958.230376][T21229] loop3: p42 size 1073741824 extends beyond EOD, truncated [ 958.245240][T21229] loop3: p43 size 1073741824 extends beyond EOD, truncated [ 958.257477][T21229] loop3: p44 size 1073741824 extends beyond EOD, truncated [ 958.268153][T21229] loop3: p45 size 1073741824 extends beyond EOD, truncated [ 958.288026][T21229] loop3: p46 size 1073741824 extends beyond EOD, truncated [ 958.299300][T21229] loop3: p47 size 1073741824 extends beyond EOD, truncated [ 958.310982][T21229] loop3: p48 size 1073741824 extends beyond EOD, truncated [ 958.329044][T21229] loop3: p49 size 1073741824 extends beyond EOD, truncated [ 958.341300][T21229] loop3: p50 size 1073741824 extends beyond EOD, truncated [ 958.353913][T21229] loop3: p51 size 1073741824 extends beyond EOD, truncated [ 958.366149][T21229] loop3: p52 size 1073741824 extends beyond EOD, truncated [ 958.377237][T21229] loop3: p53 size 1073741824 extends beyond EOD, truncated [ 958.391219][T21229] loop3: p54 size 1073741824 extends beyond EOD, truncated [ 958.405424][T16291] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 958.415830][T21229] loop3: p55 size 1073741824 extends beyond EOD, truncated [ 958.427608][T21229] loop3: p56 size 1073741824 extends beyond EOD, truncated [ 958.441810][T21229] loop3: p57 size 1073741824 extends beyond EOD, truncated [ 958.468909][T21229] loop3: p58 size 1073741824 extends beyond EOD, truncated [ 958.479488][T21229] loop3: p59 size 1073741824 extends beyond EOD, truncated [ 958.490494][T21229] loop3: p60 size 1073741824 extends beyond EOD, truncated [ 958.508812][T21229] loop3: p61 size 1073741824 extends beyond EOD, truncated [ 958.531790][T21229] loop3: p62 size 1073741824 extends beyond EOD, truncated [ 958.546756][T21229] loop3: p63 size 1073741824 extends beyond EOD, truncated [ 958.558053][T21229] loop3: p64 size 1073741824 extends beyond EOD, truncated [ 958.569481][T21229] loop3: p65 size 1073741824 extends beyond EOD, truncated [ 958.581806][T21229] loop3: p66 size 1073741824 extends beyond EOD, truncated [ 958.594257][T21229] loop3: p67 size 1073741824 extends beyond EOD, truncated [ 958.609372][T21229] loop3: p68 size 1073741824 extends beyond EOD, truncated [ 958.624316][T21229] loop3: p69 size 1073741824 extends beyond EOD, truncated [ 958.641524][T21229] loop3: p70 size 1073741824 extends beyond EOD, truncated [ 958.653115][T21229] loop3: p71 size 1073741824 extends beyond EOD, truncated [ 958.676462][T21229] loop3: p72 size 1073741824 extends beyond EOD, truncated [ 958.687456][T21229] loop3: p73 size 1073741824 extends beyond EOD, truncated [ 958.694554][T16291] usb 1-1: Using ep0 maxpacket: 32 [ 958.710733][T21229] loop3: p74 size 1073741824 extends beyond EOD, truncated [ 958.729341][T21229] loop3: p75 size 1073741824 extends beyond EOD, truncated [ 958.740734][T21229] loop3: p76 size 1073741824 extends beyond EOD, truncated [ 958.771419][T21229] loop3: p77 size 1073741824 extends beyond EOD, truncated [ 958.793698][T21229] loop3: p78 size 1073741824 extends beyond EOD, truncated [ 958.823297][T21229] loop3: p79 size 1073741824 extends beyond EOD, truncated [ 958.835816][T21229] loop3: p80 size 1073741824 extends beyond EOD, truncated [ 958.845167][T16291] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 958.858501][T16291] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 958.868062][T16291] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.933558][T21229] loop3: p81 size 1073741824 extends beyond EOD, truncated [ 958.976852][T21229] loop3: p82 size 1073741824 extends beyond EOD, truncated [ 959.043200][T16291] usb 1-1: config 0 descriptor?? [ 959.052287][T21229] loop3: p83 size 1073741824 extends beyond EOD, truncated [ 959.097263][T16291] hub 1-1:0.0: bad descriptor, ignoring hub [ 959.103735][T16291] hub: probe of 1-1:0.0 failed with error -5 [ 959.116113][T16291] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 959.158275][T21229] loop3: p84 size 1073741824 extends beyond EOD, truncated 19:17:47 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a00009"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "a8d0f938"}, 0x0, 0x0, 0x0, 0x0}) 19:17:47 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000807e00"}) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000040)={0xfffffff7, 0x9, 0x0, 0x0, 0x0, "539ba821dbf1ddf02bf44ab998d02ce78fe03c"}) write(0xffffffffffffffff, &(0x7f0000000100)="102a3a930a61cc34764e2477a549e9ab84026c7b7d7aa5c17d8135457c464491c9103cae64221f5fbd399f0f22c662412a4991f57df530cf63913bebf9905efadf6d0d86", 0x44) 19:17:47 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40003022, 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000380)={0x0, 0x252a, 0x0, 0x3000000, [], [{}, {0x801, 0x0, 0x80000001}]}) r1 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x7f, 0x182) r2 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x81805, 0x0) sendfile(r1, r1, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r1, 0x4c01) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1b4, 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xb732}) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000040)="fd000100", 0x4}, {&(0x7f0000000140)="bffbfff3bc86dd", 0x7}, {&(0x7f00000001c0)="4022f3b60019291c22104cd8db8b0a874cffcc05d6704ec823ac7705be5594fe5028a25c8507", 0x26}], 0x3) ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x401c7012, &(0x7f0000000080)={0x7, 0x0, 0x81, 0x2, 0x7fffffff, 0x0, 0x4}) 19:17:47 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) recvmmsg(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000001600)=[{0x0}, {&(0x7f0000000100)=""/218, 0xcc}], 0x2}}], 0x1, 0x0, 0x0) [ 959.209871][T21229] loop3: p85 size 1073741824 extends beyond EOD, truncated [ 959.259595][T21229] loop3: p86 size 1073741824 extends beyond EOD, truncated [ 959.304533][T21229] loop3: p87 size 1073741824 extends beyond EOD, truncated [ 959.314899][T17310] usb 2-1: USB disconnect, device number 116 [ 959.369814][T21229] loop3: p88 size 1073741824 extends beyond EOD, truncated [ 959.438698][T21229] loop3: p89 size 1073741824 extends beyond EOD, truncated [ 959.499007][T21229] loop3: p90 size 1073741824 extends beyond EOD, truncated [ 959.554655][T21229] loop3: p91 size 1073741824 extends beyond EOD, truncated [ 959.618745][T21229] loop3: p92 size 1073741824 extends beyond EOD, truncated [ 959.666941][T21229] loop3: p93 size 1073741824 extends beyond EOD, truncated [ 959.749126][T21229] loop3: p94 size 1073741824 extends beyond EOD, truncated [ 959.807887][T21229] loop3: p95 size 1073741824 extends beyond EOD, truncated [ 959.888539][T21229] loop3: p96 size 1073741824 extends beyond EOD, truncated [ 959.936896][T21229] loop3: p97 size 1073741824 extends beyond EOD, truncated [ 959.970548][T21229] loop3: p98 size 1073741824 extends beyond EOD, truncated [ 959.982998][T16291] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 960.006806][T21229] loop3: p99 size 1073741824 extends beyond EOD, truncated [ 960.027039][T21229] loop3: p100 size 1073741824 extends beyond EOD, truncated [ 960.063154][T21229] loop3: p101 size 1073741824 extends beyond EOD, truncated [ 960.092585][T21229] loop3: p102 size 1073741824 extends beyond EOD, truncated [ 960.102335][T21229] loop3: p103 size 1073741824 extends beyond EOD, truncated [ 960.129095][T21229] loop3: p104 size 1073741824 extends beyond EOD, truncated [ 960.156332][T21229] loop3: p105 size 1073741824 extends beyond EOD, truncated [ 960.214833][T21229] loop3: p106 size 1073741824 extends beyond EOD, truncated [ 960.232910][T16291] usb 2-1: Using ep0 maxpacket: 16 [ 960.248961][T21229] loop3: p107 size 1073741824 extends beyond EOD, truncated [ 960.285428][T21229] loop3: p108 size 1073741824 extends beyond EOD, truncated [ 960.330244][T21229] loop3: p109 size 1073741824 extends beyond EOD, truncated [ 960.367220][T21229] loop3: p110 size 1073741824 extends beyond EOD, truncated [ 960.392226][T16291] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 960.405357][T16291] usb 2-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 960.414769][T16291] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.419219][T21229] loop3: p111 size 1073741824 extends beyond EOD, truncated [ 960.445448][T21229] loop3: p112 size 1073741824 extends beyond EOD, truncated [ 960.476084][T21229] loop3: p113 size 1073741824 extends beyond EOD, truncated [ 960.503427][T21229] loop3: p114 size 1073741824 extends beyond EOD, truncated [ 960.518619][T16291] usb 2-1: config 0 descriptor?? [ 960.543358][T21229] loop3: p115 size 1073741824 extends beyond EOD, truncated [ 960.563133][ T8989] usb 1-1: USB disconnect, device number 102 [ 960.569931][T16291] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 960.580235][T21229] loop3: p116 size 1073741824 extends beyond EOD, truncated [ 960.623314][T21229] loop3: p117 size 1073741824 extends beyond EOD, truncated [ 960.645519][T21229] loop3: p118 size 1073741824 extends beyond EOD, truncated [ 960.664744][T21229] loop3: p119 size 1073741824 extends beyond EOD, truncated [ 960.695927][T21229] loop3: p120 size 1073741824 extends beyond EOD, truncated [ 960.712577][T21229] loop3: p121 size 1073741824 extends beyond EOD, truncated [ 960.732665][T21229] loop3: p122 size 1073741824 extends beyond EOD, truncated [ 960.749513][T21229] loop3: p123 size 1073741824 extends beyond EOD, truncated [ 960.765440][T21229] loop3: p124 size 1073741824 extends beyond EOD, truncated [ 960.769178][T16291] usb 2-1: USB disconnect, device number 117 [ 960.779519][T21229] loop3: p125 size 1073741824 extends beyond EOD, truncated [ 960.795765][T21229] loop3: p126 size 1073741824 extends beyond EOD, truncated [ 960.808834][T21229] loop3: p127 size 1073741824 extends beyond EOD, truncated [ 960.827518][T21229] loop3: p128 size 1073741824 extends beyond EOD, truncated [ 960.849401][T21229] loop3: p129 size 1073741824 extends beyond EOD, truncated [ 960.871528][T21229] loop3: p130 size 1073741824 extends beyond EOD, truncated [ 960.887159][T21229] loop3: p131 size 1073741824 extends beyond EOD, truncated [ 960.898494][T21229] loop3: p132 size 1073741824 extends beyond EOD, truncated [ 960.910547][T21229] loop3: p133 size 1073741824 extends beyond EOD, truncated [ 960.923876][T21229] loop3: p134 size 1073741824 extends beyond EOD, truncated [ 960.936115][T21229] loop3: p135 size 1073741824 extends beyond EOD, truncated [ 960.947775][T21229] loop3: p136 size 1073741824 extends beyond EOD, truncated [ 960.966461][T21229] loop3: p137 size 1073741824 extends beyond EOD, truncated [ 960.990480][T21229] loop3: p138 size 1073741824 extends beyond EOD, truncated [ 961.002383][T21229] loop3: p139 size 1073741824 extends beyond EOD, truncated [ 961.025124][T21229] loop3: p140 size 1073741824 extends beyond EOD, truncated [ 961.042509][T21229] loop3: p141 size 1073741824 extends beyond EOD, truncated [ 961.061267][T21229] loop3: p142 size 1073741824 extends beyond EOD, truncated [ 961.082741][T21229] loop3: p143 size 1073741824 extends beyond EOD, truncated [ 961.100295][T21229] loop3: p144 size 1073741824 extends beyond EOD, truncated [ 961.111177][T21229] loop3: p145 size 1073741824 extends beyond EOD, truncated [ 961.123801][T21229] loop3: p146 size 1073741824 extends beyond EOD, truncated [ 961.136438][T21229] loop3: p147 size 1073741824 extends beyond EOD, truncated [ 961.147356][T21229] loop3: p148 size 1073741824 extends beyond EOD, truncated [ 961.167807][T21229] loop3: p149 size 1073741824 extends beyond EOD, truncated [ 961.179806][T21229] loop3: p150 size 1073741824 extends beyond EOD, truncated [ 961.200899][T21229] loop3: p151 size 1073741824 extends beyond EOD, truncated [ 961.244450][T21229] loop3: p152 size 1073741824 extends beyond EOD, truncated [ 961.269402][T21229] loop3: p153 size 1073741824 extends beyond EOD, truncated [ 961.293673][T21229] loop3: p154 size 1073741824 extends beyond EOD, truncated [ 961.313395][T21229] loop3: p155 size 1073741824 extends beyond EOD, truncated [ 961.328868][T21229] loop3: p156 size 1073741824 extends beyond EOD, truncated [ 961.346767][T21229] loop3: p157 size 1073741824 extends beyond EOD, truncated [ 961.348739][T16291] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 961.357473][T21229] loop3: p158 size 1073741824 extends beyond EOD, truncated [ 961.375830][T21229] loop3: p159 size 1073741824 extends beyond EOD, truncated [ 961.386370][T21229] loop3: p160 size 1073741824 extends beyond EOD, truncated [ 961.398051][T21229] loop3: p161 size 1073741824 extends beyond EOD, truncated [ 961.409813][T21229] loop3: p162 size 1073741824 extends beyond EOD, truncated [ 961.427167][T21229] loop3: p163 size 1073741824 extends beyond EOD, truncated [ 961.438261][T21229] loop3: p164 size 1073741824 extends beyond EOD, truncated [ 961.460468][T21229] loop3: p165 size 1073741824 extends beyond EOD, truncated [ 961.471648][T21229] loop3: p166 size 1073741824 extends beyond EOD, truncated [ 961.484674][T21229] loop3: p167 size 1073741824 extends beyond EOD, truncated [ 961.519641][T21229] loop3: p168 size 1073741824 extends beyond EOD, truncated [ 961.608349][T21229] loop3: p169 size 1073741824 extends beyond EOD, truncated [ 961.617309][T16291] usb 2-1: Using ep0 maxpacket: 32 [ 961.653155][T21229] loop3: p170 size 1073741824 extends beyond EOD, truncated [ 961.675993][T21229] loop3: p171 size 1073741824 extends beyond EOD, truncated [ 961.690352][T21229] loop3: p172 size 1073741824 extends beyond EOD, truncated [ 961.702402][T21229] loop3: p173 size 1073741824 extends beyond EOD, truncated [ 961.719574][T21229] loop3: p174 size 1073741824 extends beyond EOD, truncated [ 961.731303][T21229] loop3: p175 size 1073741824 extends beyond EOD, truncated [ 961.744043][T16291] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 961.745617][T21229] loop3: p176 size 1073741824 extends beyond EOD, truncated [ 961.757894][T16291] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 961.774231][T16291] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.779921][T21229] loop3: p177 size 1073741824 extends beyond EOD, truncated [ 961.802717][T21229] loop3: p178 size 1073741824 extends beyond EOD, truncated [ 961.825872][T21229] loop3: p179 size 1073741824 extends beyond EOD, truncated [ 961.844119][T21229] loop3: p180 size 1073741824 extends beyond EOD, truncated [ 961.863536][T21229] loop3: p181 size 1073741824 extends beyond EOD, truncated [ 961.874737][T16291] usb 2-1: config 0 descriptor?? [ 961.893125][T21229] loop3: p182 size 1073741824 extends beyond EOD, truncated [ 961.905248][T21229] loop3: p183 size 1073741824 extends beyond EOD, truncated [ 961.934131][T21229] loop3: p184 size 1073741824 extends beyond EOD, truncated [ 961.945310][T16291] hub 2-1:0.0: bad descriptor, ignoring hub [ 961.951508][T16291] hub: probe of 2-1:0.0 failed with error -5 [ 961.964575][T16291] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 962.071583][T21229] loop3: p185 size 1073741824 extends beyond EOD, truncated [ 962.129003][T21229] loop3: p186 size 1073741824 extends beyond EOD, truncated [ 962.253630][T21229] loop3: p187 size 1073741824 extends beyond EOD, truncated [ 962.273628][T21229] loop3: p188 size 1073741824 extends beyond EOD, truncated [ 962.364593][T21229] loop3: p189 size 1073741824 extends beyond EOD, truncated [ 962.431018][T21229] loop3: p190 size 1073741824 extends beyond EOD, truncated [ 962.479573][T21229] loop3: p191 size 1073741824 extends beyond EOD, truncated [ 962.571505][T21229] loop3: p192 size 1073741824 extends beyond EOD, truncated [ 962.644323][T21229] loop3: p193 size 1073741824 extends beyond EOD, truncated [ 962.705925][T21229] loop3: p194 size 1073741824 extends beyond EOD, truncated [ 962.763256][T21229] loop3: p195 size 1073741824 extends beyond EOD, truncated [ 962.875606][T21229] loop3: p196 size 1073741824 extends beyond EOD, truncated [ 962.936524][T21229] loop3: p197 size 1073741824 extends beyond EOD, truncated [ 963.044764][T21229] loop3: p198 size 1073741824 extends beyond EOD, truncated [ 963.126806][T21229] loop3: p199 size 1073741824 extends beyond EOD, truncated [ 963.203707][T21229] loop3: p200 size 1073741824 extends beyond EOD, truncated [ 963.275219][T21229] loop3: p201 size 1073741824 extends beyond EOD, truncated [ 963.374869][T21229] loop3: p202 size 1073741824 extends beyond EOD, truncated [ 963.448849][T21229] loop3: p203 size 1073741824 extends beyond EOD, truncated [ 963.492601][T16291] usb 2-1: USB disconnect, device number 118 [ 963.526541][T21229] loop3: p204 size 1073741824 extends beyond EOD, truncated [ 963.622909][T21229] loop3: p205 size 1073741824 extends beyond EOD, truncated [ 963.703427][T21229] loop3: p206 size 1073741824 extends beyond EOD, truncated [ 963.834157][T21229] loop3: p207 size 1073741824 extends beyond EOD, truncated [ 963.893486][T21229] loop3: p208 size 1073741824 extends beyond EOD, truncated [ 963.939249][T21229] loop3: p209 size 1073741824 extends beyond EOD, truncated [ 963.998034][T21229] loop3: p210 size 1073741824 extends beyond EOD, truncated [ 964.062869][T21229] loop3: p211 size 1073741824 extends beyond EOD, truncated [ 964.123905][T21229] loop3: p212 size 1073741824 extends beyond EOD, truncated [ 964.183098][T21229] loop3: p213 size 1073741824 extends beyond EOD, truncated [ 964.259634][T21229] loop3: p214 size 1073741824 extends beyond EOD, truncated [ 964.297661][T21229] loop3: p215 size 1073741824 extends beyond EOD, truncated [ 964.327176][T21229] loop3: p216 size 1073741824 extends beyond EOD, truncated [ 964.366663][T21229] loop3: p217 size 1073741824 extends beyond EOD, truncated [ 964.424158][T21229] loop3: p218 size 1073741824 extends beyond EOD, truncated [ 964.495145][T21229] loop3: p219 size 1073741824 extends beyond EOD, truncated [ 964.507191][T21229] loop3: p220 size 1073741824 extends beyond EOD, truncated [ 964.566271][T21229] loop3: p221 size 1073741824 extends beyond EOD, truncated [ 964.600731][T21229] loop3: p222 size 1073741824 extends beyond EOD, truncated [ 964.643867][T21229] loop3: p223 size 1073741824 extends beyond EOD, truncated [ 964.717334][T21229] loop3: p224 size 1073741824 extends beyond EOD, truncated [ 964.759456][T21229] loop3: p225 size 1073741824 extends beyond EOD, truncated [ 964.844836][T21229] loop3: p226 size 1073741824 extends beyond EOD, truncated [ 964.890194][T21229] loop3: p227 size 1073741824 extends beyond EOD, truncated [ 964.942534][T21229] loop3: p228 size 1073741824 extends beyond EOD, truncated [ 965.014329][T21229] loop3: p229 size 1073741824 extends beyond EOD, truncated [ 965.076761][T21229] loop3: p230 size 1073741824 extends beyond EOD, truncated [ 965.138693][T21229] loop3: p231 size 1073741824 extends beyond EOD, truncated [ 965.186422][T21229] loop3: p232 size 1073741824 extends beyond EOD, truncated [ 965.226946][T21229] loop3: p233 size 1073741824 extends beyond EOD, truncated [ 965.322930][T21229] loop3: p234 size 1073741824 extends beyond EOD, truncated [ 965.336798][T21229] loop3: p235 size 1073741824 extends beyond EOD, truncated [ 965.399450][T21229] loop3: p236 size 1073741824 extends beyond EOD, truncated [ 965.446837][T21229] loop3: p237 size 1073741824 extends beyond EOD, truncated [ 965.504463][T21229] loop3: p238 size 1073741824 extends beyond EOD, truncated [ 965.599263][T21229] loop3: p239 size 1073741824 extends beyond EOD, truncated [ 965.657531][T21229] loop3: p240 size 1073741824 extends beyond EOD, truncated [ 965.697495][T21229] loop3: p241 size 1073741824 extends beyond EOD, truncated [ 965.784888][T21229] loop3: p242 size 1073741824 extends beyond EOD, truncated [ 965.846262][T21229] loop3: p243 size 1073741824 extends beyond EOD, truncated [ 965.910825][T21229] loop3: p244 size 1073741824 extends beyond EOD, truncated [ 965.988638][T21229] loop3: p245 size 1073741824 extends beyond EOD, truncated [ 966.083314][T21229] loop3: p246 size 1073741824 extends beyond EOD, truncated [ 966.159837][T21229] loop3: p247 size 1073741824 extends beyond EOD, truncated [ 966.221633][T21229] loop3: p248 size 1073741824 extends beyond EOD, truncated [ 966.283546][T21229] loop3: p249 size 1073741824 extends beyond EOD, truncated [ 966.315589][T21229] loop3: p250 size 1073741824 extends beyond EOD, truncated [ 966.331209][T21229] loop3: p251 size 1073741824 extends beyond EOD, truncated [ 966.350251][T21229] loop3: p252 size 1073741824 extends beyond EOD, truncated [ 966.415688][T21229] loop3: p253 size 1073741824 extends beyond EOD, truncated [ 966.506520][T21229] loop3: p254 size 1073741824 extends beyond EOD, truncated [ 966.581166][T21229] loop3: p255 size 