, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:18:15 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r6, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val={@void}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x84, 0x0, @empty, @empty}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:18:15 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) [ 860.241816][ T5] usbhid 1-1:0.0: can't add hid device: -71 [ 860.247919][ T5] usbhid: probe of 1-1:0.0 failed with error -71 [ 860.259392][ T5] usb 1-1: USB disconnect, device number 18 15:18:17 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902240001000000f108040000000300000009210a00000122000009058103"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r3, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "183fbf1f"}, 0x0, 0x0, 0x0, 0x0}) r4 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:18:17 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 15:18:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:18:17 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r6, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:18:17 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) [ 860.946956][ T5] usb 3-1: USB disconnect, device number 26 [ 861.422773][ T5] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 861.671882][ T5] usb 3-1: Using ep0 maxpacket: 16 15:18:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) [ 861.792368][ T5] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 861.807659][ T5] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 861.833639][ T5] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 15:18:17 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 15:18:18 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) [ 861.867996][ T5] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 861.892941][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.930004][ T5] usb 3-1: config 0 descriptor?? [ 862.195491][ T5043] usb 3-1: USB disconnect, device number 27 [ 862.761848][ T5043] usb 3-1: new high-speed USB device number 28 using dummy_hcd 15:18:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080), 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x6) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 15:18:18 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 15:18:18 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r6, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:18:18 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) [ 863.021854][ T5043] usb 3-1: Using ep0 maxpacket: 16 [ 863.141924][ T5043] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 863.150858][ T5043] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 863.163839][ T5043] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 863.173525][ T5043] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 863.184634][ T5043] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.195634][ T5043] usb 3-1: config 0 descriptor?? 15:18:20 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902240001000000f108040000000300000009210a00000122000009058103"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r3, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "183fbf1f"}, 0x0, 0x0, 0x0, 0x0}) r4 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:18:20 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x0, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:18:20 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 15:18:20 executing program 1: 15:18:20 executing program 0: 15:18:20 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r6, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 864.442121][ T12] usb 3-1: USB disconnect, device number 28 15:18:20 executing program 1: 15:18:20 executing program 0: 15:18:20 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0) 15:18:20 executing program 1: 15:18:20 executing program 0: 15:18:20 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0) [ 864.871818][ T12] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 865.131827][ T12] usb 3-1: Using ep0 maxpacket: 16 [ 865.251929][ T12] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 865.260851][ T12] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 865.271686][ T12] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 865.280992][ T12] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 865.290411][ T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.299541][ T12] usb 3-1: config 0 descriptor?? [ 865.542833][ T5043] usb 3-1: USB disconnect, device number 29 [ 866.011857][ T5043] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 866.261796][ T5043] usb 3-1: Using ep0 maxpacket: 16 [ 866.382080][ T5043] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 866.390913][ T5043] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 866.402672][ T5043] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 866.411682][ T5043] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 866.421338][ T5043] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.431052][ T5043] usb 3-1: config 0 descriptor?? 15:18:23 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902240001000000f108040000000300000009210a00000122000009058103"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000"], 0x0) syz_usb_control_io(r3, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "183fbf1f"}, 0x0, 0x0, 0x0, 0x0}) r4 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:18:23 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net\x00') mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x0) 15:18:23 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x0, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:18:23 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xfffffffffffffff9) 15:18:23 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0) 15:18:23 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r6, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val={@void}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 867.681497][ T5043] usb 3-1: USB disconnect, device number 30 15:18:23 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000200)=[{}], r4, 0x1, 0x1, 0x400000}}, 0x20) 15:18:23 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r0, 0x0) 15:18:23 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 15:18:23 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x42441) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_tables_targets\x00') dup3(r1, r0, 0x0) 15:18:23 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 15:18:24 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x0, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) [ 868.131888][ T5043] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 868.371832][ T5043] usb 3-1: Using ep0 maxpacket: 16 [ 868.491844][ T5043] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 868.500749][ T5043] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 868.511114][ T5043] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 868.520146][ T5043] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 868.529315][ T5043] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.540780][ T5043] usb 3-1: config 0 descriptor?? [ 868.782931][ T7627] usb 3-1: USB disconnect, device number 31 [ 869.251839][ T7627] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 869.491784][ T7627] usb 3-1: Using ep0 maxpacket: 32 [ 869.611885][ T7627] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 869.620778][ T7627] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 869.631126][ T7627] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 869.640281][ T7627] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 869.649551][ T7627] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.658251][ T7627] usb 3-1: config 0 descriptor?? 15:18:27 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902240001000000f108040000000300000009210a00000122000009058103"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000"], 0x0) syz_usb_control_io(r3, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "183fbf1f"}, 0x0, 0x0, 0x0, 0x0}) r4 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:18:27 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x42441) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_tables_targets\x00') dup3(r1, r0, 0x0) 15:18:27 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 15:18:27 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:18:27 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r6, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val={@void}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:18:27 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) [ 870.912244][ T7627] usb 3-1: USB disconnect, device number 32 15:18:27 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x42441) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_tables_targets\x00') dup3(r1, r0, 0x0) 15:18:27 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:18:27 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 15:18:27 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x42441) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_tables_targets\x00') dup3(r1, r0, 0x0) 15:18:27 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:18:27 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x42441) dup3(0xffffffffffffffff, r0, 0x0) [ 871.361813][ T7627] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 871.601822][ T7627] usb 3-1: Using ep0 maxpacket: 16 [ 871.721901][ T7627] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 871.730835][ T7627] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 871.741237][ T7627] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 871.750363][ T7627] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 871.759445][ T7627] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.770152][ T7627] usb 3-1: config 0 descriptor?? [ 872.012920][ T5043] usb 3-1: USB disconnect, device number 33 [ 872.481793][ T5] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 872.721905][ T5] usb 3-1: Using ep0 maxpacket: 32 [ 872.841862][ T5] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 872.850724][ T5] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 872.861122][ T5] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 872.870208][ T5] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 872.879352][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.889530][ T5] usb 3-1: config 0 descriptor?? 15:18:30 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902240001000000f108040000000300000009210a00000122000009058103"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000"], 0x0) syz_usb_control_io(r3, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "183fbf1f"}, 0x0, 0x0, 0x0, 0x0}) r4 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:18:30 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 15:18:30 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x42441) dup3(0xffffffffffffffff, r0, 0x0) 15:18:30 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:18:30 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r6, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val={@void}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:18:30 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) [ 874.141925][ T5043] usb 3-1: USB disconnect, device number 34 15:18:30 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x42441) dup3(0xffffffffffffffff, r0, 0x0) 15:18:30 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:18:30 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 15:18:30 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_tables_targets\x00') dup3(r0, 0xffffffffffffffff, 0x0) 15:18:30 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_tables_targets\x00') dup3(r0, 0xffffffffffffffff, 0x0) 15:18:30 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) [ 874.631909][ T5043] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 874.881878][ T5043] usb 3-1: Using ep0 maxpacket: 16 [ 875.011952][ T5043] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 875.020838][ T5043] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 875.039515][ T5043] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 875.048673][ T5043] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 875.057942][ T5043] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.069183][ T5043] usb 3-1: config 0 descriptor?? [ 875.332976][ T5] usb 3-1: USB disconnect, device number 35 [ 875.801840][ T5043] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 876.041817][ T5043] usb 3-1: Using ep0 maxpacket: 32 [ 876.161932][ T5043] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 876.170769][ T5043] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 876.181263][ T5043] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 876.190306][ T5043] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 876.199421][ T5043] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.208260][ T5043] usb 3-1: config 0 descriptor?? 15:18:33 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902240001000000f108040000000300000009210a00000122000009058103"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc3040000000001090224000100"], 0x0) syz_usb_control_io(r3, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "183fbf1f"}, 0x0, 0x0, 0x0, 0x0}) r4 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:18:33 executing program 4: perf_event_open(&(0x7f0000001340)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 15:18:33 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:18:33 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_tables_targets\x00') dup3(r0, 0xffffffffffffffff, 0x0) 15:18:33 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 15:18:33 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val={@void}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x84, 0x0, @empty, @empty}}}}}}, 0x26) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r1, 0x0, 0x10005, 0x0) [ 877.465075][ T5043] usb 3-1: USB disconnect, device number 36 15:18:33 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x42441) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_tables_targets\x00') dup3(r1, r0, 0x0) 15:18:33 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:18:33 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x42441) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_tables_targets\x00') dup3(r1, r0, 0x0) 15:18:33 executing program 4: perf_event_open(&(0x7f0000001340)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 15:18:33 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x42441) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_tables_targets\x00') dup3(r1, r0, 0x0) 15:18:33 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_tables_targets\x00') dup3(r1, r0, 0x0) [ 877.943370][ T5043] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 878.181866][ T5043] usb 3-1: Using ep0 maxpacket: 16 [ 878.301957][ T5043] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 878.310871][ T5043] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 878.321266][ T5043] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 878.330544][ T5043] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 878.339796][ T5043] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.348810][ T5043] usb 3-1: config 0 descriptor?? [ 878.593149][ T5043] usb 3-1: USB disconnect, device number 37 [ 879.061806][ T5043] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 879.301789][ T5043] usb 3-1: Using ep0 maxpacket: 32 [ 879.422004][ T5043] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 879.430951][ T5043] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 879.442668][ T5043] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 879.451617][ T5043] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 879.461360][ T5043] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.472903][ T5043] usb 3-1: config 0 descriptor?? 15:18:36 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902240001000000f108040000000300000009210a00000122000009058103"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc3040000000001090224000100"], 0x0) syz_usb_control_io(r3, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "183fbf1f"}, 0x0, 0x0, 0x0, 0x0}) r4 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:18:36 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_tables_targets\x00') dup3(r1, r0, 0x0) 15:18:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:18:36 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) 15:18:36 executing program 4: perf_event_open(&(0x7f0000001340)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 15:18:36 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val={@void}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x84, 0x0, @empty, @empty}}}}}}, 0x26) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r1, 0x0, 0x10005, 0x0) [ 880.725437][ T12] usb 3-1: USB disconnect, device number 38 15:18:36 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_tables_targets\x00') dup3(r1, r0, 0x0) 15:18:37 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x42441) r1 = syz_open_procfs(0x0, 0x0) dup3(r1, r0, 0x0) 15:18:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:18:37 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 15:18:37 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x42441) r1 = syz_open_procfs(0x0, 0x0) dup3(r1, r0, 0x0) 15:18:37 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x42441) r1 = syz_open_procfs(0x0, 0x0) dup3(r1, r0, 0x0) [ 881.141857][ T12] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 881.381824][ T12] usb 3-1: Using ep0 maxpacket: 16 [ 881.501999][ T12] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 881.510919][ T12] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 881.521603][ T12] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 881.530867][ T12] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 881.540386][ T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.551667][ T12] usb 3-1: config 0 descriptor?? [ 881.792910][ T7627] usb 3-1: USB disconnect, device number 39 [ 882.261836][ T7627] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 882.501877][ T7627] usb 3-1: Using ep0 maxpacket: 32 [ 882.622107][ T7627] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 882.630935][ T7627] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 882.641060][ T7627] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 882.650037][ T7627] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 882.659088][ T7627] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.667772][ T7627] usb 3-1: config 0 descriptor?? 15:18:40 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902240001000000f108040000000300000009210a00000122000009058103"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc3040000000001090224000100"], 0x0) syz_usb_control_io(r3, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "183fbf1f"}, 0x0, 0x0, 0x0, 0x0}) r4 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:18:40 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x42441) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_tables_targets\x00') dup3(0xffffffffffffffff, r0, 0x0) 15:18:40 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x0, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:18:40 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) 15:18:40 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 15:18:40 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val={@void}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x84, 0x0, @empty, @empty}}}}}}, 0x26) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r1, 0x0, 0x10005, 0x0) [ 883.921218][ T7627] usb 3-1: USB disconnect, device number 40 15:18:40 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x42441) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_tables_targets\x00') dup3(0xffffffffffffffff, r0, 0x0) 15:18:40 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x42441) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_tables_targets\x00') dup3(0xffffffffffffffff, r0, 0x0) 15:18:40 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 15:18:40 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x42441) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_tables_targets\x00') dup3(r0, 0xffffffffffffffff, 0x0) 15:18:40 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x0, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:18:40 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x42441) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_tables_targets\x00') dup3(r0, 0xffffffffffffffff, 0x0) [ 884.381815][ T7627] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 884.631844][ T7627] usb 3-1: Using ep0 maxpacket: 16 [ 884.781782][ T7627] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 884.790663][ T7627] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 884.801011][ T7627] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 884.810139][ T7627] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 884.819468][ T7627] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.828760][ T7627] usb 3-1: config 0 descriptor?? [ 885.074351][ T7627] usb 3-1: USB disconnect, device number 41 [ 885.661840][ T7627] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 885.921865][ T7627] usb 3-1: Using ep0 maxpacket: 32 [ 886.051892][ T7627] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 886.060879][ T7627] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 886.071312][ T7627] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 886.080348][ T7627] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 886.089477][ T7627] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.098063][ T7627] usb 3-1: config 0 descriptor?? 15:18:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902240001000000f108040000000300000009210a00000122000009058103"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a00009"], 0x0) syz_usb_control_io(r3, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "183fbf1f"}, 0x0, 0x0, 0x0, 0x0}) r4 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:18:43 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x42441) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_tables_targets\x00') dup3(r0, 0xffffffffffffffff, 0x0) 15:18:43 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) 15:18:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x0, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:18:43 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r6, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val={@void}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x84, 0x0, @empty, @empty}}}}}}, 0x26) write$binfmt_misc(r1, 0x0, 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:18:43 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) [ 887.361224][ T5] usb 3-1: USB disconnect, device number 42 15:18:43 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000640)={0x5, 0x0, [{0x1000, 0x91, &(0x7f0000000000)=""/145}, {0x0, 0x80, &(0x7f00000001c0)=""/128}, {0x33c532597e2ecfe8, 0x8c, &(0x7f0000000440)=""/140}, {0x100000, 0xdf, &(0x7f0000000540)=""/223}, {0x5000, 0x3a, &(0x7f0000000340)=""/58}]}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000640)) 15:18:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:18:43 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r6, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val={@void}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x84, 0x0, @empty, @empty}}}}}}, 0x26) write$binfmt_misc(r1, 0x0, 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:18:43 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 15:18:43 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x1) write$binfmt_elf32(r0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7f454c4607017f06010400000000000003003e00ff0700006701000038000000b40300000600000002002000020000800300508c0000000003000000010000000001000000010000ff0f"], 0x654) close(r0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 15:18:43 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f0000000040)=""/247, 0xffffff50}], 0x1000000000000005, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) [ 887.821789][ T5] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 888.081844][ T5] usb 3-1: Using ep0 maxpacket: 16 [ 888.201889][ T5] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 888.211061][ T5] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 888.222214][ T5] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 888.241796][ T5] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 888.250816][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.259971][ T5] usb 3-1: config 0 descriptor?? [ 888.514782][ T12] usb 3-1: USB disconnect, device number 43 [ 889.081827][ T12] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 889.331845][ T12] usb 3-1: Using ep0 maxpacket: 32 [ 889.451938][ T12] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 889.464724][ T12] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 889.474088][ T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.483068][ T12] usb 3-1: config 0 descriptor?? [ 889.522134][ T12] hub 3-1:0.0: bad descriptor, ignoring hub [ 889.528035][ T12] hub: probe of 3-1:0.0 failed with error -5 [ 889.536199][ T12] usbhid 3-1:0.0: couldn't find an input interrupt endpoint 15:18:46 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902240001000000f108040000000300000009210a00000122000009058103"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a00009"], 0x0) syz_usb_control_io(r3, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "183fbf1f"}, 0x0, 0x0, 0x0, 0x0}) r4 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:18:46 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:18:46 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r6, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val={@void}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x84, 0x0, @empty, @empty}}}}}}, 0x26) write$binfmt_misc(r1, 0x0, 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:18:46 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 15:18:46 executing program 0: open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) r0 = memfd_create(&(0x7f0000000540)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43\xa6,\xa6<\x13\xfe\x04\x00\x01\xbd\x96:\xe2\x13\x02\xfaw\xaa\xef\x96\xfbi\xf8\x00\bbQ\xd8gC\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xd2\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\xb1mJ\x7f\xe4m\xe6T\xe9\x00\x00\x00\x00Y\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xde\xf8&5\xefD\x04\x160\xafy\x02\\\x15F\x0f\f:\xae\xabm\x8f\xaeh\x8c~8\x9f\xc8\xedO\x00\xbf\x1d\xb1\x84', 0x0) ftruncate(r0, 0x40003) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x159, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x0, 0x0, 0x3, 0x1, 0xfffb, 0xfffc, 0x400000000}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r1, r2, &(0x7f00000001c0)=0x202, 0x4000000000dc) r3 = dup2(r1, 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x90, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x20, 0x8001, 0xfffa]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x52cf}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x3d, 0xbe, "84b7897a2b9cc66d782eeb10b188bb270e99db76119889ed894acd187ea90e180d66ad7e7aaf8db9382c0d41f709a5cd2a97ad4dae91c32641"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x4}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x70}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}]}, 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x20008040) sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f0000003800)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000037c0)={&(0x7f00000003c0)=ANY=[@ANYRESDEC, @ANYRES16=r4, @ANYBLOB="08002bbd7000fedbdf2504000000140002e8000000"], 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4004800) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x80, r4, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'geneve0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0xfffffffffffffef2}, 0x1, 0x0, 0x0, 0x80}, 0x4010) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="020027bd7000fedbdf25010000f5b00005000400010000000500040042fd0000140002746f5f626f6e64003adc726cd35ad9759fe6cc5675dbf670108b1e6f1ce13271ab5692f06a6fe3120c7cc403e45dcf986f4f6ff51438ddfd234bc25a9f2ecf254000"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xfffffffffffffd28, r4, 0x4, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x400}, 0x0) r5 = gettid() ptrace(0xffffffffffffffff, r5) 15:18:46 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) [ 890.792387][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 890.792398][ T27] audit: type=1800 audit(8038883926.908:33): pid=12429 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16382 res=0 15:18:46 executing program 0: open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) r0 = memfd_create(&(0x7f0000000540)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43\xa6,\xa6<\x13\xfe\x04\x00\x01\xbd\x96:\xe2\x13\x02\xfaw\xaa\xef\x96\xfbi\xf8\x00\bbQ\xd8gC\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xd2\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\xb1mJ\x7f\xe4m\xe6T\xe9\x00\x00\x00\x00Y\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xde\xf8&5\xefD\x04\x160\xafy\x02\\\x15F\x0f\f:\xae\xabm\x8f\xaeh\x8c~8\x9f\xc8\xedO\x00\xbf\x1d\xb1\x84', 0x0) ftruncate(r0, 0x40003) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x159, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x0, 0x0, 0x3, 0x1, 0xfffb, 0xfffc, 0x400000000}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r1, r2, &(0x7f00000001c0)=0x202, 0x4000000000dc) r3 = dup2(r1, 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x90, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x20, 0x8001, 0xfffa]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x52cf}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x3d, 0xbe, "84b7897a2b9cc66d782eeb10b188bb270e99db76119889ed894acd187ea90e180d66ad7e7aaf8db9382c0d41f709a5cd2a97ad4dae91c32641"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x4}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x70}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}]}, 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x20008040) sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f0000003800)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000037c0)={&(0x7f00000003c0)=ANY=[@ANYRESDEC, @ANYRES16=r4, @ANYBLOB="08002bbd7000fedbdf2504000000140002e8000000"], 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4004800) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x80, r4, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'geneve0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0xfffffffffffffef2}, 0x1, 0x0, 0x0, 0x80}, 0x4010) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="020027bd7000fedbdf25010000f5b00005000400010000000500040042fd0000140002746f5f626f6e64003adc726cd35ad9759fe6cc5675dbf670108b1e6f1ce13271ab5692f06a6fe3120c7cc403e45dcf986f4f6ff51438ddfd234bc25a9f2ecf254000"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xfffffffffffffd28, r4, 0x4, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x400}, 0x0) r5 = gettid() ptrace(0xffffffffffffffff, r5) [ 890.852116][ T7627] usb 3-1: USB disconnect, device number 44 15:18:47 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) [ 890.948429][ T27] audit: type=1800 audit(8038883926.948:34): pid=12429 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16382 res=0 15:18:47 executing program 0: open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) r0 = memfd_create(&(0x7f0000000540)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43\xa6,\xa6<\x13\xfe\x04\x00\x01\xbd\x96:\xe2\x13\x02\xfaw\xaa\xef\x96\xfbi\xf8\x00\bbQ\xd8gC\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xd2\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\xb1mJ\x7f\xe4m\xe6T\xe9\x00\x00\x00\x00Y\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xde\xf8&5\xefD\x04\x160\xafy\x02\\\x15F\x0f\f:\xae\xabm\x8f\xaeh\x8c~8\x9f\xc8\xedO\x00\xbf\x1d\xb1\x84', 0x0) ftruncate(r0, 0x40003) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x159, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x0, 0x0, 0x3, 0x1, 0xfffb, 0xfffc, 0x400000000}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r1, r2, &(0x7f00000001c0)=0x202, 0x4000000000dc) r3 = dup2(r1, 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x90, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x20, 0x8001, 0xfffa]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x52cf}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x3d, 0xbe, "84b7897a2b9cc66d782eeb10b188bb270e99db76119889ed894acd187ea90e180d66ad7e7aaf8db9382c0d41f709a5cd2a97ad4dae91c32641"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x4}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x70}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}]}, 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x20008040) sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f0000003800)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000037c0)={&(0x7f00000003c0)=ANY=[@ANYRESDEC, @ANYRES16=r4, @ANYBLOB="08002bbd7000fedbdf2504000000140002e8000000"], 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4004800) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x80, r4, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'geneve0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0xfffffffffffffef2}, 0x1, 0x0, 0x0, 0x80}, 0x4010) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="020027bd7000fedbdf25010000f5b00005000400010000000500040042fd0000140002746f5f626f6e64003adc726cd35ad9759fe6cc5675dbf670108b1e6f1ce13271ab5692f06a6fe3120c7cc403e45dcf986f4f6ff51438ddfd234bc25a9f2ecf254000"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xfffffffffffffd28, r4, 0x4, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x400}, 0x0) r5 = gettid() ptrace(0xffffffffffffffff, r5) [ 891.023532][ T27] audit: type=1800 audit(8038883927.098:35): pid=12449 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16377 res=0 15:18:47 executing program 0: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="2321202e2f66696c65309898614720f094a5251027a4caf48e5a1239cd3565660fd80ad4"], 0x191) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) [ 891.081296][ T27] audit: type=1800 audit(8038883927.188:36): pid=12454 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16383 res=0 15:18:47 executing program 0: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="2321202e2f66696c65309898614720f094a5251027a4caf48e5a1239cd3565660fd80ad4"], 0x191) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 15:18:47 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) [ 891.172724][ T7627] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 891.431827][ T7627] usb 3-1: Using ep0 maxpacket: 16 [ 891.551897][ T7627] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 891.560823][ T7627] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 891.571585][ T7627] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 891.580868][ T7627] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 891.606198][ T7627] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.614954][ T7627] usb 3-1: config 0 descriptor?? [ 891.852704][ T7627] usb 3-1: USB disconnect, device number 45 [ 892.321840][ T7627] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 892.561903][ T7627] usb 3-1: Using ep0 maxpacket: 32 [ 892.682069][ T7627] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 892.694910][ T7627] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 892.703987][ T7627] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.712760][ T7627] usb 3-1: config 0 descriptor?? [ 892.752066][ T7627] hub 3-1:0.0: bad descriptor, ignoring hub [ 892.758015][ T7627] hub: probe of 3-1:0.0 failed with error -5 [ 892.767039][ T7627] usbhid 3-1:0.0: couldn't find an input interrupt endpoint 15:18:50 