1073741824 extends beyond EOD, truncated 19:17:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5414, 0x20000004) lseek(r1, 0x0, 0x0) 19:17:55 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000807e00"}) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000040)={0xfffffff7, 0x9, 0x0, 0x0, 0x0, "539ba821dbf1ddf02bf44ab998d02ce78fe03c"}) write(0xffffffffffffffff, &(0x7f0000000100)="102a3a930a61cc34764e2477a549e9ab84026c7b7d7aa5c17d8135457c464491c9103cae64221f5fbd399f0f22c662412a4991f57df530cf63913bebf9905efadf6d0d86", 0x44) 19:17:55 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) recvmmsg(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000001600)=[{0x0}, {&(0x7f0000000100)=""/218, 0xcc}], 0x2}}], 0x1, 0x0, 0x0) 19:17:55 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) unshare(0x40600) gettid() fchmod(0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, 0x0) 19:17:55 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc3040000000001090224000100"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "37b0aa6c"}, 0x0, 0x0, 0x0, 0x0}) 19:17:55 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a00009"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "a8d0f938"}, 0x0, 0x0, 0x0, 0x0}) [ 967.412803][ T3672] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 967.462690][ T3216] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 967.664934][ T3672] usb 2-1: Using ep0 maxpacket: 16 [ 967.712427][ T3216] usb 1-1: Using ep0 maxpacket: 16 19:17:56 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000807e00"}) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000040)={0xfffffff7, 0x9, 0x0, 0x0, 0x0, "539ba821dbf1ddf02bf44ab998d02ce78fe03c"}) write(0xffffffffffffffff, &(0x7f0000000100)="102a3a930a61cc34764e2477a549e9ab84026c7b7d7aa5c17d8135457c464491c9103cae64221f5fbd399f0f22c662412a4991f57df530cf63913bebf9905efadf6d0d86", 0x44) [ 967.784074][ T3672] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 967.797228][ T3672] usb 2-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 967.806690][ T3672] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.846181][ T3216] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 967.859442][ T3216] usb 1-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 967.869362][ T3216] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:17:56 executing program 5: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000240)={0x0, 0x1, "1e"}) [ 968.155638][ T3672] usb 2-1: config 0 descriptor?? [ 968.210068][ T3216] usb 1-1: config 0 descriptor?? [ 968.248053][ T3672] usbhid 2-1:0.0: couldn't find an input interrupt endpoint 19:17:57 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) recvmmsg(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000001600)=[{0x0}, {&(0x7f0000000100)=""/218, 0xcc}], 0x2}}], 0x1, 0x0, 0x0) [ 968.344102][ T3216] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 968.477832][ T3672] usb 2-1: USB disconnect, device number 119 [ 968.481425][ T3216] usb 1-1: USB disconnect, device number 103 [ 969.012358][ T3672] usb 2-1: new high-speed USB device number 120 using dummy_hcd 19:17:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0xfffffff7, 0x9, 0x0, 0x0, 0x0, "539ba821dbf1ddf02bf44ab998d02ce78fe03c"}) write(r1, &(0x7f0000000100)="102a3a930a61cc34764e2477a549e9ab84026c7b7d7aa5c17d8135457c464491c9103cae64221f5fbd399f0f22c662412a4991f57df530cf63913bebf9905efadf6d0d86", 0x44) [ 969.145200][ T3216] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 969.252498][ T3672] usb 2-1: Using ep0 maxpacket: 32 19:17:58 executing program 5: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000240)={0x0, 0x1, "1e"}) [ 969.374768][ T3672] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 969.388042][ T3672] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 969.397449][ T3672] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.414380][ T3216] usb 1-1: Using ep0 maxpacket: 32 [ 969.553327][ T3216] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 969.559473][ T3672] usb 2-1: config 0 descriptor?? [ 969.566435][ T3216] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 969.580600][ T3216] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.677773][ T3672] hub 2-1:0.0: bad descriptor, ignoring hub [ 969.684114][ T3672] hub: probe of 2-1:0.0 failed with error -5 [ 969.696539][ T3672] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 969.908734][ T3216] usb 1-1: config 0 descriptor?? [ 970.013229][ T3216] hub 1-1:0.0: bad descriptor, ignoring hub [ 970.019468][ T3216] hub: probe of 1-1:0.0 failed with error -5 [ 970.032187][ T3216] usbhid 1-1:0.0: couldn't find an input interrupt endpoint 19:17:58 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0xfffffff7, 0x9, 0x0, 0x0, 0x0, "539ba821dbf1ddf02bf44ab998d02ce78fe03c"}) write(r1, &(0x7f0000000100)="102a3a930a61cc34764e2477a549e9ab84026c7b7d7aa5c17d8135457c464491c9103cae64221f5fbd399f0f22c662412a4991f57df530cf63913bebf9905efadf6d0d86", 0x44) [ 970.266929][ T3216] usb 1-1: USB disconnect, device number 104 [ 971.139709][T17310] usb 2-1: USB disconnect, device number 120 19:18:00 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x8000008000080003, 0x5) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000011003586000000000020000a07000000", @ANYRES32=r5, @ANYBLOB="0000ef04f20000000c001a"], 0x3}, 0x1, 0xfffffffc}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 19:18:00 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a00009"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "37b0aa6c"}, 0x0, 0x0, 0x0, 0x0}) 19:18:00 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) recvmmsg(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000001600)=[{0x0}, {&(0x7f0000000100)=""/218, 0xcc}], 0x2}}], 0x1, 0x0, 0x0) 19:18:00 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xe) syz_read_part_table(0x0, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="02010500000001000000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) creat(0x0, 0x0) 19:18:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0xfffffff7, 0x9, 0x0, 0x0, 0x0, "539ba821dbf1ddf02bf44ab998d02ce78fe03c"}) write(r1, &(0x7f0000000100)="102a3a930a61cc34764e2477a549e9ab84026c7b7d7aa5c17d8135457c464491c9103cae64221f5fbd399f0f22c662412a4991f57df530cf63913bebf9905efadf6d0d86", 0x44) 19:18:00 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a00009"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "a8d0f938"}, 0x0, 0x0, 0x0, 0x0}) [ 972.422702][T17310] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 972.452581][T21934] loop5: p1 < > p2 p3 < p5 p6 > p4 [ 972.457969][T21934] loop5: partition table partially beyond EOD, truncated 19:18:01 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000807e00"}) r0 = syz_open_pts(0xffffffffffffffff, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0xfffffff7, 0x9, 0x0, 0x0, 0x0, "539ba821dbf1ddf02bf44ab998d02ce78fe03c"}) write(r0, &(0x7f0000000100)="102a3a930a61cc34764e2477a549e9ab84026c7b7d7aa5c17d8135457c464491c9103cae64221f5fbd399f0f22c662412a4991f57df530cf63913bebf9905efadf6d0d86", 0x44) [ 972.467174][T21934] loop5: p1 start 1 is beyond EOD, truncated [ 972.473980][T21934] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 972.553183][ T3672] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 972.662563][T17310] usb 2-1: Using ep0 maxpacket: 16 [ 972.758084][T21934] loop5: p3 size 2 extends beyond EOD, truncated [ 972.782681][T17310] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 972.796052][T17310] usb 2-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 972.805492][T17310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 972.815734][ T3672] usb 1-1: Using ep0 maxpacket: 16 [ 972.878230][T21934] loop5: p4 size 32768 extends beyond EOD, truncated [ 972.933551][ T3672] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 972.947067][ T3672] usb 1-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 972.956515][ T3672] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 972.956547][T21934] loop5: p5 size 1073741824 extends beyond EOD, truncated [ 973.142497][T17310] usb 2-1: config 0 descriptor?? [ 973.190479][T21934] loop5: p6 size 32768 extends beyond EOD, truncated [ 973.194968][T17310] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 973.240521][ T3672] usb 1-1: config 0 descriptor?? 19:18:02 executing program 3: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x103382) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000280)="d1", 0x1}], 0x1, 0x81805, 0x0) msgget(0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x24002d00) [ 973.293012][ T3672] usbhid 1-1:0.0: couldn't find an input interrupt endpoint 19:18:02 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) recvmmsg(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000001600)=[{0x0}, {&(0x7f0000000100)=""/218, 0xcc}], 0x2}}], 0x1, 0x0, 0x0) 19:18:02 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000807e00"}) r0 = syz_open_pts(0xffffffffffffffff, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0xfffffff7, 0x9, 0x0, 0x0, 0x0, "539ba821dbf1ddf02bf44ab998d02ce78fe03c"}) write(r0, &(0x7f0000000100)="102a3a930a61cc34764e2477a549e9ab84026c7b7d7aa5c17d8135457c464491c9103cae64221f5fbd399f0f22c662412a4991f57df530cf63913bebf9905efadf6d0d86", 0x44) [ 973.489930][ T3672] usb 1-1: USB disconnect, device number 105 [ 973.524037][T17310] usb 2-1: USB disconnect, device number 121 19:18:02 executing program 5: 19:18:02 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000807e00"}) r0 = syz_open_pts(0xffffffffffffffff, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0xfffffff7, 0x9, 0x0, 0x0, 0x0, "539ba821dbf1ddf02bf44ab998d02ce78fe03c"}) write(r0, &(0x7f0000000100)="102a3a930a61cc34764e2477a549e9ab84026c7b7d7aa5c17d8135457c464491c9103cae64221f5fbd399f0f22c662412a4991f57df530cf63913bebf9905efadf6d0d86", 0x44) [ 973.972343][T17310] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 974.082228][ T3672] usb 1-1: new high-speed USB device number 106 using dummy_hcd 19:18:02 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000807e00"}) r1 = syz_open_pts(r0, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0xfffffff7, 0x9, 0x0, 0x0, 0x0, "539ba821dbf1ddf02bf44ab998d02ce78fe03c"}) write(r1, &(0x7f0000000100)="102a3a930a61cc34764e2477a549e9ab84026c7b7d7aa5c17d8135457c464491c9103cae64221f5fbd399f0f22c662412a4991f57df530cf63913bebf9905efadf6d0d86", 0x44) [ 974.212390][T17310] usb 2-1: Using ep0 maxpacket: 32 [ 974.333203][T17310] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 974.346850][T17310] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 974.356307][T17310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 974.365836][ T3672] usb 1-1: Using ep0 maxpacket: 32 [ 974.423766][T17310] usb 2-1: config 0 descriptor?? [ 974.477702][T17310] hub 2-1:0.0: bad descriptor, ignoring hub [ 974.485035][T17310] hub: probe of 2-1:0.0 failed with error -5 [ 974.497626][T17310] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 974.507693][ T3672] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 974.522931][ T3672] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 974.532290][ T3672] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 974.632282][ T3672] usb 1-1: config 0 descriptor?? [ 974.675003][ T3672] hub 1-1:0.0: bad descriptor, ignoring hub [ 974.681229][ T3672] hub: probe of 1-1:0.0 failed with error -5 [ 974.694085][ T3672] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 975.972828][ T12] usb 2-1: USB disconnect, device number 122 19:18:04 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a00009"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "37b0aa6c"}, 0x0, 0x0, 0x0, 0x0}) 19:18:04 executing program 5: 19:18:04 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000807e00"}) r1 = syz_open_pts(r0, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0xfffffff7, 0x9, 0x0, 0x0, 0x0, "539ba821dbf1ddf02bf44ab998d02ce78fe03c"}) write(r1, &(0x7f0000000100)="102a3a930a61cc34764e2477a549e9ab84026c7b7d7aa5c17d8135457c464491c9103cae64221f5fbd399f0f22c662412a4991f57df530cf63913bebf9905efadf6d0d86", 0x44) 19:18:04 executing program 3: 19:18:04 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) recvmmsg(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000001600)=[{0x0}, {&(0x7f0000000100)=""/218, 0xcc}], 0x2}}], 0x1, 0x0, 0x0) 19:18:04 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a000090400"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "a8d0f938"}, 0x0, 0x0, 0x0, 0x0}) [ 976.219393][ T8989] usb 1-1: USB disconnect, device number 106 19:18:05 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000807e00"}) r1 = syz_open_pts(r0, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0xfffffff7, 0x9, 0x0, 0x0, 0x0, "539ba821dbf1ddf02bf44ab998d02ce78fe03c"}) write(r1, &(0x7f0000000100)="102a3a930a61cc34764e2477a549e9ab84026c7b7d7aa5c17d8135457c464491c9103cae64221f5fbd399f0f22c662412a4991f57df530cf63913bebf9905efadf6d0d86", 0x44) 19:18:05 executing program 5: 19:18:05 executing program 3: [ 976.693336][T16291] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 976.872533][ T8989] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 976.955399][T16291] usb 2-1: Using ep0 maxpacket: 16 [ 977.083478][T16291] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 977.096853][T16291] usb 2-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 977.106246][T16291] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.142385][ T8989] usb 1-1: Using ep0 maxpacket: 16 19:18:05 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) recvmmsg(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000001600)=[{0x0}, {&(0x7f0000000100)=""/218, 0xcc}], 0x2}}], 0x1, 0x0, 0x0) [ 977.214320][T16291] usb 2-1: config 0 descriptor?? [ 977.264735][ T8989] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 977.278015][ T8989] usb 1-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 977.279458][T16291] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 977.287358][ T8989] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.470153][T16291] usb 2-1: USB disconnect, device number 123 [ 977.559120][ T8989] usb 1-1: config 0 descriptor?? [ 977.615214][ T8989] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 977.811614][ T27] usb 1-1: USB disconnect, device number 107 [ 978.092275][T16291] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 978.362327][T16291] usb 2-1: Using ep0 maxpacket: 32 [ 978.374289][ T27] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 978.493147][T16291] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 978.506336][T16291] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 978.517445][T16291] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.633300][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 978.753279][ T27] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 978.766604][ T27] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 978.776034][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:18:07 executing program 3: [ 978.877023][T16291] usb 2-1: config 0 descriptor?? 19:18:07 executing program 5: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x800000, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) [ 978.978695][T16291] hub 2-1:0.0: bad descriptor, ignoring hub [ 978.985459][T16291] hub: probe of 2-1:0.0 failed with error -5 [ 978.997910][T16291] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 979.058035][ T27] usb 1-1: config 0 descriptor?? [ 979.206842][ T27] hub 1-1:0.0: bad descriptor, ignoring hub [ 979.213448][ T27] hub: probe of 1-1:0.0 failed with error -5 [ 979.225948][ T27] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 980.612870][ T3216] usb 2-1: USB disconnect, device number 124 19:18:09 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a00009"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "37b0aa6c"}, 0x0, 0x0, 0x0, 0x0}) 19:18:09 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000807e00"}) r1 = syz_open_pts(r0, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0xfffffff7, 0x9, 0x0, 0x0, 0x0, "539ba821dbf1ddf02bf44ab998d02ce78fe03c"}) write(r1, &(0x7f0000000100)="102a3a930a61cc34764e2477a549e9ab84026c7b7d7aa5c17d8135457c464491c9103cae64221f5fbd399f0f22c662412a4991f57df530cf63913bebf9905efadf6d0d86", 0x44) 19:18:09 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) recvmmsg(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000001600)=[{0x0}, {&(0x7f0000000100)=""/218, 0xcc}], 0x2}}], 0x1, 0x0, 0x0) 19:18:09 executing program 5: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x800000, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) 19:18:09 executing program 3: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19c, 0x0, 0x0) 19:18:09 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a000090400"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "a8d0f938"}, 0x0, 0x0, 0x0, 0x0}) [ 980.733810][ T27] usb 1-1: USB disconnect, device number 108 19:18:10 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000807e00"}) r1 = syz_open_pts(r0, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0xfffffff7, 0x9, 0x0, 0x0, 0x0, "539ba821dbf1ddf02bf44ab998d02ce78fe03c"}) write(r1, &(0x7f0000000100)="102a3a930a61cc34764e2477a549e9ab84026c7b7d7aa5c17d8135457c464491c9103cae64221f5fbd399f0f22c662412a4991f57df530cf63913bebf9905efadf6d0d86", 0x44) [ 981.572660][ T27] usb 2-1: new high-speed USB device number 125 using dummy_hcd 19:18:10 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) 19:18:10 executing program 5: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x800000, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) [ 981.862738][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 981.962752][T16291] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 981.983539][ T27] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 981.997128][ T27] usb 2-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 19:18:10 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4), 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) recvmmsg(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000001600)=[{0x0}, {&(0x7f0000000100)=""/218, 0xcc}], 0x2}}], 0x1, 0x0, 0x0) [ 982.006512][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.232711][T16291] usb 1-1: Using ep0 maxpacket: 16 [ 982.266873][ T27] usb 2-1: config 0 descriptor?? [ 982.374182][T16291] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 982.380148][ T27] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 982.387346][T16291] usb 1-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 982.403946][T16291] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.557256][ T27] usb 2-1: USB disconnect, device number 125 19:18:11 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000807e00"}) r1 = syz_open_pts(r0, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0xfffffff7, 0x9, 0x0, 0x0, 0x0, "539ba821dbf1ddf02bf44ab998d02ce78fe03c"}) write(r1, &(0x7f0000000100)="102a3a930a61cc34764e2477a549e9ab84026c7b7d7aa5c17d8135457c464491c9103cae64221f5fbd399f0f22c662412a4991f57df530cf63913bebf9905efadf6d0d86", 0x44) 19:18:11 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') write$P9_RSETATTR(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) socket(0x0, 0x1, 0x0) [ 982.706272][T16291] usb 1-1: config 0 descriptor?? [ 982.750876][T16291] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 982.953517][T16291] usb 1-1: USB disconnect, device number 109 [ 983.112553][ T27] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 983.435202][ T27] usb 2-1: Using ep0 maxpacket: 32 [ 983.554265][ T27] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 983.563443][T16291] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 983.567810][ T27] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 983.584279][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.650076][ T27] usb 2-1: config 0 descriptor?? [ 983.694721][ T27] hub 2-1:0.0: bad descriptor, ignoring hub [ 983.700916][ T27] hub: probe of 2-1:0.0 failed with error -5 [ 983.714159][ T27] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 983.852904][T16291] usb 1-1: Using ep0 maxpacket: 32 [ 983.974197][T16291] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 983.987294][T16291] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 983.996622][T16291] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.095233][T16291] usb 1-1: config 0 descriptor?? [ 984.144800][T16291] hub 1-1:0.0: bad descriptor, ignoring hub [ 984.151015][T16291] hub: probe of 1-1:0.0 failed with error -5 [ 984.165912][T16291] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 985.143407][ T27] usb 2-1: USB disconnect, device number 126 19:18:14 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a000090400"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "37b0aa6c"}, 0x0, 0x0, 0x0, 0x0}) 19:18:14 executing program 5: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x800000, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) 19:18:14 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0xfffffff7, 0x9, 0x0, 0x0, 0x0, "539ba821dbf1ddf02bf44ab998d02ce78fe03c"}) write(r1, &(0x7f0000000100)="102a3a930a61cc34764e2477a549e9ab84026c7b7d7aa5c17d8135457c464491c9103cae64221f5fbd399f0f22c662412a4991f57df530cf63913bebf9905efadf6d0d86", 0x44) 19:18:14 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') write$P9_RSETATTR(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r0, 0x0, 0x7ffff00d) socket(0x0, 0x1, 0x0) 19:18:14 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4), 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) recvmmsg(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000001600)=[{0x0}, {&(0x7f0000000100)=""/218, 0xcc}], 0x2}}], 0x1, 0x0, 0x0) 19:18:14 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a000090400"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "a8d0f938"}, 0x0, 0x0, 0x0, 0x0}) [ 985.732672][ T8702] usb 1-1: USB disconnect, device number 110 [ 986.341233][ T8702] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 986.632549][ T8702] usb 2-1: Using ep0 maxpacket: 16 [ 986.766862][ T8702] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 986.780115][ T8702] usb 2-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 986.789573][ T8702] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:18:15 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0xfffffff7, 0x9, 0x0, 0x0, 0x0, "539ba821dbf1ddf02bf44ab998d02ce78fe03c"}) write(r1, &(0x7f0000000100)="102a3a930a61cc34764e2477a549e9ab84026c7b7d7aa5c17d8135457c464491c9103cae64221f5fbd399f0f22c662412a4991f57df530cf63913bebf9905efadf6d0d86", 0x44) [ 987.192968][ T27] usb 1-1: new high-speed USB device number 111 using dummy_hcd 19:18:15 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4), 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) recvmmsg(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000001600)=[{0x0}, {&(0x7f0000000100)=""/218, 0xcc}], 0x2}}], 0x1, 0x0, 0x0) 19:18:16 executing program 5: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x800000, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) [ 987.287764][ T8702] usb 2-1: config 0 descriptor?? 19:18:16 executing program 3: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="70000000000119050301000008000000027d0000240001001400010008000100ffffffff08000200ac1e00e70b000200050001"], 0x70}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000580)={0x0, 0x60, &(0x7f0000000200)={0x0}, 0xb, 0x6000000}, 0x0) [ 987.417772][ T8702] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 987.432763][ T27] usb 1-1: Using ep0 maxpacket: 16 [ 987.553894][ T27] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 987.567101][ T27] usb 1-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 987.576813][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.599726][ T8702] usb 2-1: USB disconnect, device number 127 [ 987.754955][ T27] usb 1-1: config 0 descriptor?? [ 987.832973][ T27] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 987.999438][T16291] usb 1-1: USB disconnect, device number 111 [ 988.011016][T22190] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 988.091807][T22198] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 988.116754][ T8702] usb 2-1: new high-speed USB device number 2 using dummy_hcd 19:18:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0xfffffff7, 0x9, 0x0, 0x0, 0x0, "539ba821dbf1ddf02bf44ab998d02ce78fe03c"}) write(r1, &(0x7f0000000100)="102a3a930a61cc34764e2477a549e9ab84026c7b7d7aa5c17d8135457c464491c9103cae64221f5fbd399f0f22c662412a4991f57df530cf63913bebf9905efadf6d0d86", 0x44) 19:18:17 executing program 5: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x800000, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) [ 988.373228][ T8702] usb 2-1: Using ep0 maxpacket: 32 [ 988.499921][ T8702] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 988.513266][ T8702] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 988.522691][ T8702] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 988.612521][T16291] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 988.631059][ T8702] usb 2-1: config 0 descriptor?? [ 988.694477][ T8702] hub 2-1:0.0: bad descriptor, ignoring hub [ 988.700684][ T8702] hub: probe of 2-1:0.0 failed with error -5 [ 988.714165][ T8702] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 988.882349][T16291] usb 1-1: Using ep0 maxpacket: 32 [ 989.014315][T16291] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 989.027401][T16291] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 989.036749][T16291] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.167716][T16291] usb 1-1: config 0 descriptor?? [ 989.217349][T16291] hub 1-1:0.0: bad descriptor, ignoring hub [ 989.223645][T16291] hub: probe of 1-1:0.0 failed with error -5 [ 989.229682][T16291] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 989.242502][ T8702] usb 2-1: USB disconnect, device number 2 19:18:19 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a000090400"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "37b0aa6c"}, 0x0, 0x0, 0x0, 0x0}) 19:18:19 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x8001, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f8", 0x16}], 0x410, &(0x7f00000001c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) write$P9_RLCREATE(r1, &(0x7f0000000080)={0x18, 0xf, 0x0, {{}, 0x8}}, 0x18) ftruncate(r0, 0x800) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400f7fffff8) creat(&(0x7f0000000200)='./bus\x00', 0x0) 19:18:19 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000807e00"}) r1 = syz_open_pts(0xffffffffffffffff, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0xfffffff7, 0x9, 0x0, 0x0, 0x0, "539ba821dbf1ddf02bf44ab998d02ce78fe03c"}) write(r1, &(0x7f0000000100)="102a3a930a61cc34764e2477a549e9ab84026c7b7d7aa5c17d8135457c464491c9103cae64221f5fbd399f0f22c662412a4991f57df530cf63913bebf9905efadf6d0d86", 0x44) 19:18:19 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a00009040000"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "a8d0f938"}, 0x0, 0x0, 0x0, 0x0}) 19:18:19 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) recvmmsg(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000001600)=[{0x0}, {&(0x7f0000000100)=""/218, 0xcc}], 0x2}}], 0x1, 0x0, 0x0) 19:18:19 executing program 5: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x800000, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) [ 990.833380][T16291] usb 1-1: USB disconnect, device number 112 [ 991.278796][ T28] audit: type=1804 audit(1597519099.993:80): pid=22240 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir972845113/syzkaller.HjfiUM/400/bus" dev="sda1" ino=16373 res=1 [ 991.328383][ T28] audit: type=1804 audit(1597519100.033:81): pid=22240 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir972845113/syzkaller.HjfiUM/400/bus" dev="sda1" ino=16373 res=1 [ 991.353141][ T28] audit: type=1804 audit(1597519100.033:82): pid=22241 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir972845113/syzkaller.HjfiUM/400/bus" dev="sda1" ino=16373 res=1 [ 991.383039][ T8702] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 991.429023][T22234] FAT-fs (loop3): bogus number of FAT sectors [ 991.435583][T22234] FAT-fs (loop3): Can't find a valid FAT filesystem 19:18:20 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000807e00"}) r1 = syz_open_pts(0xffffffffffffffff, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0xfffffff7, 0x9, 0x0, 0x0, 0x0, "539ba821dbf1ddf02bf44ab998d02ce78fe03c"}) write(r1, &(0x7f0000000100)="102a3a930a61cc34764e2477a549e9ab84026c7b7d7aa5c17d8135457c464491c9103cae64221f5fbd399f0f22c662412a4991f57df530cf63913bebf9905efadf6d0d86", 0x44) [ 991.663079][ T8702] usb 2-1: Using ep0 maxpacket: 16 [ 991.806685][ T8702] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 991.819808][ T8702] usb 2-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 991.829210][ T8702] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:18:20 executing program 5: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x800000, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) 19:18:20 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000040)="00e90000", 0x4) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="100100009b"], 0xfdef) [ 992.092874][ T28] audit: type=1804 audit(1597519100.333:83): pid=22241 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir972845113/syzkaller.HjfiUM/400/bus" dev="sda1" ino=16373 res=1 [ 992.119738][ T28] audit: type=1804 audit(1597519100.333:84): pid=22240 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir972845113/syzkaller.HjfiUM/400/bus" dev="sda1" ino=16373 res=1 [ 992.161382][ T8702] usb 2-1: config 0 descriptor?? [ 992.303640][ T8702] usbhid 2-1:0.0: couldn't find an input interrupt endpoint 19:18:21 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) recvmmsg(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000001600)=[{0x0}, {&(0x7f0000000100)=""/218, 0xcc}], 0x2}}], 0x1, 0x0, 0x0) [ 992.449125][ T8702] usb 2-1: USB disconnect, device number 3 [ 992.593389][ T12] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 992.893508][ T12] usb 1-1: Using ep0 maxpacket: 16 19:18:21 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000807e00"}) r1 = syz_open_pts(0xffffffffffffffff, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0xfffffff7, 0x9, 0x0, 0x0, 0x0, "539ba821dbf1ddf02bf44ab998d02ce78fe03c"}) write(r1, &(0x7f0000000100)="102a3a930a61cc34764e2477a549e9ab84026c7b7d7aa5c17d8135457c464491c9103cae64221f5fbd399f0f22c662412a4991f57df530cf63913bebf9905efadf6d0d86", 0x44) [ 993.024785][ T12] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 993.037922][ T12] usb 1-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 993.047307][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.123628][ T8702] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 993.172816][ T12] usb 1-1: config 0 descriptor?? 19:18:21 executing program 5: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x800000, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) [ 993.245880][ T12] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 993.372952][ T8702] usb 2-1: Using ep0 maxpacket: 32 [ 993.439437][ T12] usb 1-1: USB disconnect, device number 113 [ 993.519642][ T8702] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 993.532731][ T8702] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 993.541918][ T8702] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.683849][ T8702] usb 2-1: config 0 descriptor?? [ 993.766739][ T8702] hub 2-1:0.0: bad descriptor, ignoring hub [ 993.773046][ T8702] hub: probe of 2-1:0.0 failed with error -5 [ 993.785716][ T8702] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 994.052314][ T12] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 994.196086][ T3216] usb 2-1: USB disconnect, device number 4 [ 994.293059][ T12] usb 1-1: Using ep0 maxpacket: 32 [ 994.424427][ T12] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 994.438351][ T12] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 994.448075][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.497681][ T12] usb 1-1: config 0 descriptor?? [ 994.554512][ T12] hub 1-1:0.0: bad descriptor, ignoring hub [ 994.560877][ T12] hub: probe of 1-1:0.0 failed with error -5 [ 994.584956][ T12] usbhid 1-1:0.0: couldn't find an input interrupt endpoint 19:18:24 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a000090400"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "37b0aa6c"}, 0x0, 0x0, 0x0, 0x0}) 19:18:24 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(sha224-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x7ffff000}}, 0x0) 19:18:24 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000807e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0xfffffff7, 0x9, 0x0, 0x0, 0x0, "539ba821dbf1ddf02bf44ab998d02ce78fe03c"}) write(r1, &(0x7f0000000100)="102a3a930a61cc34764e2477a549e9ab84026c7b7d7aa5c17d8135457c464491c9103cae64221f5fbd399f0f22c662412a4991f57df530cf63913bebf9905efadf6d0d86", 0x44) 19:18:24 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a00009040000"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "a8d0f938"}, 0x0, 0x0, 0x0, 0x0}) 19:18:24 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) recvmmsg(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000001600)=[{0x0}, {&(0x7f0000000100)=""/218, 0xcc}], 0x2}}], 0x1, 0x0, 0x0) 19:18:24 executing program 5: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x800000, 0x0) socket$packet(0x11, 0x0, 0x300) [ 996.139703][ T27] usb 1-1: USB disconnect, device number 114 19:18:25 executing program 5: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x315, 0x800000, 0x0) socket$packet(0x11, 0x0, 0x300) 19:18:25 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000807e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0xfffffff7, 0x9, 0x0, 0x0, 0x0, "539ba821dbf1ddf02bf44ab998d02ce78fe03c"}) write(r1, &(0x7f0000000100)="102a3a930a61cc34764e2477a549e9ab84026c7b7d7aa5c17d8135457c464491c9103cae64221f5fbd399f0f22c662412a4991f57df530cf63913bebf9905efadf6d0d86", 0x44) [ 996.707472][ T8704] usb 2-1: new high-speed USB device number 5 using dummy_hcd 19:18:25 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x88, 0x0, 0x1, 0x409, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x88}}, 0x0) [ 996.872733][ T8702] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 996.962622][ T8704] usb 2-1: Using ep0 maxpacket: 16 [ 997.103776][ T8704] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 997.117418][ T8704] usb 2-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 997.127119][ T8704] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.135777][ T8702] usb 1-1: Using ep0 maxpacket: 16 19:18:25 executing program 5: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x315, 0x800000, 0x0) socket$packet(0x11, 0x0, 0x300) [ 997.253804][ T8702] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 997.267593][ T8702] usb 1-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 997.277382][ T8702] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:18:26 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000807e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0xfffffff7, 0x9, 0x0, 0x0, 0x0, "539ba821dbf1ddf02bf44ab998d02ce78fe03c"}) write(r1, &(0x7f0000000100)="102a3a930a61cc34764e2477a549e9ab84026c7b7d7aa5c17d8135457c464491c9103cae64221f5fbd399f0f22c662412a4991f57df530cf63913bebf9905efadf6d0d86", 0x44) [ 997.432729][ T8704] usb 2-1: config 0 descriptor?? 19:18:26 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) recvmmsg(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000001600)=[{0x0}, {&(0x7f0000000100)=""/218, 0xcc}], 0x2}}], 0x1, 0x0, 0x0) [ 997.482993][ T8704] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 997.566744][ T8702] usb 1-1: config 0 descriptor?? [ 997.631852][ T8702] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 997.725627][ T8704] usb 2-1: USB disconnect, device number 5 [ 997.819329][ T8702] usb 1-1: USB disconnect, device number 115 [ 998.293356][ T8704] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 998.463419][ T8702] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 998.542515][ T8704] usb 2-1: Using ep0 maxpacket: 32 [ 998.694189][ T8704] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 998.707891][ T8704] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 998.717476][ T8704] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.728685][ T8702] usb 1-1: Using ep0 maxpacket: 32 [ 998.848576][ T8704] usb 2-1: config 0 descriptor?? [ 998.863844][ T8702] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 998.877940][ T8702] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 998.887497][ T8702] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.915624][ T8704] hub 2-1:0.0: bad descriptor, ignoring hub [ 998.921850][ T8704] hub: probe of 2-1:0.0 failed with error -5 [ 998.934555][ T8704] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 998.986528][ T8702] usb 1-1: config 0 descriptor?? [ 999.035814][ T8702] hub 1-1:0.0: bad descriptor, ignoring hub [ 999.042051][ T8702] hub: probe of 1-1:0.0 failed with error -5 [ 999.054734][ T8702] usbhid 1-1:0.0: couldn't find an input interrupt endpoint 19:18:29 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a00009040000"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "37b0aa6c"}, 0x0, 0x0, 0x0, 0x0}) 19:18:29 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x88, 0x0, 0x1, 0x409, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x88}}, 0x0) 19:18:29 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) recvmmsg(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000001600)=[{0x0}, {&(0x7f0000000100)=""/218, 0xcc}], 0x2}}], 0x1, 0x0, 0x0) 19:18:29 executing program 5: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x315, 0x800000, 0x0) socket$packet(0x11, 0x0, 0x300) 19:18:29 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000807e00"}) r1 = syz_open_pts(r0, 0x1) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000040)={0xfffffff7, 0x9, 0x0, 0x0, 0x0, "539ba821dbf1ddf02bf44ab998d02ce78fe03c"}) write(r1, &(0x7f0000000100)="102a3a930a61cc34764e2477a549e9ab84026c7b7d7aa5c17d8135457c464491c9103cae64221f5fbd399f0f22c662412a4991f57df530cf63913bebf9905efadf6d0d86", 0x44) 19:18:29 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a00009040000"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "a8d0f938"}, 0x0, 0x0, 0x0, 0x0}) [ 1000.623289][ T8989] usb 2-1: USB disconnect, device number 6 [ 1000.703533][ T27] usb 1-1: USB disconnect, device number 116 19:18:29 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) recvmmsg(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000001600)=[{0x0}, {&(0x7f0000000100)=""/218, 0xcc}], 0x2}}], 0x1, 0x0, 0x0) 19:18:29 executing program 5: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x800000, 0x0) socket$packet(0x11, 0x0, 0x300) 19:18:29 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000807e00"}) r1 = syz_open_pts(r0, 0x1) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000040)={0xfffffff7, 0x9, 0x0, 0x0, 0x0, "539ba821dbf1ddf02bf44ab998d02ce78fe03c"}) write(r1, &(0x7f0000000100)="102a3a930a61cc34764e2477a549e9ab84026c7b7d7aa5c17d8135457c464491c9103cae64221f5fbd399f0f22c662412a4991f57df530cf63913bebf9905efadf6d0d86", 0x44) 19:18:29 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x88, 0x0, 0x1, 0x409, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x88}}, 0x0) [ 1001.316685][ T8704] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1001.457909][ T8702] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 1001.658118][ T8704] usb 2-1: Using ep0 maxpacket: 16 [ 1001.784120][ T8704] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1001.797450][ T8704] usb 2-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 1001.807021][ T8704] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.817203][ T8702] usb 1-1: Using ep0 maxpacket: 16 19:18:30 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) recvmmsg(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000001600)=[{0x0}, {&(0x7f0000000100)=""/218, 0xcc}], 0x2}}], 0x1, 0x0, 0x0) 19:18:30 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000807e00"}) r1 = syz_open_pts(r0, 0x1) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000040)={0xfffffff7, 0x9, 0x0, 0x0, 0x0, "539ba821dbf1ddf02bf44ab998d02ce78fe03c"}) write(r1, &(0x7f0000000100)="102a3a930a61cc34764e2477a549e9ab84026c7b7d7aa5c17d8135457c464491c9103cae64221f5fbd399f0f22c662412a4991f57df530cf63913bebf9905efadf6d0d86", 0x44) [ 1001.969298][ T8702] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1001.982643][ T8702] usb 1-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 1001.991852][ T8702] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.066865][ T8704] usb 2-1: config 0 descriptor?? [ 1002.100931][ T8702] usb 1-1: config 0 descriptor?? [ 1002.130702][ T8704] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1002.161415][ T8702] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1002.331118][ T8704] usb 2-1: USB disconnect, device number 7 [ 1002.359624][ T3216] usb 