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902240001000000f108040000000300000009210a00000122000009058103"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a00009"], 0x0) syz_usb_control_io(r3, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "183fbf1f"}, 0x0, 0x0, 0x0, 0x0}) r4 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:18:50 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 15:18:50 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) 15:18:50 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val={@void}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x84, 0x0, @empty, @empty}}}}}}, 0x26) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10005, 0x0) 15:18:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:18:50 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 15:18:50 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz'}, &(0x7f0000000240)="b8", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000040)='u', 0x1, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz'}, &(0x7f0000000240)="b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3903dd4a71c2ffffff7f000000002d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50eaa3c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e425561f6110fd7b06f90b5274cc5c1e298a1604000000a2a9d5ba9ff3c00973f4772539000000000000000000261849a6", 0xc0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r2}, 0x0, 0x0, 0x0) 15:18:50 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 15:18:50 executing program 0: perf_event_open(&(0x7f0000000bc0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3200, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976d153b4", 0x235}], 0x1}, 0x0) 15:18:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:18:50 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 15:18:50 executing program 0: r0 = socket(0x2, 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000000eff4)={0x2006}) epoll_wait(r1, &(0x7f0000000180)=[{}], 0x1, 0x0) [ 894.231891][ T1491] usb 3-1: reset high-speed USB device number 46 using dummy_hcd [ 894.481828][ T1491] usb 3-1: Using ep0 maxpacket: 16 [ 894.521903][ T1491] usb 3-1: device firmware changed [ 894.527083][ T1491] usb 3-1: USB disconnect, device number 46 [ 894.881815][ T1491] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 895.123436][ T1491] usb 3-1: Using ep0 maxpacket: 16 [ 895.241842][ T1491] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 895.250737][ T1491] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 895.262129][ T1491] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 895.271162][ T1491] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 895.281183][ T1491] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.293381][ T1491] usb 3-1: config 0 descriptor?? [ 895.533750][ T5] usb 3-1: USB disconnect, device number 47 [ 896.111798][ T5] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 896.351820][ T5] usb 3-1: Using ep0 maxpacket: 32 [ 896.471900][ T5] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 896.484882][ T5] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 896.494167][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.503002][ T5] usb 3-1: config 0 descriptor?? [ 896.542136][ T5] hub 3-1:0.0: bad descriptor, ignoring hub [ 896.548066][ T5] hub: probe of 3-1:0.0 failed with error -5 [ 896.558263][ T5] usbhid 3-1:0.0: couldn't find an input interrupt endpoint 15:18:53 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 15:18:53 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}, 0x207}], 0x1, 0x10001, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000000240)={&(0x7f0000000100), 0xc, 0x0}, 0x4000) sendfile(r4, r3, 0x0, 0x800000080004103) 15:18:53 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902240001000000f108040000000300000009210a00000122000009058103"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a000090400"], 0x0) syz_usb_control_io(r3, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "183fbf1f"}, 0x0, 0x0, 0x0, 0x0}) r4 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:18:53 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x0, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:18:53 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 15:18:53 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val={@void}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x84, 0x0, @empty, @empty}}}}}}, 0x26) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10005, 0x0) 15:18:53 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 15:18:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x0, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) [ 898.032044][ T1491] usb 3-1: reset high-speed USB device number 48 using dummy_hcd 15:18:54 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 15:18:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x0, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:18:54 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 15:18:54 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcsa\x00', 0xa002, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f0000001b40)=""/102400, 0x19008}], 0x6, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0xfdbd, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7, 0x80210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x9802, 0x5}, 0x0, 0x4, 0xfffffffe, 0x0, 0x1, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xb0180, 0x0) fanotify_mark(0xffffffffffffffff, 0xb0, 0x8001003, r0, &(0x7f0000000140)='./file1\x00') setresuid(0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb39, 0x8012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, &(0x7f0000000300)={0x1d5, 0x1, 0x8, 0x2, 0x1, 0x7, 0x3ff, 0x6, 0x10001, 0x80000000, 0x2, 0x1f, 0x2, 0x200, 0xffffffffffffff7f, 0x0, 0x1, 0x6, 0x9, 0x0, 0x80000000, 0x8, 0x7, 0x6, 0x8, 0x3}) 15:18:54 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) [ 898.473363][ T1491] usb 3-1: Using ep0 maxpacket: 16 15:18:54 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcsa\x00', 0xa002, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f0000001b40)=""/102400, 0x19008}], 0x6, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0xfdbd, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7, 0x80210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x9802, 0x5}, 0x0, 0x4, 0xfffffffe, 0x0, 0x1, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xb0180, 0x0) fanotify_mark(0xffffffffffffffff, 0xb0, 0x8001003, r0, &(0x7f0000000140)='./file1\x00') setresuid(0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb39, 0x8012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, &(0x7f0000000300)={0x1d5, 0x1, 0x8, 0x2, 0x1, 0x7, 0x3ff, 0x6, 0x10001, 0x80000000, 0x2, 0x1f, 0x2, 0x200, 0xffffffffffffff7f, 0x0, 0x1, 0x6, 0x9, 0x0, 0x80000000, 0x8, 0x7, 0x6, 0x8, 0x3}) 15:18:54 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) [ 898.511973][ T1491] usb 3-1: device firmware changed [ 898.517199][ T1491] usb 3-1: USB disconnect, device number 48 [ 898.921782][ T1491] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 899.181853][ T1491] usb 3-1: Using ep0 maxpacket: 16 [ 899.311924][ T1491] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 899.320836][ T1491] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 899.331098][ T1491] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 899.340140][ T1491] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 899.349255][ T1491] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.359520][ T1491] usb 3-1: config 0 descriptor?? [ 899.603173][ T7627] usb 3-1: USB disconnect, device number 49 [ 900.211830][ T7627] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 900.451800][ T7627] usb 3-1: Using ep0 maxpacket: 32 [ 900.572012][ T7627] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 900.584832][ T7627] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 900.594124][ T7627] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.604714][ T7627] usb 3-1: config 0 descriptor?? [ 900.642194][ T7627] hub 3-1:0.0: bad descriptor, ignoring hub [ 900.648100][ T7627] hub: probe of 3-1:0.0 failed with error -5 [ 900.660626][ T7627] usbhid 3-1:0.0: couldn't find an input interrupt endpoint 15:18:56 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902240001000000f108040000000300000009210a00000122000009058103"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a000090400"], 0x0) syz_usb_control_io(r3, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "183fbf1f"}, 0x0, 0x0, 0x0, 0x0}) r4 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:18:56 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) accept(r0, 0x0, 0x0) 15:18:56 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 15:18:56 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x0, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:18:56 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 15:18:56 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val={@void}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x84, 0x0, @empty, @empty}}}}}}, 0x26) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10005, 0x0) 15:18:57 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 15:18:57 executing program 0: 15:18:57 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000380)=""/24, 0x18}, {&(0x7f0000000340)=""/54, 0x36}, {&(0x7f0000000640)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x9}}], 0x48}, 0x0) 15:18:57 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 15:18:57 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x0, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:18:57 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) [ 901.091834][ T7627] usb 3-1: reset high-speed USB device number 50 using dummy_hcd [ 901.342096][ T7627] usb 3-1: Using ep0 maxpacket: 16 [ 901.382446][ T7627] usb 3-1: device firmware changed [ 901.387594][ T7627] usb 3-1: USB disconnect, device number 50 [ 901.751810][ T7627] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 902.001902][ T7627] usb 3-1: Using ep0 maxpacket: 16 [ 902.161962][ T7627] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 902.170903][ T7627] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 902.181306][ T7627] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 902.190395][ T7627] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 902.199515][ T7627] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.209732][ T7627] usb 3-1: config 0 descriptor?? [ 902.453137][ T49] usb 3-1: USB disconnect, device number 51 [ 902.931880][ T7627] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 903.191814][ T7627] usb 3-1: Using ep0 maxpacket: 32 [ 903.332897][ T7627] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 903.345776][ T7627] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 903.355368][ T7627] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.364274][ T7627] usb 3-1: config 0 descriptor?? [ 903.414738][ T7627] hub 3-1:0.0: bad descriptor, ignoring hub [ 903.420642][ T7627] hub: probe of 3-1:0.0 failed with error -5 [ 903.433057][ T7627] usbhid 3-1:0.0: couldn't find an input interrupt endpoint 15:19:00 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902240001000000f108040000000300000009210a00000122000009058103"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a000090400"], 0x0) syz_usb_control_io(r3, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "183fbf1f"}, 0x0, 0x0, 0x0, 0x0}) r4 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:19:00 executing program 0: r0 = socket(0x2, 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000000eff4)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) shutdown(r0, 0x0) epoll_wait(r1, &(0x7f0000000180)=[{}], 0x1, 0x6) 15:19:00 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x0, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:19:00 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r6, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val={@void}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x84, 0x0, @empty, @empty}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) 15:19:00 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 15:19:00 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 15:19:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text64={0x40, &(0x7f0000000140)="7630f84cb8cb656784ef66bafc0cec66ba6100b806000000ef48b8ebd00000000000000f23d00f21f8350000000b0f23f88f09d09b366564643e41c7c2bc700000260f01df8f8978db360f01df400f06", 0x51}], 0x1, 0x0, 0x0, 0x5f) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0x69}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SMI(r4, 0xaeb7) ioctl$KVM_RUN(r4, 0xae80, 0x0) 15:19:00 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) [ 904.891909][ T7627] usb 3-1: reset high-speed USB device number 52 using dummy_hcd 15:19:01 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000300)={0x4, 0x0, [{0x1000, 0x8c, &(0x7f0000000000)=""/140}, {0x10000, 0x80, &(0x7f0000000140)=""/128}, {0x2000, 0x8c, &(0x7f0000000240)=""/140}, {0x0, 0xdf, &(0x7f0000000540)=""/223}]}) r4 = dup3(r2, r3, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000640)=ANY=[]) 15:19:01 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) [ 905.171867][ T7627] usb 3-1: Using ep0 maxpacket: 16 15:19:01 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000140)={{0x81}, 'port0\x00'}) [ 905.212638][ T7627] usb 3-1: device firmware changed [ 905.219204][ T7627] usb 3-1: USB disconnect, device number 52 15:19:01 executing program 0: [ 905.621815][ T7627] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 905.871838][ T7627] usb 3-1: Using ep0 maxpacket: 16 [ 906.001868][ T7627] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 906.010811][ T7627] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 906.021140][ T7627] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 906.030148][ T7627] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 906.039229][ T7627] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.049372][ T7627] usb 3-1: config 0 descriptor?? [ 906.304755][ T7627] usb 3-1: USB disconnect, device number 53 [ 906.881896][ T7627] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 907.131851][ T7627] usb 3-1: Using ep0 maxpacket: 32 [ 907.272027][ T7627] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 907.284850][ T7627] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 907.294494][ T7627] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.305446][ T7627] usb 3-1: config 0 descriptor?? [ 907.353535][ T7627] hub 3-1:0.0: bad descriptor, ignoring hub [ 907.359440][ T7627] hub: probe of 3-1:0.0 failed with error -5 [ 907.368012][ T7627] usbhid 3-1:0.0: couldn't find an input interrupt endpoint 15:19:04 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:19:04 executing program 0: 15:19:04 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902240001000000f108040000000300000009210a00000122000009058103"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a00009040000"], 0x0) syz_usb_control_io(r3, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "183fbf1f"}, 0x0, 0x0, 0x0, 0x0}) r4 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:19:04 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 15:19:04 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r6, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val={@void}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x84, 0x0, @empty, @empty}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) 15:19:04 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 15:19:04 executing program 0: 15:19:04 executing program 0: 15:19:04 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:19:04 executing program 0: [ 908.821893][ T49] usb 3-1: reset high-speed USB device number 54 using dummy_hcd 15:19:05 executing program 0: 15:19:05 executing program 0: 15:19:05 executing program 0: [ 909.073432][ T49] usb 3-1: Using ep0 maxpacket: 16 [ 909.117276][ T49] usb 3-1: device firmware changed [ 909.122542][ T49] usb 3-1: USB disconnect, device number 54 [ 909.491825][ T49] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 909.731798][ T49] usb 3-1: Using ep0 maxpacket: 16 [ 909.851955][ T49] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 909.860865][ T49] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 909.871211][ T49] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 909.880259][ T49] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 909.889330][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.899647][ T49] usb 3-1: config 0 descriptor?? [ 910.143519][ T49] usb 3-1: USB disconnect, device number 55 [ 910.611833][ T49] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 910.861826][ T49] usb 3-1: Using ep0 maxpacket: 32 [ 910.981844][ T49] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 910.994963][ T49] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 911.004603][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.013570][ T49] usb 3-1: config 0 descriptor?? [ 911.054643][ T49] hub 3-1:0.0: bad descriptor, ignoring hub [ 911.060550][ T49] hub: probe of 3-1:0.0 failed with error -5 [ 911.072798][ T49] usbhid 3-1:0.0: couldn't find an input interrupt endpoint 15:19:08 executing program 0: 15:19:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:19:08 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 15:19:08 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902240001000000f108040000000300000009210a00000122000009058103"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a00009040000"], 0x0) syz_usb_control_io(r3, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "183fbf1f"}, 0x0, 0x0, 0x0, 0x0}) r4 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:19:08 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r6, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val={@void}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x84, 0x0, @empty, @empty}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) 15:19:08 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 15:19:08 executing program 0: 15:19:08 executing program 0: 15:19:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:19:08 executing program 0: 15:19:08 executing program 0: [ 912.531828][ T7627] usb 3-1: reset high-speed USB device number 56 using dummy_hcd 15:19:08 executing program 0: 15:19:08 executing program 0: 15:19:08 executing program 0: [ 912.811923][ T7627] usb 3-1: Using ep0 maxpacket: 16 [ 912.851852][ T7627] usb 3-1: device firmware changed [ 912.858819][ T7627] usb 3-1: USB disconnect, device number 56 15:19:09 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) [ 913.221801][ T7627] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 913.471857][ T7627] usb 3-1: Using ep0 maxpacket: 16 [ 913.591973][ T7627] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 913.600869][ T7627] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 913.611247][ T7627] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 913.620342][ T7627] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 913.629482][ T7627] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.638339][ T7627] usb 3-1: config 0 descriptor?? [ 913.883576][ T7627] usb 3-1: USB disconnect, device number 57 [ 914.351801][ T7627] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 914.601866][ T7627] usb 3-1: Using ep0 maxpacket: 32 [ 914.721998][ T7627] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 914.734814][ T7627] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 914.743903][ T7627] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.752740][ T7627] usb 3-1: config 0 descriptor?? [ 914.802186][ T7627] hub 3-1:0.0: bad descriptor, ignoring hub [ 914.808091][ T7627] hub: probe of 3-1:0.0 failed with error -5 [ 914.816347][ T7627] usbhid 3-1:0.0: couldn't find an input interrupt endpoint 15:19:12 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902240001000000f108040000000300000009210a00000122000009058103"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a00009040000"], 0x0) syz_usb_control_io(r3, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "183fbf1f"}, 0x0, 0x0, 0x0, 0x0}) r4 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:19:12 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:19:12 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 15:19:12 executing program 0: 15:19:12 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r6, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val={@void}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x84, 0x0, @empty, @empty}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 15:19:12 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 15:19:12 executing program 0: 15:19:12 executing program 0: 15:19:12 executing program 0: 15:19:12 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:19:12 executing program 0: [ 916.281953][ T7627] usb 3-1: reset high-speed USB device number 58 using dummy_hcd 15:19:12 executing program 0: [ 916.533757][ T7627] usb 3-1: Using ep0 maxpacket: 16 [ 916.571854][ T7627] usb 3-1: device firmware changed [ 916.578568][ T7627] usb 3-1: USB disconnect, device number 58 [ 916.931842][ T7627] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 917.171830][ T7627] usb 3-1: Using ep0 maxpacket: 16 [ 917.291828][ T7627] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 917.300827][ T7627] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 917.311107][ T7627] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 917.320197][ T7627] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 917.329269][ T7627] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.338111][ T7627] usb 3-1: config 0 descriptor?? [ 917.583546][ T5] usb 3-1: USB disconnect, device number 59 [ 918.051818][ T5] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 918.291829][ T5] usb 3-1: Using ep0 maxpacket: 32 [ 918.421926][ T5] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 918.434841][ T5] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 918.444618][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.454082][ T5] usb 3-1: config 0 descriptor?? [ 918.493956][ T5] hub 3-1:0.0: bad descriptor, ignoring hub [ 918.499873][ T5] hub: probe of 3-1:0.0 failed with error -5 [ 918.511904][ T5] usbhid 3-1:0.0: couldn't find an input interrupt endpoint 15:19:15 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902240001000000f108040000000300000009210a00000122000009058103"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "183fbf1f"}, 0x0, 0x0, 0x0, 0x0}) r4 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:19:15 executing program 0: 15:19:15 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:19:15 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r6, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val={@void}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x84, 0x0, @empty, @empty}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 15:19:15 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 15:19:15 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 15:19:15 executing program 0: 15:19:15 executing program 0: 15:19:16 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0x0, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:19:16 executing program 0: 15:19:16 executing program 0: [ 919.972108][ T9181] usb 3-1: reset high-speed USB device number 60 using dummy_hcd 15:19:16 executing program 0: [ 920.222125][ T9181] usb 3-1: Using ep0 maxpacket: 16 [ 920.261911][ T9181] usb 3-1: device firmware changed [ 920.267050][ T9181] usb 3-1: USB disconnect, device number 60 [ 920.651923][ T9181] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 920.891841][ T9181] usb 3-1: Using ep0 maxpacket: 16 [ 921.011957][ T9181] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 921.020810][ T9181] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 921.031576][ T9181] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 921.040951][ T9181] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 921.050366][ T9181] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.059463][ T9181] usb 3-1: config 0 descriptor?? [ 921.303220][ T49] usb 3-1: USB disconnect, device number 61 [ 921.781913][ T49] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 922.031936][ T49] usb 3-1: Using ep0 maxpacket: 32 [ 922.151955][ T49] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 922.162899][ T49] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 922.173309][ T49] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 922.182783][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.194979][ T49] usb 3-1: config 0 descriptor?? [ 922.233676][ T49] hub 3-1:0.0: USB hub found [ 922.531845][ T49] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 922.542452][ T49] usbhid 3-1:0.0: can't add hid device: -22 [ 922.548390][ T49] usbhid: probe of 3-1:0.0 failed with error -22 15:19:19 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902240001000000f108040000000300000009210a00000122000009058103"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "183fbf1f"}, 0x0, 0x0, 0x0, 0x0}) r4 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:19:19 executing program 0: 15:19:19 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0x0, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:19:19 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r6, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val={@void}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x84, 0x0, @empty, @empty}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 15:19:19 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 15:19:19 executing program 1: ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc0386106, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 15:19:20 executing program 0: 15:19:20 executing program 1: ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc0386106, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 15:19:20 executing program 0: [ 923.982020][ T5] usb 3-1: USB disconnect, device number 62 15:19:20 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0x0, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:19:20 executing program 0: 15:19:20 executing program 1: ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc0386106, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) [ 924.263559][ T49] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 924.511981][ T49] usb 3-1: Using ep0 maxpacket: 16 [ 924.651913][ T49] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 924.660816][ T49] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 924.670991][ T49] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 924.680060][ T49] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 924.689160][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.699372][ T49] usb 3-1: config 0 descriptor?? [ 924.953217][ T5] usb 3-1: USB disconnect, device number 63 [ 925.421886][ T5] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 925.662444][ T5] usb 3-1: Using ep0 maxpacket: 32 [ 925.781973][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 925.792875][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 925.802941][ T5] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 925.812068][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.820704][ T5] usb 3-1: config 0 descriptor?? [ 925.863689][ T5] hub 3-1:0.0: USB hub found [ 926.161817][ T5] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 926.172231][ T5] usbhid 3-1:0.0: can't add hid device: -22 [ 926.178310][ T5] usbhid: probe of 3-1:0.0 failed with error -22 15:19:23 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902240001000000f108040000000300000009210a00000122000009058103"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "183fbf1f"}, 0x0, 0x0, 0x0, 0x0}) r4 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:19:23 executing program 0: 15:19:23 executing program 1: r0 = syz_open_dev$cec(0x0, 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 15:19:23 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x0, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:19:23 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 15:19:23 executing program 3: 15:19:23 executing program 0: 15:19:23 executing program 3: 15:19:23 executing program 1: r0 = syz_open_dev$cec(0x0, 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 15:19:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) lchown(0x0, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc00c5512, &(0x7f0000000380)) inotify_init1(0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$cgroup_ro(r1, 0x0, 0x275a, 0x0) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 15:19:23 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='reno\x00', 0x5) sendmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000300)="f685a288c84ec47e44864a1ae8659eb07e2f", 0x12}, {&(0x7f0000001500)="cfd063443cdc8585517304d96a713e7fb6273277543dd8cc3f1f2506e70e28180a2d2cf93495d7ef3a25d4b8a05b98a627ae8e98ed6f0fa2c78dd9ce1b9ef81f7c9274c78b728e5032c69cf8ebe9d42dd43d2f19d09e91a71f81c3b192d96cc627241b95ec8fbb6c71f603e0d07fcb5a6e07585208dd2ac721d2fdab2c29411f66ec7cca1e1760a2d6ca8af4ec79cae5c78430ea32a266856c8260e4de581475abdd2153aa8fea34789320ee2514903088dfd546a136d4", 0xb7}], 0x2}}], 0x1, 0x0) sendto$inet(r0, &(0x7f0000000340)='\f', 0x1, 0x51, 0x0, 0x0) 15:19:23 executing program 1: r0 = syz_open_dev$cec(0x0, 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) [ 927.759210][T13282] hub 9-0:1.0: USB hub found [ 927.764319][T13282] hub 9-0:1.0: 8 ports detected [ 927.779092][ T5043] usb 3-1: reset high-speed USB device number 64 using dummy_hcd [ 928.032146][ T5043] usb 3-1: Using ep0 maxpacket: 16 [ 928.071877][ T5043] usb 3-1: device firmware changed [ 928.078684][ T5043] usb 3-1: USB disconnect, device number 64 [ 928.471821][ T5043] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 928.721810][ T5043] usb 3-1: Using ep0 maxpacket: 16 [ 928.851820][ T5043] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 928.860662][ T5043] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 928.871367][ T5043] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 928.880664][ T5043] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 928.889935][ T5043] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.899114][ T5043] usb 3-1: config 0 descriptor?? [ 929.143698][ T5043] usb 3-1: USB disconnect, device number 65 [ 929.611848][ T5043] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 929.851927][ T5043] usb 3-1: Using ep0 maxpacket: 32 [ 929.991990][ T5043] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 930.003095][ T5043] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 930.013274][ T5043] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 930.022403][ T5043] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.031354][ T5043] usb 3-1: config 0 descriptor?? [ 930.072191][ T5043] hub 3-1:0.0: USB hub found [ 930.391850][ T5043] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 930.402210][ T5043] usbhid 3-1:0.0: can't add hid device: -22 [ 930.408215][ T5043] usbhid: probe of 3-1:0.0 failed with error -22 15:19:27 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x0, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:19:27 executing program 1: syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc0386106, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 15:19:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) lchown(0x0, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc00c5512, &(0x7f0000000380)) inotify_init1(0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$cgroup_ro(r1, 0x0, 0x275a, 0x0) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 15:19:27 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902240001000000f108040000000300000009210a00000122000009058103"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "183fbf1f"}, 0x0, 0x0, 0x0, 0x0}) r4 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:19:27 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x7c}}, 0x0) 15:19:27 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 15:19:27 executing program 1: syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc0386106, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 15:19:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) lchown(0x0, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc00c5512, &(0x7f0000000380)) inotify_init1(0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$cgroup_ro(r1, 0x0, 0x275a, 0x0) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 931.783587][T13333] hub 9-0:1.0: USB hub found [ 931.791052][T13333] hub 9-0:1.0: 8 ports detected 15:19:27 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 15:19:27 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$rxrpc(0x21, 0x2, 0xa) dup3(r4, r0, 0x0) 15:19:28 executing program 1: syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc0386106, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 15:19:28 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x0, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) [ 931.918106][T13348] hub 9-0:1.0: USB hub found [ 931.930256][T13348] hub 9-0:1.0: 8 ports detected 15:19:28 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$rxrpc(0x21, 0x2, 0xa) dup3(r4, r0, 0x0) 15:19:28 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 15:19:28 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) [ 931.993326][ T5043] usb 3-1: reset high-speed USB device number 66 using dummy_hcd [ 932.241882][ T5043] usb 3-1: Using ep0 maxpacket: 16 [ 932.281831][ T5043] usb 3-1: device firmware changed [ 932.287030][ T5043] usb 3-1: USB disconnect, device number 66 [ 932.651811][ T5043] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 932.891795][ T5043] usb 3-1: Using ep0 maxpacket: 16 [ 933.021981][ T5043] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 933.030812][ T5043] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 933.041517][ T5043] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 933.050821][ T5043] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 933.060134][ T5043] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.068988][ T5043] usb 3-1: config 0 descriptor?? [ 933.323242][ T12] usb 3-1: USB disconnect, device number 67 [ 933.791828][ T5043] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 934.031802][ T5043] usb 3-1: Using ep0 maxpacket: 32 [ 934.152003][ T5043] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 934.162908][ T5043] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 934.173384][ T5043] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 934.182791][ T5043] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.191608][ T5043] usb 3-1: config 0 descriptor?? [ 934.232048][ T5043] hub 3-1:0.0: USB hub found [ 934.531866][ T5043] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 934.542259][ T5043] usbhid 3-1:0.0: can't add hid device: -22 [ 934.548169][ T5043] usbhid: probe of 3-1:0.0 failed with error -22 15:19:32 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 15:19:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) lchown(0x0, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc00c5512, &(0x7f0000000380)) inotify_init1(0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$cgroup_ro(r1, 0x0, 0x275a, 0x0) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 15:19:32 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902240001000000f108040000000300000009210a00000122000009058103"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "183fbf1f"}, 0x0, 0x0, 0x0, 0x0}) r4 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:19:32 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 15:19:32 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$rxrpc(0x21, 0x2, 0xa) dup3(r4, r0, 0x0) 15:19:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x0, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) [ 936.270582][T13414] hub 9-0:1.0: USB hub found 15:19:32 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) [ 936.296411][T13414] hub 9-0:1.0: 8 ports detected 15:19:32 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$rxrpc(0x21, 0x2, 0xa) dup3(r4, r0, 0x0) 