1-1: USB disconnect, device number 117 [ 1002.932528][ T3216] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 1002.940417][ T8704] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1003.193580][ T8704] usb 2-1: Using ep0 maxpacket: 32 [ 1003.199278][ T3216] usb 1-1: Using ep0 maxpacket: 32 [ 1003.334602][ T3216] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1003.348351][ T3216] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1003.357941][ T3216] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.367680][ T8704] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1003.381164][ T8704] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1003.391147][ T8704] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.485657][ T3216] usb 1-1: config 0 descriptor?? [ 1003.505139][ T8704] usb 2-1: config 0 descriptor?? [ 1003.535141][ T3216] hub 1-1:0.0: bad descriptor, ignoring hub [ 1003.541376][ T3216] hub: probe of 1-1:0.0 failed with error -5 [ 1003.554599][ T3216] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1003.570596][ T8704] hub 2-1:0.0: bad descriptor, ignoring hub [ 1003.576980][ T8704] hub: probe of 2-1:0.0 failed with error -5 [ 1003.623692][ T8704] usbhid 2-1:0.0: couldn't find an input interrupt endpoint 19:18:33 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a00009040000"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "37b0aa6c"}, 0x0, 0x0, 0x0, 0x0}) 19:18:33 executing program 5: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x800000, 0x0) socket$packet(0x11, 0x0, 0x300) 19:18:33 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000807e00"}) r1 = syz_open_pts(r0, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, 0x0) write(r1, &(0x7f0000000100)="102a3a930a61cc34764e2477a549e9ab84026c7b7d7aa5c17d8135457c464491c9103cae64221f5fbd399f0f22c662412a4991f57df530cf63913bebf9905efadf6d0d86", 0x44) 19:18:33 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x88, 0x0, 0x1, 0x409, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x88}}, 0x0) 19:18:33 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) recvmmsg(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000001600)=[{0x0}, {&(0x7f0000000100)=""/218, 0xcc}], 0x2}}], 0x1, 0x0, 0x0) [ 1005.123692][ T3216] usb 1-1: USB disconnect, device number 118 19:18:33 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "a8d0f938"}, 0x0, 0x0, 0x0, 0x0}) [ 1005.197014][ T3672] usb 2-1: USB disconnect, device number 8 19:18:34 executing program 3: sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x88, 0x0, 0x1, 0x409, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x88}}, 0x0) 19:18:34 executing program 5: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x800000, 0x0) socket$packet(0x11, 0x0, 0x300) 19:18:34 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000807e00"}) r1 = syz_open_pts(r0, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, 0x0) write(r1, &(0x7f0000000100)="102a3a930a61cc34764e2477a549e9ab84026c7b7d7aa5c17d8135457c464491c9103cae64221f5fbd399f0f22c662412a4991f57df530cf63913bebf9905efadf6d0d86", 0x44) [ 1006.042968][ T3672] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1006.062556][ T8704] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1006.282600][ T3672] usb 2-1: Using ep0 maxpacket: 16 19:18:35 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) recvmmsg(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000001600)=[{0x0}, {&(0x7f0000000100)=""/218, 0xcc}], 0x2}}], 0x1, 0x0, 0x0) [ 1006.324119][ T8704] usb 1-1: Using ep0 maxpacket: 16 19:18:35 executing program 3: sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x88, 0x0, 0x1, 0x409, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x88}}, 0x0) [ 1006.404269][ T3672] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1006.417668][ T3672] usb 2-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 1006.427097][ T3672] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:18:35 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000807e00"}) r1 = syz_open_pts(r0, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, 0x0) write(r1, &(0x7f0000000100)="102a3a930a61cc34764e2477a549e9ab84026c7b7d7aa5c17d8135457c464491c9103cae64221f5fbd399f0f22c662412a4991f57df530cf63913bebf9905efadf6d0d86", 0x44) [ 1006.468808][ T8704] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1006.482209][ T8704] usb 1-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 1006.491643][ T8704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.589588][ T8704] usb 1-1: config 0 descriptor?? [ 1006.624375][ T3672] usb 2-1: config 0 descriptor?? [ 1006.641894][ T8704] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1006.673767][ T3672] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1006.851596][ T8704] usb 1-1: USB disconnect, device number 119 [ 1006.871315][ T8989] usb 2-1: USB disconnect, device number 9 [ 1007.442695][ T8989] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1007.452904][ T8704] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1007.682559][ T8989] usb 2-1: Using ep0 maxpacket: 32 [ 1007.713993][ T8704] usb 1-1: Using ep0 maxpacket: 32 [ 1007.806066][ T8989] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1007.817241][ T8989] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1007.827523][ T8989] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1007.837177][ T8989] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.843777][ T8704] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1007.858670][ T8704] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1007.868042][ T8704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.890727][ T8989] usb 2-1: config 0 descriptor?? [ 1007.936949][ T8989] hub 2-1:0.0: USB hub found [ 1008.000378][ T8704] usb 1-1: config 0 descriptor?? [ 1008.054556][ T8704] hub 1-1:0.0: bad descriptor, ignoring hub [ 1008.060770][ T8704] hub: probe of 1-1:0.0 failed with error -5 [ 1008.074191][ T8704] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1008.232945][ T8989] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 1008.248795][ T8989] usbhid 2-1:0.0: can't add hid device: -22 [ 1008.255439][ T8989] usbhid: probe of 2-1:0.0 failed with error -22 19:18:38 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a00009040000"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "37b0aa6c"}, 0x0, 0x0, 0x0, 0x0}) 19:18:38 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x800000, 0x0) socket$packet(0x11, 0x0, 0x300) 19:18:38 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000807e00"}) r1 = syz_open_pts(r0, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0x0, 0x9, 0x0, 0x0, 0x0, "539ba821dbf1ddf02bf44ab998d02ce78fe03c"}) write(r1, &(0x7f0000000100)="102a3a930a61cc34764e2477a549e9ab84026c7b7d7aa5c17d8135457c464491c9103cae64221f5fbd399f0f22c662412a4991f57df530cf63913bebf9905efadf6d0d86", 0x44) 19:18:38 executing program 3: sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x88, 0x0, 0x1, 0x409, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x88}}, 0x0) 19:18:38 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) recvmmsg(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000001600)=[{0x0}, {&(0x7f0000000100)=""/218, 0xcc}], 0x2}}], 0x1, 0x0, 0x0) 19:18:38 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "a8d0f938"}, 0x0, 0x0, 0x0, 0x0}) [ 1009.522825][ T3672] usb 2-1: USB disconnect, device number 10 [ 1009.544719][ T8702] usb 1-1: USB disconnect, device number 120 19:18:38 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x88, 0x0, 0x1, 0x409, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x88}}, 0x0) 19:18:38 executing program 5: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x800000, 0x0) socket$packet(0x11, 0x0, 0x300) 19:18:38 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000807e00"}) r1 = syz_open_pts(r0, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0x0, 0x9, 0x0, 0x0, 0x0, "539ba821dbf1ddf02bf44ab998d02ce78fe03c"}) write(r1, &(0x7f0000000100)="102a3a930a61cc34764e2477a549e9ab84026c7b7d7aa5c17d8135457c464491c9103cae64221f5fbd399f0f22c662412a4991f57df530cf63913bebf9905efadf6d0d86", 0x44) [ 1010.186481][ T8702] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1010.242789][ T8704] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1010.452728][ T8702] usb 2-1: Using ep0 maxpacket: 16 19:18:39 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x88, 0x0, 0x1, 0x409, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x88}}, 0x0) [ 1010.502692][ T8704] usb 1-1: Using ep0 maxpacket: 16 [ 1010.583631][ T8702] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1010.597307][ T8702] usb 2-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 1010.606692][ T8702] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.653874][ T8704] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1010.667550][ T8704] usb 1-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 1010.677100][ T8704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:18:39 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) recvmmsg(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000001600)=[{0x0}, {&(0x7f0000000100)=""/218, 0xcc}], 0x2}}], 0x1, 0x0, 0x0) 19:18:39 executing program 5: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x800000, 0x0) socket$packet(0x11, 0x0, 0x300) [ 1010.824239][ T8702] usb 2-1: config 0 descriptor?? [ 1010.879626][ T8702] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1010.954929][ T8704] usb 1-1: config 0 descriptor?? [ 1011.010608][ T8704] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1011.118123][ T12] usb 2-1: USB disconnect, device number 11 [ 1011.206241][ T27] usb 1-1: USB disconnect, device number 121 [ 1011.662693][ T12] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1011.782867][ T27] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1011.922947][ T12] usb 2-1: Using ep0 maxpacket: 32 [ 1012.024639][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 1012.053596][ T12] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1012.064772][ T12] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1012.074903][ T12] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1012.084371][ T12] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.097182][ T12] usb 2-1: config 0 descriptor?? [ 1012.145049][ T27] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1012.148452][ T12] hub 2-1:0.0: USB hub found [ 1012.158211][ T27] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1012.158343][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.246978][ T27] usb 1-1: config 0 descriptor?? [ 1012.295080][ T27] hub 1-1:0.0: bad descriptor, ignoring hub [ 1012.301291][ T27] hub: probe of 1-1:0.0 failed with error -5 [ 1012.314962][ T27] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1012.492806][ T12] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 1012.508651][ T12] usbhid 2-1:0.0: can't add hid device: -22 [ 1012.515139][ T12] usbhid: probe of 2-1:0.0 failed with error -22 19:18:42 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "37b0aa6c"}, 0x0, 0x0, 0x0, 0x0}) 19:18:42 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000807e00"}) r1 = syz_open_pts(r0, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0x0, 0x9, 0x0, 0x0, 0x0, "539ba821dbf1ddf02bf44ab998d02ce78fe03c"}) write(r1, &(0x7f0000000100)="102a3a930a61cc34764e2477a549e9ab84026c7b7d7aa5c17d8135457c464491c9103cae64221f5fbd399f0f22c662412a4991f57df530cf63913bebf9905efadf6d0d86", 0x44) 19:18:42 executing program 5: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x800000, 0x0) socket$packet(0x11, 0x0, 0x300) 19:18:42 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x88, 0x0, 0x1, 0x409, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x88}}, 0x0) 19:18:42 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) recvmmsg(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000001600)=[{0x0}, {&(0x7f0000000100)=""/218, 0xcc}], 0x2}}], 0x1, 0x0, 0x0) 19:18:42 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "a8d0f938"}, 0x0, 0x0, 0x0, 0x0}) [ 1013.782613][ T8702] usb 2-1: USB disconnect, device number 12 [ 1013.844290][ T8989] usb 1-1: USB disconnect, device number 122 19:18:42 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) 19:18:42 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000807e00"}) r1 = syz_open_pts(r0, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0xfffffff7, 0x0, 0x0, 0x0, 0x0, "539ba821dbf1ddf02bf44ab998d02ce78fe03c"}) write(r1, &(0x7f0000000100)="102a3a930a61cc34764e2477a549e9ab84026c7b7d7aa5c17d8135457c464491c9103cae64221f5fbd399f0f22c662412a4991f57df530cf63913bebf9905efadf6d0d86", 0x44) 19:18:43 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x800000, 0x0) socket$packet(0x11, 0x0, 0x300) [ 1014.283716][ T8702] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1014.523076][ T8702] usb 2-1: Using ep0 maxpacket: 16 [ 1014.613029][ T8989] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 1014.663347][ T8702] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1014.676902][ T8702] usb 2-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 1014.686299][ T8702] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.849083][ T8702] usb 2-1: config 0 descriptor?? [ 1014.862946][ T8989] usb 1-1: Using ep0 maxpacket: 16 19:18:43 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0xcc) recvmmsg(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000001600)=[{0x0}, {&(0x7f0000000100)=""/218, 0xcc}], 0x2}}], 0x1, 0x0, 0x0) [ 1014.913847][ T8702] usbhid 2-1:0.0: couldn't find an input interrupt endpoint 19:18:43 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) [ 1014.983457][ T8989] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1014.997374][ T8989] usb 1-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 1015.006725][ T8989] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:18:43 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000807e00"}) r1 = syz_open_pts(r0, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0xfffffff7, 0x0, 0x0, 0x0, 0x0, "539ba821dbf1ddf02bf44ab998d02ce78fe03c"}) write(r1, &(0x7f0000000100)="102a3a930a61cc34764e2477a549e9ab84026c7b7d7aa5c17d8135457c464491c9103cae64221f5fbd399f0f22c662412a4991f57df530cf63913bebf9905efadf6d0d86", 0x44) [ 1015.109467][ T8702] usb 2-1: USB disconnect, device number 13 [ 1015.169379][ T8989] usb 1-1: config 0 descriptor?? [ 1015.220572][ T8989] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1015.418440][ T12] usb 1-1: USB disconnect, device number 123 [ 1015.716840][ T8702] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1015.976703][ T8702] usb 2-1: Using ep0 maxpacket: 32 [ 1016.025677][ T12] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 1016.102908][ T8702] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1016.114335][ T8702] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1016.124492][ T8702] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1016.133781][ T8702] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.208682][ T8702] usb 2-1: config 0 descriptor?? [ 1016.257977][ T8702] hub 2-1:0.0: USB hub found [ 1016.293510][ T12] usb 1-1: Using ep0 maxpacket: 32 [ 1016.434132][ T12] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1016.445378][ T12] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1016.455479][ T12] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1016.464913][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.528213][ T12] usb 1-1: config 0 descriptor?? [ 1016.563195][ T8702] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 1016.579132][ T8702] usbhid 2-1:0.0: can't add hid device: -22 [ 1016.585598][ T8702] usbhid: probe of 2-1:0.0 failed with error -22 [ 1016.596945][ T12] hub 1-1:0.0: USB hub found [ 1016.903344][ T12] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 1016.924042][ T12] usbhid 1-1:0.0: can't add hid device: -22 [ 1016.930440][ T12] usbhid: probe of 1-1:0.0 failed with error -22 [ 1017.866592][ T8702] usb 2-1: USB disconnect, device number 14 19:18:46 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "37b0aa6c"}, 0x0, 0x0, 0x0, 0x0}) 19:18:46 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x800000, 0x0) socket$packet(0x11, 0x0, 0x300) 19:18:46 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000807e00"}) r1 = syz_open_pts(r0, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0xfffffff7, 0x0, 0x0, 0x0, 0x0, "539ba821dbf1ddf02bf44ab998d02ce78fe03c"}) write(r1, &(0x7f0000000100)="102a3a930a61cc34764e2477a549e9ab84026c7b7d7aa5c17d8135457c464491c9103cae64221f5fbd399f0f22c662412a4991f57df530cf63913bebf9905efadf6d0d86", 0x44) 19:18:46 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0xcc) recvmmsg(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000001600)=[{0x0}, {&(0x7f0000000100)=""/218, 0xcc}], 0x2}}], 0x1, 0x0, 0x0) 19:18:46 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) 19:18:46 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "a8d0f938"}, 0x0, 0x0, 0x0, 0x0}) [ 1017.955670][ T8703] kworker/dying (8703) used greatest stack depth: 3248 bytes left [ 1018.078921][ T8989] usb 1-1: USB disconnect, device number 124 19:18:47 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) [ 1018.402698][ T8702] usb 2-1: new high-speed USB device number 15 using dummy_hcd 19:18:47 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x800000, 0x0) socket$packet(0x11, 0x0, 0x300) 19:18:47 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000807e00"}) r1 = syz_open_pts(r0, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0xfffffff7, 0x9, 0x0, 0x0, 0x0, "539ba821dbf1ddf02bf44ab998d02ce78fe03c"}) write(0xffffffffffffffff, &(0x7f0000000100)="102a3a930a61cc34764e2477a549e9ab84026c7b7d7aa5c17d8135457c464491c9103cae64221f5fbd399f0f22c662412a4991f57df530cf63913bebf9905efadf6d0d86", 0x44) [ 1018.666208][ T8702] usb 2-1: Using ep0 maxpacket: 16 [ 1018.793625][ T8702] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1018.806738][ T8702] usb 2-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 1018.816228][ T8702] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.874259][ T8702] usb 2-1: config 0 descriptor?? [ 1018.916676][ T12] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 1018.944025][ T8702] usbhid 2-1:0.0: couldn't find an input interrupt endpoint 19:18:47 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 19:18:47 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0xcc) recvmmsg(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000001600)=[{0x0}, {&(0x7f0000000100)=""/218, 0xcc}], 0x2}}], 0x1, 0x0, 0x0) [ 1019.130861][ T8702] usb 2-1: USB disconnect, device number 15 [ 1019.172888][ T12] usb 1-1: Using ep0 maxpacket: 16 19:18:48 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000807e00"}) r1 = syz_open_pts(r0, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0xfffffff7, 0x9, 0x0, 0x0, 0x0, "539ba821dbf1ddf02bf44ab998d02ce78fe03c"}) write(0xffffffffffffffff, &(0x7f0000000100)="102a3a930a61cc34764e2477a549e9ab84026c7b7d7aa5c17d8135457c464491c9103cae64221f5fbd399f0f22c662412a4991f57df530cf63913bebf9905efadf6d0d86", 0x44) [ 1019.317642][ T12] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1019.330868][ T12] usb 1-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 1019.340227][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.508974][ T12] usb 1-1: config 0 descriptor?? [ 1019.575214][ T12] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1019.762632][ T8702] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1019.786786][ T12] usb 1-1: USB disconnect, device number 125 [ 1020.032839][ T8702] usb 2-1: Using ep0 maxpacket: 32 [ 1020.152947][ T8702] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1020.164308][ T8702] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1020.174457][ T8702] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1020.183774][ T8702] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.245285][ T8702] usb 2-1: config 0 descriptor?? [ 1020.365118][ T8702] hub 2-1:0.0: USB hub found [ 1020.412703][ T12] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 1020.643400][ T8702] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 1020.659170][ T8702] usbhid 2-1:0.0: can't add hid device: -22 [ 1020.665777][ T8702] usbhid: probe of 2-1:0.0 failed with error -22 [ 1020.682152][ T12] usb 1-1: Using ep0 maxpacket: 32 [ 1020.833772][ T12] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1020.844913][ T12] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1020.855041][ T12] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1020.869309][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.004115][ T12] usb 1-1: config 0 descriptor?? [ 1021.048284][ T12] hub 1-1:0.0: USB hub found [ 1021.352877][ T12] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 1021.360203][ T12] usbhid 1-1:0.0: can't add hid device: -22 [ 1021.367837][ T12] usbhid: probe of 1-1:0.0 failed with error -22 [ 1021.853988][ T12] usb 2-1: USB disconnect, device number 16 19:18:51 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "37b0aa6c"}, 0x0, 0x0, 0x0, 0x0}) 19:18:51 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x800000, 0x0) socket$packet(0x11, 0x0, 0x300) 19:18:51 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, 0x0, 0xcc) recvmmsg(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000001600)=[{0x0}, {&(0x7f0000000100)=""/218, 0xcc}], 0x2}}], 0x1, 0x0, 0x0) 19:18:51 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000807e00"}) r1 = syz_open_pts(r0, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0xfffffff7, 0x9, 0x0, 0x0, 0x0, "539ba821dbf1ddf02bf44ab998d02ce78fe03c"}) write(0xffffffffffffffff, &(0x7f0000000100)="102a3a930a61cc34764e2477a549e9ab84026c7b7d7aa5c17d8135457c464491c9103cae64221f5fbd399f0f22c662412a4991f57df530cf63913bebf9905efadf6d0d86", 0x44) 19:18:51 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "a8d0f938"}, 0x0, 0x0, 0x0, 0x0}) 19:18:51 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) [ 1022.724020][ T8989] usb 1-1: USB disconnect, device number 126 19:18:51 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000807e00"}) r1 = syz_open_pts(r0, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0xfffffff7, 0x9, 0x0, 0x0, 0x0, "539ba821dbf1ddf02bf44ab998d02ce78fe03c"}) write(r1, 0x0, 0x0) 19:18:51 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) [ 1023.153838][ T8702] usb 2-1: new high-speed USB device number 17 using dummy_hcd 19:18:51 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x800000, 0x0) socket$packet(0x11, 0x0, 0x300) [ 1023.403248][ T8702] usb 2-1: Using ep0 maxpacket: 16 [ 1023.523765][ T8702] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1023.536939][ T8702] usb 2-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 1023.546279][ T8702] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1023.623732][ T27] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 1023.721752][ T8702] usb 2-1: config 0 descriptor?? 19:18:52 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, 0x0, 0xcc) recvmmsg(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000001600)=[{0x0}, {&(0x7f0000000100)=""/218, 0xcc}], 0x2}}], 0x1, 0x0, 0x0) [ 1023.795741][ T8702] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1023.864224][ T27] usb 1-1: Using ep0 maxpacket: 16 [ 1023.968154][ T8702] usb 2-1: USB disconnect, device number 17 [ 1023.983969][ T27] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1024.001952][ T27] usb 1-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 1024.011356][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:18:52 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000807e00"}) r1 = syz_open_pts(r0, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0xfffffff7, 0x9, 0x0, 0x0, 0x0, "539ba821dbf1ddf02bf44ab998d02ce78fe03c"}) write(r1, 0x0, 0x0) 19:18:52 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) [ 1024.163931][ T27] usb 1-1: config 0 descriptor?? [ 1024.216967][ T27] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1024.414075][ T8989] usb 1-1: USB disconnect, device number 127 [ 1024.583327][ T8702] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1024.853051][ T8702] usb 2-1: Using ep0 maxpacket: 32 [ 1024.972953][ T8989] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1024.995010][ T8702] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1025.006166][ T8702] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1025.016259][ T8702] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1025.025677][ T8702] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.182051][ T8702] usb 2-1: config 0 descriptor?? [ 1025.223861][ T8989] usb 1-1: Using ep0 maxpacket: 32 [ 1025.235695][ T8702] hub 2-1:0.0: USB hub found [ 1025.343721][ T8989] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1025.355029][ T8989] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1025.365102][ T8989] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1025.374447][ T8989] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.472504][ T8989] usb 1-1: config 0 descriptor?? [ 1025.519128][ T8989] hub 1-1:0.0: USB hub found [ 1025.533475][ T8702] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 1025.550303][ T8702] usbhid 2-1:0.0: can't add hid device: -22 [ 1025.556777][ T8702] usbhid: probe of 2-1:0.0 failed with error -22 [ 1025.805798][ T8989] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 1025.821722][ T8989] usbhid 1-1:0.0: can't add hid device: -22 [ 1025.828330][ T8989] usbhid: probe of 1-1:0.0 failed with error -22 [ 1026.773922][ T12] usb 2-1: USB disconnect, device number 18 19:18:55 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "37b0aa6c"}, 0x0, 0x0, 0x0, 0x0}) 19:18:55 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x800000, 0x0) socket$packet(0x11, 0x0, 0x300) 19:18:55 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 19:18:55 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, 0x0, 0xcc) recvmmsg(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000001600)=[{0x0}, {&(0x7f0000000100)=""/218, 0xcc}], 0x2}}], 0x1, 0x0, 0x0) 19:18:55 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000807e00"}) r1 = syz_open_pts(r0, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0xfffffff7, 0x9, 0x0, 0x0, 0x0, "539ba821dbf1ddf02bf44ab998d02ce78fe03c"}) write(r1, 0x0, 0x0) 19:18:55 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "a8d0f938"}, 0x0, 0x0, 0x0, 0x0}) [ 1027.052993][ T8989] usb 1-1: USB disconnect, device number 2 19:18:56 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x88, 0x0, 0x1, 0x0, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x88}}, 0x0) 19:18:56 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x315, 0x800000, 0x0) socket$packet(0x11, 0x0, 0x300) 19:18:56 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000807e00"}) r1 = syz_open_pts(r0, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0xfffffff7, 0x9, 0x0, 0x0, 0x0, "539ba821dbf1ddf02bf44ab998d02ce78fe03c"}) write(r1, &(0x7f0000000100), 0x0) [ 1027.543311][ T12] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1027.732494][ T8989] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1027.786367][ T12] usb 2-1: Using ep0 maxpacket: 16 [ 1027.906342][ T12] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1027.919550][ T12] usb 2-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 1027.928954][ T12] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.972631][ T8989] usb 1-1: Using ep0 maxpacket: 16 19:18:56 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) recvmmsg(0xffffffffffffffff, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000001600)=[{0x0}, {&(0x7f0000000100)=""/218, 0xcc}], 0x2}}], 0x1, 0x0, 0x0) [ 1028.096510][ T8989] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1028.109679][ T8989] usb 1-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 1028.119113][ T8989] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.120330][ T12] usb 2-1: config 0 descriptor?? 19:18:56 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x315, 0x800000, 0x0) socket$packet(0x11, 0x0, 0x300) 19:18:56 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x88, 0x0, 0x1, 0x0, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x88}}, 0x0) [ 1028.250226][ T8989] usb 1-1: config 0 descriptor?? [ 1028.259572][ T12] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1028.306668][ T8989] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1028.394670][ T12] usb 2-1: USB disconnect, device number 19 [ 1028.510408][ T8989] usb 1-1: USB disconnect, device number 3 [ 1028.992955][ T12] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1029.092975][ T8989] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1029.253660][ T12] usb 2-1: Using ep0 maxpacket: 32 [ 1029.332882][ T8989] usb 1-1: Using ep0 maxpacket: 32 [ 1029.387197][ T12] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1029.398361][ T12] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1029.408532][ T12] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1029.417984][ T12] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.453503][ T8989] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1029.465488][ T8989] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1029.475537][ T8989] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1029.484784][ T8989] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.501086][ T12] usb 2-1: config 0 descriptor?? [ 1029.545399][ T12] hub 2-1:0.0: USB hub found [ 1029.625565][ T8989] usb 1-1: config 0 descriptor?? [ 1029.666061][ T8989] hub 1-1:0.0: USB hub found [ 1029.863855][ T12] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 1029.879717][ T12] usbhid 2-1:0.0: can't add hid device: -22 [ 1029.886261][ T12] usbhid: probe of 2-1:0.0 failed with error -22 [ 1029.966094][ T8989] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 1029.982075][ T8989] usbhid 1-1:0.0: can't add hid device: -22 [ 1029.988715][ T8989] usbhid: probe of 1-1:0.0 failed with error -22 19:18:59 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "37b0aa6c"}, 0x0, 0x0, 0x0, 0x0}) 19:18:59 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000807e00"}) r1 = syz_open_pts(r0, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0xfffffff7, 0x9, 0x0, 0x0, 0x0, "539ba821dbf1ddf02bf44ab998d02ce78fe03c"}) write(r1, &(0x7f0000000100), 0x0) 19:18:59 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x88, 0x0, 0x1, 0x0, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x88}}, 0x0) 19:18:59 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x315, 0x800000, 0x0) socket$packet(0x11, 0x0, 0x300) 19:18:59 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) recvmmsg(0xffffffffffffffff, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000001600)=[{0x0}, {&(0x7f0000000100)=""/218, 0xcc}], 0x2}}], 0x1, 0x0, 0x0) 19:18:59 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "a8d0f938"}, 0x0, 0x0, 0x0, 0x0}) [ 1031.013449][ T27] usb 2-1: USB disconnect, device number 20 [ 1031.158150][T17310] usb 1-1: USB disconnect, device number 4 19:19:00 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x7c, 0x0, 0x1, 0x409, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x7c}}, 0x0) 19:19:00 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) recvmmsg(0xffffffffffffffff, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000001600)=[{0x0}, {&(0x7f0000000100)=""/218, 0xcc}], 0x2}}], 0x1, 0x0, 0x0) 19:19:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000807e00"}) r1 = syz_open_pts(r0, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0xfffffff7, 0x9, 0x0, 0x0, 0x0, "539ba821dbf1ddf02bf44ab998d02ce78fe03c"}) write(r1, &(0x7f0000000100), 0x0) 19:19:00 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x315, 0x800000, 0x0) socket$packet(0x11, 0x0, 0x300) [ 1031.562927][ T12] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1031.803264][ T12] usb 2-1: Using ep0 maxpacket: 16 [ 1031.862622][ T8704] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1031.943813][ T12] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1031.957038][ T12] usb 2-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 1031.966414][ T12] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:19:00 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 19:19:00 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x7c, 0x0, 0x1, 0x409, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x7c}}, 0x0) [ 1032.118760][ T8704] usb 1-1: Using ep0 maxpacket: 16 [ 1032.138852][ T12] usb 2-1: config 0 descriptor?? [ 1032.227933][ T12] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1032.243977][ T8704] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1032.257087][ T8704] usb 1-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 1032.266418][ T8704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.383932][ T8704] usb 1-1: config 0 descriptor?? [ 1032.397470][T17310] usb 2-1: USB disconnect, device number 21 [ 1032.456608][ T8704] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1032.643534][ T8989] usb 1-1: USB disconnect, device number 5 [ 1032.953081][T17310] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1033.192485][T17310] usb 2-1: Using ep0 maxpacket: 32 [ 1033.213782][ T8989] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1033.313893][T17310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1033.325190][T17310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1033.335497][T17310] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1033.345224][T17310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.409898][T17310] usb 2-1: config 0 descriptor?? [ 1033.455358][T17310] hub 2-1:0.0: USB hub found [ 1033.482921][ T8989] usb 1-1: Using ep0 maxpacket: 32 [ 1033.602778][ T8989] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1033.614529][ T8989] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1033.624748][ T8989] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1033.634079][ T8989] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.753540][T17310] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 1033.769115][T17310] usbhid 2-1:0.0: can't add hid device: -22 [ 1033.935905][T17310] usbhid: probe of 2-1:0.0 failed with error -22 [ 1033.958513][ T8989] usb 1-1: config 0 descriptor?? [ 1034.014195][ T8989] hub 1-1:0.0: USB hub found [ 1034.313278][ T8989] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 1034.329049][ T8989] usbhid 1-1:0.0: can't add hid device: -22 [ 1034.335559][ T8989] usbhid: probe of 1-1:0.0 failed with error -22 [ 1035.023106][ T8989] usb 2-1: USB disconnect, device number 22 19:19:04 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x315, 0x800000, 0x0) socket$packet(0x11, 0x0, 0x300) 19:19:04 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000807e00"}) r1 = syz_open_pts(r0, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0xfffffff7, 0x9, 0x0, 0x0, 0x0, "539ba821dbf1ddf02bf44ab998d02ce78fe03c"}) write(r1, &(0x7f0000000100)="102a3a930a61cc34764e2477a549e9ab84026c7b7d7aa5c17d8135457c464491c910", 0x22) 19:19:04 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 19:19:04 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "37b0aa6c"}, 0x0, 0x0, 0x0, 0x0}) 19:19:04 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x7c, 0x0, 0x1, 0x409, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x7c}}, 0x0) 19:19:04 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "a8d0f938"}, 0x0, 0x0, 0x0, 0x0}) [ 1035.480873][ T8989] usb 1-1: USB disconnect, device number 6 19:19:04 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 19:19:04 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x80, 0x0, 0x1, 0x409, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0x4}]}, 0x80}}, 0x0) 19:19:04 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000807e00"}) r1 = syz_open_pts(r0, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0xfffffff7, 0x9, 0x0, 0x0, 0x0, "539ba821dbf1ddf02bf44ab998d02ce78fe03c"}) write(r1, &(0x7f0000000100)="102a3a930a61cc34764e2477a549e9ab84026c7b7d7aa5c17d8135457c464491c910", 0x22) 19:19:04 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x315, 0x800000, 0x0) socket$packet(0x11, 0x0, 0x300) [ 1035.891486][ T9017] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1035.982583][ T8989] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1036.162440][ T9017] usb 2-1: Using ep0 maxpacket: 16 [ 1036.223084][ T8989] usb 1-1: Using ep0 maxpacket: 16 [ 1036.294725][ T9017] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1036.308017][ T9017] usb 2-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 1036.317422][ T9017] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.343862][ T8989] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1036.357083][ T8989] usb 1-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 1036.366416][ T8989] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.410630][ T9017] usb 2-1: config 0 descriptor?? [ 1036.457685][ T8989] usb 1-1: config 0 descriptor?? [ 1036.461443][ T9017] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1036.510336][ T8989] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1036.658528][ T8704] usb 2-1: USB disconnect, device number 23 [ 1036.710236][ T27] usb 1-1: USB disconnect, device number 7 [ 1037.246025][ T8704] usb 2-1: new high-speed USB device number 24 using dummy_hcd 19:19:06 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r0, 0x0, 0x0, 0x800000, 0x0) socket$packet(0x11, 0x0, 0x300) [ 1037.293685][ T27] usb 1-1: new high-speed USB device number 8 using dummy_hcd 19:19:06 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) recvmmsg(r0, &(0x7f0000002b80), 0x0, 0x0, 0x0) 19:19:06 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x80, 0x0, 0x1, 0x409, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0x4}]}, 0x80}}, 0x0) 19:19:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000807e00"}) r1 = syz_open_pts(r0, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0xfffffff7, 0x9, 0x0, 0x0, 0x0, "539ba821dbf1ddf02bf44ab998d02ce78fe03c"}) write(r1, &(0x7f0000000100)="102a3a930a61cc34764e2477a549e9ab84026c7b7d7aa5c17d8135457c464491c910", 0x22) [ 1037.527297][ T8704] usb 2-1: Using ep0 maxpacket: 32 [ 1037.533042][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 1037.654056][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1037.665416][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1037.669774][ T8704] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1037.675530][ T27] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1037.686781][ T8704] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1037.695941][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1037.706149][ T8704] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1037.724023][ T8704] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1037.902804][ T27] usb 1-1: config 0 descriptor?? [ 1037.951485][ T27] hub 1-1:0.0: USB hub found [ 1038.124804][ T8704] usb 2-1: config 0 descriptor?? [ 1038.174146][ T8704] hub 2-1:0.0: USB hub found [ 1038.233090][ T27] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 1038.249287][ T27] usbhid 1-1:0.0: can't add hid device: -22 [ 1038.255752][ T27] usbhid: probe of 1-1:0.0 failed with error -22 [ 1038.455725][ T8704] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 1038.471658][ T8704] usbhid 2-1:0.0: can't add hid device: -22 [ 1038.478359][ T8704] usbhid: probe of 2-1:0.0 failed with error -22 19:19:08 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "37b0aa6c"}, 0x0, 0x0, 0x0, 0x0}) 19:19:08 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r0, 0x0, 0x0, 0x800000, 0x0) socket$packet(0x11, 0x0, 0x300) 19:19:08 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) recvmmsg(r0, &(0x7f0000002b80), 0x0, 0x0, 0x0) [ 1039.472989][ T8704] usb 1-1: USB disconnect, device number 8 19:19:08 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "a8d0f938"}, 0x0, 0x0, 0x0, 0x0}) 19:19:08 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x80, 0x0, 0x1, 0x409, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0x4}]}, 0x80}}, 0x0) 19:19:08 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000807e00"}) r1 = syz_open_pts(r0, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0xfffffff7, 0x9, 0x0, 0x0, 0x0, "539ba821dbf1ddf02bf44ab998d02ce78fe03c"}) write(r1, &(0x7f0000000100)="102a3a930a61cc34764e2477a549e9ab84026c7b7d7aa5c17d8135457c464491c9103cae64221f5fbd399f0f22c662412a4991", 0x33) 19:19:08 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) recvmmsg(r0, &(0x7f0000002b80), 0x0, 0x0, 0x0) [ 1039.778385][ T8704] usb 2-1: USB disconnect, device number 24 19:19:08 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r0, 0x0, 0x0, 0x800000, 0x0) socket$packet(0x11, 0x0, 0x300) 19:19:08 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x80, 0x0, 0x1, 0x409, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x80}}, 0x0) [ 1040.132454][T17310] usb 1-1: new high-speed USB device number 9 using dummy_hcd 19:19:08 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000807e00"}) r1 = syz_open_pts(r0, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0xfffffff7, 0x9, 0x0, 0x0, 