15:19:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) lchown(0x0, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc00c5512, &(0x7f0000000380)) inotify_init1(0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$cgroup_ro(r1, 0x0, 0x275a, 0x0) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) 15:19:32 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)) timer_create(0x0, 0x0, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 15:19:32 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup3(0xffffffffffffffff, r0, 0x0) 15:19:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x0, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) [ 936.482240][ T12] usb 3-1: reset high-speed USB device number 68 using dummy_hcd [ 936.495267][T13436] hub 9-0:1.0: USB hub found [ 936.524906][T13436] hub 9-0:1.0: 8 ports detected [ 936.771869][ T12] usb 3-1: Using ep0 maxpacket: 16 [ 936.812007][ T12] usb 3-1: device firmware changed [ 936.817225][ T12] usb 3-1: USB disconnect, device number 68 15:19:33 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 15:19:33 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) lchown(0x0, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc00c5512, &(0x7f0000000380)) inotify_init1(0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$cgroup_ro(r1, 0x0, 0x275a, 0x0) [ 937.093963][T13468] hub 9-0:1.0: USB hub found [ 937.098887][T13468] hub 9-0:1.0: 8 ports detected [ 937.201826][ T12] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 937.461896][ T12] usb 3-1: Using ep0 maxpacket: 16 [ 937.592001][ T12] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 937.600902][ T12] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 937.611224][ T12] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 937.620308][ T12] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 937.629441][ T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.638212][ T12] usb 3-1: config 0 descriptor?? [ 937.883971][ T9181] usb 3-1: USB disconnect, device number 69 [ 938.361805][ T9181] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 938.601813][ T9181] usb 3-1: Using ep0 maxpacket: 32 [ 938.741926][ T9181] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 938.752849][ T9181] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 938.763342][ T9181] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 938.772631][ T9181] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.781414][ T9181] usb 3-1: config 0 descriptor?? [ 938.833483][ T9181] hub 3-1:0.0: USB hub found [ 939.131914][ T9181] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 939.142118][ T9181] usbhid 3-1:0.0: can't add hid device: -22 [ 939.148029][ T9181] usbhid: probe of 3-1:0.0 failed with error -22 15:19:36 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)) timer_create(0x0, 0x0, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 15:19:36 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 15:19:36 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup3(0xffffffffffffffff, r0, 0x0) 15:19:36 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902240001000000f108040000000300000009210a00000122000009058103"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "183fbf1f"}, 0x0, 0x0, 0x0, 0x0}) r4 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:19:36 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) lchown(0x0, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc00c5512, &(0x7f0000000380)) inotify_init1(0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 15:19:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x0, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:19:37 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup3(0xffffffffffffffff, r0, 0x0) [ 940.865754][T13502] hub 9-0:1.0: USB hub found [ 940.880103][T13502] hub 9-0:1.0: 8 ports detected 15:19:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) lchown(0x0, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc00c5512, &(0x7f0000000380)) inotify_init1(0x0) dup(0xffffffffffffffff) 15:19:37 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)) timer_create(0x0, 0x0, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 15:19:37 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) dup(r2) r3 = socket$rxrpc(0x21, 0x2, 0xa) dup3(r3, r0, 0x0) [ 941.014996][T13522] hub 9-0:1.0: USB hub found [ 941.025792][T13522] hub 9-0:1.0: 8 ports detected 15:19:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x0, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:19:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) lchown(0x0, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc00c5512, &(0x7f0000000380)) inotify_init1(0x0) [ 941.082054][ T12] usb 3-1: reset high-speed USB device number 70 using dummy_hcd [ 941.205924][T13537] hub 9-0:1.0: USB hub found [ 941.225453][T13537] hub 9-0:1.0: 8 ports detected [ 941.361939][ T12] usb 3-1: Using ep0 maxpacket: 16 [ 941.402167][ T12] usb 3-1: device firmware changed [ 941.407395][ T12] usb 3-1: USB disconnect, device number 70 [ 941.831864][ T12] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 942.071855][ T12] usb 3-1: Using ep0 maxpacket: 16 [ 942.201978][ T12] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 942.210824][ T12] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 942.221219][ T12] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 942.230297][ T12] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 942.239433][ T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.249349][ T12] usb 3-1: config 0 descriptor?? [ 942.513470][ T5043] usb 3-1: USB disconnect, device number 71 [ 942.991848][ T7627] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 943.271791][ T7627] usb 3-1: Using ep0 maxpacket: 32 [ 943.392780][ T7627] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 943.403647][ T7627] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 943.413452][ T7627] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 943.422532][ T7627] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.431204][ T7627] usb 3-1: config 0 descriptor?? [ 943.472080][ T7627] hub 3-1:0.0: USB hub found [ 943.771800][ T7627] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 943.781973][ T7627] usbhid 3-1:0.0: can't add hid device: -22 [ 943.787931][ T7627] usbhid: probe of 3-1:0.0 failed with error -22 15:19:41 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) dup(r2) r3 = socket$rxrpc(0x21, 0x2, 0xa) dup3(r3, r0, 0x0) 15:19:41 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902240001000000f108040000000300000009210a00000122000009058103"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r3, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "183fbf1f"}, 0x0, 0x0, 0x0, 0x0}) r4 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:19:41 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040), &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 15:19:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) lchown(0x0, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc00c5512, &(0x7f0000000380)) 15:19:41 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback}, 0x0, @in=@broadcast}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 15:19:41 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x0, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:19:41 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) dup(r2) r3 = socket$rxrpc(0x21, 0x2, 0xa) dup3(r3, r0, 0x0) [ 945.500523][T13584] hub 9-0:1.0: USB hub found [ 945.548101][T13584] hub 9-0:1.0: 8 ports detected 15:19:41 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$rxrpc(0x21, 0x2, 0xa) dup3(r2, r0, 0x0) [ 945.571965][ T7627] usb 3-1: USB disconnect, device number 72 15:19:41 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x0, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:19:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) lchown(0x0, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc00c5512, &(0x7f0000000380)) 15:19:41 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$rxrpc(0x21, 0x2, 0xa) dup3(r2, r0, 0x0) 15:19:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) lchown(0x0, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc00c5512, &(0x7f0000000380)) 15:19:41 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$rxrpc(0x21, 0x2, 0xa) dup3(r2, r0, 0x0) [ 945.891817][ T5043] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 946.171811][ T5043] usb 3-1: Using ep0 maxpacket: 16 [ 946.301914][ T5043] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 946.310758][ T5043] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 946.321006][ T5043] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 946.330107][ T5043] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 946.339146][ T5043] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.347871][ T5043] usb 3-1: config 0 descriptor?? [ 946.612892][ T5043] usb 3-1: USB disconnect, device number 73 [ 947.211862][ T5043] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 947.491846][ T5043] usb 3-1: Using ep0 maxpacket: 32 [ 947.621959][ T5043] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 947.632831][ T5043] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 947.643026][ T5043] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 947.652114][ T5043] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 947.660787][ T5043] usb 3-1: config 0 descriptor?? [ 947.702193][ T5043] hub 3-1:0.0: USB hub found [ 948.011827][ T5043] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 948.021602][ T5043] usbhid 3-1:0.0: can't add hid device: -22 [ 948.029129][ T5043] usbhid: probe of 3-1:0.0 failed with error -22 15:19:45 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$rxrpc(0x21, 0x2, 0xa) dup3(r3, r0, 0x0) 15:19:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) lchown(0x0, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc00c5512, &(0x7f0000000380)) 15:19:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902240001000000f108040000000300000009210a00000122000009058103"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r3, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "183fbf1f"}, 0x0, 0x0, 0x0, 0x0}) r4 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:19:45 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x0, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:19:45 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback}, 0x0, @in=@broadcast}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 15:19:45 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040), &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 15:19:45 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$rxrpc(0x21, 0x2, 0xa) dup3(r3, r0, 0x0) 15:19:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) lchown(0x0, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc00c5512, &(0x7f0000000380)) 15:19:46 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x0, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) [ 949.873577][T13681] hub 9-0:1.0: USB hub found [ 949.885601][T13681] hub 9-0:1.0: 8 ports detected 15:19:46 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$rxrpc(0x21, 0x2, 0xa) dup3(r3, r0, 0x0) 15:19:46 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc00c5512, &(0x7f0000000380)) [ 949.980511][ T7627] usb 3-1: reset high-speed USB device number 74 using dummy_hcd [ 950.036266][T13692] hub 9-0:1.0: USB hub found [ 950.050471][T13692] hub 9-0:1.0: 8 ports detected 15:19:46 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$rxrpc(0x21, 0x2, 0xa) dup3(r3, r0, 0x0) 15:19:46 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc00c5512, &(0x7f0000000380)) 15:19:46 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x0, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:19:46 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$rxrpc(0x21, 0x2, 0xa) dup3(r3, r0, 0x0) [ 950.179046][T13708] hub 9-0:1.0: USB hub found [ 950.187106][T13708] hub 9-0:1.0: 8 ports detected [ 950.251895][ T7627] usb 3-1: Using ep0 maxpacket: 16 [ 950.303391][ T7627] usb 3-1: device firmware changed [ 950.308938][ T7627] usb 3-1: USB disconnect, device number 74 [ 950.691918][ T7627] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 950.931927][ T7627] usb 3-1: Using ep0 maxpacket: 16 [ 951.052073][ T7627] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 951.060983][ T7627] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 951.072073][ T7627] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 951.081136][ T7627] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 951.091033][ T7627] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.102715][ T7627] usb 3-1: config 0 descriptor?? [ 951.353570][ T5043] usb 3-1: USB disconnect, device number 75 [ 951.822809][ T5] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 952.061839][ T5] usb 3-1: Using ep0 maxpacket: 32 [ 952.182048][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 952.193009][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 952.203311][ T5] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 952.212884][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.221882][ T5] usb 3-1: config 0 descriptor?? [ 952.262310][ T5] hub 3-1:0.0: USB hub found [ 952.561941][ T5] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 952.572623][ T5] usbhid 3-1:0.0: can't add hid device: -22 [ 952.578560][ T5] usbhid: probe of 3-1:0.0 failed with error -22 15:19:50 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902240001000000f108040000000300000009210a00000122000009058103"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r3, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "183fbf1f"}, 0x0, 0x0, 0x0, 0x0}) r4 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:19:50 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc00c5512, &(0x7f0000000380)) 15:19:50 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$rxrpc(0x21, 0x2, 0xa) dup3(r3, r0, 0x0) 15:19:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:19:50 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback}, 0x0, @in=@broadcast}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 15:19:50 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040), &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 15:19:50 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc00c5512, &(0x7f0000000380)) 15:19:50 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$rxrpc(0x21, 0x2, 0xa) dup3(r3, r0, 0x0) 15:19:50 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc00c5512, &(0x7f0000000380)) 15:19:50 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$rxrpc(0x21, 0x2, 0xa) dup3(r3, r0, 0x0) 15:19:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:19:50 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc00c5512, &(0x7f0000000380)) [ 954.511905][ T49] usb 3-1: reset high-speed USB device number 76 using dummy_hcd [ 954.609193][T13788] hub 9-0:1.0: USB hub found [ 954.631272][T13788] hub 9-0:1.0: 8 ports detected [ 954.792595][ T49] usb 3-1: Using ep0 maxpacket: 16 [ 954.832112][ T49] usb 3-1: device firmware changed [ 954.837275][ T49] usb 3-1: USB disconnect, device number 76 [ 955.211840][ T49] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 955.471844][ T49] usb 3-1: Using ep0 maxpacket: 16 [ 955.604194][ T49] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 955.613063][ T49] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 955.623919][ T49] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 955.633216][ T49] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 955.642474][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.651077][ T49] usb 3-1: config 0 descriptor?? [ 955.903582][ T12] usb 3-1: USB disconnect, device number 77 [ 956.371808][ T12] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 956.611902][ T12] usb 3-1: Using ep0 maxpacket: 32 [ 956.731844][ T12] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 956.743071][ T12] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 956.753531][ T12] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 956.762828][ T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.771364][ T12] usb 3-1: config 0 descriptor?? [ 956.823210][ T12] hub 3-1:0.0: USB hub found [ 957.131909][ T12] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 957.141679][ T12] usbhid 3-1:0.0: can't add hid device: -22 [ 957.147706][ T12] usbhid: probe of 3-1:0.0 failed with error -22 15:19:54 executing program 0: r0 = syz_open_dev$usbfs(0x0, 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc00c5512, &(0x7f0000000380)) 15:19:54 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$rxrpc(0x21, 0x2, 0xa) dup3(r3, r0, 0x0) 15:19:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:19:54 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902240001000000f108040000000300000009210a00000122000009058103"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r3, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "183fbf1f"}, 0x0, 0x0, 0x0, 0x0}) r4 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:19:54 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0) 15:19:54 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 15:19:55 executing program 0: r0 = syz_open_dev$usbfs(0x0, 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc00c5512, &(0x7f0000000380)) 15:19:55 executing program 3: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000001ff0)={0x1d, r0}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$rxrpc(0x21, 0x2, 0xa) dup3(r3, 0xffffffffffffffff, 0x0) 15:19:55 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0) 15:19:55 executing program 0: r0 = syz_open_dev$usbfs(0x0, 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc00c5512, &(0x7f0000000380)) 15:19:55 executing program 3: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000001ff0)={0x1d, r0}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$rxrpc(0x21, 0x2, 0xa) dup3(r3, 0xffffffffffffffff, 0x0) 15:19:55 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0) 15:19:55 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc00c5512, &(0x7f0000000380)) 15:19:55 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:19:55 executing program 3: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000001ff0)={0x1d, r0}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$rxrpc(0x21, 0x2, 0xa) dup3(r3, 0xffffffffffffffff, 0x0) [ 959.091861][ T5] usb 3-1: reset high-speed USB device number 78 using dummy_hcd [ 959.341812][ T5] usb 3-1: Using ep0 maxpacket: 16 [ 959.382199][ T5] usb 3-1: device firmware changed [ 959.387443][ T5] usb 3-1: USB disconnect, device number 78 [ 959.791806][ T5] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 960.041863][ T5] usb 3-1: Using ep0 maxpacket: 16 [ 960.171877][ T5] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 960.180772][ T5] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 960.191738][ T5] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 960.201082][ T5] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 960.210341][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.219365][ T5] usb 3-1: config 0 descriptor?? [ 960.473663][ T49] usb 3-1: USB disconnect, device number 79 [ 960.961849][ T49] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 961.201848][ T49] usb 3-1: Using ep0 maxpacket: 32 [ 961.341877][ T49] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 961.352782][ T49] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 961.363322][ T49] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 961.372660][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.381484][ T49] usb 3-1: config 0 descriptor?? [ 961.433723][ T49] hub 3-1:0.0: USB hub found [ 961.641878][ T49] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 961.651961][ T49] usbhid 3-1:0.0: can't add hid device: -22 [ 961.657956][ T49] usbhid: probe of 3-1:0.0 failed with error -22 15:19:58 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902240001000000f108040000000300000009210a00000122000009058103"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r3, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "183fbf1f"}, 0x0, 0x0, 0x0, 0x0}) r4 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:19:58 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc00c5512, &(0x7f0000000380)) 15:19:58 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}}, 0xe8) sendmmsg(r0, 0x0, 0x0, 0x0) 15:19:58 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$rxrpc(0x21, 0x2, 0xa) dup3(r4, r0, 0x0) 15:19:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:19:58 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 15:19:59 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc00c5512, &(0x7f0000000380)) 15:19:59 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}}, 0xe8) sendmmsg(r0, 0x0, 0x0, 0x0) 15:19:59 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$rxrpc(0x21, 0x2, 0xa) dup3(r4, r0, 0x0) 15:19:59 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc00c5512, &(0x7f0000000380)) 15:19:59 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}}, 0xe8) sendmmsg(r0, 0x0, 0x0, 0x0) 15:19:59 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc00c5512, &(0x7f0000000380)) [ 963.141941][ T5] usb 3-1: reset high-speed USB device number 80 using dummy_hcd [ 963.421829][ T5] usb 3-1: Using ep0 maxpacket: 16 [ 963.462019][ T5] usb 3-1: device firmware changed [ 963.467232][ T5] usb 3-1: USB disconnect, device number 80 [ 963.861851][ T5] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 964.111848][ T5] usb 3-1: Using ep0 maxpacket: 16 [ 964.231880][ T5] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 964.240825][ T5] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 964.251604][ T5] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 964.260816][ T5] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 964.270281][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 964.279139][ T5] usb 3-1: config 0 descriptor?? [ 964.523137][ T5] usb 3-1: USB disconnect, device number 81 [ 964.991899][ T7627] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 965.231798][ T7627] usb 3-1: Using ep0 maxpacket: 32 [ 965.352103][ T7627] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 965.363062][ T7627] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 965.373464][ T7627] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 965.383102][ T7627] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.391653][ T7627] usb 3-1: config 0 descriptor?? [ 965.442219][ T7627] hub 3-1:0.0: USB hub found [ 965.661879][ T7627] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 965.676257][ T7627] usbhid 3-1:0.0: can't add hid device: -22 [ 965.682276][ T7627] usbhid: probe of 3-1:0.0 failed with error -22 15:20:02 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:20:02 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$rxrpc(0x21, 0x2, 0xa) dup3(r4, r0, 0x0) 15:20:02 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902240001000000f108040000000300000009210a00000122000009058103"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r3, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "183fbf1f"}, 0x0, 0x0, 0x0, 0x0}) r4 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:20:02 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) lchown(&(0x7f0000000680)='./bus/file1\x00', 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) inotify_init1(0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = dup(0xffffffffffffffff) ioctl$VT_WAITACTIVE(r3, 0x5607) readahead(r2, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 15:20:02 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 15:20:02 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc00c5512, &(0x7f0000000380)) 15:20:03 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc00c5512, &(0x7f0000000380)) [ 966.911107][T13978] hub 9-0:1.0: USB hub found [ 966.920466][T13978] hub 9-0:1.0: 8 ports detected 15:20:03 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) lchown(&(0x7f0000000680)='./bus/file1\x00', 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) inotify_init1(0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = dup(0xffffffffffffffff) ioctl$VT_WAITACTIVE(r3, 0x5607) readahead(r2, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 15:20:03 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$rxrpc(0x21, 0x2, 0xa) dup3(r3, r0, 0x0) 15:20:03 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc00c5512, &(0x7f0000000380)) [ 967.020003][T13997] hub 9-0:1.0: USB hub found [ 967.030770][T13997] hub 9-0:1.0: 8 ports detected 15:20:03 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:20:03 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$rxrpc(0x21, 0x2, 0xa) dup3(r3, r0, 0x0) 15:20:03 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) lchown(&(0x7f0000000680)='./bus/file1\x00', 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) inotify_init1(0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = dup(0xffffffffffffffff) ioctl$VT_WAITACTIVE(r3, 0x5607) readahead(r2, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 15:20:03 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$rxrpc(0x21, 0x2, 0xa) dup3(r3, r0, 0x0) [ 967.146806][ T5] usb 3-1: reset high-speed USB device number 82 using dummy_hcd [ 967.168622][T14012] hub 9-0:1.0: USB hub found [ 967.180698][T14012] hub 9-0:1.0: 8 ports detected [ 967.402927][ T5] usb 3-1: Using ep0 maxpacket: 16 [ 967.441931][ T5] usb 3-1: device firmware changed [ 967.447160][ T5] usb 3-1: USB disconnect, device number 82 [ 967.811805][ T5] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 968.071833][ T5] usb 3-1: Using ep0 maxpacket: 16 [ 968.191916][ T5] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 968.200803][ T5] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 968.211698][ T5] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 968.220981][ T5] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 968.230350][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 968.239497][ T5] usb 3-1: config 0 descriptor?? [ 968.493585][ T5043] usb 3-1: USB disconnect, device number 83 [ 968.961919][ T5043] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 969.201832][ T5043] usb 3-1: Using ep0 maxpacket: 32 [ 969.331915][ T5043] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 969.342836][ T5043] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 969.353364][ T5043] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 969.362818][ T5043] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.371666][ T5043] usb 3-1: config 0 descriptor?? [ 969.412272][ T5043] hub 3-1:0.0: USB hub found [ 969.631833][ T5043] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 969.646735][ T5043] usbhid 3-1:0.0: can't add hid device: -22 [ 969.652691][ T5043] usbhid: probe of 3-1:0.0 failed with error -22 15:20:06 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902240001000000f108040000000300000009210a00000122000009058103"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r3, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "183fbf1f"}, 0x0, 0x0, 0x0, 0x0}) r4 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:20:06 executing program 0: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc00c5512, &(0x7f0000000380)) 15:20:06 executing program 4: mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f00000003c0)='./bus\x00', 0x0) getdents(r0, &(0x7f0000001440)=""/177, 0xb1) 15:20:06 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000001ff0)={0x1d, r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$rxrpc(0x21, 0x2, 0xa) dup3(r4, r0, 0x0) 15:20:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:20:06 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 15:20:07 executing program 0: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc00c5512, &(0x7f0000000380)) 15:20:07 executing program 0: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc00c5512, &(0x7f0000000380)) 15:20:07 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000001ff0)={0x1d, r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$rxrpc(0x21, 0x2, 0xa) dup3(r4, r0, 0x0) 15:20:07 executing program 4: ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454da, 0x400014) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x2}) socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f000099e000)={0x2, 0x4e20, @dev}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) creat(0x0, 0x0) fchmod(0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$TCSETX(0xffffffffffffffff, 0x5433, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x2, &(0x7f0000000080)={0x0, 0x0}) clock_nanosleep(0x2, 0xf418222b87, &(0x7f00000000c0)={0x0, r1+10000000}, 0x0) [ 970.925209][T14059] overlayfs: filesystem on './file0' not supported as upperdir 15:20:07 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc00c5512, 0x0) 15:20:07 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) [ 971.103310][ T12] usb 3-1: reset high-speed USB device number 84 using dummy_hcd [ 971.371834][ T12] usb 3-1: Using ep0 maxpacket: 16 [ 971.422982][ T12] usb 3-1: device firmware changed [ 971.428202][ T12] usb 3-1: USB disconnect, device number 84 [ 971.801808][ T12] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 972.061836][ T12] usb 3-1: Using ep0 maxpacket: 16 [ 972.192815][ T12] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 972.201730][ T12] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 972.212988][ T12] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 972.222256][ T12] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 972.231315][ T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 972.240522][ T12] usb 3-1: config 0 descriptor?? [ 972.484480][ T12] usb 3-1: USB disconnect, device number 85 [ 973.051856][ T12] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 973.291895][ T12] usb 3-1: Using ep0 maxpacket: 32 [ 973.411932][ T12] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 973.424070][ T12] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 973.434053][ T12] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 973.443371][ T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.453219][ T12] usb 3-1: config 0 descriptor?? [ 973.492071][ T12] hub 3-1:0.0: USB hub found [ 973.711846][ T12] hub 3-1:0.0: 1 port detected [ 974.394592][ T5043] usb 3-1: USB disconnect, device number 86 [ 974.401820][ T5] hub 3-1:0.0: hub_ext_port_status failed (err = -71) 15:20:11 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902240001000000f108040000000300000009210a00000122000009058103"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r3, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "183fbf1f"}, 0x0, 0x0, 0x0, 0x0}) r4 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:20:11 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc00c5512, 0x0) 15:20:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:20:11 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000001ff0)={0x1d, r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$rxrpc(0x21, 0x2, 0xa) dup3(r4, r0, 0x0) 15:20:11 executing program 4: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x1, 0x0, 0x0) 15:20:11 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 15:20:11 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc00c5512, 0x0) 15:20:11 executing program 4: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESOCT=r0]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}, 0x2d000000}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0/file0\x00'}, 0x51, &(0x7f0000007380), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="480000000000000000582699a83b366d9c7525bcad4d1e00000000000000b2b6a77f06ddcb33a8fafbc6b2c7a0a923cbd4c6aeb00ae99a70317fb463bed350139e79abe8fa8aac7ffc7f613357ff620000ab3142c4c9"], 0x48}}], 0x2, 0x0) 15:20:11 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$rxrpc(0x21, 0x2, 0xa) dup3(r3, r0, 0x0) 15:20:11 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454da, 0x400014) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x2}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f000099e000)={0x2, 0x4e20, @dev}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) creat(0x0, 0x0) r2 = openat$vga_arbiter(0xffffff9c, 0x0, 0x0, 0x0) fchmod(r2, 0xf5) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$TCSETX(0xffffffffffffffff, 0x5433, &(0x7f0000000140)={0x1, 0x3, [0x6, 0x6, 0x3, 0x7], 0x20}) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x2, &(0x7f0000000080)={0x0, 0x0}) clock_nanosleep(0x2, 0xf418222b87, &(0x7f00000000c0)={0x0, r4+10000000}, 0x0) recvfrom(r1, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) 15:20:11 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$rxrpc(0x21, 0x2, 0xa) dup3(r3, r0, 0x0) 15:20:11 executing program 4: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='cpu&\t66\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') [ 975.142287][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 975.241853][ T7627] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 975.481852][ T7627] usb 3-1: Using ep0 maxpacket: 16 [ 975.602037][ T7627] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 975.610929][ T7627] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 975.622683][ T7627] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 975.631715][ T7627] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 975.641666][ T7627] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.651617][ T7627] usb 3-1: config 0 descriptor?? [ 975.893436][ T7627] usb 3-1: USB disconnect, device number 87 [ 976.361882][ T7627] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 976.601900][ T7627] usb 3-1: Using ep0 maxpacket: 32 [ 976.722068][ T7627] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 976.733340][ T7627] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 976.743436][ T7627] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 976.752800][ T7627] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.764152][ T7627] usb 3-1: config 0 descriptor?? [ 976.802201][ T7627] hub 3-1:0.0: USB hub found [ 977.021870][ T7627] hub 3-1:0.0: 1 port detected [ 977.714684][ T5043] usb 3-1: USB disconnect, device number 88 [ 977.723273][ T5] hub 3-1:0.0: hub_ext_port_status failed (err = -71) 15:20:14 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902240001000000f108040000000300000009210a00000122000009058103"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r3, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "183fbf1f"}, 0x0, 0x0, 0x0, 0x0}) r4 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:20:14 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$rxrpc(0x21, 0x2, 0xa) dup3(r3, r0, 0x0) 15:20:14 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:20:14 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x80040100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x4a8, 0x3d8, 0x9403, 0x52020000, 0x0, 0x2c0, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x0, 0xff, 0x0, 'syz1\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x508) socket(0x11, 0x0, 0x0) 15:20:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x0, &(0x7f0000000080)="282526185e3dcc1d9e08fe6651") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) 15:20:14 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 15:20:14 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$TCSBRKP(r0, 0x7b9, 0x20000000) 15:20:14 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$rxrpc(0x21, 0x2, 0xa) dup3(r3, r0, 0x0) [ 978.263363][T14227] xt_recent: Unsupported userspace flags (000000ff) 15:20:14 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$TCSBRKP(r0, 0x7b9, 0x20000000) 15:20:14 executing program 0: r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x40000, 0x4) fcntl$setstatus(r0, 0x4, 0x6100) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) write$eventfd(r0, &(0x7f0000001200), 0x8) 15:20:14 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$TCSBRKP(r0, 0x7b9, 0x20000000) 15:20:14 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$rxrpc(0x21, 0x2, 0xa) dup3(r3, r0, 0x0) [ 978.406669][ T27] audit: type=1800 audit(8038884014.519:37): pid=14256 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15857 res=0 [ 978.463765][ T27] audit: type=1800 audit(8038884014.539:38): pid=14256 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15857 res=0 [ 978.551983][ T7627] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 978.791901][ T7627] usb 3-1: Using ep0 maxpacket: 16 [ 978.912163][ T7627] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 978.921404][ T7627] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 978.932132][ T7627] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 978.941826][ T7627] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 978.951069][ T7627] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.960197][ T7627] usb 3-1: config 0 descriptor?? [ 979.203368][ T9181] usb 3-1: USB disconnect, device number 89 [ 979.771908][ T9181] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 980.011949][ T9181] usb 3-1: Using ep0 maxpacket: 32 [ 980.131897][ T9181] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 980.143130][ T9181] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 980.154030][ T9181] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 980.163461][ T9181] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.174209][ T9181] usb 3-1: config 0 descriptor?? [ 980.213586][ T9181] hub 3-1:0.0: USB hub found [ 980.431911][ T9181] hub 3-1:0.0: 1 port detected [ 981.134002][ T5043] usb 3-1: USB disconnect, device number 90 [ 981.146648][ T9181] hub 3-1:0.0: hub_ext_port_status failed (err = -71) 15:20:17 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902240001000000f108040000000300000009210a00000122000009058103"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r3, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "183fbf1f"}, 0x0, 0x0, 0x0, 0x0}) r4 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:20:17 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 15:20:17 executing program 0: r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x40000, 0x4) fcntl$setstatus(r0, 0x4, 0x6100) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) write$eventfd(r0, &(0x7f0000001200), 0x8) 15:20:17 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$rxrpc(0x21, 0x2, 0xa) dup3(r3, r0, 0x0) 15:20:17 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$TCSBRKP(r0, 0x7b9, 0x20000000) 15:20:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) [ 981.679519][ T27] audit: type=1800 audit(8038884017.789:39): pid=14301 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16275 res=0 15:20:17 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x0, &(0x7f0000000080)="282526185e3dcc1d9e08fe6651") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) 15:20:17 executing program 4: ioctl$TCSBRKP(0xffffffffffffffff, 0x7b9, 0x20000000) 15:20:17 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) r2 = socket$inet6(0xa, 0x0, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$rxrpc(0x21, 0x2, 0xa) dup3(r4, r0, 0x0) [ 981.711276][ T27] audit: type=1800 audit(8038884017.789:40): pid=14301 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16275 res=0 15:20:17 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 15:20:17 executing program 4: ioctl$TCSBRKP(0xffffffffffffffff, 0x7b9, 0x20000000) 15:20:18 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x0, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) [ 982.002092][ T7627] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 982.251870][ T7627] usb 3-1: Using ep0 maxpacket: 16 [ 982.372059][ T7627] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 982.381084][ T7627] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 982.391558][ T7627] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 982.401025][ T7627] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 982.410496][ T7627] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.419752][ T7627] usb 3-1: config 0 descriptor?? [ 982.665141][ T5043] usb 3-1: USB disconnect, device number 91 [ 983.231919][ T5043] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 983.471859][ T5043] usb 3-1: Using ep0 maxpacket: 32 [ 983.622114][ T5043] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 983.633192][ T5043] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 983.643641][ T5043] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 983.653050][ T5043] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.664907][ T5043] usb 3-1: config 0 descriptor?? [ 983.723362][ T5043] hub 3-1:0.0: USB hub found [ 983.941927][ T5043] hub 3-1:0.0: 1 port detected [ 984.673980][ T9181] usb 3-1: USB disconnect, device number 92 [ 984.701840][ T5043] hub 3-1:0.0: hub_ext_port_status failed (err = -71) 15:20:21 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902240001000000f108040000000300000009210a00000122000009058103"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r3, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "183fbf1f"}, 0x0, 0x0, 0x0, 0x0}) r4 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:20:21 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) r2 = socket$inet6(0xa, 0x0, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$rxrpc(0x21, 0x2, 0xa) dup3(r4, r0, 0x0) 15:20:21 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x1210081, 0x0) chmod(&(0x7f0000000140)='./file0\x00', 0x0) 15:20:21 executing program 4: ioctl$TCSBRKP(0xffffffffffffffff, 0x7b9, 0x20000000) 15:20:21 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 15:20:21 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x0, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:20:21 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x0, 0xffffffff}) 15:20:21 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSBRKP(r0, 0x7b9, 0x20000000) 15:20:21 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSBRKP(r0, 0x7b9, 0x20000000) 15:20:21 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 15:20:21 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) r2 = socket$inet6(0xa, 0x0, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$rxrpc(0x21, 0x2, 0xa) dup3(r4, r0, 0x0) 15:20:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r1, 0x0) syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xff800000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000001c0)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendfile(r2, r3, 0x0, 0x800000080004103) [ 985.523285][ T9181] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 985.764554][ T9181] usb 3-1: Using ep0 maxpacket: 16 [ 985.881915][ T9181] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 985.881927][ T9181] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 985.881940][ T9181] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 985.881959][ T9181] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 985.881972][ T9181] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.882849][ T9181] usb 3-1: config 0 descriptor?? [ 986.124404][ T9181] usb 3-1: USB disconnect, device number 93 [ 986.591863][ T9181] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 986.831792][ T9181] usb 3-1: Using ep0 maxpacket: 32 [ 986.951911][ T9181] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 986.962806][ T9181] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 986.972709][ T9181] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 986.981807][ T9181] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.990589][ T9181] usb 3-1: config 0 descriptor?? [ 987.033463][ T9181] hub 3-1:0.0: USB hub found [ 987.251859][ T9181] hub 3-1:0.0: 1 port detected [ 987.973647][ T7627] usb 3-1: USB disconnect, device number 94 [ 987.981887][ T49] hub 3-1:0.0: hub_ext_port_status failed (err = -71) 15:20:24 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902240001000000f108040000000300000009210a00000122000009058103"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r3, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "183fbf1f"}, 0x0, 0x0, 0x0, 0x0}) r4 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:20:24 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSBRKP(r0, 0x7b9, 0x20000000) 15:20:24 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x0, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:20:24 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) socket$inet6(0xa, 0x2, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$rxrpc(0x21, 0x2, 0xa) dup3(r3, r0, 0x0) 15:20:24 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x44e, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x650ac3, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) sendmsg$RDMA_NLDEV_CMD_GET(r3, &(0x7f0000000340)={&(0x7f0000000180), 0xc, 0x0, 0x1, 0x0, 0x0, 0x48010}, 0x20000490) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000a00)={@void, @val={0x0, 0x0, 0x0, 0x0, 0x10}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x168, 0x2c, 0x0, @local={0xfe, 0x80, [0x7]}, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x0, [0x2, 0x7fff]}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x400, 0x2, 0xd3bf]}, {0x8, 0x88be, 0x4, {{}, 0x1, {0x7}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9}, 0x2, {0x8000000, 0x1}}}, {0x8, 0x6558, 0x0, "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"}}}}}, 0x19a) sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x8880) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000000c0)}, 0x10) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={0x0, @tipc=@name={0x1e, 0x2, 0x1, {{0x0, 0xffffffff}, 0x4}}, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x401}, @isdn={0x22, 0x5, 0x20, 0xff, 0x8}, 0x403, 0x0, 0x0, 0x0, 0x8000, &(0x7f0000000000)='vlan1\x00', 0x37, 0x6, 0x47}) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0xffffffffffffffff, 0x6c}, &(0x7f0000001fee)='R\x05rist\xe3cusgrVis:De', 0x0) 15:20:24 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 15:20:24 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x44e, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x650ac3, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) sendmsg$RDMA_NLDEV_CMD_GET(r3, &(0x7f0000000340)={&(0x7f0000000180), 0xc, 0x0, 0x1, 0x0, 0x0, 0x48010}, 0x20000490) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000a00)={@void, @val={0x0, 0x0, 0x0, 0x0, 0x10}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x168, 0x2c, 0x0, @local={0xfe, 0x80, [0x7]}, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x0, [0x2, 0x7fff]}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x400, 0x2, 0xd3bf]}, {0x8, 0x88be, 0x4, {{}, 0x1, {0x7}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9}, 0x2, {0x8000000, 0x1}}}, {0x8, 0x6558, 0x0, "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"}}}}}, 0x19a) sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x8880) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000000c0)}, 0x10) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={0x0, @tipc=@name={0x1e, 0x2, 0x1, {{0x0, 0xffffffff}, 0x4}}, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x401}, @isdn={0x22, 0x5, 0x20, 0xff, 0x8}, 0x403, 0x0, 0x0, 0x0, 0x8000, &(0x7f0000000000)='vlan1\x00', 0x37, 0x6, 0x47}) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0xffffffffffffffff, 0x6c}, &(0x7f0000001fee)='R\x05rist\xe3cusgrVis:De', 0x0) 15:20:24 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) socket$inet6(0xa, 0x2, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$rxrpc(0x21, 0x2, 0xa) dup3(r3, r0, 0x0) 15:20:24 executing program 4: openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x7b9, 0x20000000) 15:20:24 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x44e, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x650ac3, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) sendmsg$RDMA_NLDEV_CMD_GET(r3, &(0x7f0000000340)={&(0x7f0000000180), 0xc, 0x0, 0x1, 0x0, 0x0, 0x48010}, 0x20000490) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000a00)={@void, @val={0x0, 0x0, 0x0, 0x0, 0x10}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x168, 0x2c, 0x0, @local={0xfe, 0x80, [0x7]}, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x0, [0x2, 0x7fff]}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x400, 0x2, 0xd3bf]}, {0x8, 0x88be, 0x4, {{}, 0x1, {0x7}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9}, 0x2, {0x8000000, 0x1}}}, {0x8, 0x6558, 0x0, "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"}}}}}, 0x19a) sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x8880) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000000c0)}, 0x10) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={0x0, @tipc=@name={0x1e, 0x2, 0x1, {{0x0, 0xffffffff}, 0x4}}, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x401}, @isdn={0x22, 0x5, 0x20, 0xff, 0x8}, 0x403, 0x0, 0x0, 0x0, 0x8000, &(0x7f0000000000)='vlan1\x00', 0x37, 0x6, 0x47}) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0xffffffffffffffff, 0x6c}, &(0x7f0000001fee)='R\x05rist\xe3cusgrVis:De', 0x0) 15:20:24 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) socket$inet6(0xa, 0x2, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$rxrpc(0x21, 0x2, 0xa) dup3(r3, r0, 0x0) 15:20:24 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x44e, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x650ac3, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) sendmsg$RDMA_NLDEV_CMD_GET(r3, &(0x7f0000000340)={&(0x7f0000000180), 0xc, 0x0, 0x1, 0x0, 0x0, 0x48010}, 0x20000490) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000a00)={@void, @val={0x0, 0x0, 0x0, 0x0, 0x10}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x168, 0x2c, 0x0, @local={0xfe, 0x80, [0x7]}, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x0, [0x2, 0x7fff]}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x400, 0x2, 0xd3bf]}, {0x8, 0x88be, 0x4, {{}, 0x1, {0x7}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9}, 0x2, {0x8000000, 0x1}}}, {0x8, 0x6558, 0x0, "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"}}}}}, 0x19a) sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x8880) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000000c0)}, 0x10) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={0x0, @tipc=@name={0x1e, 0x2, 0x1, {{0x0, 0xffffffff}, 0x4}}, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x401}, @isdn={0x22, 0x5, 0x20, 0xff, 0x8}, 0x403, 0x0, 0x0, 0x0, 0x8000, &(0x7f0000000000)='vlan1\x00', 0x37, 0x6, 0x47}) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0xffffffffffffffff, 0x6c}, &(0x7f0000001fee)='R\x05rist\xe3cusgrVis:De', 0x0) [ 988.831863][ T7627] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 989.071933][ T7627] usb 3-1: Using ep0 maxpacket: 16 [ 989.191916][ T7627] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 989.200863][ T7627] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 989.211674][ T7627] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 989.221017][ T7627] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 989.230485][ T7627] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.240240][ T7627] usb 3-1: config 0 descriptor?? [ 989.483116][ T7627] usb 3-1: USB disconnect, device number 95 [ 989.951819][ T12] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 990.192055][ T12] usb 3-1: Using ep0 maxpacket: 32 [ 990.311921][ T12] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 990.322863][ T12] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 990.333259][ T12] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 990.342570][ T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.354895][ T12] usb 3-1: config 0 descriptor?? [ 990.394764][ T12] hub 3-1:0.0: USB hub found [ 990.611860][ T12] hub 3-1:0.0: 1 port detected [ 991.335011][ T9181] usb 3-1: USB disconnect, device number 96 [ 991.341837][ T12] hub 3-1:0.0: hub_ext_port_status failed (err = -71) 15:20:27 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902240001000000f108040000000300000009210a00000122000009058103"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r3, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000002880)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "183fbf1f"}, 0x0, 0x0, 0x0, 0x0}) r4 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:20:27 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 15:20:27 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = socket$rxrpc(0x21, 0x2, 0xa) dup3(r3, r0, 0x0) 15:20:27 executing program 4: openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x7b9, 0x20000000) 15:20:27 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x1210081, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/udplite\x00') r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = memfd_create(&(0x7f0000000180)='\xbb', 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r1, 0x0) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) 15:20:27 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:20:28 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = socket$rxrpc(0x21, 0x2, 0xa) dup3(r3, r0, 0x0) 15:20:28 executing program 4: openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x7b9, 0x20000000) 15:20:28 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r2, &(0x7f0000000680)={{0x1b, 0x5b, 0x7, 0x3b, 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x78) 15:20:28 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000140)={0x84a5, 0x15}) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'macvlan0\x00', 0x0}) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f00000000c0)=0x8000005, 0x4) splice(r0, 0x0, r2, 0x0, 0x422, 0x0) 15:20:28 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = socket$rxrpc(0x21, 0x2, 0xa) dup3(r3, r0, 0x0) 15:20:28 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$TCSBRKP(r0, 0x7b9, 0x0) [ 992.201825][ T12] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 992.441845][ T12] usb 3-1: Using ep0 maxpacket: 16 [ 992.561965][ T12] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 992.570893][ T12] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 992.581350][ T12] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 992.590423][ T12] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 992.599620][ T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.610045][ T12] usb 3-1: config 0 descriptor?? [ 992.852872][ T49] usb 3-1: USB disconnect, device number 97 [ 993.331917][ T49] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 993.571861][ T49] usb 3-1: Using ep0 maxpacket: 32 [ 993.691908][ T49] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 993.704003][ T49] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 993.714388][ T49] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 993.723692][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.734020][ T49] usb 3-1: config 0 descriptor?? [ 993.774020][ T49] hub 3-1:0.0: USB hub found [ 993.991899][ T49] hub 3-1:0.0: 1 port detected [ 994.713589][ T5] usb 3-1: USB disconnect, device number 98 [ 994.723170][ T49] hub 3-1:0.0: hub_ext_port_status failed (err = -71) 15:20:31 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$TCSBRKP(r0, 0x7b9, 0x0) 15:20:31 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:20:31 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) dup3(r4, r0, 0x0) 15:20:31 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 15:20:31 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902240001000000f108040000000300000009210a00000122000009058103"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r3, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000002880)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "183fbf1f"}, 0x0, 0x0, 0x0, 0x0}) r4 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:20:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaaaa86dd60163dac00182c00090000000000000000000010000000aaff02000000000000000000000000000100020007"], 0x52) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x18100, 0x0) 15:20:31 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) dup3(r4, r0, 0x0) 15:20:31 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$TCSBRKP(r0, 0x7b9, 0x0) 15:20:31 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) dup3(r4, r0, 0x0) 15:20:31 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$TCSBRKP(r0, 0x7b9, 0x20707004) 15:20:31 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$TCSBRKP(r0, 0x7b9, 0x20707004) 15:20:31 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$rxrpc(0x21, 0x2, 0x0) dup3(r4, r0, 0x0) 15:20:31 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:20:31 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$TCSBRKP(r0, 0x7b9, 0x20707004) 15:20:31 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$rxrpc(0x21, 0x2, 0x0) dup3(r4, r0, 0x0) [ 995.552056][ T7627] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 995.791894][ T7627] usb 3-1: Using ep0 maxpacket: 16 [ 995.921957][ T7627] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 995.930959][ T7627] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 995.941684][ T7627] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 995.951087][ T7627] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 995.960550][ T7627] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.969585][ T7627] usb 3-1: config 0 descriptor?? 15:20:32 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) [ 996.213254][ T5] usb 3-1: USB disconnect, device number 99 [ 996.691971][ T5] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 996.961836][ T5] usb 3-1: Using ep0 maxpacket: 32 [ 997.081939][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 997.101810][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 997.121745][ T5] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 997.141808][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.160642][ T5] usb 3-1: config 0 descriptor?? [ 997.202136][ T5] hub 3-1:0.0: USB hub found [ 997.411823][ T5] hub 3-1:0.0: 1 port detected [ 998.123524][ T5] usb 3-1: USB disconnect, device number 100 [ 998.131923][ T7627] hub 3-1:0.0: hub_ext_port_status failed (err = -71) 15:20:34 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902240001000000f108040000000300000009210a00000122000009058103"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r3, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000002880)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "183fbf1f"}, 0x0, 0x0, 0x0, 0x0}) r4 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:20:34 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$rxrpc(0x21, 0x2, 0x0) dup3(r4, r0, 0x0) 15:20:34 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$TCSBRKP(r0, 0x7b9, 0x20707004) 15:20:34 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:20:34 executing program 0: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x40000, 0x4) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000100)) 15:20:34 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 15:20:34 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socket$rxrpc(0x21, 0x2, 0xa) dup3(0xffffffffffffffff, r0, 0x0) 15:20:34 executing program 4: ioctl$TCSBRKP(0xffffffffffffffff, 0x7b9, 0x20707004) [ 998.700131][ T27] audit: type=1800 audit(8038884034.809:41): pid=14691 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16383 res=0 15:20:34 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socket$rxrpc(0x21, 0x2, 0xa) dup3(0xffffffffffffffff, r0, 0x0) 15:20:34 executing program 4: ioctl$TCSBRKP(0xffffffffffffffff, 0x7b9, 0x20707004) 15:20:34 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) [ 998.739756][ T27] audit: type=1800 audit(8038884034.829:42): pid=14691 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16383 res=0 15:20:34 executing program 4: ioctl$TCSBRKP(0xffffffffffffffff, 0x7b9, 0x20707004) [ 998.991868][ T5] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 999.231920][ T5] usb 3-1: Using ep0 maxpacket: 16 [ 999.351822][ T5] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 999.360710][ T5] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 999.371090][ T5] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 999.380117][ T5] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 999.389211][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 999.397969][ T5] usb 3-1: config 0 descriptor?? [ 999.643809][ T49] usb 3-1: USB disconnect, device number 101 [ 1000.201857][ T49] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1000.451831][ T49] usb 3-1: Using ep0 maxpacket: 32 [ 1000.571924][ T49] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1000.583762][ T49] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1000.594064][ T49] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1000.603445][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.612594][ T49] usb 3-1: config 0 descriptor?? [ 1000.653687][ T49] hub 3-1:0.0: USB hub found [ 1000.871853][ T49] hub 3-1:0.0: 1 port detected [ 1001.584283][ T9181] usb 3-1: USB disconnect, device number 102 [ 1001.595628][ T49] hub 3-1:0.0: hub_ext_port_status failed (err = -71) 15:20:38 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902240001000000f108040000000300000009210a00000122000009058103"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r3, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "183fbf1f"}, 0x0, 0x0, 0x0, 0x0}) r4 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:20:38 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:20:38 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socket$rxrpc(0x21, 0x2, 0xa) dup3(0xffffffffffffffff, r0, 0x0) 15:20:38 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = eventfd2(0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af22, &(0x7f0000000040)={0x0, r1}) 15:20:38 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSBRKP(r0, 0x7b9, 0x20707004) 15:20:38 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 15:20:38 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSBRKP(r0, 0x7b9, 0x20707004) 15:20:38 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$rxrpc(0x21, 0x2, 0xa) dup3(r4, 0xffffffffffffffff, 0x0) 15:20:38 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSBRKP(r0, 0x7b9, 0x20707004) 15:20:38 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r2, &(0x7f0000000680)={{0x1b, 0x5b, 0x7, 0x3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 15:20:38 executing program 4: openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x7b9, 0x20707004) 15:20:38 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$rxrpc(0x21, 0x2, 0xa) dup3(r4, 0xffffffffffffffff, 0x0) [ 1002.404269][ T9181] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1002.681827][ T9181] usb 3-1: Using ep0 maxpacket: 16 [ 1002.801861][ T9181] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 1002.810759][ T9181] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1002.821127][ T9181] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1002.830149][ T9181] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1002.839229][ T9181] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.848014][ T9181] usb 3-1: config 0 descriptor?? [ 1003.093047][ T12] usb 3-1: USB disconnect, device number 103 [ 1003.561902][ T12] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1003.801853][ T12] usb 3-1: Using ep0 maxpacket: 32 [ 1003.922090][ T12] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1003.933018][ T12] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1003.943698][ T12] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1003.953093][ T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.961634][ T12] usb 3-1: config 0 descriptor?? [ 1004.004115][ T12] hub 3-1:0.0: USB hub found [ 1004.221861][ T12] hub 3-1:0.0: 1 port detected [ 1005.063298][ T9181] usb 3-1: USB disconnect, device number 104 15:20:41 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902240001000000f108040000000300000009210a00000122000009058103"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r3, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "183fbf1f"}, 0x0, 0x0, 0x0, 0x0}) r4 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:20:41 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:20:41 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x4a8, 0x3d8, 0x9403, 0x52020000, 0x0, 0x2c0, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x0, 0xff, 0x0, 'syz1\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x508) 15:20:41 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$rxrpc(0x21, 0x2, 0xa) dup3(r4, 0xffffffffffffffff, 0x0) 15:20:41 executing program 4: openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x7b9, 0x20707004) 15:20:41 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 15:20:41 executing program 4: openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x7b9, 0x20707004) 15:20:41 executing program 3: 15:20:41 executing program 0: 15:20:41 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$TCSBRKP(r0, 0x7b9, 0x0) [ 1005.644803][T14828] xt_recent: Unsupported userspace flags (000000ff) 15:20:41 executing program 3: 15:20:41 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$TCSBRKP(r0, 0x7b9, 0x0) [ 1005.931851][ T5043] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1006.191823][ T5043] usb 3-1: Using ep0 maxpacket: 16 [ 1006.312053][ T5043] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 1006.320923][ T5043] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1006.331443][ T5043] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1006.340952][ T5043] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1006.350271][ T5043] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.360503][ T5043] usb 3-1: config 0 descriptor?? [ 1006.613173][ T7627] usb 3-1: USB disconnect, device number 105 [ 1007.081834][ T7627] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1007.321822][ T7627] usb 3-1: Using ep0 maxpacket: 32 [ 1007.442064][ T7627] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1007.453034][ T7627] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1007.463588][ T7627] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1007.472912][ T7627] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.481544][ T7627] usb 3-1: config 0 descriptor?? [ 1007.523429][ T7627] hub 3-1:0.0: USB hub found [ 1007.741844][ T7627] hub 3-1:0.0: 1 port detected [ 1008.593492][ T12] usb 3-1: USB disconnect, device number 106 15:20:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902240001000000f108040000000300000009210a00000122000009058103"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r3, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "183fbf1f"}, 0x0, 0x0, 0x0, 0x0}) r4 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:20:45 executing program 0: 15:20:45 executing program 3: 15:20:45 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:20:45 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$TCSBRKP(r0, 0x7b9, 0x0) 15:20:45 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 15:20:45 executing program 3: 15:20:45 executing program 0: 15:20:45 executing program 0: 15:20:45 executing program 4: 15:20:45 executing program 3: 15:20:45 executing program 0: [ 1009.461867][ T5043] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1009.711843][ T5043] usb 3-1: Using ep0 maxpacket: 16 [ 1009.852061][ T5043] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 1009.860920][ T5043] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1009.871672][ T5043] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1009.880940][ T5043] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1009.890224][ T5043] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.900694][ T5043] usb 3-1: config 0 descriptor?? [ 1010.165501][ T12] usb 3-1: USB disconnect, device number 107 [ 1010.731848][ T12] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1010.991808][ T12] usb 3-1: Using ep0 maxpacket: 32 [ 1011.111913][ T12] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1011.123950][ T12] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1011.133962][ T12] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1011.143198][ T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.153582][ T12] usb 3-1: config 0 descriptor?? [ 1011.203749][ T12] hub 3-1:0.0: USB hub found [ 1011.431892][ T12] hub 3-1:0.0: 1 port detected [ 1012.273105][ T3937] usb 3-1: USB disconnect, device number 108 15:20:48 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902240001000000f108040000000300000009210a00000122000009058103"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r3, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "183fbf1f"}, 0x0, 0x0, 0x0, 0x0}) r4 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:20:48 executing program 4: 15:20:48 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:20:48 executing program 0: 15:20:48 executing program 3: 15:20:48 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, 0x0, 0x0) 15:20:48 executing program 0: 15:20:48 executing program 4: 15:20:48 executing program 3: 15:20:49 executing program 0: 15:20:49 executing program 3: 15:20:49 executing program 4: [ 1013.121880][ T49] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1013.361851][ T49] usb 3-1: Using ep0 maxpacket: 16 [ 1013.481969][ T49] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 1013.490842][ T49] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1013.501221][ T49] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1013.510263][ T49] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1013.519460][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1013.528369][ T49] usb 3-1: config 0 descriptor?? [ 1013.772934][ T3937] usb 3-1: USB disconnect, device number 109 [ 1014.351861][ T3937] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1014.612629][ T3937] usb 3-1: Using ep0 maxpacket: 32 [ 1014.741948][ T3937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1014.752954][ T3937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1014.763565][ T3937] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1014.772966][ T3937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.781572][ T3937] usb 3-1: config 0 descriptor?? [ 1014.834146][ T3937] hub 3-1:0.0: USB hub found [ 1015.041848][ T3937] hub 3-1:0.0: 1 port detected [ 1015.882893][ T5043] usb 3-1: USB disconnect, device number 110 15:20:52 executing program 3: 15:20:52 executing program 0: 15:20:52 executing program 4: 15:20:52 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:20:52 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902240001000000f108040000000300000009210a00000122000009058103"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r3, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "183fbf1f"}, 0x0, 0x0, 0x0, 0x0}) r4 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:20:52 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, 0x0, 0x0) 15:20:52 executing program 3: 15:20:52 executing program 0: 15:20:52 executing program 4: 15:20:52 executing program 0: 15:20:52 executing program 4: 15:20:52 executing program 3: 15:20:52 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:20:52 executing program 0: 15:20:52 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="44000000100001044000"/20, @ANYRES32=r1, @ANYBLOB="000700000000000024001280110001006272696467655f736c617665000000000c000580050001"], 0x44}}, 0x0) 15:20:52 executing program 3: syz_emit_ethernet(0xae, &(0x7f0000000440)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a0f009", 0x78, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x3000000, [{0x0, 0xb, "a78ce540cd4f791153d5dea6b259fe8000000000000023493b87aa0568f00b1c71a8242373244ad2439adc07df0a69748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c11b37adac15084dbaf736b41e5a81802"}, {0x0, 0x1, '\x00'/12}]}}}}}}, 0x0) [ 1016.761833][ T5043] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1017.001814][ T5043] usb 3-1: Using ep0 maxpacket: 16 [ 1017.122019][ T5043] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 1017.130989][ T5043] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1017.142872][ T5043] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1017.152444][ T5043] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1017.161450][ T5043] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.173260][ T5043] usb 3-1: config 0 descriptor?? [ 1017.412859][ T5043] usb 3-1: USB disconnect, device number 111 [ 1017.881844][ T12] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1018.121879][ T12] usb 3-1: Using ep0 maxpacket: 32 [ 1018.242123][ T12] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1018.253028][ T12] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1018.263394][ T12] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1018.272824][ T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.284386][ T12] usb 3-1: config 0 descriptor?? [ 1018.324041][ T12] hub 3-1:0.0: USB hub found [ 1018.541862][ T12] hub 3-1:0.0: 1 port detected [ 1019.393202][ T12] usb 3-1: USB disconnect, device number 112 15:20:56 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902240001000000f108040000000300000009210a00000122000009058103"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r3, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "183fbf1f"}, 0x0, 0x0, 0x0, 0x0}) r4 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:20:56 executing program 3: syz_emit_ethernet(0xae, &(0x7f0000000440)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a0f009", 0x78, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x3000000, [{0x0, 0xb, "a78ce540cd4f791153d5dea6b259fe8000000000000023493b87aa0568f00b1c71a8242373244ad2439adc07df0a69748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c11b37adac15084dbaf736b41e5a81802"}, {0x0, 0x1, '\x00'/12}]}}}}}}, 0x0) 15:20:56 executing program 0: 15:20:56 executing program 4: 15:20:56 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:20:56 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, 0x0, 0x0) 15:20:56 executing program 4: 15:20:56 executing program 3: 15:20:56 executing program 0: 15:20:56 executing program 4: 15:20:56 executing program 3: 15:20:56 executing program 0: [ 1020.281872][ T12] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1020.531894][ T12] usb 3-1: Using ep0 maxpacket: 16 [ 1020.661832][ T12] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 1020.670704][ T12] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1020.680811][ T12] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1020.689780][ T12] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1020.698872][ T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.709146][ T12] usb 3-1: config 0 descriptor?? [ 1020.963876][ T49] usb 3-1: USB disconnect, device number 113 [ 1021.431832][ T49] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1021.671869][ T49] usb 3-1: Using ep0 maxpacket: 32 [ 1021.791974][ T49] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1021.803015][ T49] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1021.813344][ T49] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1021.822916][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.831548][ T49] usb 3-1: config 0 descriptor?? [ 1021.882279][ T49] hub 3-1:0.0: USB hub found [ 1022.101877][ T49] hub 3-1:0.0: 1 port detected [ 1022.953037][ T5043] usb 3-1: USB disconnect, device number 114 15:20:59 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902240001000000f108040000000300000009210a00000122000009058103"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r3, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "183fbf1f"}, 0x0, 0x0, 0x0, 0x0}) r4 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:20:59 executing program 4: 15:20:59 executing program 3: 15:20:59 executing program 0: 15:20:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:20:59 executing program 1: 15:20:59 executing program 1: 15:20:59 executing program 3: 15:20:59 executing program 0: 15:20:59 executing program 4: 15:20:59 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000440)=[{&(0x7f0000000480)=""/187, 0xbb}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x22b41b9a8748b1b5, 0x0, 0x0, 0x800e00510) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000300)=[{&(0x7f0000000040)=""/110, 0x6e}], 0x1) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00515) shutdown(r3, 0x0) r5 = socket$inet6_tcp(0x1c, 0x1, 0x0) sendto$inet6(r5, &(0x7f00000000c0)="a9c3936d6ee888a2fff1dec76466cce89de782d2bef3928a50e1a8837889ff725a605aa7139b10ee8edae1428549a53ac722e62c67eb746d1739a7375040ab87fdc41f903e762c8a8b8b0a23e57e03066b343f1f2365e5732d90fc2716ef6f8a3de94b65c2243e662a4a201a8f908809dfef527a5ea60a4b974b66e1087dc2eb242ff47c2e9de07c04c51728833ffcbe", 0xffffff5a, 0x105, &(0x7f0000000000)={0xfffffffffffffea3, 0x1c, 0x2}, 0x1c) shutdown(r4, 0x0) 15:20:59 executing program 1: r0 = socket(0x2, 0x5, 0x0) connect$unix(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="12023dd4c9"], 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x105, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000000200)=0x8) r1 = socket(0x2, 0x5, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x903, &(0x7f0000000000)={r2}, 0x8) [ 1023.821945][ T3937] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1024.091852][ T3937] usb 3-1: Using ep0 maxpacket: 16 [ 1024.242047][ T3937] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 1024.250907][ T3937] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1024.261330][ T3937] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1024.270433][ T3937] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1024.279543][ T3937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1024.288262][ T3937] usb 3-1: config 0 descriptor?? [ 1024.542861][ T12] usb 3-1: USB disconnect, device number 115 [ 1025.131893][ T12] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1025.371920][ T12] usb 3-1: Using ep0 maxpacket: 32 [ 1025.492025][ T12] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1025.502920][ T12] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1025.512765][ T12] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1025.521883][ T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.532386][ T12] usb 3-1: config 0 descriptor?? [ 1025.574787][ T12] hub 3-1:0.0: USB hub found [ 1025.791841][ T12] hub 3-1:0.0: 1 port detected [ 1026.683153][ T5043] usb 3-1: USB disconnect, device number 116 15:21:03 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902240001000000f108040000000300000009210a00000122000009058103"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r3, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "183fbf1f"}, 0x0, 0x0, 0x0, 0x0}) r4 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:21:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/104, 0x68}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000180)=[{&(0x7f0000000080)=""/56}, {&(0x7f00000000c0)=""/167}, {&(0x7f0000000200)=""/69}], 0x58) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0x896e, 0x0, 0x0, 0x800e00519) shutdown(r3, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r5, &(0x7f00000001c0)={0x46, 0x2}, 0x10) shutdown(r4, 0x0) 15:21:03 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x0, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:21:03 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001240)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000000080)="e9", 0x1}], 0x1}, 0x0) 15:21:03 executing program 1: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000200)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000600)=[@sndrcv={0x2c}], 0x2c}, 0x0) 15:21:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) r1 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r1, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/168, 0xa8}], 0x1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000001500)=[{&(0x7f0000000280)=""/71, 0x47}], 0x1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x470, 0x0, 0x0, 0x800e00549) shutdown(r2, 0x0) ppoll(&(0x7f0000000bc0)=[{0xffffffffffffff9c}, {}, {}], 0x3, 0x0, 0x0, 0x0) shutdown(r3, 0x0) r4 = socket(0x0, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x8, &(0x7f0000000180)=0x9, 0x4) 15:21:03 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="36000000840000000400000000000000000000016cbe34ea67e3c0d027"], 0xc0}, 0x0) 15:21:03 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000040)={0x1c, 0x1c, 0x3}, 0x1c) 15:21:03 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000380)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000200)='{', 0x1}], 0x1}, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfe4d}, 0x100) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0x100, &(0x7f0000000400)=ANY=[], &(0x7f0000000300)=0xb8) 15:21:03 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = fcntl$dupfd(r1, 0x0, r0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x24, &(0x7f0000000000), 0xfe6a) 15:21:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xbf9d, 0x0, 0x0, 0x800e0053e) readv(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xccf3, 0x0, 0x0, 0x800e005a6) shutdown(r0, 0x0) r4 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r4, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) shutdown(r3, 0x0) 15:21:03 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x0, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) [ 1027.511903][ T49] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1027.751818][ T49] usb 3-1: Using ep0 maxpacket: 16 [ 1027.871925][ T49] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 1027.880833][ T49] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1027.892738][ T49] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1027.901713][ T49] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1027.911383][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.924385][ T49] usb 3-1: config 0 descriptor?? [ 1028.163247][ T3937] usb 3-1: USB disconnect, device number 117 [ 1028.761839][ T3937] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1029.031912][ T3937] usb 3-1: Using ep0 maxpacket: 32 [ 1029.161943][ T3937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1029.172915][ T3937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1029.182700][ T3937] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1029.191736][ T3937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.200456][ T3937] usb 3-1: config 0 descriptor?? [ 1029.253705][ T3937] hub 3-1:0.0: USB hub found [ 1029.471825][ T3937] hub 3-1:0.0: 1 port detected [ 1030.365120][ T3937] usb 3-1: USB disconnect, device number 118 15:21:06 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902240001000000f108040000000300000009210a00000122000009058103"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r3, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "183fbf1f"}, 0x0, 0x0, 0x0, 0x0}) r4 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:21:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x0, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:21:06 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000340)={&(0x7f0000000280)=@in6={0x1c, 0x1c, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="14"], 0x14}, 0x0) 15:21:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x560e, &(0x7f0000000100)) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) 15:21:06 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x131, 0x131, 0x2, [@fwd, @enum={0x0, 0x8, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}, {}, {}, {}]}, @volatile, @datasec={0x0, 0x7, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}, {}], 'I'}, @struct={0x0, 0x3, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}]}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}]}}, 0x0, 0x14e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 15:21:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xbf9d, 0x0, 0x0, 0x800e0053e) readv(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xccf3, 0x0, 0x0, 0x800e005a6) shutdown(r0, 0x0) r4 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r4, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) shutdown(r3, 0x0) 15:21:07 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d400000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008000a00", @ANYRES32=0x6, @ANYBLOB="ac0012000800010067726500a000020008000700e00000010500170000030000060003003f000000060011"], 0xd4}}, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) 15:21:07 executing program 0: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)={&(0x7f0000000100)='./file0/file0\x00'}, 0x10) umount2(&(0x7f0000000080)='./file0/file1\x00', 0x0) [ 1030.921659][T15301] ptrace attach of "/root/syz-executor.0"[15300] was attempted by "/root/syz-executor.0"[15301] 15:21:07 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') creat(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) [ 1030.983689][T15315] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.4'. 15:21:07 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x0, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) [ 1031.088037][T15330] msdos filesystem being mounted at /root/syzkaller-testdir895317232/syzkaller.zGdDzf/1031/file1 supports timestamps until 2107 (0x10391447e) 15:21:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000002300)="baf80c66b89e88848666efbafc0cb80090ef054ea6360fc76f0064670f01c8360f6f5d9b0fc738646667660f20e00f01d1d314baf80c66b88e5a878c66efbafc0ced", 0x42}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000280)={{0x0, 0x0, 0xffffffffffffff54}, "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", "204b9e1804d636301150775298e6490040d0ecb72371cfe0ccc258d2b4450458b909ae785f60b932863937ed25df0ce2b046ccc47e3501ed7a53e69d95dfb761f3fb81659983876f915b21b4b91270b4607875b751136514bb42b1de575e5ae05e98fd37dde49acb6a8e7f7c592ceb8793d00c84515e9b091fca8056f69ef47c1c91735af04b3077a94a24147489c6bbc3d63a76ba4eb1e6adf014106f4b0117fc6a2b2c84ca9e6c40fade373fd49f657e5e828399868d39d2a9d8cb3f4508e156d31ded826a64d84b19ceb0c13d9566f14866028f00408428bc6b9a27761fb13e70561fa8bb45bf2547baeebd7c99e01c1ebdac09ba75e3f67b2bc6898ca2c8e6c2b09efef1e688c74fe8e214b657d3325725531f9ce71d59532adc69f40e0b821fbd14558133f9fcd9d5ace9150703b5879f74028583dccd4984a9fedf23f1f6b8c501f9a99762079404f109e6d69b025edbf2d3169e44f186eb60e7abf9539cb8013670435420f54b7e485644f5afc2d0581d8404c23bcf2c0bcd6d3a6fbc658721e74546ea52d57f259e841e87f01ace9d7fb10bb4356abffa306d91963914bc144e486f78c048aafe20eae27ff53250de7bed8c4167780c53facfd741b93f53d67a60eba1527701896bcd29a6cc20b9390582421eb0e5dce7a66a94881904dd91c47c59e8b7219adae86ba78b230306829368a56dc908245fc72886c3b18facea659b27466d3c6a85b541f20a012660319f8f4ba0faf0d83d28ac63ae417323a0f75b88235d1a60a29c41f662b34ac40ac19c94f227567860a998f5e4d8f65b930c1a1209ba04cc2406599914e8ed7c98d8095a56fd29920c47c6221bf7e6a076dfc90947af9468d8844731ac3923896f25a8402421e24e1d328e5b9daeb97048b87e3d374874071931ad791c1f03324ba01d463364a5bb1dba7e3b807aec9c333703397a45918c73b443dd46f7b289736662ad833302fa89567e44c3de8e2f87bb5f8758abf6f888ad26bb5ed48a4bd828d8fcf5c01cf7588009c1a6c35e94142950b3bac8fa0af15c2f30504cef3e544b132e4096a836aa49336cbe878d2e33075d0712adc3e75b9f9bc7ec420f123084eb296119171535c4fa49d460d4444eb309f424ec13be89ff6641caa089da262ff89c0d4b1a86fac91361a7a124a0e4b27de253186e10671d2532d600f6b4089dc690f600363092ad93fb62fbab9e1a96caefe31e4c117420fd1df64e4e0cf4967cb026a003be444278553c2e58e19ec5a6db3921fab8fa0748965e523659e54a3e01190492f9b01811d06b13d8c833454ab5a93af8a9ad27a155d682d8c78f074da17d6ccb7ded5b5f3c30e3afb3c0e4aab6ce797e8142df9a74f486aee74c0bc021c227d802c5f5e79678c45bac331d6ec24ecb404296dc9e90b2c191fc14c53505e92587f43a5eedc56a6408048d9dbb8bee8840a656952cb361f0d76baa20939e6e8ab917e12b76dd812b95e68c90708d7cd81aa18002eea116f4190e49d1f628a509c8fb65f393ef5bcf7d1b9ea289e0532ee5f46e65709e84aaa7a6334c58eaab5c3cced88fa3e9e365ace119a3c40dfe336abbe6d3a09dfd895cdc3daae26ae9d3f68a3a2184ac5f6972ef034f1f9f0d4100a55b8638db0986f362a23b599903909a5a6193fc2c6e54adc965ff5d48bc1ed1b6ff0ab226b9598f70a13ca0a0b2d2cc05f17449bd4cbd224fa75810955011d5a401348c0b75546c1fd86824ced7b0c79cb4d13a3722aef6f7a0cb49f76a372ff133736f04b67bf6a74d5164a227f4865dfd15181e0a9e5dc53317ffb04a7ab1fba87d3b34bd1cee7c6aef4b3ebef183c9fcd4daf091ef1f5f2709a7eb4a648242c408e7d5b10b766e0f648c654d99d0722189c4956474892e379a84b1f09f13ba589423e43b4b0dd267b1d0c976fb64903ea2d22e2612d9dbad91536a986f44986d74578f2cf378dc6505cc26261548a080e11d74fed2cdaa90479f0656fd927f89a0624f4ce943981ffbec2ceb27c7fb6e6ee7df7c2d26d7151f1dadb172a0017787c5d32d6408b6662c8f5348f34e63649206142164f7aa076b2c83bfffe44126ee923f0b9bc917e52308373553cf19e6798ac83ace350be47f445ef0d268c2a4fc67998a5907db42decc63fcfc30df0a4543da178e442aec97060edc209e34849f6beea0e366eccc80b87c1c16f89e5608b96c176ccfaf6014a619b83d72c5a89749cf763fd76c6ae82b6a1322674838ab9e5f9a0db7aa8b7d27db308edb664fc0197756f6709df36d9f6ed678944e18455a8d49434f9a6f223cbf52b6a1ba266a55331ffe7e83fb4130c2f5528626c4e451d8bac1da046dd59249fe41b6c8a36e82346918e0177c876f44101ff9f7721d8fbe1eca04e13ba8db3f5bd01c3661df0d6c8a24d45a246e0ac80aed4178901a71a939da4622592b3a8d87b3ae35370530039d7d413455e9d61656b58a1e63aa9bf1a87d8bcc6605c3167836f82ba01f54934e2d31d7463e1848ee8a2cca55a029d5ed37236dda9f278981cdb330eabc6bfc33a7fee5678c38b8e0a9258fa8ce5cb8abc3320d44dd16098df1bbf9d3e3142ec1838ba81785e37dc97fda2797e3cf6b7d6c367737b4df96a242149bbba7af54da91b404fbf01f4ecfb7ebd97c67de2415b3bca3b5f21deae988733dcb547a17aa38c0b98aba60fbb1d57f9e8f005ae6233e5da68da32c7a2778944a2eacba03e3312fe968fa3be0e2ceb4d8526803e7a8f24618b1003860e424da518c9602cb092c9c6b930b72523bbf615ad8330e337e64ff82eb78d9a2384e86afece8aa9d9cb1b7ab27265261a3cf542e1655792ed66b28d27bf4f02d13e93413bfc5fae7dbec15aac85331ae3d4032679988ffd1c1750447f763ebc9ba8f8ba4521b74563af6ee8a996af3707dd03118c3f0d18d612a5105519310f7b8c5eb4b7e3a0d675374da18314d144b5d5d0ba2735dab4efdf68f70285ce4d35032427e23fe7c59c5844879550417dc93d2221fe0ff82c7e21ebba19c01fefc6f6eeb7078e7557f077ca089246e6f3901e127ca4685c191847ae720ce30d41939239b2835d9cfd126faabc88eb80d409d8ec1cdf6070c55109bdbbb668fd56c6ebd3503986cdf5ade19903a85516f0ed87872f397e6244b0f58c70b8dd0cbc408dd7a87c42d672d31fde7fbc31b3acff4be744b933ec0645f76b52481ba6f50a25a98f89d9989e347b682a459eb38004d0de0a7314f8319b1e0ce5152a4928d7f59769347a7f48af595d028b5012cf5b7fc081cbec3c5ad30801947b5d3f87a242b05691ef3f46f0ba35fa6ee28a966ad42e34ef6192cb6e5de41411df4638c825688abc1c8f1fa7b2eced5ae40a5d35d7cfd981f4dd46a91e8f123187d8e99a947020cdc4cfcb66ee004232ed5badfa694fd943ed59f01433989e5663a77fd2bbcdbfaad5ab482150f22ffa6b1ae9e99134b320c04444c3d5d71e37c6d4faf82b1297d75a520e6e6c5a0d7ab86dea5245a97b16a7690f50e9abd452da33c58974cb63e4711fece83cf1251c6eecc7c9a887b0a881f148b6c8fa3749ef09661488909a2f74e41a4968f5f1d1ebd9a511f5732ea60a18032d68dcf34a5914b1c24275e6c3d331a8c454e4c615dc5f6ce4de1b44fc755da73eef517bca08fa464443eabf4046961625ee82c406e08359b49785a1cbe9822cada3375da9adf55bd50e156a314f10107a3fb880a944fa3a0cdb4be2234c19ab26f8075c6389a0a6062e82050b493a30e617f728b8d0ced0b69da60c6fdadd95ee1c0e656b63ecc72a491e07bce4c3df3761e51bb327a86d55a375e4f5859a8b179a47f4b5b8b85fed0db916e31885d0ad185d6c7e79449e282a5d10a7cf86d0305a2673cd9aa834d130fcb1098c0f69771ae23e2b49cdd3d39be17fcc309a282486bf0e0829a0805a036b0b1e357f03a861857312dab3033f00957ff6f03a35240724bc6adf429090f555aca563ffb5e4b67c75486149f2495971bf653617f29e50d59da32288afeabc768787d2e830c70d5f0dbd8db5e9923b8893f32c4cdc0d8130caefade59d7f5e270f8b5487b69815dd8cec6d3dfa3ca308987f2970ab3e8714cdbae27dc22fa434805c9284b904840a92bc76490c15c6a04df137940d48f7ac6285f858611376f447ebaf11ce4014066d57e5fa579b588e0d795fb0322d1b8606faf9507092be3e320184a5324df47792e8b015ee27ace73b0bc05f3eff2c2a9ee45752df32a85b1ad5679aedbe40ac59511938929e210a409e538c139d1fb93891d2b9908f915b9c556788bb8926b6a96923038a119eb68bcb528a42e97f8fbd49e7d5bb3e51987cca590ea8a18e049f64d8c994d63a707c441e63509f909adf5f7c26d36714bd56307513003f8f85f20c8fea4248627d2f19891baef9b134a8ecb6e3da6232c5b818d7469645038312b6b952f782f28ccd199367a51f750927e5f11ef04cb299dc7ba0c24500134d3a9a0a4f62903ae930f5ba49c39855ffc4aba6cc9d400075f094875db9ebcbcbb35309421d08a928b0216dcbbf718761b01b4d41cf55b0b2bf4c89603a61e5ac2f5bf5236d4bee90617e1b2fdc3a4540db2c89561c1cb9b1e28436013546e654e36fa328097ce8a4baf5a2fd78f9bca617bd4de062dbbc38c7356232b385823b6c604a401f43f5864111eff29045c12b6c622182e097caa5a9945133375b46dc0e268e860dd58b62403c41393f02c7f1d23a1d0daad5d2eb7a085387ea6b81ceb6191d5ffa7f58848996caad4796ee8d9e1bad072455a37d8b64888cb4007f344783afca22db07a2ccb8531c6a9d69bffdf1f949e3fce89f223119595c5b9bfa51893ff36849be61ff02939360a5d5b0e05d22aa3a1f16c27103edeb00c0f763bd4251805ec8d894692cd1636b4b1c96ab613896c17b2fb8a414a91463d54f145e1d49378e726e5921d8cd34aeb176a36701c9b75311806efcf402d4345034d7fd5165857bd2cd07b32a18334a3cf358dadbc8144b806120805a07714d8d0029fe0db7958bbb69b9a216e5945fdf0b892665c0bad2cd822797d5c7223094cd54042c781fba9d7f05a169f390225385d5c055896dc8a620a637a7c73ee77fbf2152fb62af9bcbe01389dd846724fa24ca6088d2bddf9bcae4d9e11f86266e4d87f6b11f3721c30c3f48ddfecb7623802c7e3f595b088473747d25b70bbdf8920924c6bb9e202e6d54e340a469e8ecf66b49dda0036a7d071492742593c2e02bd7bd703774f2ac8c45dbfa1f8ce4c205a05064362bf2819e80bd406367a86ece3f5d54b43029b3f7fcc2378c5e33e8de66fa5f3c4974310c3ac4d2ab1234b1fea14d71512c578dfab154a74dc66c8a5ff983a41e02c57c58cd9c3a77d22f15f8a6abe41de51ce4a92151ee25c6f2c4feb0453b4f86fb4c7e19063b871ff6458b2ad51b992df6b16de3a5a2f5935c85d5a8709d82943c645f6199e76b38d718b86945638d92daa15aeb9beaa53028a425c6ee90dbd58b57f4a748ec0037fca725812aaac8e201d5121c06c9d3bfcbe799b9fa28440fceec78a5d39a112626bd0f9e530cb5573083e6b3b0ce5ef60e85ea643331d45663f309d75d36c88ed56abbac74672daa72c2f180ab5d117d2ab17db9e36a807bcaa62a07aa5486d39d63f64d23f03e58f6fa346b39005cde05121ecc2146ae982d02532a2deb90d8b9cfd32ff03a5294933292fb3d58760bc81a72df0e602b9b4b7e407bc542924e9763fe0d4bd5346ccb9e10b1ea7dade31d4bbc9"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:21:07 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x0, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) [ 1031.232025][ T12] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1031.491853][ T12] usb 3-1: Using ep0 maxpacket: 16 [ 1031.631838][ T12] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 1031.640818][ T12] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1031.651337][ T12] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1031.660549][ T12] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1031.669705][ T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.681223][ T12] usb 3-1: config 0 descriptor?? [ 1031.922847][ T49] usb 3-1: USB disconnect, device number 119 [ 1032.391901][ T49] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1032.631828][ T49] usb 3-1: Using ep0 maxpacket: 32 [ 1032.751926][ T49] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1032.764171][ T49] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1032.774187][ T49] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1032.783466][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.792472][ T49] usb 3-1: config 0 descriptor?? [ 1032.832148][ T49] hub 3-1:0.0: USB hub found [ 1033.051860][ T49] hub 3-1:0.0: 1 port detected [ 1033.943025][ T5043] usb 3-1: USB disconnect, device number 120 15:21:10 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902240001000000f108040000000300000009210a00000122000009058103"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r3, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000700)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "183fbf1f"}, 0x0, 0x0, 0x0, 0x0}) r4 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:21:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000002300)="baf80c66b89e88848666efbafc0cb80090ef054ea6360fc76f0064670f01c8360f6f5d9b0fc738646667660f20e00f01d1d314baf80c66b88e5a878c66efbafc0ced", 0x42}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000280)={{0x0, 0x0, 0xffffffffffffff54}, "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", "204b9e1804d636301150775298e6490040d0ecb72371cfe0ccc258d2b4450458b909ae785f60b932863937ed25df0ce2b046ccc47e3501ed7a53e69d95dfb761f3fb81659983876f915b21b4b91270b4607875b751136514bb42b1de575e5ae05e98fd37dde49acb6a8e7f7c592ceb8793d00c84515e9b091fca8056f69ef47c1c91735af04b3077a94a24147489c6bbc3d63a76ba4eb1e6adf014106f4b0117fc6a2b2c84ca9e6c40fade373fd49f657e5e828399868d39d2a9d8cb3f4508e156d31ded826a64d84b19ceb0c13d9566f14866028f00408428bc6b9a27761fb13e70561fa8bb45bf2547baeebd7c99e01c1ebdac09ba75e3f67b2bc6898ca2c8e6c2b09efef1e688c74fe8e214b657d3325725531f9ce71d59532adc69f40e0b821fbd14558133f9fcd9d5ace9150703b5879f74028583dccd4984a9fedf23f1f6b8c501f9a99762079404f109e6d69b025edbf2d3169e44f186eb60e7abf9539cb8013670435420f54b7e485644f5afc2d0581d8404c23bcf2c0bcd6d3a6fbc658721e74546ea52d57f259e841e87f01ace9d7fb10bb4356abffa306d91963914bc144e486f78c048aafe20eae27ff53250de7bed8c4167780c53facfd741b93f53d67a60eba1527701896bcd29a6cc20b9390582421eb0e5dce7a66a94881904dd91c47c59e8b7219adae86ba78b230306829368a56dc908245fc72886c3b18facea659b27466d3c6a85b541f20a012660319f8f4ba0faf0d83d28ac63ae417323a0f75b88235d1a60a29c41f662b34ac40ac19c94f227567860a998f5e4d8f65b930c1a1209ba04cc2406599914e8ed7c98d8095a56fd29920c47c6221bf7e6a076dfc90947af9468d8844731ac3923896f25a8402421e24e1d328e5b9daeb97048b87e3d374874071931ad791c1f03324ba01d463364a5bb1dba7e3b807aec9c333703397a45918c73b443dd46f7b289736662ad833302fa89567e44c3de8e2f87bb5f8758abf6f888ad26bb5ed48a4bd828d8fcf5c01cf7588009c1a6c35e94142950b3bac8fa0af15c2f30504cef3e544b132e4096a836aa49336cbe878d2e33075d0712adc3e75b9f9bc7ec420f123084eb296119171535c4fa49d460d4444eb309f424ec13be89ff6641caa089da262ff89c0d4b1a86fac91361a7a124a0e4b27de253186e10671d2532d600f6b4089dc690f600363092ad93fb62fbab9e1a96caefe31e4c117420fd1df64e4e0cf4967cb026a003be444278553c2e58e19ec5a6db3921fab8fa0748965e523659e54a3e01190492f9b01811d06b13d8c833454ab5a93af8a9ad27a155d682d8c78f074da17d6ccb7ded5b5f3c30e3afb3c0e4aab6ce797e8142df9a74f486aee74c0bc021c227d802c5f5e79678c45bac331d6ec24ecb404296dc9e90b2c191fc14c53505e92587f43a5eedc56a6408048d9dbb8bee8840a656952cb361f0d76baa20939e6e8ab917e12b76dd812b95e68c90708d7cd81aa18002eea116f4190e49d1f628a509c8fb65f393ef5bcf7d1b9ea289e0532ee5f46e65709e84aaa7a6334c58eaab5c3cced88fa3e9e365ace119a3c40dfe336abbe6d3a09dfd895cdc3daae26ae9d3f68a3a2184ac5f6972ef034f1f9f0d4100a55b8638db0986f362a23b599903909a5a6193fc2c6e54adc965ff5d48bc1ed1b6ff0ab226b9598f70a13ca0a0b2d2cc05f17449bd4cbd224fa75810955011d5a401348c0b75546c1fd86824ced7b0c79cb4d13a3722aef6f7a0cb49f76a372ff133736f04b67bf6a74d5164a227f4865dfd15181e0a9e5dc53317ffb04a7ab1fba87d3b34bd1cee7c6aef4b3ebef183c9fcd4daf091ef1f5f2709a7eb4a648242c408e7d5b10b766e0f648c654d99d0722189c4956474892e379a84b1f09f13ba589423e43b4b0dd267b1d0c976fb64903ea2d22e2612d9dbad91536a986f44986d74578f2cf378dc6505cc26261548a080e11d74fed2cdaa90479f0656fd927f89a0624f4ce943981ffbec2ceb27c7fb6e6ee7df7c2d26d7151f1dadb172a0017787c5d32d6408b6662c8f5348f34e63649206142164f7aa076b2c83bfffe44126ee923f0b9bc917e52308373553cf19e6798ac83ace350be47f445ef0d268c2a4fc67998a5907db42decc63fcfc30df0a4543da178e442aec97060edc209e34849f6beea0e366eccc80b87c1c16f89e5608b96c176ccfaf6014a619b83d72c5a89749cf763fd76c6ae82b6a1322674838ab9e5f9a0db7aa8b7d27db308edb664fc0197756f6709df36d9f6ed678944e18455a8d49434f9a6f223cbf52b6a1ba266a55331ffe7e83fb4130c2f5528626c4e451d8bac1da046dd59249fe41b6c8a36e82346918e0177c876f44101ff9f7721d8fbe1eca04e13ba8db3f5bd01c3661df0d6c8a24d45a246e0ac80aed4178901a71a939da4622592b3a8d87b3ae35370530039d7d413455e9d61656b58a1e63aa9bf1a87d8bcc6605c3167836f82ba01f54934e2d31d7463e1848ee8a2cca55a029d5ed37236dda9f278981cdb330eabc6bfc33a7fee5678c38b8e0a9258fa8ce5cb8abc3320d44dd16098df1bbf9d3e3142ec1838ba81785e37dc97fda2797e3cf6b7d6c367737b4df96a242149bbba7af54da91b404fbf01f4ecfb7ebd97c67de2415b3bca3b5f21deae988733dcb547a17aa38c0b98aba60fbb1d57f9e8f005ae6233e5da68da32c7a2778944a2eacba03e3312fe968fa3be0e2ceb4d8526803e7a8f24618b1003860e424da518c9602cb092c9c6b930b72523bbf615ad8330e337e64ff82eb78d9a2384e86afece8aa9d9cb1b7ab27265261a3cf542e1655792ed66b28d27bf4f02d13e93413bfc5fae7dbec15aac85331ae3d4032679988ffd1c1750447f763ebc9ba8f8ba4521b74563af6ee8a996af3707dd03118c3f0d18d612a5105519310f7b8c5eb4b7e3a0d675374da18314d144b5d5d0ba2735dab4efdf68f70285ce4d35032427e23fe7c59c5844879550417dc93d2221fe0ff82c7e21ebba19c01fefc6f6eeb7078e7557f077ca089246e6f3901e127ca4685c191847ae720ce30d41939239b2835d9cfd126faabc88eb80d409d8ec1cdf6070c55109bdbbb668fd56c6ebd3503986cdf5ade19903a85516f0ed87872f397e6244b0f58c70b8dd0cbc408dd7a87c42d672d31fde7fbc31b3acff4be744b933ec0645f76b52481ba6f50a25a98f89d9989e347b682a459eb38004d0de0a7314f8319b1e0ce5152a4928d7f59769347a7f48af595d028b5012cf5b7fc081cbec3c5ad30801947b5d3f87a242b05691ef3f46f0ba35fa6ee28a966ad42e34ef6192cb6e5de41411df4638c825688abc1c8f1fa7b2eced5ae40a5d35d7cfd981f4dd46a91e8f123187d8e99a947020cdc4cfcb66ee004232ed5badfa694fd943ed59f01433989e5663a77fd2bbcdbfaad5ab482150f22ffa6b1ae9e99134b320c04444c3d5d71e37c6d4faf82b1297d75a520e6e6c5a0d7ab86dea5245a97b16a7690f50e9abd452da33c58974cb63e4711fece83cf1251c6eecc7c9a887b0a881f148b6c8fa3749ef09661488909a2f74e41a4968f5f1d1ebd9a511f5732ea60a18032d68dcf34a5914b1c24275e6c3d331a8c454e4c615dc5f6ce4de1b44fc755da73eef517bca08fa464443eabf4046961625ee82c406e08359b49785a1cbe9822cada3375da9adf55bd50e156a314f10107a3fb880a944fa3a0cdb4be2234c19ab26f8075c6389a0a6062e82050b493a30e617f728b8d0ced0b69da60c6fdadd95ee1c0e656b63ecc72a491e07bce4c3df3761e51bb327a86d55a375e4f5859a8b179a47f4b5b8b85fed0db916e31885d0ad185d6c7e79449e282a5d10a7cf86d0305a2673cd9aa834d130fcb1098c0f69771ae23e2b49cdd3d39be17fcc309a282486bf0e0829a0805a036b0b1e357f03a861857312dab3033f00957ff6f03a35240724bc6adf429090f555aca563ffb5e4b67c75486149f2495971bf653617f29e50d59da32288afeabc768787d2e830c70d5f0dbd8db5e9923b8893f32c4cdc0d8130caefade59d7f5e270f8b5487b69815dd8cec6d3dfa3ca308987f2970ab3e8714cdbae27dc22fa434805c9284b904840a92bc76490c15c6a04df137940d48f7ac6285f858611376f447ebaf11ce4014066d57e5fa579b588e0d795fb0322d1b8606faf9507092be3e320184a5324df47792e8b015ee27ace73b0bc05f3eff2c2a9ee45752df32a85b1ad5679aedbe40ac59511938929e210a409e538c139d1fb93891d2b9908f915b9c556788bb8926b6a96923038a119eb68bcb528a42e97f8fbd49e7d5bb3e51987cca590ea8a18e049f64d8c994d63a707c441e63509f909adf5f7c26d36714bd56307513003f8f85f20c8fea4248627d2f19891baef9b134a8ecb6e3da6232c5b818d7469645038312b6b952f782f28ccd199367a51f750927e5f11ef04cb299dc7ba0c24500134d3a9a0a4f62903ae930f5ba49c39855ffc4aba6cc9d400075f094875db9ebcbcbb35309421d08a928b0216dcbbf718761b01b4d41cf55b0b2bf4c89603a61e5ac2f5bf5236d4bee90617e1b2fdc3a4540db2c89561c1cb9b1e28436013546e654e36fa328097ce8a4baf5a2fd78f9bca617bd4de062dbbc38c7356232b385823b6c604a401f43f5864111eff29045c12b6c622182e097caa5a9945133375b46dc0e268e860dd58b62403c41393f02c7f1d23a1d0daad5d2eb7a085387ea6b81ceb6191d5ffa7f58848996caad4796ee8d9e1bad072455a37d8b64888cb4007f344783afca22db07a2ccb8531c6a9d69bffdf1f949e3fce89f223119595c5b9bfa51893ff36849be61ff02939360a5d5b0e05d22aa3a1f16c27103edeb00c0f763bd4251805ec8d894692cd1636b4b1c96ab613896c17b2fb8a414a91463d54f145e1d49378e726e5921d8cd34aeb176a36701c9b75311806efcf402d4345034d7fd5165857bd2cd07b32a18334a3cf358dadbc8144b806120805a07714d8d0029fe0db7958bbb69b9a216e5945fdf0b892665c0bad2cd822797d5c7223094cd54042c781fba9d7f05a169f390225385d5c055896dc8a620a637a7c73ee77fbf2152fb62af9bcbe01389dd846724fa24ca6088d2bddf9bcae4d9e11f86266e4d87f6b11f3721c30c3f48ddfecb7623802c7e3f595b088473747d25b70bbdf8920924c6bb9e202e6d54e340a469e8ecf66b49dda0036a7d071492742593c2e02bd7bd703774f2ac8c45dbfa1f8ce4c205a05064362bf2819e80bd406367a86ece3f5d54b43029b3f7fcc2378c5e33e8de66fa5f3c4974310c3ac4d2ab1234b1fea14d71512c578dfab154a74dc66c8a5ff983a41e02c57c58cd9c3a77d22f15f8a6abe41de51ce4a92151ee25c6f2c4feb0453b4f86fb4c7e19063b871ff6458b2ad51b992df6b16de3a5a2f5935c85d5a8709d82943c645f6199e76b38d718b86945638d92daa15aeb9beaa53028a425c6ee90dbd58b57f4a748ec0037fca725812aaac8e201d5121c06c9d3bfcbe799b9fa28440fceec78a5d39a112626bd0f9e530cb5573083e6b3b0ce5ef60e85ea643331d45663f309d75d36c88ed56abbac74672daa72c2f180ab5d117d2ab17db9e36a807bcaa62a07aa5486d39d63f64d23f03e58f6fa346b39005cde05121ecc2146ae982d02532a2deb90d8b9cfd32ff03a5294933292fb3d58760bc81a72df0e602b9b4b7e407bc542924e9763fe0d4bd5346ccb9e10b1ea7dade31d4bbc9"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:21:10 executing program 0: 15:21:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xbf9d, 0x0, 0x0, 0x800e0053e) readv(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xccf3, 0x0, 0x0, 0x800e005a6) shutdown(r0, 0x0) r4 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r4, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) shutdown(r3, 0x0) 15:21:10 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x0, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:21:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000002300)="baf80c66b89e88848666efbafc0cb80090ef054ea6360fc76f0064670f01c8360f6f5d9b0fc738646667660f20e00f01d1d314baf80c66b88e5a878c66efbafc0ced", 0x42}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000280)={{0x0, 0x0, 