0x0, "539ba821dbf1ddf02bf44ab998d02ce78fe03c"}) write(r1, &(0x7f0000000100)="102a3a930a61cc34764e2477a549e9ab84026c7b7d7aa5c17d8135457c464491c9103cae64221f5fbd399f0f22c662412a4991", 0x33) [ 1040.376484][T17310] usb 1-1: Using ep0 maxpacket: 16 [ 1040.482498][ T8704] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1040.494015][T17310] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1040.507144][T17310] usb 1-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 1040.516532][T17310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:19:09 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) recvmmsg(r0, &(0x7f0000002b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 1040.624625][T17310] usb 1-1: config 0 descriptor?? [ 1040.700792][T17310] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1040.742705][ T8704] usb 2-1: Using ep0 maxpacket: 16 19:19:09 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) [ 1040.870748][ T27] usb 1-1: USB disconnect, device number 9 [ 1040.883356][ T8704] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1040.896542][ T8704] usb 2-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 1040.905929][ T8704] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1041.089067][ T8704] usb 2-1: config 0 descriptor?? [ 1041.171151][ T8704] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1041.355071][ T9017] usb 2-1: USB disconnect, device number 25 [ 1041.433921][ T27] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1041.682394][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 1041.802741][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1041.814046][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1041.824197][ T27] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1041.833467][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1041.851607][ T27] usb 1-1: config 0 descriptor?? [ 1041.901724][ T27] hub 1-1:0.0: USB hub found [ 1041.942495][ T9017] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1042.182615][ T27] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 1042.195055][ T9017] usb 2-1: Using ep0 maxpacket: 32 [ 1042.198029][ T27] usbhid 1-1:0.0: can't add hid device: -22 [ 1042.206696][ T27] usbhid: probe of 1-1:0.0 failed with error -22 [ 1042.342805][ T9017] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1042.354171][ T9017] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1042.364326][ T9017] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1042.373628][ T9017] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.420782][ T9017] usb 2-1: config 0 descriptor?? [ 1042.469653][ T9017] hub 2-1:0.0: USB hub found [ 1042.762784][ T9017] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 1042.778349][ T9017] usbhid 2-1:0.0: can't add hid device: -22 [ 1042.824761][ T9017] usbhid: probe of 2-1:0.0 failed with error -22 19:19:12 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "37b0aa6c"}, 0x0, 0x0, 0x0, 0x0}) 19:19:12 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x80, 0x0, 0x1, 0x409, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x80}}, 0x0) 19:19:12 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000807e00"}) r1 = syz_open_pts(r0, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0xfffffff7, 0x9, 0x0, 0x0, 0x0, "539ba821dbf1ddf02bf44ab998d02ce78fe03c"}) write(r1, &(0x7f0000000100)="102a3a930a61cc34764e2477a549e9ab84026c7b7d7aa5c17d8135457c464491c9103cae64221f5fbd399f0f22c662412a4991", 0x33) [ 1043.465886][ T8989] usb 1-1: USB disconnect, device number 10 19:19:12 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "a8d0f938"}, 0x0, 0x0, 0x0, 0x0}) 19:19:12 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) recvmmsg(r0, &(0x7f0000002b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 19:19:12 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000807e00"}) r1 = syz_open_pts(r0, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0xfffffff7, 0x9, 0x0, 0x0, 0x0, "539ba821dbf1ddf02bf44ab998d02ce78fe03c"}) write(r1, &(0x7f0000000100)="102a3a930a61cc34764e2477a549e9ab84026c7b7d7aa5c17d8135457c464491c9103cae64221f5fbd399f0f22c662412a4991f57df530cf63913beb", 0x3c) 19:19:12 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 19:19:12 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x80, 0x0, 0x1, 0x409, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x80}}, 0x0) [ 1044.012822][T17310] usb 2-1: USB disconnect, device number 26 [ 1044.036766][ T8989] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1044.283253][ T8989] usb 1-1: Using ep0 maxpacket: 16 19:19:13 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 19:19:13 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) recvmmsg(r0, &(0x7f0000002b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 1044.403508][ T8989] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1044.416713][ T8989] usb 1-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 1044.426134][ T8989] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:19:13 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x64, 0x0, 0x1, 0x409, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x64}}, 0x0) [ 1044.568389][ T8989] usb 1-1: config 0 descriptor?? 19:19:13 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000807e00"}) r1 = syz_open_pts(r0, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0xfffffff7, 0x9, 0x0, 0x0, 0x0, "539ba821dbf1ddf02bf44ab998d02ce78fe03c"}) write(r1, &(0x7f0000000100)="102a3a930a61cc34764e2477a549e9ab84026c7b7d7aa5c17d8135457c464491c9103cae64221f5fbd399f0f22c662412a4991f57df530cf63913beb", 0x3c) [ 1044.630310][ T8989] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1044.827114][ T27] usb 1-1: USB disconnect, device number 11 [ 1044.855269][T17310] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1045.102256][T17310] usb 2-1: Using ep0 maxpacket: 16 [ 1045.223406][T17310] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1045.239112][T17310] usb 2-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 1045.248513][T17310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.412732][T17310] usb 2-1: config 0 descriptor?? [ 1045.461894][T17310] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1045.472670][ T27] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1045.661039][T17310] usb 2-1: USB disconnect, device number 27 [ 1045.718650][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 1045.843898][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1045.855318][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1045.865745][ T27] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1045.875077][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.967926][ T27] usb 1-1: config 0 descriptor?? [ 1046.013838][ T27] hub 1-1:0.0: USB hub found [ 1046.292337][T17310] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1046.313146][ T27] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 1046.328408][ T27] usbhid 1-1:0.0: can't add hid device: -22 [ 1046.335623][ T27] usbhid: probe of 1-1:0.0 failed with error -22 [ 1046.543427][T17310] usb 2-1: Using ep0 maxpacket: 32 [ 1046.662694][T17310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1046.673975][T17310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1046.684418][T17310] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1046.693758][T17310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.755285][T17310] usb 2-1: config 0 descriptor?? [ 1046.795070][T17310] hub 2-1:0.0: USB hub found [ 1047.013724][T17310] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1047.029502][T17310] usbhid 2-1:0.0: can't add hid device: -22 [ 1047.036394][T17310] usbhid: probe of 2-1:0.0 failed with error -22 19:19:16 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(sha224-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) 19:19:16 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "37b0aa6c"}, 0x0, 0x0, 0x0, 0x0}) 19:19:16 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) recvmmsg(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000001600)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) [ 1047.718738][ T8702] usb 1-1: USB disconnect, device number 12 [ 1048.172486][T17310] usb 1-1: new high-speed USB device number 13 using dummy_hcd 19:19:17 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "a8d0f938"}, 0x0, 0x0, 0x0, 0x0}) 19:19:17 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x64, 0x0, 0x1, 0x409, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x64}}, 0x0) 19:19:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000807e00"}) r1 = syz_open_pts(r0, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0xfffffff7, 0x9, 0x0, 0x0, 0x0, "539ba821dbf1ddf02bf44ab998d02ce78fe03c"}) write(r1, &(0x7f0000000100)="102a3a930a61cc34764e2477a549e9ab84026c7b7d7aa5c17d8135457c464491c9103cae64221f5fbd399f0f22c662412a4991f57df530cf63913beb", 0x3c) 19:19:17 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f00000014c0)=ANY=[@ANYBLOB="000262cc"], 0x8) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1048.415023][T17310] usb 1-1: Using ep0 maxpacket: 16 [ 1048.503778][ T27] usb 2-1: USB disconnect, device number 28 [ 1048.533870][T17310] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1048.547158][T17310] usb 1-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 1048.556568][T17310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.879135][T17310] usb 1-1: config 0 descriptor?? 19:19:17 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) recvmmsg(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000001600)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) [ 1048.931581][T17310] usbhid 1-1:0.0: couldn't find an input interrupt endpoint 19:19:17 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x64, 0x0, 0x1, 0x409, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x64}}, 0x0) 19:19:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000807e00"}) r1 = syz_open_pts(r0, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0xfffffff7, 0x9, 0x0, 0x0, 0x0, "539ba821dbf1ddf02bf44ab998d02ce78fe03c"}) write(r1, &(0x7f0000000100)="102a3a930a61cc34764e2477a549e9ab84026c7b7d7aa5c17d8135457c464491c9103cae64221f5fbd399f0f22c662412a4991f57df530cf63913bebf9905efa", 0x40) [ 1049.130706][T17310] usb 1-1: USB disconnect, device number 13 19:19:17 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f00000014c0)=ANY=[@ANYBLOB="000262cc"], 0x8) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1049.395869][ T27] usb 2-1: new high-speed USB device number 29 using dummy_hcd 19:19:18 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) recvmmsg(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000001600)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) [ 1049.643090][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 1049.703200][T17310] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1049.763974][ T27] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1049.777111][ T27] usb 2-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 1049.786462][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:19:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000807e00"}) r1 = syz_open_pts(r0, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0xfffffff7, 0x9, 0x0, 0x0, 0x0, "539ba821dbf1ddf02bf44ab998d02ce78fe03c"}) write(r1, &(0x7f0000000100)="102a3a930a61cc34764e2477a549e9ab84026c7b7d7aa5c17d8135457c464491c9103cae64221f5fbd399f0f22c662412a4991f57df530cf63913bebf9905efa", 0x40) [ 1049.953512][T17310] usb 1-1: Using ep0 maxpacket: 32 [ 1049.975861][ T27] usb 2-1: config 0 descriptor?? [ 1050.024061][ T27] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1050.073159][T17310] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1050.085510][T17310] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1050.095554][T17310] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1050.104799][T17310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.218841][ T27] usb 2-1: USB disconnect, device number 29 [ 1050.315581][T17310] usb 1-1: config 0 descriptor?? [ 1050.364041][T17310] hub 1-1:0.0: USB hub found [ 1050.662517][T17310] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 1050.678263][T17310] usbhid 1-1:0.0: can't add hid device: -22 [ 1050.685220][T17310] usbhid: probe of 1-1:0.0 failed with error -22 [ 1050.782396][ T27] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1051.022302][ T27] usb 2-1: Using ep0 maxpacket: 32 [ 1051.143097][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1051.154461][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1051.164643][ T27] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1051.173996][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.208139][ T27] usb 2-1: config 0 descriptor?? [ 1051.254259][ T27] hub 2-1:0.0: USB hub found [ 1051.474642][ T27] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1051.490418][ T27] usbhid 2-1:0.0: can't add hid device: -22 [ 1051.497045][ T27] usbhid: probe of 2-1:0.0 failed with error -22 19:19:20 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x3, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "37b0aa6c"}, 0x0, 0x0, 0x0, 0x0}) 19:19:20 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x7c, 0x0, 0x1, 0x409, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x7c}}, 0x0) [ 1052.043022][ T27] usb 1-1: USB disconnect, device number 14 [ 1052.532469][ T27] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1052.774133][ T27] usb 1-1: Using ep0 maxpacket: 16 19:19:21 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "a8d0f938"}, 0x0, 0x0, 0x0, 0x0}) 19:19:21 executing program 5: creat(&(0x7f0000000100)='./bus\x00', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) 19:19:21 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) recvmmsg(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000001600)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0, 0x0) 19:19:21 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000807e00"}) r1 = syz_open_pts(r0, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0xfffffff7, 0x9, 0x0, 0x0, 0x0, "539ba821dbf1ddf02bf44ab998d02ce78fe03c"}) write(r1, &(0x7f0000000100)="102a3a930a61cc34764e2477a549e9ab84026c7b7d7aa5c17d8135457c464491c9103cae64221f5fbd399f0f22c662412a4991f57df530cf63913bebf9905efa", 0x40) 19:19:21 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x7c, 0x0, 0x1, 0x409, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x7c}}, 0x0) [ 1052.893033][ T27] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1052.906727][ T27] usb 1-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 1052.916003][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.124851][ T3672] usb 2-1: USB disconnect, device number 30 [ 1053.200436][ T27] usb 1-1: config 0 descriptor?? [ 1053.272698][ T27] usbhid 1-1:0.0: couldn't find an input interrupt endpoint 19:19:22 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x7c, 0x0, 0x1, 0x409, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x7c}}, 0x0) 19:19:22 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000807e00"}) r1 = syz_open_pts(r0, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0xfffffff7, 0x9, 0x0, 0x0, 0x0, "539ba821dbf1ddf02bf44ab998d02ce78fe03c"}) write(r1, &(0x7f0000000100)="102a3a930a61cc34764e2477a549e9ab84026c7b7d7aa5c17d8135457c464491c9103cae64221f5fbd399f0f22c662412a4991f57df530cf63913bebf9905efadf6d", 0x42) [ 1053.461289][ T27] usb 1-1: USB disconnect, device number 15 19:19:22 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) recvmmsg(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000001600)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0, 0x0) 19:19:22 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) listxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) [ 1053.732302][ T8989] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1053.972170][ T8989] usb 2-1: Using ep0 maxpacket: 16 19:19:22 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x74, 0x0, 0x1, 0x409, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x74}}, 0x0) [ 1054.037407][ T27] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1054.093193][ T8989] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1054.106422][ T8989] usb 2-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 1054.115868][ T8989] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.252996][ T8989] usb 2-1: config 0 descriptor?? [ 1054.283474][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 1054.302898][ T8989] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1054.404522][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1054.415808][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1054.426357][ T27] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1054.435797][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.497327][ T3672] usb 2-1: USB disconnect, device number 31 [ 1054.552552][ T27] usb 1-1: config 0 descriptor?? [ 1054.603905][ T27] hub 1-1:0.0: USB hub found [ 1054.814807][ T27] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1054.830601][ T27] usbhid 1-1:0.0: can't add hid device: -22 [ 1054.837489][ T27] usbhid: probe of 1-1:0.0 failed with error -22 [ 1055.102084][ T3672] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1055.342323][ T3672] usb 2-1: Using ep0 maxpacket: 32 [ 1055.463016][ T3672] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1055.474444][ T3672] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1055.484648][ T3672] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1055.493935][ T3672] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1055.523333][ T3672] usb 2-1: config 0 descriptor?? [ 1055.567887][ T3672] hub 2-1:0.0: USB hub found [ 1055.772673][ T3672] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1055.788663][ T3672] usbhid 2-1:0.0: can't add hid device: -22 [ 1055.795235][ T3672] usbhid: probe of 2-1:0.0 failed with error -22 19:19:25 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x3, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "37b0aa6c"}, 0x0, 0x0, 0x0, 0x0}) 19:19:25 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000807e00"}) r1 = syz_open_pts(r0, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0xfffffff7, 0x9, 0x0, 0x0, 0x0, "539ba821dbf1ddf02bf44ab998d02ce78fe03c"}) write(r1, &(0x7f0000000100)="102a3a930a61cc34764e2477a549e9ab84026c7b7d7aa5c17d8135457c464491c9103cae64221f5fbd399f0f22c662412a4991f57df530cf63913bebf9905efadf6d", 0x42) [ 1056.397373][ T9017] usb 1-1: USB disconnect, device number 16 [ 1056.942731][ T9017] usb 1-1: new high-speed USB device number 17 using dummy_hcd 19:19:25 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "a8d0f938"}, 0x0, 0x0, 0x0, 0x0}) 19:19:25 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) recvmmsg(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000001600)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0, 0x0) 19:19:25 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x74, 0x0, 0x1, 0x409, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x74}}, 0x0) 19:19:25 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000003c0)='y', 0x1, 0x0, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, &(0x7f0000000200)={0x0, 0x989680}, 0x0, 0x0) 19:19:25 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000807e00"}) r1 = syz_open_pts(r0, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0xfffffff7, 0x9, 0x0, 0x0, 0x0, "539ba821dbf1ddf02bf44ab998d02ce78fe03c"}) write(r1, &(0x7f0000000100)="102a3a930a61cc34764e2477a549e9ab84026c7b7d7aa5c17d8135457c464491c9103cae64221f5fbd399f0f22c662412a4991f57df530cf63913bebf9905efadf6d", 0x42) [ 1057.197079][ T9017] usb 1-1: Using ep0 maxpacket: 16 [ 1057.225679][ T3672] usb 2-1: USB disconnect, device number 32 [ 1057.333116][ T9017] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1057.346319][ T9017] usb 1-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 1057.355680][ T9017] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.543663][ T9017] usb 1-1: config 0 descriptor?? 19:19:26 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x74, 0x0, 0x1, 0x409, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x74}}, 0x0) 19:19:26 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) recvmmsg(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000100)=""/218, 0xda}], 0x1}}], 0x1, 0x0, 0x0) [ 1057.596164][ T9017] usbhid 1-1:0.0: couldn't find an input interrupt endpoint 19:19:26 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000807e00"}) r1 = syz_open_pts(r0, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0xfffffff7, 0x9, 0x0, 0x0, 0x0, "539ba821dbf1ddf02bf44ab998d02ce78fe03c"}) write(r1, &(0x7f0000000100)="102a3a930a61cc34764e2477a549e9ab84026c7b7d7aa5c17d8135457c464491c9103cae64221f5fbd399f0f22c662412a4991f57df530cf63913bebf9905efadf6d0d", 0x43) [ 1057.802688][ T27] usb 1-1: USB disconnect, device number 17 [ 1058.063327][ T9017] usb 2-1: new high-speed USB device number 33 using dummy_hcd 19:19:27 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) recvmmsg(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000100)=""/218, 0xda}], 0x1}}], 0x1, 0x0, 0x0) 19:19:27 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x4c, 0x0, 0x1, 0x409, 0x0, 0x0, {}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x4c}}, 0x0) [ 1058.302061][ T9017] usb 2-1: Using ep0 maxpacket: 16 [ 1058.382309][ T27] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1058.423037][ T9017] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1058.436434][ T9017] usb 2-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 1058.445944][ T9017] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.587903][ T9017] usb 2-1: config 0 descriptor?? [ 1058.622375][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 1058.681410][ T9017] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1058.743453][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1058.754887][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1058.764968][ T27] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1058.774268][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.838779][ T9017] usb 2-1: USB disconnect, device number 33 [ 1058.963630][ T27] usb 1-1: config 0 descriptor?? [ 1059.008178][ T27] hub 1-1:0.0: USB hub found [ 1059.212351][ T27] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1059.228266][ T27] usbhid 1-1:0.0: can't add hid device: -22 [ 1059.243618][ T27] usbhid: probe of 1-1:0.0 failed with error -22 [ 1059.402362][ T9017] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1059.662570][ T9017] usb 2-1: Using ep0 maxpacket: 32 [ 1059.792622][ T9017] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1059.803826][ T9017] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1059.814052][ T9017] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1059.823386][ T9017] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1059.874249][ T9017] usb 2-1: config 0 descriptor?? [ 1059.925012][ T9017] hub 2-1:0.0: USB hub found [ 1060.143705][ T9017] hub 2-1:0.0: 1 port detected 19:19:29 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x3, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "37b0aa6c"}, 0x0, 0x0, 0x0, 0x0}) 19:19:29 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000002000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lgetxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@random={'security.', 'fuse\x00'}, 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x3) [ 1060.746035][ T27] usb 1-1: USB disconnect, device number 18 [ 1060.814445][ T9017] usb 2-1: USB disconnect, device number 34 [ 1060.832235][ T8704] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 1061.302263][ T8704] usb 1-1: new high-speed USB device number 19 using dummy_hcd 19:19:30 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "a8d0f938"}, 0x0, 0x0, 0x0, 0x0}) 19:19:30 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x4c, 0x0, 0x1, 0x409, 0x0, 0x0, {}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x4c}}, 0x0) 19:19:30 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000807e00"}) r1 = syz_open_pts(r0, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0xfffffff7, 0x9, 0x0, 0x0, 0x0, "539ba821dbf1ddf02bf44ab998d02ce78fe03c"}) write(r1, &(0x7f0000000100)="102a3a930a61cc34764e2477a549e9ab84026c7b7d7aa5c17d8135457c464491c9103cae64221f5fbd399f0f22c662412a4991f57df530cf63913bebf9905efadf6d0d", 0x43) 19:19:30 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) recvmmsg(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000100)=""/218, 0xda}], 0x1}}], 0x1, 0x0, 0x0) 19:19:30 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1061.562089][ T8704] usb 1-1: Using ep0 maxpacket: 16 [ 1061.692387][ T8704] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1061.705635][ T8704] usb 1-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 1061.715208][ T8704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1061.890630][ T8704] usb 1-1: config 0 descriptor?? 19:19:30 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x4c, 0x0, 0x1, 0x409, 0x0, 0x0, {}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x4c}}, 0x0) [ 1061.972711][ T8704] usbhid 1-1:0.0: couldn't find an input interrupt endpoint 19:19:30 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x566, 0x3004, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000740)={0x24, 0x0, 0x0, &(0x7f0000001180)=ANY=[], 0x0}, 0x0) 19:19:30 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000807e00"}) r1 = syz_open_pts(r0, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0xfffffff7, 0x9, 0x0, 0x0, 0x0, "539ba821dbf1ddf02bf44ab998d02ce78fe03c"}) write(r1, &(0x7f0000000100)="102a3a930a61cc34764e2477a549e9ab84026c7b7d7aa5c17d8135457c464491c9103cae64221f5fbd399f0f22c662412a4991f57df530cf63913bebf9905efadf6d0d", 0x43) 19:19:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{0x7}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, {}, {}, 0x80000000, 0x0, 0x0, 0x410030, 0x0, 0x0, 0x0, [0x0, 0x0, 0x8000000]}) [ 1062.177307][ T8704] usb 1-1: USB disconnect, device number 19 [ 1062.561905][ T8702] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1062.712150][ T8704] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1062.832133][ T8702] usb 2-1: Using ep0 maxpacket: 16 19:19:31 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x7c, 0x0, 0x1, 0x409, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @mcast2}}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x7c}}, 0x0) [ 1062.933226][ T12] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1062.964672][ T8702] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1062.978329][ T8702] usb 2-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 1062.987710][ T8702] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1062.997169][ T8704] usb 1-1: Using ep0 maxpacket: 32 [ 1063.149894][ T8702] usb 2-1: config 0 descriptor?? [ 1063.157037][ T8704] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1063.168619][ T8704] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1063.178734][ T8704] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1063.187976][ T8704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.236436][ T8702] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1063.312892][ T8704] usb 1-1: config 0 descriptor?? [ 1063.354424][ T8704] hub 1-1:0.0: USB hub found [ 1063.364668][ T12] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1063.375959][ T12] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1063.386034][ T12] usb 6-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.40 [ 1063.395520][ T12] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.420280][ T8702] usb 2-1: USB disconnect, device number 35 [ 1063.509145][ T12] usb 6-1: config 0 descriptor?? [ 1063.584014][ T8704] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1063.599832][ T8704] usbhid 1-1:0.0: can't add hid device: -22 [ 1063.606448][ T8704] usbhid: probe of 1-1:0.0 failed with error -22 [ 1063.856176][ T12] usbhid 6-1:0.0: can't add hid device: -71 [ 1063.863387][ T12] usbhid: probe of 6-1:0.0 failed with error -71 [ 1063.899146][ T12] usb 6-1: USB disconnect, device number 4 [ 1064.043969][ T8702] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1064.312171][ T8702] usb 2-1: Using ep0 maxpacket: 32 [ 1064.382897][ T12] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1064.434027][ T8702] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1064.445425][ T8702] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1064.455569][ T8702] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1064.464906][ T8702] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1064.516805][ T8702] usb 2-1: config 0 descriptor?? [ 1064.574952][ T8702] hub 2-1:0.0: USB hub found [ 1064.802519][ T8702] hub 2-1:0.0: 1 port detected [ 1064.822549][ T12] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1064.833732][ T12] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1064.843889][ T12] usb 6-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.40 [ 1064.853244][ T12] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:19:33 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "37b0aa6c"}, 0x0, 0x0, 0x0, 0x0}) 19:19:33 executing program 2: syz_emit_ethernet(0x6e, &(0x7f00000000c0)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @local={0xfe, 0x80, [0x3, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "7f112d", 0x0, 0x29, 0x0, @private2, @remote={0xfe, 0x80, [0x7]}, [@dstopts={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x3a]}]}}}}}}}, 0x0) [ 1065.119235][ T12] usb 6-1: config 0 descriptor?? [ 1065.243182][ T8704] usb 1-1: USB disconnect, device number 20 [ 1065.528374][ T8702] usb 2-1: USB disconnect, device number 36 [ 1065.535616][ T8704] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 1065.662367][ T12] usbhid 6-1:0.0: can't add hid device: -71 [ 1065.668885][ T12] usbhid: probe of 6-1:0.0 failed with error -71 [ 1065.727627][ T12] usb 6-1: USB disconnect, device number 5 [ 1065.822586][ T27] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1066.063041][ T27] usb 1-1: Using ep0 maxpacket: 16 19:19:34 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "a8d0f938"}, 0x0, 0x0, 0x0, 0x0}) 19:19:34 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000001a40)=ANY=[@ANYBLOB="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"], 0x191) keyctl$set_timeout(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r2, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x9a01, 0x0) keyctl$describe(0x6, 0x0, &(0x7f00000003c0)=""/88, 0x58) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000600)={0x33, 0x1d, [], [@generic={0x7f, 0x3a, "d89dc57cb9eefee4297c9f53303bba2b878d2c255b3d8e8ef31de5d2fcdecebeab536dc8693c23a2b54a58cfeb7f837694e4ecd0352e75577c24"}, @hao={0xc9, 0x10, @mcast1}, @generic={0x3, 0x6c, "af11b65e8684c65aede8be7debd912549f9db58f4db3c012f5806922eaa36a483c36796c110680d8f5f4be54ec0c02c94619098cd69a9d1a36af1aa5a013363a052f5cfb7e213c9a49d6035a97c3081749720724e2055f277ca2388c63b75583843e300c0145921dfdc16dc1"}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xffffffa3}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @jumbo]}, 0xf8) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000500)={0x53, 0xfffffffffffffffd, 0x0, 0x5, @scatter={0x1, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)=""/24, 0x18}]}, 0x0, &(0x7f0000000840)=""/4096, 0x2, 0x0, 0x0, &(0x7f0000000480)}) lsetxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file0\x00', &(0x7f00000005c0)='trusted.overlay.nlink\x00', &(0x7f0000000240)={'U+', 0x80000001}, 0x16, 0x0) close(r1) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='security.capability\x00', &(0x7f0000000340)=@v2, 0x14, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='trusted.overlay.origin\x00', &(0x7f0000000580)='y\x00', 0x2, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000280)=0x30) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1b630707000000008000000000000000000000000000000001ffffffffffffff400000000000000000000000000000000000000000003878df1dd700000000000000000000470000000000000000000000000000000000000000000000000000000000000000f2ffffffffffffff00"/120], 0x78) 19:19:34 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x7c, 0x0, 0x1, 0x409, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @mcast2}}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x7c}}, 0x0) 19:19:34 executing program 2: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9800000000010904a92b4edc0000210000000000240001801400018008040100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014000300fc02000000000000000000000000000014000400ff0100000600000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) [ 1066.185094][ T27] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1066.198449][ T27] usb 1-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 1066.208174][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1066.365003][T23457] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1066.377617][T23457] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1066.387370][T23457] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1066.405791][ T12] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1066.416908][ T27] usb 1-1: config 0 descriptor?? [ 1066.522034][ T27] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1066.560735][T23461] ptrace attach of "/root/syz-executor.4"[23458] was attempted by "/root/syz-executor.4"[23461] 19:19:35 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x7c, 0x0, 0x1, 0x409, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @mcast2}}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x7c}}, 0x0) [ 1066.675855][ T27] usb 1-1: USB disconnect, device number 21 [ 1066.813670][ T12] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1066.824814][ T12] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1066.834977][ T12] usb 6-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.40 [ 1066.844299][ T12] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:19:35 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000001a40)=ANY=[@ANYBLOB="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"], 0x191) keyctl$set_timeout(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r2, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x9a01, 0x0) keyctl$describe(0x6, 0x0, &(0x7f00000003c0)=""/88, 0x58) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000600)={0x33, 0x1d, [], [@generic={0x7f, 0x3a, "d89dc57cb9eefee4297c9f53303bba2b878d2c255b3d8e8ef31de5d2fcdecebeab536dc8693c23a2b54a58cfeb7f837694e4ecd0352e75577c24"}, @hao={0xc9, 0x10, @mcast1}, @generic={0x3, 0x6c, "af11b65e8684c65aede8be7debd912549f9db58f4db3c012f5806922eaa36a483c36796c110680d8f5f4be54ec0c02c94619098cd69a9d1a36af1aa5a013363a052f5cfb7e213c9a49d6035a97c3081749720724e2055f277ca2388c63b75583843e300c0145921dfdc16dc1"}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xffffffa3}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @jumbo]}, 0xf8) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000500)={0x53, 0xfffffffffffffffd, 0x0, 0x5, @scatter={0x1, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)=""/24, 0x18}]}, 0x0, &(0x7f0000000840)=""/4096, 0x2, 0x0, 0x0, &(0x7f0000000480)}) lsetxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file0\x00', &(0x7f00000005c0)='trusted.overlay.nlink\x00', &(0x7f0000000240)={'U+', 0x80000001}, 0x16, 0x0) close(r1) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='security.capability\x00', &(0x7f0000000340)=@v2, 0x14, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='trusted.overlay.origin\x00', &(0x7f0000000580)='y\x00', 0x2, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000280)=0x30) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1b630707000000008000000000000000000000000000000001ffffffffffffff400000000000000000000000000000000000000000003878df1dd700000000000000000000470000000000000000000000000000000000000000000000000000000000000000f2ffffffffffffff00"/120], 0x78) [ 1067.082428][ T3672] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1067.113192][ T12] usb 6-1: config 0 descriptor?? 19:19:35 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) write(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x3, &(0x7f0000000340)=[{&(0x7f00000001c0), 0x0, 0x9}, {0x0, 0x0, 0x8}, {&(0x7f0000000300), 0x0, 0xfffffff8}], 0x0, &(0x7f0000000380)={[{@rodir='rodir'}, {@uni_xlate='uni_xlate=1'}, {@uni_xlate='uni_xlate=1'}, {@shortname_lower='shortname=lower'}, {@uni_xlate='uni_xlate=1'}], [{@uid_gt={'uid>'}}]}) 19:19:35 executing program 2: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9800000000010904a92b4edc0000210000000000240001801400018008040100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014000300fc02000000000000000000000000000014000400ff0100000600000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) [ 1067.243034][ T12] usb 6-1: can't set config #0, error -71 [ 1067.251890][ T27] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1067.275655][ T12] usb 6-1: USB disconnect, device number 6 [ 1067.332114][ T3672] usb 2-1: Using ep0 maxpacket: 16 [ 1067.452966][ T3672] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1067.466292][ T3672] usb 2-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 1067.475823][ T3672] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.476469][T23486] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1067.495431][T23486] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1067.506798][T23486] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1067.511889][ T27] usb 1-1: Using ep0 maxpacket: 32 19:19:36 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x5c, 0x0, 0x1, 0x409, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x5c}}, 0x0) [ 1067.644756][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1067.656105][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1067.666325][ T27] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1067.675578][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.764770][ T3672] usb 2-1: config 0 descriptor?? [ 1067.824391][ T3672] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1067.979312][ T27] usb 1-1: config 0 descriptor?? 