0xffffffffffffff54}, "be77f645fa0faab4173328e03e0e9f020bbc798c84be65bf762199e269b6d15af3d542e5a531a895866fbf13910d95e922d6aa84d68924efe5e444b34d9df08a868ae23c677546798d6ec2c17d6e3f87f0d757c2078c9325c641fea9938ba4f20ebb2577f51ba467d973398c7fa94be4e2abd427b7ad4385c63e630090759c2a6c768a973d0b1e7244e494d5925d9d9f40afd544b84d1fdb8de7af279d8700739c11327a76f8bc32743c959d8858b276c211222f40206257be84ddd07b20d8b1de9b5390ba5eaa289c0bfdf6b5636b7acfac5159e2e7759338e06ae00e4b7cf162e45442e3c8395858847e3e28da4ed237027cd849991ab91e6e5dc61b9936de574c3b26a2b0e303386c02ed1bb6a5acaf8a9271e196bc59fb3d7d6a88383d53302680fd8ebd0e75fa67333a6fb9da0333d6f87b3f628136a4b9ec1c2f4cf3d5ec900ec17d48e3f741860d963ec6e629243d06b547374ec3f5a0a8e71cdd67e8f591d68711ba4df1f2fc62d9f54c6f7b8844c8ce569fb7f983a631250e77374780413ab37235afdefb70572e79f35d36406aded61bcf76711aacf325b2ac1f78b4ede1239e36d5d644c7a81cdf6b95a1e3aa6c2f70d889654572d1f88f05e5b2c5f5c37d6570102c2525a9b3fa28a88c83ded573a896239900bd365dc0323d4921c3c96a3dae810479a1ac83b64f0f9b2008eb51832bce90105dab379b3d99f6761d4cf438d92356c563c982938fe83026258aad0a7d9f5eacfa359c68ec271d3ecf9a57d3eec56cb0bcf1bb0adc6c297d6e5b101640d3c5b50bcb54faebed4f850e737b5a2837054bccbecfd1c28e70a967a350d21867ea95b2cdfe55fd3edc6e1f4db06a5e6b77a333af48e92899e074794f3b4687dce6d45cb33433e922b1602e767164dc0e760d14b4c70f304de2cb56ca5ea35719f492480e48b9007e4073a8e02450a93d3932971b32aca283773bbb7974486478d380d8524c0eee27ba19d9c51196494bc3f2c41c1ddc72b0b9d97ca307022baf742cb69b45de669e3224c1eaf4e6ec7bb76f921ad3fd01e1138eda10e945ca95302c1729adf6526041169700a783f767632e99b55eac5e4ebc25b63e11649a31e1dba33445a36b40c7cc7ab6450cb4853c69a9f1eb00d466f6c98f297d3e4882fd4d1a9dff0786cece0dd1b03fd84f982b493349f32e49be255102e7bd1475e25574a992da6907a0e6bce48d4601b51ca05798a0e8b5faa9ed6700902e4626b866b4219e3880277bca07f577def954fdd64e089622ed0eec558759a9b6d3e512b330fa30e31403053a73da1747a7874f5b7a9fde4c0f9f29a27e795e275c9f6c33d9db7f370f148a790811428b2f96566bd0e2b148997e69b0ffe1a81cb04d43ce6a24ea2a9414b930fa1330153cb20aaae484e515393b9ddf9d029806c35d5e956462b7cc7f1c7995006ffeae1f1ba1daf8d43309198bf444ec82c670800d5dacd600924564931014b1e834a38274c6560784572e6d4bf8c4a5a1ee5edb2f4ea5fa9f07b11d3d1d88b993fa662bc04dfb9ffa9e534f1622efd7f823346aa7e0a988f56be531c73f34439df61f9737cca8b93d2c25695138c70c469298c3a114c89a8c3409d4dc18e7bd0158631d0b936823a6dda814ed50f83862058d1ecc19b2e1195c910edb5e7164fbd403de0beb5d7feec901a5a373afa1162be95f0e71e50d479e33494d7c98c1cb2ac886c81610678923685fa9f5fff2584c89130b7d2ac78317e531bb2fcade76520cf8bec450e31eebfa5ae2f78587c572d36d56a69cf3f2cc9e15b77c11877d27e8af0196902d7f94646f0294b4507ae4461397ef21b24a2142f740460e1eb1935cbaccd14f71f21d6fb7144de99154f037cf31e9f30da3c935950c7d1c859096d44b57e7bd37147304b2fe51ab63ca7c4031c1f07913c8a894a6b0573886d7a0a62cd20a0f433e541a43808465eb82af5bb9c819a74bed83cf91aa180442c28b9f4d69dd7e728c7734dd3bd3e277e67e96ab9f09e083c0a6e42fe2bc5dcae9a2deddb7f763e62b0d8adacc00af734bb9e978c160600611c83309468a2f942f5d2c9f7cafc97dae2f542ef33be39952fa70ee3e2ecb3105c1a490db73fcf46a3645de10e1cb335ea604f41d10b723872c26f20a71f44b1301fffd601c6a609e0d195bbcb1203cd23fdb3e3f59fa8ae5a484881c34706bacb6a479fa7c9cc6920613dd6903bf046493bac060f046efc6ce43aafe9a3b735c1cb283714548fdc16a2ce9d9dccd77f3b8037132ec1b1f1d965932a9ec4b20efe1f2212c94511b61799b5bd29be84e47d1c1209af544bb4c4820b4897fe00fd583b8ae5394354d1f2532d0801f202ba31bf01a896ebea5302167cf9b0ed71e793d9572fac48d75724caa57f99ba9db2113f5fa52d19356ed1d0c85bd60805952113e521a01444d6a6a502144691a9d32363284410e967626c720cdb3444a56b1b7043047dbf8e5f1b5177c82a651710eaed591e1d4ac5ffaf85411f7c3c3e58fefb5e0528f74b3f78a0b31de68f1e31415a7a37010be818b886c28cca1bf68db068929bad71bc6b4ae2a4c9f2c9bf98f15164e6ef96ef4121c191e5a94ca431b49c475f02acebc42d2c6026e4f7d595e5677947bf6cc0d6f95d7838f76cfc04492cebaed4374984706465ac83a1acbb55450f5b5e1e4cc00a88c334af44d337089c80167a813f54fa903ec85d8f1d22c443bcdfb3d268a3e57f563b9732cc3f5d8b1fd98a6f44e3b056cbeb65946ec917ef093c3a62757f2b27e6b4873ae7183b5b9a6528a576af69449df90cda4bfad6c54bed67fecc6fdc624183aecb5072002c8dc9d45505901c61489ab31b7d6cde6943f042953df648861b68663291117f3deb74d3f9e9501d9d50b095baaeef21aca82e00203c06ce103cc923e6f02ab481eed2da0a4eedeb827e9d7961f6d972f347c649e706dc0259d697a6a5ea1ba33a6f2c16beed92b58fa290026c728e91f3de285a74e56e968c5d174639a915b5e53d7b1e5566b1a89f09434afb2a2ff1fd00d13e7ce5a3dcb8e628f39a6c6825acd4b7152a777d21485f6360af8b1c62a4a29f2ad98d9c393530187c14b4defdfc8ac12433be7f56a40ce4087eb1f7cf949e4e9b3c612e4953716ab027a36ce839f1d2815c289d08e0e500630c2f54344d6549b9645a4b31648d25f71dc7a43651aa8530ccd0cec2f96a4385b185823111c514b5beb817a98824f301462598f03919ec52c0fdf5a522f3e4b250ded3089e0958bb20e5f936c8ab4fc00316ce483254f6e2abc024835acdba239decc60fcc316cbb5fe85db2e22ecd1259c607b575d836222d7a21f0fccdc6d4f90c487c66dcbe9d17f6af2edc30b57189f009072fa5b46e1f49aa33a6546aea60202c4e77066e2f487b2bd36f3178ea888488ae52fad830868172d8f2b3335db98a83c45e047ba93eb32e08a014d13fb8b9f3b54c16adaac8a95c250051baaa3667343a3df51ab7dccedcf4410482fb24ab337285d4c0d182bf00050c5cd2f8a1f7954fe0ce1c2325dc159445464327f0c463dfdae8c944db603ceab504409be7e3316e679960b63e1935018641f0d30d40fb4f83faa2786e7284b0adf6fe0ae04f61c362be89177aa7a27cd00a1c101deb33fbae04b8b20fceeef601049626954f0436470eb4d344fd53c34eab4fca401bb6aa64c1d1891ca88300ce5f8b9b7badb64a5aa3ce8ea848e288239def4602e4812c66503ccc2a68b734d97b2fe71e321e09275bbc727e4c02ce1a967f2f7c5f02f658c5e449a1c718a535561afbddd05ad28559c6ea8a5d19298eeccee69818b69a833b972128e153306522a3733396e25e3a2175443715b0926ea967609f73e2529fa4b6c346e32543431d11f57f557c71ff6b789d9a78e8039f78c5089586aeba7a584b3d6b753f8633d062b5cca3639eb95885027a1b78a90f79d33e8872b455a21618b76a4afd3d704849b067ab8f968bf528fbdbdfdd34e84163d644e211e32f9b5b91f86fb815890f6e405d7324fd6ff84fea268cf4d613d8b8cc784fd434f317dd77ccaf40d974c43d70ec15306c691ce9782267b20b35c150c1c104adff5437068f7c9dee058c08403024e5ed1f35bf1b6db213af8fd0293b230ddc7a405e1e3e584292cf6d9bd4ca1d0c325ecf37c57134320f79fac3f26874b1d595d0aacb7bf454bc4e15f755c1c7e2d0951d7731d8bf27c8002f611a942d633c9e0203ee9f848de15966e6c993d790bbc26958fdc3ff4e62b971697855ad0980d3cf6cd79c0f2f0d41eab6d2c67e83295afcbee60179e0997ddf9b15002b7fc058afa567034dabc640790aba2419a5ccbce25abccde586373f4e31f3436e5bab2e156b4cd6abaadbd4e991cb4a15cdea2202b13bce716e1df40d6bcc275f14c152ffe6294d2b5a5377a9da546490a0ff9ec3f27a0a6070f1b0d72b75a74ac1e764c4670b9547faa728500233dc410132d800bddd4e81272f1ace1fa8186e1b68e19b23ee611b2c9119b094764fd0720212c14f12f1835596660e08dbaf1a28c2ecb391094e8decb500484a4f9de412781fe084695a243d474471a3d6abd4ac640cfb7da40e0327defce9aa8101a25f7145b55db0510dd090af63fd65f9003693b21b2f3d4775c65707fed78474238d6453592933b2265c3836d0c775b95e9739b3de3856072a5b43c9e3024e8843b2522e92d12aab4a636c68af12722ab38d881f4c97118014db986f3ec966783b93d81d1d70e3ea611482df745256c3ef9c6c949c6afc6929f69d9427ddde81f3f278500c586b3bb736c2fc7713ad92ed13640f4051e72b38568e3f211f75261ee6517de0b980076127d7dc00a1660a11232325f7ac097f46e0ef4493cd7de875d14056419373d887a821672d894d32c810464705e92c9abe32967fead2464c8b2f693f45d07a8160f59ec046019b016ee8b07764278af8c6b22b4cc079f406c0ba898332aa8911b026c75edd02d5a40f8ed9c1a3d39c1893a0affe4b38c77305429562e9d0907179753051cbf13ff936091334fe24a53816d2aa5e2e26993dac3f2c573b0001152ee26b633afd966bfb704054227160bf292bbcc35f78a649bb7f4fe1783a6b10de778519c8a71f1381cc67a779e51ce3097e666d964728d55708e76953826c7659c3647d3f3cedf9f1b45b27f5735bb8d78d874bf73147b738b9c0566a0d2fdcb17f85dc712462e381ba1466d92d903ba24d0cc17ddbeb7bd80b5525d7236a8add54d4eca06fe4cd0d3724403c7ad09f22eb2fcb4181eddde271be821579b7382bbfe36dab5079811e62842da65165c27c181dfed279d5ec12a1c0c13541760c2fe5cce95c6892622229ac24a7211ba43e513077f34342b61611a1ab10b6c51f6e3a06be0716d7d1abc82f5903e32f1e6e3e85789c1b8f140bbe1903b9677ec9655e171bf1f4d27dda003c27d4ef0e043d0def451dbc0f48cb6cb605b1e2d27e9fc9db10c0b571b6805f316b00b581d0d7358f83e14d1b4290e61fc0d0bd97334f31a547350c00877c90bcb591b98986c19d9d477f7dc521ac43d2edf9201ea61c43e6365e795bfb44b0d90ced7b9d34a849dec495d79cae7769c721d7cd17f1503df3d113c49fcb18449ff180d39c94717ae8fcba7ee1d8cf75873098a7a697d5f5d7a6eeef14daf146710ee40c94ff8ea9ff048d108688776fd074e72658d6ea43f42ea03883f70f45c7b86d3eb0bced0f3a60b6da510833728ffdb82af9a34c5fc86e0130861ac66c68b784300", "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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:21:10 executing program 0: 15:21:10 executing program 0: 15:21:10 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x0, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:21:10 executing program 0: 15:21:10 executing program 0: 15:21:10 executing program 3: [ 1034.774177][ T5043] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1035.021822][ T5043] usb 3-1: Using ep0 maxpacket: 16 [ 1035.141883][ T5043] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 1035.150925][ T5043] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1035.161220][ T5043] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1035.170244][ T5043] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1035.179298][ T5043] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.187876][ T5043] usb 3-1: config 0 descriptor?? [ 1035.433615][ T5043] usb 3-1: USB disconnect, device number 121 [ 1035.901854][ T5043] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1036.141888][ T5043] usb 3-1: Using ep0 maxpacket: 32 [ 1036.261963][ T5043] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1036.272841][ T5043] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1036.283355][ T5043] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1036.292833][ T5043] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.301534][ T5043] usb 3-1: config 0 descriptor?? [ 1036.342057][ T5043] hub 3-1:0.0: USB hub found [ 1036.562193][ T5043] hub 3-1:0.0: 1 port detected [ 1037.453337][ T5] usb 3-1: USB disconnect, device number 122 15:21:14 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902240001000000f108040000000300000009210a00000122000009058103"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r3, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000700)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "183fbf1f"}, 0x0, 0x0, 0x0, 0x0}) r4 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:21:14 executing program 0: 15:21:14 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create1(0x0) dup2(r1, r0) 15:21:14 executing program 3: 15:21:14 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x0, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:21:14 executing program 1: 15:21:14 executing program 1: 15:21:14 executing program 3: 15:21:14 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000300)={0x20, 0x40000001000091}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) eventfd(0x0) recvmmsg(r1, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000340)={0xe, {0xa, 0x3f, 0x1f, 0xb1, "9fe0d239f1c50a0f5171cc15e90b0d7f221c8fcde1c7a63153aa6cff9fe51a33c4928f1b18580f41e4e97362757f39d8948a54d3f80020146f6719f9ac2d2cfc348edb3da832080ede29e1ae08ac6699f9ae50b9f5e4701a89cafaf7fba058c77a058bd658a01c5ee39c990610a3eaad6e14a51d3c0ab584cda413726516de688441a0a3d0e1b036df616952830c72fa8ccbd4357835649fcb70a1e95e571c23ba0e2b65bc6bf400b8d7241be4dce5b2fe"}}, 0xbd) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='rdma.current\x00', 0x275a, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) inotify_init1(0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000180)='/dev/urandom\x00', 0x0, 0x0) fchdir(r4) pipe2(&(0x7f00000002c0), 0x0) clone(0x200183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xff8}, 0x0, 0x0) 15:21:14 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nf_conntrack_expect\x00') lseek(r0, 0x10, 0x0) 15:21:14 executing program 1: pipe(&(0x7f0000000200)) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 15:21:14 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xfffffffd, 0x2, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f8", 0x16}, {&(0x7f00000000c0)="abd34f17e874d7a82a4c72", 0xb, 0x20}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(0x0, 0x0) [ 1038.134180][T15513] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1038.143391][T15513] FAT-fs (loop3): count of clusters too big (2878621090) [ 1038.150517][T15513] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1038.205920][T15513] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1038.215079][T15513] FAT-fs (loop3): count of clusters too big (2878621090) [ 1038.222671][T15513] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1038.331912][ T9181] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1038.581861][ T9181] usb 3-1: Using ep0 maxpacket: 16 [ 1038.731944][ T9181] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 1038.740918][ T9181] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1038.751341][ T9181] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1038.760393][ T9181] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1038.769514][ T9181] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.778438][ T9181] usb 3-1: config 0 descriptor?? [ 1039.033860][ T3937] usb 3-1: USB disconnect, device number 123 [ 1039.501851][ T3937] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1039.741861][ T3937] usb 3-1: Using ep0 maxpacket: 32 [ 1039.882050][ T3937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1039.892977][ T3937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1039.903031][ T3937] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1039.912198][ T3937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.920717][ T3937] usb 3-1: config 0 descriptor?? [ 1039.973409][ T3937] hub 3-1:0.0: USB hub found [ 1040.201889][ T3937] hub 3-1:0.0: 1 port detected [ 1041.085265][ T9181] usb 3-1: USB disconnect, device number 124 15:21:17 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902240001000000f108040000000300000009210a00000122000009058103"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r3, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000700)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "183fbf1f"}, 0x0, 0x0, 0x0, 0x0}) r4 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:21:17 executing program 4: clone(0xa8804280, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:21:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x0, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:21:17 executing program 3: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/113, 0x71) lseek(r0, 0x3, 0x1) getdents64(r0, &(0x7f0000000400)=""/255, 0xff) 15:21:17 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000300)={0x20, 0x40000001000091}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) eventfd(0x0) recvmmsg(r1, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000340)={0xe, {0xa, 0x3f, 0x1f, 0xb1, "9fe0d239f1c50a0f5171cc15e90b0d7f221c8fcde1c7a63153aa6cff9fe51a33c4928f1b18580f41e4e97362757f39d8948a54d3f80020146f6719f9ac2d2cfc348edb3da832080ede29e1ae08ac6699f9ae50b9f5e4701a89cafaf7fba058c77a058bd658a01c5ee39c990610a3eaad6e14a51d3c0ab584cda413726516de688441a0a3d0e1b036df616952830c72fa8ccbd4357835649fcb70a1e95e571c23ba0e2b65bc6bf400b8d7241be4dce5b2fe"}}, 0xbd) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='rdma.current\x00', 0x275a, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) inotify_init1(0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000180)='/dev/urandom\x00', 0x0, 0x0) fchdir(r4) pipe2(&(0x7f00000002c0), 0x0) clone(0x200183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xff8}, 0x0, 0x0) 15:21:17 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) ftruncate(r0, 0x19dd) write$P9_RLERRORu(r0, &(0x7f00000001c0)=ANY=[], 0xe) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0x0) 15:21:17 executing program 3: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/113, 0x71) lseek(r0, 0x3, 0x1) getdents64(r0, &(0x7f0000000400)=""/255, 0xff) 15:21:17 executing program 1: pipe(&(0x7f0000000200)) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x16, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 15:21:17 executing program 3: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/113, 0x71) lseek(r0, 0x3, 0x1) getdents64(r0, &(0x7f0000000400)=""/255, 0xff) 15:21:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:21:17 executing program 3: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/113, 0x71) lseek(r0, 0x3, 0x1) getdents64(r0, &(0x7f0000000400)=""/255, 0xff) 15:21:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x18, 0x2b, 0x0, @local, @local, {[@hopopts={0x11}], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) [ 1041.961840][ T9181] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1042.231819][ T9181] usb 3-1: Using ep0 maxpacket: 16 [ 1042.361877][ T9181] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 1042.370791][ T9181] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1042.381066][ T9181] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1042.390151][ T9181] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1042.399258][ T9181] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.408253][ T9181] usb 3-1: config 0 descriptor?? [ 1042.652843][ T5] usb 3-1: USB disconnect, device number 125 [ 1043.121887][ T5] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1043.361860][ T5] usb 3-1: Using ep0 maxpacket: 32 [ 1043.481949][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1043.492929][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1043.502722][ T5] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1043.511780][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.520450][ T5] usb 3-1: config 0 descriptor?? [ 1043.562251][ T5] hub 3-1:0.0: USB hub found [ 1043.782915][ T5] hub 3-1:0.0: 1 port detected [ 1044.673215][ T3937] usb 3-1: USB disconnect, device number 126 15:21:21 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902240001000000f108040000000300000009210a00000122000009058103"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r3, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "183fbf1f"}, 0x0, 0x0, 0x0, 0x0}) r4 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:21:21 executing program 3: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/113, 0x71) getdents64(r0, &(0x7f0000000400)=""/255, 0xff) 15:21:21 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:21:21 executing program 1: prctl$PR_SET_MM_AUXV(0x21, 0xc, 0x0, 0x10) 15:21:21 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000280)='./bus\x00', 0x0) symlink(&(0x7f0000000140)='./bus\x00', &(0x7f0000000180)='./bus/file1\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) open$dir(&(0x7f0000000080)='./bus/file1\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2302) 15:21:21 executing program 4: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r0 = gettid() r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) fcntl$dupfd(r1, 0x0, r1) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x2) r3 = dup3(r2, r1, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0) write$ppp(r3, 0x0, 0x0) tkill(r0, 0x1000000000016) 15:21:21 executing program 3: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/113, 0x71) getdents64(r0, &(0x7f0000000400)=""/255, 0xff) 15:21:21 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="18020000000000000000000000000009850000002c000000950000000000000099e59fa80e8b67c6c219192ea42890c1ba6add1182b40354fa895c0b96b4f3766af972c68f2592afa8478ac3d40fd8af090436be56c6756fd0353141908eda29e463c461115b010e04e9aa513ed6acc2a587c8fb4d7d2f9b2ecaa4a6e26fed9802b2f1d5bdf7200a94983b59abf567d7e14032d9dd2adf55fd83fd4bdec03abd4bf7e83f803d52f33b85cbd5bdf57880ab810d37c794d5dcbfd5a4231da61908325a54845a096fc2924a387606c4dfae2ea5eb616b01010000c428cdf828de8d90a23141758c5a75b30671619fa9ae921b37f71686b310ce55fce303fb4e398e6905fac7027e1a9ff08c545df683c6279c06d2a26d22df4a297ccb"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r0, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 1045.237956][T15654] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 15:21:21 executing program 3: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/113, 0x71) getdents64(r0, &(0x7f0000000400)=""/255, 0xff) [ 1045.296250][T15665] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1045.326514][T15663] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 15:21:21 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x8, 0x3, 0x260, 0x90, 0x118, 0x3e020000, 0x90, 0x118, 0x1cc, 0x1d0, 0x1d0, 0x1cc, 0x1d0, 0x3, 0x0, {[{{@ip={@multicast1=0xe0005100, @multicast1, 0x0, 0x0, 'bridge_slave_0\x00', 'hsr0\x00'}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0xdc, 0x13c, 0x0, {}, [@common=@addrtype={{0x2c, 'addrtype\x00'}}, @common=@set={{0x40, 'set\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x7]}, {0x0, [0x2], 0x6, 0x2}}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x2bc) 15:21:21 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r0, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) 15:21:21 executing program 3: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) lseek(r0, 0x3, 0x1) getdents64(r0, &(0x7f0000000400)=""/255, 0xff) [ 1045.561828][ T9181] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1045.801854][ T9181] usb 3-1: Using ep0 maxpacket: 16 [ 1045.941933][ T9181] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 1045.950897][ T9181] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1045.961258][ T9181] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1045.970426][ T9181] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1045.979514][ T9181] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.988330][ T9181] usb 3-1: config 0 descriptor?? [ 1046.233162][ T5] usb 3-1: USB disconnect, device number 127 [ 1046.701877][ T5] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1046.941883][ T5] usb 3-1: Using ep0 maxpacket: 32 [ 1047.062014][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1047.072923][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1047.082765][ T5] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1047.091872][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.100543][ T5] usb 3-1: config 0 descriptor?? [ 1047.142107][ T5] hub 3-1:0.0: USB hub found [ 1047.361858][ T5] hub 3-1:0.0: 1 port detected [ 1048.011840][ T5] hub 3-1:0.0: hub_ext_port_status failed (err = 0) 15:21:25 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902240001000000f108040000000300000009210a00000122000009058103"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r3, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "183fbf1f"}, 0x0, 0x0, 0x0, 0x0}) r4 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:21:25 executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r0, &(0x7f0000001740)=[{{&(0x7f0000000000)={0xa, 0x4e60, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000001700)=[@tclass={{0x10, 0x29, 0x43, 0x3ff}}], 0x10}}], 0x1, 0x0) 15:21:25 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:21:25 executing program 3: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) lseek(r0, 0x3, 0x1) getdents64(r0, &(0x7f0000000400)=""/255, 0xff) 15:21:25 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r0, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) 15:21:25 executing program 1: mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mount(0x0, &(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') r0 = dup(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x30132, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x51}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300)="03555c8ae742f650d348bb91ff26fdc81ec6d870961d0590310fea9828a35e535983a9d6f79542f793e81c4143a56ed3f5260347a531062a75f39177e67aff4e161260e25727686b61066879f28476bffed0eb2ffce417a9", 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000001000000000000000000000000009559134c596cf92ed2f693658f6221ad000000000000"], 0x0, 0x0, 0xc6, &(0x7f0000000700)=""/198, 0x0, 0x2, [], 0x0, 0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0xd, 0x5}, 0x10, 0x0, r0}, 0x74) mount(0x0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000280)='binfmt_misc\x00', 0x0, 0x0) uselib(0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) creat(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') 15:21:25 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r0, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) 15:21:25 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r0, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) 15:21:25 executing program 3: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) lseek(r0, 0x3, 0x1) getdents64(r0, &(0x7f0000000400)=""/255, 0xff) 15:21:25 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @dev}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000001e40)={@multicast1, @local}, 0x10) 15:21:25 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r0, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) 15:21:25 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x8, 0x3, 0x260, 0x90, 0x118, 0x3e020000, 0x90, 0x118, 0x1cc, 0x1d0, 0x1d0, 0x1cc, 0x1d0, 0x3, 0x0, {[{{@ip={@multicast1=0xe0005100, @multicast1, 0x0, 0x0, 'bridge_slave_0\x00', 'hsr0\x00'}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0xdc, 0x13c, 0x0, {}, [@common=@addrtype={{0x2c, 'addrtype\x00'}}, @common=@set={{0x40, 'set\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x2bc) [ 1049.851962][ T3937] usb 3-1: reset high-speed USB device number 2 using dummy_hcd [ 1050.101848][ T3937] usb 3-1: Using ep0 maxpacket: 16 [ 1050.152057][ T3937] usb 3-1: device firmware changed [ 1050.157207][ T3937] usb 3-1: USB disconnect, device number 2 [ 1050.531865][ T3937] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1050.771872][ T3937] usb 3-1: Using ep0 maxpacket: 16 [ 1050.912054][ T3937] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 1050.920925][ T3937] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1050.931235][ T3937] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1050.940342][ T3937] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1050.949544][ T3937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.959742][ T3937] usb 3-1: config 0 descriptor?? [ 1051.223251][ T5] usb 3-1: USB disconnect, device number 3 [ 1051.801868][ T5] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1052.061838][ T5] usb 3-1: Using ep0 maxpacket: 32 [ 1052.201940][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1052.212837][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1052.223422][ T5] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1052.232770][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.241375][ T5] usb 3-1: config 0 descriptor?? [ 1052.283827][ T5] hub 3-1:0.0: USB hub found [ 1052.492390][ T5] hub 3-1:0.0: 1 port detected [ 1053.131858][ T5] hub 3-1:0.0: hub_ext_port_status failed (err = 0) 15:21:30 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902240001000000f108040000000300000009210a00000122000009058103"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r3, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "183fbf1f"}, 0x0, 0x0, 0x0, 0x0}) r4 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:21:30 executing program 3: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000300)=""/113, 0x71) lseek(0xffffffffffffffff, 0x3, 0x1) getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff) 15:21:30 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:21:30 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mount$9p_tcp(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x10020, 0x0) 15:21:30 executing program 0: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={0xffffffffffffffff, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) 15:21:30 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x34, 0x6, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, 0x0) 15:21:30 executing program 0: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={0xffffffffffffffff, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) 15:21:30 executing program 3: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000300)=""/113, 0x71) lseek(0xffffffffffffffff, 0x3, 0x1) getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff) 15:21:30 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) clone(0x180400, 0x0, 0x0, 0x0, &(0x7f0000000400)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup3(r1, r2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) dup2(r0, r3) 15:21:30 executing program 4: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xab, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000140)={{0x2, 0x0, @remote}, {0x0, @local}, 0x0, {0x2, 0x0, @dev}, 'macvtap0\x00'}) 15:21:30 executing program 3: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000300)=""/113, 0x71) lseek(0xffffffffffffffff, 0x3, 0x1) getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff) 15:21:31 executing program 0: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={0xffffffffffffffff, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 1054.901866][ T3937] usb 3-1: reset high-speed USB device number 4 using dummy_hcd [ 1054.917204][ T27] audit: type=1326 audit(8038884091.029:43): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15808 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45faba code=0x0 [ 1055.181832][ T3937] usb 3-1: Using ep0 maxpacket: 16 [ 1055.221885][ T3937] usb 3-1: device firmware changed [ 1055.227096][ T3937] usb 3-1: USB disconnect, device number 4 [ 1055.581846][ T3937] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1055.622298][ T27] audit: type=1326 audit(8038884091.739:44): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15808 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45faba code=0x0 [ 1055.831801][ T3937] usb 3-1: Using ep0 maxpacket: 16 [ 1055.951882][ T3937] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 1055.960756][ T3937] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1055.971489][ T3937] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1055.980871][ T3937] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1055.990232][ T3937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1055.999176][ T3937] usb 3-1: config 0 descriptor?? [ 1056.243142][ T9181] usb 3-1: USB disconnect, device number 5 [ 1056.711915][ T3937] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1056.951851][ T3937] usb 3-1: Using ep0 maxpacket: 32 [ 1057.081869][ T3937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1057.092784][ T3937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1057.102736][ T3937] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1057.111755][ T3937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.121309][ T3937] usb 3-1: config 0 descriptor?? [ 1057.162185][ T3937] hub 3-1:0.0: USB hub found [ 1057.381843][ T3937] hub 3-1:0.0: 1 port detected [ 1058.031836][ T5] hub 3-1:0.0: hub_ext_port_status failed (err = 0) 15:21:35 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902240001000000f108040000000300000009210a00000122000009058103"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r3, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x2, 'hR'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "183fbf1f"}, 0x0, 0x0, 0x0, 0x0}) r4 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:21:35 executing program 3: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/113, 0x71) lseek(r0, 0x3, 0x1) getdents64(r0, &(0x7f0000000400)=""/255, 0xff) 15:21:35 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:21:35 executing program 0: r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r0, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) 15:21:35 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) r1 = dup(r0) getsockopt$inet_opts(r1, 0x0, 0x1, 0x0, &(0x7f0000000340)) 15:21:35 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) clone(0x180400, 0x0, 0x0, 0x0, &(0x7f0000000400)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup3(r1, r2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) dup2(r0, r3) 15:21:35 executing program 0: r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r0, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) 15:21:35 executing program 3: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/113, 0x71) lseek(r0, 0x3, 0x1) getdents64(r0, &(0x7f0000000400)=""/255, 0xff) [ 1059.651571][ T27] audit: type=1326 audit(8038884095.759:45): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15866 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45faba code=0x0 15:21:35 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xfffffffffffffffa}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x880}, 0x40054) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 15:21:35 executing program 3: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/113, 0x71) lseek(r0, 0x3, 0x1) getdents64(r0, &(0x7f0000000400)=""/255, 0xff) 15:21:35 executing program 0: r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r0, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) 15:21:35 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x2) [ 1059.851938][ T5] usb 3-1: reset high-speed USB device number 6 using dummy_hcd [ 1060.091874][ T5] usb 3-1: Using ep0 maxpacket: 16 [ 1060.131995][ T5] usb 3-1: device firmware changed [ 1060.137299][ T5] usb 3-1: USB disconnect, device number 6 [ 1060.491900][ T5] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1060.731869][ T5] usb 3-1: Using ep0 maxpacket: 16 [ 1060.872818][ T5] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 1060.881691][ T5] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1060.892038][ T5] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1060.901023][ T5] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1060.910291][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1060.919108][ T5] usb 3-1: config 0 descriptor?? [ 1061.163152][ T9181] usb 3-1: USB disconnect, device number 7 [ 1061.631858][ T9181] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1061.871832][ T9181] usb 3-1: Using ep0 maxpacket: 32 [ 1061.991910][ T9181] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1062.004288][ T9181] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1062.014659][ T9181] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1062.025280][ T9181] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1062.034261][ T9181] usb 3-1: config 0 descriptor?? [ 1062.073542][ T9181] hub 3-1:0.0: USB hub found [ 1062.291840][ T9181] hub 3-1:0.0: 1 port detected [ 1062.941854][ T9181] hub 3-1:0.0: hub_ext_port_status failed (err = 2) 15:21:40 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902240001000000f108040000000300000009210a00000122000009058103"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r3, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x2, 'hR'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "183fbf1f"}, 0x0, 0x0, 0x0, 0x0}) r4 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:21:40 executing program 3: mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/113, 0x71) lseek(r0, 0x3, 0x1) getdents64(r0, &(0x7f0000000400)=""/255, 0xff) 15:21:40 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r0, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) 15:21:40 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:21:40 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) clone(0x180400, 0x0, 0x0, 0x0, &(0x7f0000000400)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup3(r1, r2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) dup2(r0, r3) 15:21:40 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000040)=[{&(0x7f0000000640)="8a", 0x1}], 0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) tkill(r0, 0x1000000000016) 15:21:40 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r0, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) 15:21:40 executing program 3: mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/113, 0x71) lseek(r0, 0x3, 0x1) getdents64(r0, &(0x7f0000000400)=""/255, 0xff) 15:21:40 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000000009a0000000000000009850000002c000000950000000000000099e59fa80e8b67c6c219192ea42890c2e1a9cc1182b40354fa895c0b96b4f3766af972c68f2592afa8478ac3d40fd8af090436be56c6756fd0353141908eda29e463c49461115b010e04e9aa513ed6acc2a587c8fb4d7d2f9b2ecaa4a6e26fed9802b2f1d5bdf7200a94983b59abf567d7e14032d9dd2adf55fd83fd4bdec03abd4bf7e83f803d52f33b85cbd5bdf57880ab810d37c794d5dcbfd5a4231da61908325a54845a096fc2924a387606c4dfae2ea5eb616b01010000c428cdf828de8d90a23141758c5a75b30671619fa9ae921b37f71605fac7027e1a9ff08c545df683c6279c06d2a28122df4a297c5dacc79f2ef6ee3b5e1c3ce1922b31d8c60f747f42c0324163222fdf954ef4269b8f7b6039f8e779f7d65d3d61718b8060bbf22f4250cabc30b46501cea2cb6db7457f2070de1aa1ef02afe75cf1a46f080d9bce5b930f4bbfa89bef150267011d5d79a30b5200e96bc42934841d2264b2cc645a7d3b4a9b823797086b84906c286232058c4bdf7da3ae9ab666f647c79c493ad3962deccdb3c5a9e991d216f8ef70882a96b6a872ce99448471edecdffa8655a9cf46635cf6a5e57b045db802c1b694145be569a9af2eca0e0d5b461ac5eda29fefa427df53"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r0, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 1064.589281][ T27] audit: type=1326 audit(8038884100.699:46): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15952 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45faba code=0x0 15:21:40 executing program 3: mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/113, 0x71) lseek(r0, 0x3, 0x1) getdents64(r0, &(0x7f0000000400)=""/255, 0xff) 15:21:40 executing program 4: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xab, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/115, 0x73}], 0x1, 0x0, 0x0) 15:21:40 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x800, 0x2) [ 1064.761960][ T1491] usb 3-1: reset high-speed USB device number 8 using dummy_hcd [ 1065.011828][ T1491] usb 3-1: Using ep0 maxpacket: 16 [ 1065.051868][ T1491] usb 3-1: device firmware changed [ 1065.057029][ T1491] usb 3-1: USB disconnect, device number 8 [ 1065.411852][ T1491] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1065.651853][ T1491] usb 3-1: Using ep0 maxpacket: 16 [ 1065.771959][ T1491] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 1065.780871][ T1491] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1065.791734][ T1491] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1065.800988][ T1491] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1065.810488][ T1491] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.819567][ T1491] usb 3-1: config 0 descriptor?? [ 1066.063296][ T1491] usb 3-1: USB disconnect, device number 9 [ 1066.531862][ T1491] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1066.771832][ T1491] usb 3-1: Using ep0 maxpacket: 32 [ 1066.894373][ T1491] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1066.905382][ T1491] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1066.915708][ T1491] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1066.924831][ T1491] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1066.933758][ T1491] usb 3-1: config 0 descriptor?? [ 1066.972159][ T1491] hub 3-1:0.0: USB hub found [ 1067.191875][ T1491] hub 3-1:0.0: 1 port detected [ 1067.831864][ T1491] hub 3-1:0.0: hub_ext_port_status failed (err = 2) 15:21:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902240001000000f108040000000300000009210a00000122000009058103"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r3, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x2, 'hR'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "183fbf1f"}, 0x0, 0x0, 0x0, 0x0}) r4 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:21:45 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r0, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) 