19:19:36 executing program 4: syz_emit_ethernet(0x82, &(0x7f0000000080)={@multicast, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @remote, {[@timestamp_prespec={0x44, 0x44, 0x0, 0x3, 0x0, [{@broadcast}, {@multicast2}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@multicast2}, {@multicast2}, {@loopback}, {@empty}, {@private}]}]}}}}}}}, 0x0) [ 1068.011288][ T3672] usb 2-1: USB disconnect, device number 37 [ 1068.093535][ T27] hub 1-1:0.0: USB hub found [ 1068.233122][ T27] hub 1-1:0.0: 1 port detected [ 1068.564525][T23494] FAT-fs (loop5): Unrecognized mount option "uid>00000000000000000000" or missing value [ 1068.593293][ T3672] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1068.882485][ T3672] usb 2-1: Using ep0 maxpacket: 32 [ 1068.903109][ T8989] hub 1-1:0.0: activate --> -90 [ 1069.005494][ T3672] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1069.016653][ T3672] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1069.026736][ T3672] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1069.036025][ T3672] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.078066][ T3672] usb 2-1: config 0 descriptor?? [ 1069.128619][ T3672] hub 2-1:0.0: USB hub found [ 1069.328281][ T27] usb 1-1: USB disconnect, device number 22 [ 1069.334920][ T3672] hub 2-1:0.0: 1 port detected [ 1069.582047][ T8989] usb 1-1-port1: config error 19:19:38 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "37b0aa6c"}, 0x0, 0x0, 0x0, 0x0}) 19:19:38 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000010e7040900400000000001090224000100000000090400000103400000092100000001220500090581038a"], 0x0) syz_usb_disconnect(r0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x22, {0x22, 0x0, "1ebb33c80604aaeb82eeaf2798ccacd484eb911e98ab52748d65f3a0026f2029"}}, &(0x7f0000000ec0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, &(0x7f00000003c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x20, 0x18, 0x1, 0x0, "b7aaa435", "42bd6a6f"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) [ 1070.016332][ T27] usb 2-1: USB disconnect, device number 38 [ 1070.023254][ T3672] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 1070.555463][ T8704] usb 5-1: new high-speed USB device number 8 using dummy_hcd 19:19:39 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, '\x00', "009aee17"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "a8d0f938"}, 0x0, 0x0, 0x0, 0x0}) 19:19:39 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xd8c, 0x22, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000002c0)={0x0, 0x0, 0x20, {0x20, 0x0, "eb2b20da341f5b2aae21c107b91850b0b1600ab5c5b31fc6c16e3d012890"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x4805, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x1, 0x0, 0x0) 19:19:39 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x5c, 0x0, 0x1, 0x409, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x5c}}, 0x0) 19:19:39 executing program 5: syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000f7ecb708cc04332552da00001a010902240001000000000904000002eea2b10009010002000300000009058a22"], 0x0) [ 1070.802051][ T8704] usb 5-1: Using ep0 maxpacket: 16 [ 1070.822588][ T3672] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1070.932275][ T8704] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1070.943481][ T8704] usb 5-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.40 [ 1070.952799][ T8704] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1071.062358][ T3672] usb 1-1: Using ep0 maxpacket: 16 [ 1071.071521][ T8704] usb 5-1: config 0 descriptor?? [ 1071.132763][ T27] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1071.182995][ T3672] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1071.196803][ T3672] usb 1-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 1071.206097][ T3672] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1071.221842][T23140] usb 6-1: new high-speed USB device number 7 using dummy_hcd 19:19:40 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x5c, 0x0, 0x1, 0x409, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x5c}}, 0x0) [ 1071.360711][ T3672] usb 1-1: config 0 descriptor?? [ 1071.426888][ T8704] usbhid 5-1:0.0: can't add hid device: -71 [ 1071.429220][ T3672] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1071.433429][ T8704] usbhid: probe of 5-1:0.0 failed with error -71 [ 1071.462877][ T8989] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1071.474655][T23140] usb 6-1: Using ep0 maxpacket: 8 [ 1071.493445][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1071.505372][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1071.515654][ T27] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1071.524508][ T8704] usb 5-1: USB disconnect, device number 8 [ 1071.524996][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1071.616674][T17310] usb 1-1: USB disconnect, device number 23 [ 1071.627646][T23140] usb 6-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1071.636766][T23140] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1071.647674][T23140] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 1071.657687][T23140] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1071.762795][ T27] usb 3-1: config 0 descriptor?? [ 1071.792909][ T8989] usb 2-1: Using ep0 maxpacket: 16 [ 1071.926804][ T8989] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1071.940244][ T8989] usb 2-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00 [ 1071.949903][ T8989] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1071.964192][T23140] usb 6-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=da.52 [ 1071.973534][T23140] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=26 [ 1071.981840][T23140] usb 6-1: SerialNumber: syz [ 1072.032424][T23140] usb 6-1: config 0 descriptor?? [ 1072.098694][ T8989] usb 2-1: config 0 descriptor?? [ 1072.126573][T23140] pn533_usb 6-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 1072.143221][ T8704] usb 5-1: new high-speed USB device number 9 using dummy_hcd 19:19:40 executing program 3: ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000a874e40480b031034df00000001090212000100000000090401"], 0x0) [ 1072.177927][ T8989] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1072.282046][ T8989] usb 6-1: USB disconnect, device number 7 [ 1072.302672][T17310] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1072.358821][ T3672] usb 2-1: USB disconnect, device number 39 [ 1072.413436][ T8704] usb 5-1: Using ep0 maxpacket: 16 [ 1072.534072][ T8704] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1072.544112][T17310] usb 1-1: Using ep0 maxpacket: 32 [ 1072.545353][ T8704] usb 5-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.40 [ 1072.560807][ T8704] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1072.566620][ T27] usbhid 3-1:0.0: can't add hid device: -71 [ 1072.576719][ T27] usbhid: probe of 3-1:0.0 failed with error -71 [ 1072.635477][ T27] usb 3-1: USB disconnect, device number 2 [ 1072.674164][T17310] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1072.685668][T17310] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1072.695688][T17310] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1072.705191][T17310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1072.717671][ T8704] usb 5-1: config 0 descriptor?? [ 1072.775917][T17310] usb 1-1: config 0 descriptor?? [ 1072.820425][T17310] hub 1-1:0.0: USB hub found [ 1072.872173][ T8702] usb 4-1: new high-speed USB device number 4 using dummy_hcd 19:19:41 executing program 5: syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000f7ecb708cc04332552da00001a010902240001000000000904000002eea2b10009010002000300000009058a22"], 0x0) [ 1072.982221][ T3672] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1073.023222][T17310] hub 1-1:0.0: 1 port detected [ 1073.197738][ T8704] elo 0003:04E7:0009.0007: unknown main item tag 0x2 [ 1073.212702][ T8704] elo 0003:04E7:0009.0007: item fetching failed at offset 3/5 [ 1073.220886][ T8704] elo 0003:04E7:0009.0007: parse failed [ 1073.227260][ T8704] elo: probe of 0003:04E7:0009.0007 failed with error -22 [ 1073.243828][ T3672] usb 2-1: Using ep0 maxpacket: 32 [ 1073.286371][ T8702] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1073.294623][ T8702] usb 4-1: config 0 has no interface number 0 [ 1073.300901][ T8702] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=df.34 [ 1073.310324][ T8702] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1073.311982][ T27] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1073.364255][ T3672] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1073.375718][ T3672] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1073.383224][ T8702] usb 4-1: config 0 descriptor?? [ 1073.385816][ T3672] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1073.399915][ T3672] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1073.439179][ T8702] usb 4-1: selecting invalid altsetting 1 [ 1073.445816][ T8702] ttusb_init_controller: error [ 1073.450728][ T8702] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1073.554873][ T3672] usb 2-1: config 0 descriptor?? [ 1073.594086][ T3672] hub 2-1:0.0: USB hub found [ 1073.693643][T23140] hub 1-1:0.0: activate --> -90 [ 1073.753994][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1073.766101][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1073.776209][ T27] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1073.785565][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1073.795187][T17310] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1073.824738][ T3672] hub 2-1:0.0: 1 port detected [ 1073.913978][ T8702] ===================================================== [ 1073.921105][ T8702] BUG: KMSAN: uninit-value in tda8083_attach+0x55a/0x6d0 [ 1073.928165][ T8702] CPU: 0 PID: 8702 Comm: kworker/0:0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1073.936496][ T8702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1073.941239][ T27] usb 3-1: config 0 descriptor?? [ 1073.946606][ T8702] Workqueue: usb_hub_wq hub_event [ 1073.946623][ T8702] Call Trace: [ 1073.946662][ T8702] dump_stack+0x21c/0x280 [ 1073.946700][ T8702] kmsan_report+0xf7/0x1e0 [ 1073.946761][ T8702] __msan_warning+0x58/0xa0 [ 1073.973265][ T8702] tda8083_attach+0x55a/0x6d0 [ 1073.977986][ T8702] ? cx22700_i2c_gate_ctrl+0x7e0/0x7e0 [ 1073.983530][ T8702] ttusb_probe+0x4238/0x5040 [ 1073.988210][ T8702] ? __pm_runtime_set_status+0x1b16/0x1e50 [ 1073.994061][ T8702] ? kmsan_get_metadata+0x116/0x180 [ 1073.999284][ T8702] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1074.005210][ T8702] ? ttusbdecfe_dvbs_set_voltage+0x120/0x120 [ 1074.011281][ T8702] usb_probe_interface+0xece/0x1550 [ 1074.016525][ T8702] ? usb_register_driver+0x900/0x900 [ 1074.021922][ T8702] really_probe+0xf20/0x20b0 [ 1074.026558][ T8702] ? kmsan_get_metadata+0x116/0x180 [ 1074.031789][ T8702] driver_probe_device+0x293/0x390 [ 1074.036930][ T8702] __device_attach_driver+0x63f/0x830 [ 1074.042343][ T8702] bus_for_each_drv+0x2ca/0x3f0 [ 1074.042442][T17310] usb 6-1: Using ep0 maxpacket: 8 [ 1074.047318][ T8702] ? coredump_store+0xf0/0xf0 [ 1074.047356][ T8702] __device_attach+0x4e2/0x7f0 [ 1074.047428][ T8702] device_initial_probe+0x4a/0x60 [ 1074.066912][ T8702] bus_probe_device+0x177/0x3d0 [ 1074.071790][ T8702] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1074.077625][ T8702] device_add+0x3b0e/0x40d0 [ 1074.082182][ T8702] usb_set_configuration+0x380f/0x3f10 [ 1074.087670][ T8702] ? usb_set_configuration+0xb41/0x3f10 [ 1074.093304][ T8702] usb_generic_driver_probe+0x138/0x300 [ 1074.098892][ T8702] ? usb_choose_configuration+0xe70/0xe70 [ 1074.104633][ T8702] usb_probe_device+0x311/0x490 [ 1074.109526][ T8702] ? usb_register_device_driver+0x540/0x540 [ 1074.115443][ T8702] really_probe+0xf20/0x20b0 [ 1074.120065][ T8702] ? kmsan_get_metadata+0x116/0x180 [ 1074.125320][ T8702] driver_probe_device+0x293/0x390 [ 1074.130501][ T8702] __device_attach_driver+0x63f/0x830 [ 1074.136140][ T8702] bus_for_each_drv+0x2ca/0x3f0 [ 1074.141047][ T8702] ? coredump_store+0xf0/0xf0 [ 1074.145774][ T8702] __device_attach+0x4e2/0x7f0 [ 1074.150585][ T8702] device_initial_probe+0x4a/0x60 [ 1074.155631][ T8702] bus_probe_device+0x177/0x3d0 [ 1074.160530][ T8702] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1074.166372][ T8702] device_add+0x3b0e/0x40d0 [ 1074.170935][ T8702] usb_new_device+0x1bd4/0x2a30 [ 1074.173936][T17310] usb 6-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1074.175836][ T8702] hub_event+0x5e7b/0x8a70 [ 1074.184843][T17310] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1074.188976][ T8702] ? kmsan_get_metadata+0x116/0x180 [ 1074.199052][T17310] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 1074.203883][ T8702] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1074.203908][ T8702] ? led_work+0x7c0/0x7c0 [ 1074.204026][ T8702] process_one_work+0x1688/0x2140 [ 1074.204089][ T8702] worker_thread+0x10bc/0x2730 [ 1074.214073][T17310] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1074.219648][ T8702] ? kmsan_get_metadata+0x116/0x180 [ 1074.251695][ T8702] kthread+0x551/0x590 [ 1074.259530][ T8702] ? process_one_work+0x2140/0x2140 [ 1074.264761][ T8702] ? kthread_blkcg+0x110/0x110 [ 1074.269570][ T8702] ret_from_fork+0x1f/0x30 [ 1074.274011][ T8702] [ 1074.276402][ T8702] Local variable ----reg1.addr.i.i@tda8083_attach created at: [ 1074.283889][ T8702] tda8083_attach+0x1af/0x6d0 [ 1074.288600][ T8702] tda8083_attach+0x1af/0x6d0 [ 1074.293276][ T8702] ===================================================== [ 1074.300211][ T8702] Disabling lock debugging due to kernel taint [ 1074.306378][ T8702] Kernel panic - not syncing: panic_on_warn set ... [ 1074.312991][ T8702] CPU: 0 PID: 8702 Comm: kworker/0:0 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 1074.322719][ T8702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1074.332812][ T8702] Workqueue: usb_hub_wq hub_event [ 1074.337854][ T8702] Call Trace: [ 1074.349086][ T8702] dump_stack+0x21c/0x280 [ 1074.354687][ T8702] panic+0x4d7/0xef7 [ 1074.358669][ T8702] ? add_taint+0x17c/0x210 19:19:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000087c6c75445db073b8000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) getrandom(&(0x7f0000001ac0)=""/4096, 0x1000, 0x0) ioctl$PIO_FONTX(r1, 0x4b6c, 0x0) [ 1074.363129][ T8702] kmsan_report+0x1df/0x1e0 [ 1074.367678][ T8702] __msan_warning+0x58/0xa0 [ 1074.372213][ T8702] tda8083_attach+0x55a/0x6d0 [ 1074.376927][ T8702] ? cx22700_i2c_gate_ctrl+0x7e0/0x7e0 [ 1074.382410][ T8702] ttusb_probe+0x4238/0x5040 [ 1074.387047][ T8702] ? __pm_runtime_set_status+0x1b16/0x1e50 [ 1074.392888][ T8702] ? kmsan_get_metadata+0x116/0x180 [ 1074.398108][ T8702] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1074.403933][ T8702] ? ttusbdecfe_dvbs_set_voltage+0x120/0x120 [ 1074.409941][ T8702] usb_probe_interface+0xece/0x1550 [ 1074.415181][ T8702] ? usb_register_driver+0x900/0x900 [ 1074.420525][ T8702] really_probe+0xf20/0x20b0 [ 1074.425147][ T8702] ? kmsan_get_metadata+0x116/0x180 [ 1074.430384][ T8702] driver_probe_device+0x293/0x390 [ 1074.435538][ T8702] __device_attach_driver+0x63f/0x830 [ 1074.440948][ T8702] bus_for_each_drv+0x2ca/0x3f0 [ 1074.445820][ T8702] ? coredump_store+0xf0/0xf0 [ 1074.450529][ T8702] __device_attach+0x4e2/0x7f0 [ 1074.455345][ T8702] device_initial_probe+0x4a/0x60 [ 1074.460392][ T8702] bus_probe_device+0x177/0x3d0 [ 1074.462465][ T27] usbhid 3-1:0.0: can't add hid device: -71 [ 1074.465293][ T8702] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1074.471914][ T27] usbhid: probe of 3-1:0.0 failed with error -71 [ 1074.481689][ T8702] device_add+0x3b0e/0x40d0 [ 1074.481750][ T8702] usb_set_configuration+0x380f/0x3f10 [ 1074.481786][ T8702] ? usb_set_configuration+0xb41/0x3f10 [ 1074.481860][ T8702] usb_generic_driver_probe+0x138/0x300 [ 1074.509229][ T8702] ? usb_choose_configuration+0xe70/0xe70 [ 1074.514976][ T8702] usb_probe_device+0x311/0x490 [ 1074.519855][ T8702] ? usb_register_device_driver+0x540/0x540 [ 1074.525769][ T8702] really_probe+0xf20/0x20b0 [ 1074.530510][ T8702] ? kmsan_get_metadata+0x116/0x180 [ 1074.535738][ T8702] driver_probe_device+0x293/0x390 [ 1074.540876][ T8702] __device_attach_driver+0x63f/0x830 [ 1074.546279][ T8702] bus_for_each_drv+0x2ca/0x3f0 [ 1074.551148][ T8702] ? coredump_store+0xf0/0xf0 [ 1074.555857][ T8702] __device_attach+0x4e2/0x7f0 [ 1074.560655][ T8702] device_initial_probe+0x4a/0x60 [ 1074.565714][ T8702] bus_probe_device+0x177/0x3d0 [ 1074.570603][ T8702] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1074.576446][ T8702] device_add+0x3b0e/0x40d0 [ 1074.581016][ T8702] usb_new_device+0x1bd4/0x2a30 [ 1074.585934][ T8702] hub_event+0x5e7b/0x8a70 [ 1074.590439][ T8702] ? kmsan_get_metadata+0x116/0x180 [ 1074.595652][ T8702] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1074.601470][ T8702] ? led_work+0x7c0/0x7c0 [ 1074.605815][ T8702] process_one_work+0x1688/0x2140 [ 1074.610887][ T8702] worker_thread+0x10bc/0x2730 [ 1074.615667][ T8702] ? kmsan_get_metadata+0x116/0x180 [ 1074.620929][ T8702] kthread+0x551/0x590 [ 1074.625032][ T8702] ? process_one_work+0x2140/0x2140 [ 1074.630247][ T8702] ? kthread_blkcg+0x110/0x110 [ 1074.635036][ T8702] ret_from_fork+0x1f/0x30 [ 1074.639972][ T8702] ------------[ cut here ]------------ [ 1074.645456][ T8702] kernel BUG at mm/kmsan/kmsan.h:87! [ 1074.650787][ T8702] invalid opcode: 0000 [#1] SMP [ 1074.655631][ T8702] CPU: 0 PID: 8702 Comm: kworker/0:0 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 1074.665411][ T8702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1074.675472][ T8702] Workqueue: usb_hub_wq hub_event [ 1074.680505][ T8702] RIP: 0010:kmsan_internal_check_memory+0x3c0/0x3d0 [ 1074.687095][ T8702] Code: 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b 48 c7 c7 b0 63 e1 91 31 c0 e8 f8 02 30 ff 0f 0b 0f 0b 0f 0b 0f 0b e8 c2 13 b0 0e 0f 0b <0f> 0b 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 83 ff [ 1074.706691][ T8702] RSP: 0018:ffff888061986608 EFLAGS: 00010046 [ 1074.712758][ T8702] RAX: 0000000000000002 RBX: 000000000560001e RCX: 000000000560001e [ 1074.720729][ T8702] RDX: 0000000000000000 RSI: 0000000000000180 RDI: ffff8880619866ec [ 1074.728700][ T8702] RBP: ffff8880619866b0 R08: ffffea000000000f R09: ffff88812fffa000 [ 1074.736675][ T8702] R10: 0000000000000002 R11: ffff88812df50000 R12: 0000000000000000 [ 1074.744643][ T8702] R13: 0000000000000001 R14: 0000000000000006 R15: 0000000000000001 [ 1074.752623][ T8702] FS: 0000000000000000(0000) GS:ffff88812fc00000(0000) knlGS:0000000000000000 [ 1074.761552][ T8702] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1074.768123][ T8702] CR2: 00000000f5569ffc CR3: 000000003905a000 CR4: 00000000001406f0 [ 1074.776092][ T8702] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1074.784054][ T8702] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 1074.792023][ T8702] Call Trace: [ 1074.795325][ T8702] kmsan_check_memory+0xd/0x10 [ 1074.800121][ T8702] iowrite8+0x99/0x300 [ 1074.804313][ T8702] pvpanic_panic_notify+0xb7/0xe0 [ 1074.809355][ T8702] ? pvpanic_mmio_remove+0x60/0x60 [ 1074.814462][ T8702] atomic_notifier_call_chain+0x123/0x290 [ 1074.820191][ T8702] panic+0x560/0xef7 [ 1074.824092][ T8702] ? add_taint+0x17c/0x210 [ 1074.828502][ T8702] kmsan_report+0x1df/0x1e0 [ 1074.832997][ T8702] __msan_warning+0x58/0xa0 [ 1074.837495][ T8702] tda8083_attach+0x55a/0x6d0 [ 1074.842168][ T8702] ? cx22700_i2c_gate_ctrl+0x7e0/0x7e0 [ 1074.847615][ T8702] ttusb_probe+0x4238/0x5040 [ 1074.852209][ T8702] ? __pm_runtime_set_status+0x1b16/0x1e50 [ 1074.858010][ T8702] ? kmsan_get_metadata+0x116/0x180 [ 1074.863195][ T8702] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1074.868995][ T8702] ? ttusbdecfe_dvbs_set_voltage+0x120/0x120 [ 1074.874969][ T8702] usb_probe_interface+0xece/0x1550 [ 1074.880163][ T8702] ? usb_register_driver+0x900/0x900 [ 1074.885440][ T8702] really_probe+0xf20/0x20b0 [ 1074.890024][ T8702] ? kmsan_get_metadata+0x116/0x180 [ 1074.895215][ T8702] driver_probe_device+0x293/0x390 [ 1074.900326][ T8702] __device_attach_driver+0x63f/0x830 [ 1074.905708][ T8702] bus_for_each_drv+0x2ca/0x3f0 [ 1074.910547][ T8702] ? coredump_store+0xf0/0xf0 [ 1074.915238][ T8702] __device_attach+0x4e2/0x7f0 [ 1074.920023][ T8702] device_initial_probe+0x4a/0x60 [ 1074.925049][ T8702] bus_probe_device+0x177/0x3d0 [ 1074.929897][ T8702] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1074.935698][ T8702] device_add+0x3b0e/0x40d0 [ 1074.940217][ T8702] usb_set_configuration+0x380f/0x3f10 [ 1074.945675][ T8702] ? usb_set_configuration+0xb41/0x3f10 [ 1074.951361][ T8702] usb_generic_driver_probe+0x138/0x300 [ 1074.956904][ T8702] ? usb_choose_configuration+0xe70/0xe70 [ 1074.962614][ T8702] usb_probe_device+0x311/0x490 [ 1074.967458][ T8702] ? usb_register_device_driver+0x540/0x540 [ 1074.973349][ T8702] really_probe+0xf20/0x20b0 [ 1074.977946][ T8702] ? kmsan_get_metadata+0x116/0x180 [ 1074.983138][ T8702] driver_probe_device+0x293/0x390 [ 1074.988263][ T8702] __device_attach_driver+0x63f/0x830 [ 1074.993649][ T8702] bus_for_each_drv+0x2ca/0x3f0 [ 1074.998488][ T8702] ? coredump_store+0xf0/0xf0 [ 1075.003170][ T8702] __device_attach+0x4e2/0x7f0 [ 1075.007935][ T8702] device_initial_probe+0x4a/0x60 [ 1075.012962][ T8702] bus_probe_device+0x177/0x3d0 [ 1075.017827][ T8702] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1075.023628][ T8702] device_add+0x3b0e/0x40d0 [ 1075.028151][ T8702] usb_new_device+0x1bd4/0x2a30 [ 1075.033015][ T8702] hub_event+0x5e7b/0x8a70 [ 1075.037488][ T8702] ? kmsan_get_metadata+0x116/0x180 [ 1075.042737][ T8702] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1075.048543][ T8702] ? led_work+0x7c0/0x7c0 [ 1075.052880][ T8702] process_one_work+0x1688/0x2140 [ 1075.057924][ T8702] worker_thread+0x10bc/0x2730 [ 1075.062688][ T8702] ? kmsan_get_metadata+0x116/0x180 [ 1075.067908][ T8702] kthread+0x551/0x590 [ 1075.071967][ T8702] ? process_one_work+0x2140/0x2140 [ 1075.077156][ T8702] ? kthread_blkcg+0x110/0x110 [ 1075.081912][ T8702] ret_from_fork+0x1f/0x30 [ 1075.086317][ T8702] Modules linked in: [ 1075.090202][ T8702] ---[ end trace b101e7a0ba281dfb ]--- [ 1075.095652][ T8702] RIP: 0010:kmsan_internal_check_memory+0x3c0/0x3d0 [ 1075.102236][ T8702] Code: 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b 48 c7 c7 b0 63 e1 91 31 c0 e8 f8 02 30 ff 0f 0b 0f 0b 0f 0b 0f 0b e8 c2 13 b0 0e 0f 0b <0f> 0b 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 83 ff [ 1075.121841][ T8702] RSP: 0018:ffff888061986608 EFLAGS: 00010046 [ 1075.127899][ T8702] RAX: 0000000000000002 RBX: 000000000560001e RCX: 000000000560001e [ 1075.135857][ T8702] RDX: 0000000000000000 RSI: 0000000000000180 RDI: ffff8880619866ec [ 1075.143889][ T8702] RBP: ffff8880619866b0 R08: ffffea000000000f R09: ffff88812fffa000 [ 1075.151863][ T8702] R10: 0000000000000002 R11: ffff88812df50000 R12: 0000000000000000 [ 1075.159824][ T8702] R13: 0000000000000001 R14: 0000000000000006 R15: 0000000000000001 [ 1075.167790][ T8702] FS: 0000000000000000(0000) GS:ffff88812fc00000(0000) knlGS:0000000000000000 [ 1075.176711][ T8702] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1075.183283][ T8702] CR2: 00000000f5569ffc CR3: 000000003905a000 CR4: 00000000001406f0 [ 1075.191245][ T8702] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1075.199207][ T8702] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 1075.207165][ T8702] Kernel panic - not syncing: Fatal exception [ 1075.213873][ T8702] Kernel Offset: disabled [ 1075.218203][ T8702] Rebooting in 86400 seconds..