15:21:45 executing program 3: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/113, 0x71) lseek(r0, 0x3, 0x1) getdents64(r0, &(0x7f0000000400)=""/255, 0xff) 15:21:45 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) sendmsg$unix(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 15:21:45 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:21:45 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) clone(0x180400, 0x0, 0x0, 0x0, &(0x7f0000000400)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup3(r1, r2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) dup2(r0, r3) 15:21:45 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r0, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) 15:21:45 executing program 3: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/113, 0x71) lseek(r0, 0x3, 0x1) getdents64(r0, &(0x7f0000000400)=""/255, 0xff) [ 1069.438278][T16040] raw_sendmsg: syz-executor.4 forgot to set AF_INET. Fix it! [ 1069.465031][ T27] audit: type=1326 audit(8038884105.579:47): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=16032 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45faba code=0x0 [ 1069.501953][ T3937] usb 3-1: USB disconnect, device number 10 15:21:45 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440), 0x0, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:21:45 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r0, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) 15:21:45 executing program 3: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/113, 0x71) lseek(r0, 0x3, 0x1) getdents64(r0, &(0x7f0000000400)=""/255, 0xff) 15:21:45 executing program 4: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xab, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x1a4, 0x1a4, 0x40000, 0x1a4, 0x1a4, 0x244, 0x244, 0x244, 0x244, 0x244, 0x3, 0x0, {[{{@uncond=[0x0, 0xff, 0x48, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d], 0x0, 0x164, 0x1a4, 0xa, {0x9000000}, [@common=@inet=@recent0={{0xf4, 'recent\x00'}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x6}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, '\x00', 'vlan1\x00'}, 0x0, 0x70, 0xa0, 0x0, {0xff00000000000000}}, @common=@inet=@SET2={0x30, 'SET\x00'}}], {{[], 0x1a8, 0x70, 0x94}, {0x24}}}}, 0x334) [ 1069.871886][ T3937] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1070.131867][ T3937] usb 3-1: Using ep0 maxpacket: 16 [ 1070.253752][ T3937] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 1070.262816][ T3937] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1070.275395][ T3937] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1070.285006][ T3937] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1070.294460][ T3937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.304369][ T3937] usb 3-1: config 0 descriptor?? [ 1070.553539][ T1491] usb 3-1: USB disconnect, device number 11 [ 1071.021875][ T1491] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1071.261823][ T1491] usb 3-1: Using ep0 maxpacket: 32 [ 1071.381932][ T1491] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1071.393838][ T1491] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1071.403898][ T1491] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1071.413260][ T1491] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1071.421989][ T1491] usb 3-1: config 0 descriptor?? [ 1071.462147][ T1491] hub 3-1:0.0: USB hub found [ 1071.681865][ T1491] hub 3-1:0.0: 1 port detected [ 1072.331871][ T9181] hub 3-1:0.0: hub_ext_port_status failed (err = 2) 15:21:50 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r0, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) 15:21:50 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902240001000000f108040000000300000009210a00000122000009058103"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r3, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x3, "6852c8"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "183fbf1f"}, 0x0, 0x0, 0x0, 0x0}) r4 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:21:50 executing program 3: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/113, 0x71) lseek(r0, 0x3, 0x1) getdents64(r0, &(0x7f0000000400)=""/255, 0xff) 15:21:50 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) clone(0x180400, 0x0, 0x0, 0x0, &(0x7f0000000400)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup3(r1, r2, 0x0) dup2(r0, r3) 15:21:50 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x11, &(0x7f0000000080)=0xffffffff, 0x4) 15:21:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440), 0x0, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:21:50 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r0, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) 15:21:50 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_timeval(r0, 0xffff, 0x1005, &(0x7f0000000040), 0x10) 15:21:50 executing program 3: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/113, 0x71) lseek(r0, 0x3, 0x1) getdents64(r0, &(0x7f0000000400)=""/255, 0xff) 15:21:50 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x101, &(0x7f0000000100), &(0x7f00000001c0)=0x98) 15:21:50 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) clone(0x180400, 0x0, 0x0, 0x0, &(0x7f0000000400)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup3(r1, r2, 0x0) dup2(r0, r3) 15:21:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440), 0x0, 0x0) socket$inet6(0xa, 0x800, 0x2) 15:21:50 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r0, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 1074.161901][ T3937] usb 3-1: reset high-speed USB device number 12 using dummy_hcd [ 1074.411846][ T3937] usb 3-1: Using ep0 maxpacket: 16 [ 1074.452085][ T3937] usb 3-1: device firmware changed [ 1074.457294][ T3937] usb 3-1: USB disconnect, device number 12 [ 1074.851876][ T3937] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1075.101858][ T3937] usb 3-1: Using ep0 maxpacket: 16 [ 1075.231952][ T3937] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 1075.241065][ T3937] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1075.251257][ T3937] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1075.260282][ T3937] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1075.269458][ T3937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.280187][ T3937] usb 3-1: config 0 descriptor?? [ 1075.523660][ T3937] usb 3-1: USB disconnect, device number 13 [ 1075.991896][ T3937] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1076.231842][ T3937] usb 3-1: Using ep0 maxpacket: 32 [ 1076.351996][ T3937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1076.362969][ T3937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1076.373400][ T3937] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1076.382992][ T3937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.391513][ T3937] usb 3-1: config 0 descriptor?? [ 1076.432179][ T3937] hub 3-1:0.0: USB hub found [ 1076.651843][ T3937] hub 3-1:0.0: 1 port detected [ 1077.301879][ T3937] hub 3-1:0.0: hub_ext_port_status failed (err = 3) 15:21:54 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x101, &(0x7f0000000100), &(0x7f00000001c0)=0xa0) 15:21:54 executing program 3: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/113, 0x71) lseek(r0, 0x3, 0x1) getdents64(r0, &(0x7f0000000400)=""/255, 0xff) 15:21:54 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r0, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) 15:21:54 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) clone(0x180400, 0x0, 0x0, 0x0, &(0x7f0000000400)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup3(r1, r2, 0x0) dup2(r0, r3) 15:21:54 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902240001000000f108040000000300000009210a00000122000009058103"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r3, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x3, "6852c8"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "183fbf1f"}, 0x0, 0x0, 0x0, 0x0}) r4 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:21:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x0, 0x2) 15:21:55 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r0, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) 15:21:55 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) clone(0x180400, 0x0, 0x0, 0x0, &(0x7f0000000400)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) dup2(r0, r3) 15:21:55 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)=@in6={0x1c, 0x1c}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x16, &(0x7f0000000080), 0x8) 15:21:55 executing program 3: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/113, 0x71) lseek(r0, 0x3, 0x1) getdents64(r0, &(0x7f0000000400)=""/255, 0xff) 15:21:55 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x903, &(0x7f0000000040), 0x8) 15:21:55 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r0, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 1079.025990][ T27] audit: type=1326 audit(8038884115.139:48): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=16222 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45faba code=0x0 15:21:55 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x0, 0x2) 15:21:55 executing program 3: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/113, 0x71) lseek(r0, 0x3, 0x1) getdents64(r0, &(0x7f0000000400)=""/255, 0xff) 15:21:55 executing program 4: 15:21:55 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000000009a0000000000000009850000002c000000950000000000000099e59fa80e8b67c6c219192ea42890c2e1a9cc1182b40354fa895c0b96b4f3766af972c68f2592afa8478ac3d40fd8af090436be56c6756fd0353141908eda29e463c49461115b010e04e9aa513ed6acc2a587c8fb4d7d2f9b2ecaa4a6e26fed9802b2f1d5bdf7200a94983b59abf567d7e14032d9dd2adf55fd83fd4bdec03abd4bf7e83f803d52f33b85cbd5bdf57880ab810d37c794d5dcbfd5a4231da61908325a54845a096fc2924a387606c4dfae2ea5eb616b01010000c428cdf828de8d90a23141758c5a75b30671619fa9ae921b37f7"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r0, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 1079.121888][ T49] usb 3-1: reset high-speed USB device number 14 using dummy_hcd [ 1079.371826][ T49] usb 3-1: Using ep0 maxpacket: 16 [ 1079.422348][ T49] usb 3-1: device firmware changed [ 1079.428486][ T49] usb 3-1: USB disconnect, device number 14 [ 1079.791875][ T49] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1080.031864][ T49] usb 3-1: Using ep0 maxpacket: 16 [ 1080.151940][ T49] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 1080.160802][ T49] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1080.171045][ T49] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1080.180144][ T49] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1080.189222][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.199653][ T49] usb 3-1: config 0 descriptor?? [ 1080.443829][ T1491] usb 3-1: USB disconnect, device number 15 [ 1080.911835][ T1491] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1081.151844][ T1491] usb 3-1: Using ep0 maxpacket: 32 [ 1081.272076][ T1491] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1081.284206][ T1491] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1081.294642][ T1491] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1081.303962][ T1491] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1081.312788][ T1491] usb 3-1: config 0 descriptor?? [ 1081.353643][ T1491] hub 3-1:0.0: USB hub found [ 1081.571859][ T1491] hub 3-1:0.0: 1 port detected [ 1082.221876][ T1491] hub 3-1:0.0: hub_ext_port_status failed (err = 3) 15:21:59 executing program 4: 15:21:59 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902240001000000f108040000000300000009210a00000122000009058103"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r3, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x3, "6852c8"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "183fbf1f"}, 0x0, 0x0, 0x0, 0x0}) r4 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:21:59 executing program 3: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/113, 0x71) lseek(r0, 0x3, 0x1) getdents64(r0, &(0x7f0000000400)=""/255, 0xff) 15:21:59 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000000009a0000000000000009850000002c000000950000000000000099e59fa80e8b67c6c219192ea42890c2e1a9cc1182b40354fa895c0b96b4f3766af972c68f2592afa8478ac3d40fd8af090436be56c6756fd0353141908eda29e463c49461115b010e04e9aa513ed6acc2a587c8fb4d7d2f9b2ecaa4a6e26fed9802b2f1d5bdf7200a94983b59abf567d7e14032d9dd2adf55fd83fd4bdec03abd4bf7e83f803d52f33b85cbd5bdf57880ab810d37c794d5dcbfd5a4231da61908325a54845a096fc2924a387606c4dfae2ea5eb616b01010000c428cdf828de8d90a23141758c5a75b30671619fa9ae921b37f7"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r0, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) 15:21:59 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) clone(0x180400, 0x0, 0x0, 0x0, &(0x7f0000000400)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) dup2(r0, r3) 15:21:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x0, 0x2) 15:21:59 executing program 4: 15:22:00 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000000009a0000000000000009850000002c000000950000000000000099e59fa80e8b67c6c219192ea42890c2e1a9cc1182b40354fa895c0b96b4f3766af972c68f2592afa8478ac3d40fd8af090436be56c6756fd0353141908eda29e463c49461115b010e04e9aa513ed6acc2a587c8fb4d7d2f9b2ecaa4a6e26fed9802b2f1d5bdf7200a94983b59abf567d7e14032d9dd2adf55fd83fd4bdec03abd4bf7e83f803d52f33b85cbd5bdf57880ab810d37c794d5dcbfd5a4231da61908325a54845a096fc2924a387606c4dfae2ea5eb616b01010000c428cdf828de8d90a23141758c5a75b30671619fa9ae921b37f7"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r0, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) 15:22:00 executing program 3: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = open$dir(0x0, 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/113, 0x71) lseek(r0, 0x3, 0x1) getdents64(r0, &(0x7f0000000400)=""/255, 0xff) 15:22:00 executing program 4: [ 1083.866616][ T27] audit: type=1326 audit(8038884119.979:49): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=16301 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45faba code=0x0 15:22:00 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r0, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) 15:22:00 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x0) 15:22:00 executing program 4: [ 1084.041860][ T12] usb 3-1: reset high-speed USB device number 16 using dummy_hcd [ 1084.291954][ T12] usb 3-1: Using ep0 maxpacket: 16 [ 1084.332027][ T12] usb 3-1: device firmware changed [ 1084.337225][ T12] usb 3-1: USB disconnect, device number 16 [ 1084.691860][ T12] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1084.931875][ T12] usb 3-1: Using ep0 maxpacket: 16 [ 1085.052107][ T12] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 1085.061080][ T12] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1085.071505][ T12] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1085.080590][ T12] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1085.089938][ T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.101054][ T12] usb 3-1: config 0 descriptor?? [ 1085.344192][ T12] usb 3-1: USB disconnect, device number 17 [ 1085.811826][ T12] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1086.051894][ T12] usb 3-1: Using ep0 maxpacket: 32 [ 1086.171900][ T12] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1086.182840][ T12] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1086.193437][ T12] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1086.202751][ T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.211325][ T12] usb 3-1: config 0 descriptor?? [ 1086.252032][ T12] hub 3-1:0.0: USB hub found [ 1086.471847][ T12] hub 3-1:0.0: 1 port detected [ 1087.121964][ T12] hub 3-1:0.0: hub_ext_port_status failed (err = 3) 15:22:04 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902240001000000f108040000000300000009210a00000122000009058103"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r3, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "183fbf1f"}, 0x0, 0x0, 0x0, 0x0}) r4 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:22:04 executing program 3: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = open$dir(0x0, 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/113, 0x71) lseek(r0, 0x3, 0x1) getdents64(r0, &(0x7f0000000400)=""/255, 0xff) 15:22:04 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r0, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) 15:22:04 executing program 4: 15:22:04 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x0) 15:22:04 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) clone(0x180400, 0x0, 0x0, 0x0, &(0x7f0000000400)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) dup2(r0, r3) 15:22:04 executing program 4: 15:22:04 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000000009a0000000000000009850000002c000000950000000000000099e59fa80e8b67c6c219192ea42890c2e1a9cc1182b40354fa895c0b96b4f3766af972c68f2592afa8478ac3d40fd8af090436be56c6756fd0353141908eda29e463c49461115b010e04e9aa513ed6acc2a587c8fb4d7d2f9b2ecaa4a6e26fed9802b2f1d5bdf7200a94983b59abf567d7e14032d9dd2adf55fd83fd4bdec03abd4bf7e83f803d52f33b85cbd5bdf57880ab810d37c794d5dcbfd5a4231da61908325a54845a096fc2924a387606c4dfae2ea5eb616b01010000c428cdf828de8d90a23141758c5a75b30671619fa9ae921b37f71605fac7027e1a9ff08c545df683c6279c06d2a28122df4a297c5dacc79f2ef6ee3b5e1c3ce1922b31d8c60f747f42c0324163222fdf954ef4269b8f7b6039f8e779f7d65d3d61718b8060bbf22f4250cabc30b46501cea2cb6db7457f2070de1aa1ef02afe75cf1a46f080d9bce5b930f4bbfa89bef15026701"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r0, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) 15:22:04 executing program 3: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = open$dir(0x0, 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/113, 0x71) lseek(r0, 0x3, 0x1) getdents64(r0, &(0x7f0000000400)=""/255, 0xff) [ 1088.777195][ T27] audit: type=1326 audit(8038884124.889:50): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=16378 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45faba code=0x0 15:22:04 executing program 4: 15:22:04 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r0, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) 15:22:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/186, 0xba}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x10000, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x8, 0xffffffffffffffff, &(0x7f0000000540)="862b3ee7db41a29dd0001aea12386de676ae9fd95b1d0d5dd05f00d6c489051f24a7b5d72ef18dfa7b778c569e70d704ca23cd5774f3b8bc04030b2f0c805731082b42b42c86410e1e409ad1455dbde644d7b7a3a0672f6ac1fda9df0c81ff93050bbf357e59cf2c8177f23def9e55ea453c842f2cd900fa3fd9d58d18a5c365bcb51b22907e2fe957572a051ed9b2bd3f5bcdcb5834dc1f1bd550c9aab01b076b7f2e890f9da5d39b1c5efe6b69caa50c2319f3934f0ece0cb256f616b258b6e2c31f05486943a310ea256921da535b2cac77f7f9eacb", 0xd7, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000380)="718ba65b5c396424ae7211640a81a96794bbc1828a7e16141ddbfa3b57ccf0a8db1387a28d1f8a41ffe8138776ab0dcf4a92b3f58cf42bab16caf251fddf2af7f48c47940c1fdff128dd10372507ac569dc9909c27e1f526137cfc", 0x5b, 0x3f, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x4680, 0xffffffffffffffff, &(0x7f0000000680)="31658f5b330bca6d12b52381e32126bffa6de63e46c2bfa64a3012b7c3a61e78b3f4a8724f64072481ff4d4dd15e7cb655b629110db815e59f07739ec54ecefd46642293213aad57d51f93f3fbc8da6ee48fb08f4ca959e3a9cdd5e664c156b0d37786c2942bfc5d9bb66930f36034040174007a04d9785a2f790d11c09b201b9e583674720b9dda953430c2a75964213726735ab38a19c6f04f1546387d6b76a30d588c48bae1be787ccb90f3cb04ba63c77a5a606d4c2fcb4d7c555ed185712c3e19e44130f7a70ff55d74c4bada00147fabb2bd23538365790645", 0xdc, 0x9, 0x0, 0x1}]) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x7ffffffa, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e28, 0x9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e20, 0x20, 0x10, 0xd5, 0x0, 0x0, 0x0, 0x3c}, {0xfffffffffffffff9, 0x3f, 0x1000000000, 0x4, 0x4, 0x0, 0x0, 0x20}, {0x2000000000000, 0x0, 0x0, 0xfffffffff7fffffe}, 0x0, 0x6e6bbc, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x0, 0x3, 0x1, 0x7fffffff, 0x0, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x800, 0x0) [ 1088.943254][ T12] usb 3-1: reset high-speed USB device number 18 using dummy_hcd [ 1089.181874][ T12] usb 3-1: Using ep0 maxpacket: 16 [ 1089.222054][ T12] usb 3-1: device firmware changed [ 1089.227221][ T12] usb 3-1: USB disconnect, device number 18 [ 1089.581852][ T12] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1089.821825][ T12] usb 3-1: Using ep0 maxpacket: 16 [ 1089.941966][ T12] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 1089.950886][ T12] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1089.961471][ T12] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1089.970803][ T12] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1089.980210][ T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1089.990605][ T12] usb 3-1: config 0 descriptor?? [ 1090.233451][ T12] usb 3-1: USB disconnect, device number 19 [ 1090.701831][ T3937] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1090.941883][ T3937] usb 3-1: Using ep0 maxpacket: 32 [ 1091.062001][ T3937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1091.072975][ T3937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1091.083461][ T3937] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1091.092897][ T3937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.101547][ T3937] usb 3-1: config 0 descriptor?? [ 1091.142162][ T3937] hub 3-1:0.0: USB hub found [ 1091.361906][ T3937] hub 3-1:0.0: 1 port detected [ 1092.011931][ T12] hub 3-1:0.0: activate --> -90 [ 1092.213359][ T9181] usb 3-1: USB disconnect, device number 20 [ 1092.231886][ T12] hub 3-1:0.0: hub_ext_port_status failed (err = -71) 15:22:08 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902240001000000f108040000000300000009210a00000122000009058103"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r3, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "183fbf1f"}, 0x0, 0x0, 0x0, 0x0}) r4 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:22:08 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r0, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) 15:22:08 executing program 3: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000300)=""/113, 0x71) lseek(r0, 0x3, 0x1) getdents64(r0, &(0x7f0000000400)=""/255, 0xff) 15:22:08 executing program 5: 15:22:08 executing program 4: 15:22:08 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) clone(0x180400, 0x0, 0x0, 0x0, &(0x7f0000000400)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) dup3(r1, r2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) dup2(r0, r3) 15:22:08 executing program 3: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000300)=""/113, 0x71) lseek(r0, 0x3, 0x1) getdents64(r0, &(0x7f0000000400)=""/255, 0xff) 15:22:08 executing program 4: 15:22:08 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000000009a0000000000000009850000002c000000950000000000000099e59fa80e8b67c6c219192ea42890c2e1a9cc1182b40354fa895c0b96b4f3766af972c68f2592afa8478ac3d40fd8af090436be56c6756fd0353141908eda29e463c49461115b010e04e9aa513ed6acc2a587c8fb4d7d2f9b2ecaa4a6e26fed9802b2f1d5bdf7200a94983b59abf567d7e14032d9dd2adf55fd83fd4bdec03abd4bf7e83f803d52f33b85cbd5bdf57880ab810d37c794d5dcbfd5a4231da61908325a54845a096fc2924a387606c4dfae2ea5eb616b01010000c428cdf828de8d90a23141758c5a75b30671619fa9ae921b37f71605fac7027e1a9ff08c545df683c6279c06d2a28122df4a297c5dacc79f2ef6ee3b5e1c3ce1922b31d8c60f747f42c0324163222fdf954ef4269b8f7b6039f8e779f7d65d3d61718b8060bbf22f4250cabc30b46501cea2cb6db7457f2070de1aa1ef02afe75cf1a46f080d9bce5b930f4bbfa89bef150267011d5d79a30b5200e96bc42934841d2264b2cc645a7d3b4a9b823797086b84906c286232058c4bdf7da3ae9ab666f647c79c493ad3962deccdb3c5a9e991"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r0, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) 15:22:08 executing program 4: 15:22:09 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000300)={@multicast1, @rand_addr=0x64010102, @multicast2}, 0xc) [ 1092.824794][ T27] audit: type=1326 audit(8038884128.939:51): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=16459 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45faba code=0x0 15:22:09 executing program 3: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000300)=""/113, 0x71) lseek(r0, 0x3, 0x1) getdents64(r0, &(0x7f0000000400)=""/255, 0xff) [ 1093.171837][ T9181] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1093.421856][ T9181] usb 3-1: Using ep0 maxpacket: 16 [ 1093.571888][ T9181] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 1093.580901][ T9181] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1093.591336][ T9181] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1093.600492][ T9181] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1093.631875][ T9181] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.640817][ T9181] usb 3-1: config 0 descriptor?? [ 1093.883233][ T3937] usb 3-1: USB disconnect, device number 21 [ 1094.351855][ T3937] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1094.591837][ T3937] usb 3-1: Using ep0 maxpacket: 32 [ 1094.711986][ T3937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1094.722888][ T3937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1094.733058][ T3937] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1094.742399][ T3937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.750974][ T3937] usb 3-1: config 0 descriptor?? [ 1094.792170][ T3937] hub 3-1:0.0: USB hub found [ 1095.011874][ T3937] hub 3-1:0.0: 1 port detected [ 1095.661859][ T7627] hub 3-1:0.0: activate --> -90 [ 1095.863262][ T3937] usb 3-1: USB disconnect, device number 22 [ 1095.881843][ T7627] hub 3-1:0.0: hub_ext_port_status failed (err = -71) 15:22:12 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902240001000000f108040000000300000009210a00000122000009058103"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r3, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x4, "183fbf1f"}, 0x0, 0x0, 0x0, 0x0}) r4 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:22:12 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000080)=""/251) 15:22:12 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x42441) 15:22:12 executing program 3: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) lseek(r0, 0x3, 0x1) getdents64(r0, &(0x7f0000000400)=""/255, 0xff) 15:22:12 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r0, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) 15:22:12 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) clone(0x180400, 0x0, 0x0, 0x0, &(0x7f0000000400)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) dup3(r1, r2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) dup2(r0, r3) 15:22:12 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000000009a0000000000000009850000002c000000950000000000000099e59fa80e8b67c6c219192ea42890c2e1a9cc1182b40354fa895c0b96b4f3766af972c68f2592afa8478ac3d40fd8af090436be56c6756fd0353141908eda29e463c49461115b010e04e9aa513ed6acc2a587c8fb4d7d2f9b2ecaa4a6e26fed9802b2f1d5bdf7200a94983b59abf567d7e14032d9dd2adf55fd83fd4bdec03abd4bf7e83f803d52f33b85cbd5bdf57880ab810d37c794d5dcbfd5a4231da61908325a54845a096fc2924a387606c4dfae2ea5eb616b01010000c428cdf828de8d90a23141758c5a75b30671619fa9ae921b37f71605fac7027e1a9ff08c545df683c6279c06d2a28122df4a297c5dacc79f2ef6ee3b5e1c3ce1922b31d8c60f747f42c0324163222fdf954ef4269b8f7b6039f8e779f7d65d3d61718b8060bbf22f4250cabc30b46501cea2cb6db7457f2070de1aa1ef02afe75cf1a46f080d9bce5b930f4bbfa89bef150267011d5d79a30b5200e96bc42934841d2264b2cc645a7d3b4a9b823797086b84906c286232058c4bdf7da3ae9ab666f647c79c493ad3962deccdb3c5a9e991d216f8ef70882a96b6a872ce99448471edecdffa8655a9cf46635cf6a5e5"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r0, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) 15:22:12 executing program 3: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) lseek(r0, 0x3, 0x1) getdents64(r0, &(0x7f0000000400)=""/255, 0xff) [ 1096.460193][ T27] audit: type=1326 audit(8038884132.569:52): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=16522 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45faba code=0x0 15:22:12 executing program 4: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r4) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02"], 0x24, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x1d) creat(&(0x7f0000000040)='./file0\x00', 0x0) 15:22:12 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x40605346, &(0x7f0000000040)={0x0, @time={0x900}}) 15:22:12 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r0, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) 15:22:12 executing program 3: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) lseek(r0, 0x3, 0x1) getdents64(r0, &(0x7f0000000400)=""/255, 0xff) [ 1096.773283][ T3937] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1097.011837][ T3937] usb 3-1: Using ep0 maxpacket: 16 [ 1097.132136][ T3937] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 1097.141001][ T3937] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1097.151855][ T3937] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1097.160832][ T3937] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1097.170475][ T3937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.179311][ T3937] usb 3-1: config 0 descriptor?? [ 1097.423471][ T3937] usb 3-1: USB disconnect, device number 23 [ 1098.001863][ T3937] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1098.251847][ T3937] usb 3-1: Using ep0 maxpacket: 32 [ 1098.382039][ T3937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1098.392943][ T3937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1098.402971][ T3937] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1098.412160][ T3937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.420820][ T3937] usb 3-1: config 0 descriptor?? [ 1098.472176][ T3937] hub 3-1:0.0: USB hub found [ 1098.681903][ T3937] hub 3-1:0.0: 1 port detected [ 1099.321885][ T5] hub 3-1:0.0: activate --> -90 [ 1099.525338][ T9181] usb 3-1: USB disconnect, device number 24 [ 1099.541874][ T5] hub 3-1:0.0: hub_ext_port_status failed (err = -71) 15:22:16 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902240001000000f108040000000300000009210a00000122000009058103"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r3, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, 0x0) r4 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:22:16 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r0, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) 15:22:16 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000980)="b9ff0300600d698cff9e14f00800", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x40) 15:22:16 executing program 3: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/113, 0x71) lseek(0xffffffffffffffff, 0x3, 0x1) getdents64(r0, &(0x7f0000000400)=""/255, 0xff) 15:22:16 executing program 4: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r4) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02"], 0x24, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x1d) creat(&(0x7f0000000040)='./file0\x00', 0x0) 15:22:16 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) clone(0x180400, 0x0, 0x0, 0x0, &(0x7f0000000400)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) dup3(r1, r2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) dup2(r0, r3) 15:22:16 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r0, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) 15:22:16 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='\t', 0x1, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x76, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @multicast1}}}, &(0x7f0000000180)=0x100) [ 1100.114569][ T27] audit: type=1326 audit(8038884136.229:53): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=16594 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45faba code=0x0 15:22:16 executing program 3: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/113, 0x71) lseek(0xffffffffffffffff, 0x3, 0x1) getdents64(r0, &(0x7f0000000400)=""/255, 0xff) 15:22:16 executing program 4: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r4) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02"], 0x24, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x1d) creat(&(0x7f0000000040)='./file0\x00', 0x0) 15:22:16 executing program 3: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/113, 0x71) lseek(0xffffffffffffffff, 0x3, 0x1) getdents64(r0, &(0x7f0000000400)=""/255, 0xff) 15:22:16 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b5b07073f003768"], 0x40) [ 1100.373601][ T5] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1100.621887][ T5] usb 3-1: Using ep0 maxpacket: 16 [ 1100.751951][ T5] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 1100.760871][ T5] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1100.771403][ T5] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1100.780480][ T5] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1100.789613][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.799055][ T5] usb 3-1: config 0 descriptor?? [ 1101.042988][ T9181] usb 3-1: USB disconnect, device number 25 [ 1101.511976][ T9181] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1101.751866][ T9181] usb 3-1: Using ep0 maxpacket: 32 [ 1101.871903][ T9181] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1101.882831][ T9181] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1101.893320][ T9181] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1101.902653][ T9181] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1101.914748][ T9181] usb 3-1: config 0 descriptor?? [ 1101.954105][ T9181] hub 3-1:0.0: USB hub found [ 1102.171948][ T9181] hub 3-1:0.0: 1 port detected [ 1102.831884][ T9181] hub 3-1:0.0: activate --> -90 [ 1103.033645][ T1491] usb 3-1: USB disconnect, device number 26 [ 1103.061867][ T9181] hub 3-1:0.0: hub_ext_port_status failed (err = -71) 15:22:19 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902240001000000f108040000000300000009210a00000122000009058103"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r3, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, 0x0) r4 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:22:19 executing program 3: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/113, 0x71) lseek(r0, 0x0, 0x1) getdents64(r0, &(0x7f0000000400)=""/255, 0xff) 15:22:19 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r0, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) 15:22:19 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0505609, &(0x7f0000000040)={0x0, 0x5, 0x0, "a53ffcb175b2945cc2e02a53eaeff96879f1092abb7f5e7efe50b85d42f9a66d"}) 15:22:19 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) clone(0x180400, 0x0, 0x0, 0x0, &(0x7f0000000400)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) dup3(r1, r2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) dup2(r0, 0xffffffffffffffff) 15:22:19 executing program 4: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r4) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02"], 0x24, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x1d) creat(&(0x7f0000000040)='./file0\x00', 0x0) 15:22:19 executing program 3: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/113, 0x71) lseek(r0, 0x0, 0x1) getdents64(r0, &(0x7f0000000400)=""/255, 0xff) 15:22:19 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000100)="b9ff0300600d698cff9e14f008004de7f9c764362ae28e79667717032de9bda08b79", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 1103.613470][ T27] audit: type=1326 audit(8038884139.729:54): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=16665 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45faba code=0x0 15:22:19 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r0, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) 15:22:19 executing program 3: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/113, 0x71) lseek(r0, 0x0, 0x1) getdents64(r0, &(0x7f0000000400)=""/255, 0xff) 15:22:19 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) umount2(&(0x7f0000000080)='./file0\x00', 0x3) 15:22:19 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r0, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 1103.931851][ T9181] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1104.201854][ T9181] usb 3-1: Using ep0 maxpacket: 16 [ 1104.331997][ T9181] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 1104.340924][ T9181] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1104.351267][ T9181] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1104.360568][ T9181] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1104.369898][ T9181] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1104.385726][ T9181] usb 3-1: config 0 descriptor?? [ 1104.633254][ T9181] usb 3-1: USB disconnect, device number 27 [ 1105.191849][ T9181] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1105.431842][ T9181] usb 3-1: Using ep0 maxpacket: 32 [ 1105.552081][ T9181] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1105.564475][ T9181] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1105.574797][ T9181] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1105.584248][ T9181] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1105.593091][ T9181] usb 3-1: config 0 descriptor?? [ 1105.633433][ T9181] hub 3-1:0.0: USB hub found [ 1105.851865][ T9181] hub 3-1:0.0: 1 port detected [ 1106.501916][ T9181] hub 3-1:0.0: activate --> -90 [ 1106.703857][ T49] usb 3-1: USB disconnect, device number 28 [ 1106.721869][ T9181] hub 3-1:0.0: hub_ext_port_status failed (err = -71) 15:22:23 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902240001000000f108040000000300000009210a00000122000009058103"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r3, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, 0x0) r4 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:22:23 executing program 3: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/113, 0x71) lseek(r0, 0x3, 0x0) getdents64(r0, &(0x7f0000000400)=""/255, 0xff) 15:22:23 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r0, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) 15:22:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:22:23 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) clone(0x180400, 0x0, 0x0, 0x0, &(0x7f0000000400)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) dup3(r1, r2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) dup2(r0, 0xffffffffffffffff) 15:22:23 executing program 4: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r4) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02"], 0x24, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 15:22:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:22:23 executing program 3: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/113, 0x71) lseek(r0, 0x3, 0x0) getdents64(r0, &(0x7f0000000400)=""/255, 0xff) [ 1107.297160][ T27] audit: type=1326 audit(8038884143.409:55): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=16744 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45faba code=0x0 15:22:23 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r0, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) 15:22:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:22:23 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r0, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) 15:22:23 executing program 3: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/113, 0x71) lseek(r0, 0x3, 0x0) getdents64(r0, &(0x7f0000000400)=""/255, 0xff) [ 1107.601839][ T3937] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1107.841881][ T3937] usb 3-1: Using ep0 maxpacket: 16 [ 1107.961898][ T3937] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 1107.970767][ T3937] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1107.981064][ T3937] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1107.990260][ T3937] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1107.999359][ T3937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.010399][ T3937] usb 3-1: config 0 descriptor?? [ 1108.257029][ T3937] usb 3-1: USB disconnect, device number 29 [ 1108.811853][ T3937] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1109.051828][ T3937] usb 3-1: Using ep0 maxpacket: 32 [ 1109.172031][ T3937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1109.182953][ T3937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1109.192927][ T3937] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1109.202113][ T3937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.210808][ T3937] usb 3-1: config 0 descriptor?? [ 1109.252199][ T3937] hub 3-1:0.0: USB hub found [ 1109.471858][ T3937] hub 3-1:0.0: 1 port detected [ 1110.121891][ T3937] hub 3-1:0.0: activate --> -90 [ 1110.323632][ T7627] usb 3-1: USB disconnect, device number 30 [ 1110.341870][ T3937] hub 3-1:0.0: hub_ext_port_status failed (err = -71) 15:22:26 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902240001000000f108040000000300000009210a00000122000009058103"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r3, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:22:26 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r0, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) 15:22:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:22:26 executing program 3: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/113, 0x71) lseek(r0, 0x3, 0x1) getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff) 15:22:26 executing program 4: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r4) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02"], 0x24, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 15:22:26 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) clone(0x180400, 0x0, 0x0, 0x0, &(0x7f0000000400)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) dup3(r1, r2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) dup2(r0, 0xffffffffffffffff) 15:22:27 executing program 3: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/113, 0x71) lseek(r0, 0x3, 0x1) getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff) 15:22:27 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r0, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) 15:22:27 executing program 5: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 1110.921053][ T27] audit: type=1326 audit(8038884147.029:56): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=16814 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45faba code=0x0 15:22:27 executing program 3: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/113, 0x71) lseek(r0, 0x3, 0x1) getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff) 15:22:27 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r0, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) 15:22:27 executing program 5: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 1111.143623][ T9181] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1111.381871][ T9181] usb 3-1: Using ep0 maxpacket: 16 [ 1111.511887][ T9181] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 1111.520770][ T9181] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1111.532417][ T9181] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1111.541368][ T9181] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1111.550959][ T9181] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.560509][ T9181] usb 3-1: config 0 descriptor?? [ 1111.803568][ T7627] usb 3-1: USB disconnect, device number 31 [ 1112.371838][ T7627] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1112.631904][ T7627] usb 3-1: Using ep0 maxpacket: 32 [ 1112.762074][ T7627] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1112.772963][ T7627] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1112.783098][ T7627] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1112.792239][ T7627] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.800880][ T7627] usb 3-1: config 0 descriptor?? [ 1112.842070][ T7627] hub 3-1:0.0: USB hub found [ 1113.061884][ T7627] hub 3-1:0.0: 1 port detected [ 1113.712699][ T3937] hub 3-1:0.0: activate --> -90 [ 1113.913593][ T5] usb 3-1: USB disconnect, device number 32 [ 1113.931880][ T3937] hub 3-1:0.0: hub_ext_port_status failed (err = -71) 15:22:30 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902240001000000f108040000000300000009210a00000122000009058103"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r3, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:22:30 executing program 3: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/113, 0x71) lseek(r0, 0x3, 0x1) getdents64(r0, 0x0, 0x0) 15:22:30 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000000009a0000000000000009850000002c000000950000000000000099e59fa80e8b67c6c219192ea42890c2e1a9cc1182b40354fa895c0b96b4f3766af972c68f2592afa8478ac3d40fd8af090436be56c6756fd0353141908eda29e463c49461115b010e04e9aa513ed6acc2a587c8fb4d7d2f9b2ecaa4a6e26fed9802b2f1d5bdf7200a94983b59abf567d7e14032d9dd2adf55fd83fd4bdec03abd4bf7e83f803d52f33b85cbd5bdf57880ab810d37c794d5dcbfd5a4231da61908325a54845a096fc2924a387606c4dfae2ea5eb616b01010000c428cdf828de8d90a23141758c5a75b30671619fa9ae921b37f71605fac7027e1a9ff08c545df683c6279c06d2a28122df4a297c5dacc79f2ef6ee3b5e1c3ce1922b31d8c60f747f42c0324163222fdf954ef4269b8f7b6039f8e779f7d65d3d61718b8060bbf22f4250cabc30b46501cea2cb6db7457f2070de1aa1ef02afe75cf1a46f080d9bce5b930f4bbfa89bef150267011d5d79a30b5200e96bc42934841d2264b2cc645a7d3b4a9b823797086b84906c286232058c4bdf7da3ae9ab666f647c79c493ad3962deccdb3c5a9e991d216f8ef70882a96b6a872ce99448471edecdffa8655a9cf46635cf6a5e57b045db802c1b694145be569a9af2eca0e0d5b461ac5eda29fefa427df"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r0, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) 15:22:30 executing program 4: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r4) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02"], 0x24, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 15:22:30 executing program 5: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:22:30 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup3(r1, r2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) dup2(r0, r3) 15:22:30 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r0, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) 15:22:30 executing program 3: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/113, 0x71) lseek(r0, 0x3, 0x1) getdents64(r0, 0x0, 0x0) [ 1114.501651][ T27] audit: type=1326 audit(8038884150.609:57): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=16882 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45faba code=0x0 15:22:30 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000000009a0000000000000009850000002c000000950000000000000099e59fa80e8b67c6c219192ea42890c2e1a9cc1182b40354fa895c0b96b4f3766af972c68f2592afa8478ac3d40fd8af090436be56c6756fd0353141908eda29e463c49461115b010e04e9aa513ed6acc2a587c8fb4d7d2f9b2ecaa4a6e26fed9802b2f1d5bdf7200a94983b59abf567d7e14032d9dd2adf55fd83fd4bdec03abd4bf7e83f803d52f33b85cbd5bdf57880ab810d37c794d5dcbfd5a4231da61908325a54845a096fc2924a387606c4dfae2ea5eb616b01010000c428cdf828de8d90a23141758c5a75b30671619fa9ae921b37f71605fac7027e1a9ff08c545df683c6279c06d2a28122df4a297c5dacc79f2ef6ee3b5e1c3ce1922b31d8c60f747f42c0324163222fdf954ef4269b8f7b6039f8e779f7d65d3d61718b8060bbf22f4250cabc30b46501cea2cb6db7457f2070de1aa1ef02afe75cf1a46f080d9bce5b930f4bbfa89bef150267011d5d79a30b5200e96bc42934841d2264b2cc645a7d3b4a9b823797086b84906c286232058c4bdf7da3ae9ab666f647c79c493ad3962deccdb3c5a9e991d216f8ef70882a96b6a872ce99448471edecdffa8655a9cf46635cf6a5e57b045db802c1b694145be569a9af2eca0e0d5b461ac5eda29fefa427df53"], 0x0, 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r0, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) 15:22:30 executing program 5: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:22:30 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r0, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) 15:22:30 executing program 3: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/113, 0x71) lseek(r0, 0x3, 0x1) getdents64(r0, 0x0, 0x0) [ 1114.773527][ T1491] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1115.021842][ T1491] usb 3-1: Using ep0 maxpacket: 16 [ 1115.141931][ T1491] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 1115.150801][ T1491] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1115.161628][ T1491] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1115.171003][ T1491] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1115.180307][ T1491] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1115.189297][ T1491] usb 3-1: config 0 descriptor?? [ 1115.432881][ T1491] usb 3-1: USB disconnect, device number 33 [ 1115.901856][ T1491] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1116.141862][ T1491] usb 3-1: Using ep0 maxpacket: 32 [ 1116.261925][ T1491] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1116.272869][ T1491] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1116.282664][ T1491] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1116.291735][ T1491] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1116.302509][ T1491] usb 3-1: config 0 descriptor?? [ 1116.342110][ T1491] hub 3-1:0.0: USB hub found [ 1116.561940][ T1491] hub 3-1:0.0: 1 port detected [ 1117.211873][ T1491] hub 3-1:0.0: activate --> -90 [ 1117.416125][ T3937] usb 3-1: USB disconnect, device number 34 [ 1117.432067][ T1491] hub 3-1:0.0: hub_ext_port_status failed (err = -71) 15:22:34 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902240001000000f108040000000300000009210a00000122000009058103"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r3, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:22:34 executing program 5: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:22:34 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r0, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) 15:22:34 executing program 3: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = semget$private(0x0, 0x20000000102, 0x0) semctl$SETALL(r3, 0x0, 0x11, 0x0) 15:22:34 executing program 4: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r4) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02"], 0x24, 0x0) tkill(r4, 0x1d) creat(&(0x7f0000000040)='./file0\x00', 0x0) 15:22:34 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) dup3(r1, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) dup2(r0, r2) 15:22:34 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='\t', 0x1, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x10, &(0x7f0000000100)={r2}, 0x8) [ 1117.965828][ T27] audit: type=1326 audit(8038884154.079:58): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=16948 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45faba code=0x0 15:22:34 executing program 5: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:22:34 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r0, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) 15:22:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 15:22:34 executing program 4: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r4) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02"], 0x24, 0x0) tkill(r4, 0x1d) creat(&(0x7f0000000040)='./file0\x00', 0x0) [ 1118.005324][T16960] sctp: [Deprecated]: syz-executor.3 (pid 16960) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1118.005324][T16960] Use struct sctp_sack_info instead [ 1118.035101][T16962] sctp: [Deprecated]: syz-executor.3 (pid 16962) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1118.035101][T16962] Use struct sctp_sack_info instead 15:22:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) [ 1118.261871][ T9181] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1118.501862][ T9181] usb 3-1: Using ep0 maxpacket: 16 [ 1118.621954][ T9181] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 1118.630877][ T9181] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1118.642932][ T9181] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1118.652358][ T9181] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1118.661438][ T9181] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1118.673336][ T9181] usb 3-1: config 0 descriptor?? [ 1118.912952][ T1491] usb 3-1: USB disconnect, device number 35 [ 1119.381897][ T1491] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1119.621868][ T1491] usb 3-1: Using ep0 maxpacket: 32 [ 1119.742015][ T1491] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1119.753893][ T1491] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1119.763991][ T1491] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1119.773272][ T1491] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.783879][ T1491] usb 3-1: config 0 descriptor?? [ 1119.822092][ T1491] hub 3-1:0.0: USB hub found [ 1120.041874][ T1491] hub 3-1:0.0: 1 port detected [ 1120.691887][ T1491] hub 3-1:0.0: activate --> -90 [ 1120.894930][ T49] usb 3-1: USB disconnect, device number 36 [ 1120.911961][ T1491] hub 3-1:0.0: hub_ext_port_status failed (err = -71) 15:22:37 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902240001000000f108040000000300000009210a00000122000009058103"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r3, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0}) r4 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:22:37 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) dup3(r1, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) dup2(r0, r2) 15:22:37 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='\t', 0x1, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x71, &(0x7f0000000100)={r2}, 0x8) 15:22:37 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r0, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) 15:22:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 15:22:37 executing program 4: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r4) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02"], 0x24, 0x0) tkill(r4, 0x1d) creat(&(0x7f0000000040)='./file0\x00', 0x0) 15:22:37 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='\t', 0x1, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x7d, &(0x7f0000000100)={r2}, 0x8) 15:22:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) [ 1121.457058][ T27] audit: type=1326 audit(8038884157.569:59): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=17012 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45faba code=0x0 15:22:37 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r0, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) 15:22:37 executing program 4: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r4) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x1d) creat(&(0x7f0000000040)='./file0\x00', 0x0) 15:22:37 executing program 3: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pidfd_open(0x0, 0x0) 15:22:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) [ 1121.791902][ T5] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1122.042707][ T5] usb 3-1: Using ep0 maxpacket: 16 [ 1122.171998][ T5] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 1122.180892][ T5] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1122.191640][ T5] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1122.200870][ T5] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1122.210194][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1122.221078][ T5] usb 3-1: config 0 descriptor?? [ 1122.474108][ T9181] usb 3-1: USB disconnect, device number 37 [ 1122.941885][ T9181] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1123.181871][ T9181] usb 3-1: Using ep0 maxpacket: 32 [ 1123.301859][ T9181] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1123.312845][ T9181] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1123.323350][ T9181] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1123.332696][ T9181] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.341301][ T9181] usb 3-1: config 0 descriptor?? [ 1123.394662][ T9181] hub 3-1:0.0: USB hub found [ 1123.611971][ T9181] hub 3-1:0.0: 1 port detected [ 1124.261897][ T49] hub 3-1:0.0: activate --> -90 [ 1124.481875][ T49] hub 3-1:0.0: hub_ext_port_status failed (err = 0) [ 1124.801905][ T49] usb 3-1: USB disconnect, device number 38 15:22:41 executing program 4: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r4) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x1d) creat(&(0x7f0000000040)='./file0\x00', 0x0) 15:22:41 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r0, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) 15:22:41 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000002c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 15:22:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 15:22:41 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902240001000000f108040000000300000009210a00000122000009058103"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r3, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0}) r4 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:22:41 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) dup3(r1, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) dup2(r0, r2) [ 1125.222620][ T27] audit: type=1326 audit(8038884161.339:60): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=17082 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45faba code=0x0 15:22:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 15:22:41 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000000009a0000000000000009850000002c000000950000000000000099e59fa80e8b67c6c219192ea42890c2e1a9cc1182b40354fa895c0b96b4f3766af972c68f2592afa8478ac3d40fd8af090436be56c6756fd0353141908eda29e463c49461115b010e04e9aa513ed6acc2a587c8fb4d7d2f9b2ecaa4a6e26fed9802b2f1d5bdf7200a94983b59abf567d7e14032d9dd2adf55fd83fd4bdec03abd4bf7e83f803d52f33b85cbd5bdf57880ab810d37c794d5dcbfd5a4231da61908325a54845a096fc2924a387606c4dfae2ea5eb616b01010000c428cdf828de8d90a23141758c5a75b30671619fa9ae921b37f71605fac7027e1a9ff08c545df683c6279c06d2a28122df4a297c5dacc79f2ef6ee3b5e1c3ce1922b31d8c60f747f42c0324163222fdf954ef4269b8f7b6039f8e779f7d65d3d61718b8060bbf22f4250cabc30b46501cea2cb6db7457f2070de1aa1ef02afe75cf1a46f080d9bce5b930f4bbfa89bef150267011d5d79a30b5200e96bc42934841d2264b2cc645a7d3b4a9b823797086b84906c286232058c4bdf7da3ae9ab666f647c79c493ad3962deccdb3c5a9e991d216f8ef70882a96b6a872ce99448471edecdffa8655a9cf46635cf6a5e57b045db802c1b694145be569a9af2eca0e0d5b461ac5eda29fefa427df53"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r0, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) 15:22:41 executing program 3: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000040)=@buf) 15:22:41 executing program 4: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r4) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x1d) creat(&(0x7f0000000040)='./file0\x00', 0x0) 15:22:41 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000000009a0000000000000009850000002c000000950000000000000099e59fa80e8b67c6c219192ea42890c2e1a9cc1182b40354fa895c0b96b4f3766af972c68f2592afa8478ac3d40fd8af090436be56c6756fd0353141908eda29e463c49461115b010e04e9aa513ed6acc2a587c8fb4d7d2f9b2ecaa4a6e26fed9802b2f1d5bdf7200a94983b59abf567d7e14032d9dd2adf55fd83fd4bdec03abd4bf7e83f803d52f33b85cbd5bdf57880ab810d37c794d5dcbfd5a4231da61908325a54845a096fc2924a387606c4dfae2ea5eb616b01010000c428cdf828de8d90a23141758c5a75b30671619fa9ae921b37f71605fac7027e1a9ff08c545df683c6279c06d2a28122df4a297c5dacc79f2ef6ee3b5e1c3ce1922b31d8c60f747f42c0324163222fdf954ef4269b8f7b6039f8e779f7d65d3d61718b8060bbf22f4250cabc30b46501cea2cb6db7457f2070de1aa1ef02afe75cf1a46f080d9bce5b930f4bbfa89bef150267011d5d79a30b5200e96bc42934841d2264b2cc645a7d3b4a9b823797086b84906c286232058c4bdf7da3ae9ab666f647c79c493ad3962deccdb3c5a9e991d216f8ef70882a96b6a872ce99448471edecdffa8655a9cf46635cf6a5e57b045db802c1b694145be569a9af2eca0e0d5b461ac5eda29fefa427df53"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 15:22:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 15:22:41 executing program 4: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02"], 0x24, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x1d) creat(&(0x7f0000000040)='./file0\x00', 0x0) 15:22:41 executing program 3: io_setup(0x5, &(0x7f0000000200)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x1c9c380}, 0x0) 15:22:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 15:22:41 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) [ 1125.529190][T17126] ptrace attach of "/root/syz-executor.4"[17125] was attempted by "/root/syz-executor.4"[17126] [ 1125.531889][ T5] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1125.811922][ T5] usb 3-1: Using ep0 maxpacket: 16 [ 1125.932722][ T5] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 1125.941619][ T5] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1125.951808][ T5] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1125.960735][ T5] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1125.969821][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.978705][ T5] usb 3-1: config 0 descriptor?? [ 1126.223332][ T7627] usb 3-1: USB disconnect, device number 39 [ 1126.691903][ T7627] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1126.931972][ T7627] usb 3-1: Using ep0 maxpacket: 32 [ 1127.052106][ T7627] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1127.063278][ T7627] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1127.073676][ T7627] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1127.083094][ T7627] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.093597][ T7627] usb 3-1: config 0 descriptor?? [ 1127.133340][ T7627] hub 3-1:0.0: USB hub found [ 1127.351890][ T7627] hub 3-1:0.0: 1 port detected [ 1128.001885][ T5] hub 3-1:0.0: activate --> -90 [ 1128.221870][ T5] hub 3-1:0.0: hub_ext_port_status failed (err = 0) [ 1128.542023][ T3937] usb 3-1: USB disconnect, device number 40 15:22:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902240001000000f108040000000300000009210a00000122000009058103"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r3, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0}) r4 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:22:45 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 15:22:45 executing program 4: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02"], 0x24, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x1d) creat(&(0x7f0000000040)='./file0\x00', 0x0) 15:22:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x68, 0x30, 0x0, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:22:45 executing program 3: add_key$user(0x0, 0x0, &(0x7f00000003c0)="585ccb01ed83b836c1a64749", 0xc, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040b00490300000009210000000122dc0109058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0010b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) 15:22:45 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) dup3(0xffffffffffffffff, r1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) dup2(r0, r2) 15:22:45 executing program 4: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02"], 0x24, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x1d) creat(&(0x7f0000000040)='./file0\x00', 0x0) 15:22:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x68, 0x30, 0x0, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 1128.998758][ T27] audit: type=1326 audit(8038884165.109:61): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=17160 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45faba code=0x0 [ 1129.025235][T17168] ptrace attach of "/root/syz-executor.4"[17166] was attempted by "/root/syz-executor.4"[17168] 15:22:45 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000000009a0000000000000009850000002c000000950000000000000099e59fa80e8b67c6c219192ea42890c2e1a9cc1182b40354fa895c0b96b4f3766af972c68f2592afa8478ac3d40fd8af090436be56c6756fd0353141908eda29e463c49461115b010e04e9aa513ed6acc2a587c8fb4d7d2f9b2ecaa4a6e26fed9802b2f1d5bdf7200a94983b59abf567d7e14032d9dd2adf55fd83fd4bdec03abd4bf7e83f803d52f33b85cbd5bdf57880ab810d37c794d5dcbfd5a4231da61908325a54845a096fc2924a387606c4dfae2ea5eb616b01010000c428cdf828de8d90a23141758c5a75b30671619fa9ae921b37f71605fac7027e1a9ff08c545df683c6279c06d2a28122df4a297c5dacc79f2ef6ee3b5e1c3ce1922b31d8c60f747f42c0324163222fdf954ef4269b8f7b6039f8e779f7d65d3d61718b8060bbf22f4250cabc30b46501cea2cb6db7457f2070de1aa1ef02afe75cf1a46f080d9bce5b930f4bbfa89bef150267011d5d79a30b5200e96bc42934841d2264b2cc645a7d3b4a9b823797086b84906c286232058c4bdf7da3ae9ab666f647c79c493ad3962deccdb3c5a9e991d216f8ef70882a96b6a872ce99448471edecdffa8655a9cf46635cf6a5e57b045db802c1b694145be569a9af2eca0e0d5b461ac5eda29fefa427df53"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={0xffffffffffffffff, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) 15:22:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x68, 0x30, 0x0, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:22:45 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={0xffffffffffffffff, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 1129.145048][T17182] ptrace attach of "/root/syz-executor.4"[17181] was attempted by "/root/syz-executor.4"[17182] 15:22:45 executing program 4: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02"], 0x24, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x1d) creat(&(0x7f0000000040)='./file0\x00', 0x0) [ 1129.231840][ T5] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1129.331823][ T9181] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1129.471840][ T5] usb 4-1: Using ep0 maxpacket: 16 [ 1129.591854][ T5] usb 4-1: config 0 has an invalid interface number: 11 but max is 0 [ 1129.591860][ T9181] usb 3-1: Using ep0 maxpacket: 16 [ 1129.605175][ T5] usb 4-1: config 0 has no interface number 0 [ 1129.611268][ T5] usb 4-1: too many endpoints for config 0 interface 11 altsetting 0: 73, using maximum allowed: 30 [ 1129.622159][ T5] usb 4-1: config 0 interface 11 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1129.633231][ T5] usb 4-1: config 0 interface 11 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1129.643144][ T5] usb 4-1: config 0 interface 11 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 1129.656121][ T5] usb 4-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 1129.665219][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1129.673855][ T5] usb 4-1: config 0 descriptor?? [ 1129.731974][ T9181] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 1129.740849][ T9181] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1129.751884][ T9181] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1129.760871][ T9181] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1129.770389][ T9181] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1129.779508][ T9181] usb 3-1: config 0 descriptor?? [ 1130.045669][ T7627] usb 3-1: USB disconnect, device number 41 [ 1130.155376][ T5] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.11/0003:0458:5013.0005/input/input20 [ 1130.168076][ T5] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.11/0003:0458:5013.0005/input/input21 [ 1130.263729][ T5] kye 0003:0458:5013.0005: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.3-1/input11 [ 1130.355033][ T3937] usb 4-1: USB disconnect, device number 2 [ 1130.611848][ T7627] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1130.851869][ T7627] usb 3-1: Using ep0 maxpacket: 32 [ 1130.971858][ T7627] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1130.982784][ T7627] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1130.993528][ T7627] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1131.002976][ T7627] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1131.013184][ T7627] usb 3-1: config 0 descriptor?? [ 1131.054785][ T7627] hub 3-1:0.0: USB hub found [ 1131.272011][ T7627] hub 3-1:0.0: 1 port detected [ 1131.922017][ T7627] hub 3-1:0.0: activate --> -90 [ 1132.141874][ T7627] hub 3-1:0.0: hub_ext_port_status failed (err = 0) [ 1132.461959][ T7627] usb 3-1: USB disconnect, device number 42 15:22:48 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902240001000000f108040000000300000009210a00000122000009058103"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r3, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x2, "183f"}, 0x0, 0x0, 0x0, 0x0}) r4 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:22:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x871a15abc695fb3d}, 0x14}}, 0x0) 15:22:48 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={0xffffffffffffffff, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) 15:22:48 executing program 4: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02"], 0x24, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x1d) creat(&(0x7f0000000040)='./file0\x00', 0x0) 15:22:48 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) dup3(0xffffffffffffffff, r1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) dup2(r0, r2) 15:22:48 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) socket(0x11, 0x0, 0x0) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000000)={0x0, 0x1, 0x6, @random="9610a814e98e"}, 0x10) 15:22:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x871a15abc695fb3d}, 0x14}}, 0x0) [ 1132.877489][ T27] audit: type=1326 audit(8038884168.989:62): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=17278 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45faba code=0x0 15:22:49 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='\t', 0x1, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x7c, &(0x7f0000000100)={r2}, 0x8) 15:22:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x871a15abc695fb3d}, 0x14}}, 0x0) 15:22:49 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) r4 = dup(r0) sendmsg$IPSET_CMD_RENAME(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[], 0x14}}, 0x240408c4) 15:22:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x18, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 15:22:49 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "436c1ef6df4b8c9027075adb56da7d43dfe88c"}) [ 1133.213419][ T7627] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1133.471835][ T7627] usb 3-1: Using ep0 maxpacket: 16 [ 1133.591944][ T7627] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 1133.600855][ T7627] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1133.611070][ T7627] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1133.620134][ T7627] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1133.629196][ T7627] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1133.639508][ T7627] usb 3-1: config 0 descriptor?? [ 1133.882785][ T9181] usb 3-1: USB disconnect, device number 43 [ 1134.381837][ T3937] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1134.621885][ T3937] usb 3-1: Using ep0 maxpacket: 32 [ 1134.761892][ T3937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1134.772818][ T3937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1134.782810][ T3937] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1134.791964][ T3937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.802111][ T3937] usb 3-1: config 0 descriptor?? [ 1134.853453][ T3937] hub 3-1:0.0: USB hub found [ 1135.061905][ T3937] hub 3-1:0.0: 1 port detected [ 1135.691857][ T3937] hub 3-1:0.0: activate --> -90 [ 1135.911896][ T3937] hub 3-1:0.0: hub_ext_port_status failed (err = 2) [ 1136.231995][ T1491] usb 3-1: USB disconnect, device number 44 15:22:52 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902240001000000f108040000000300000009210a00000122000009058103"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r3, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x2, "183f"}, 0x0, 0x0, 0x0, 0x0}) r4 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:22:52 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xa, 0x9, 0x69, 0x8000000000000002, 0x0, 0x0}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0), &(0x7f00000002c0), 0x80000001, r0}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), &(0x7f0000000180), 0xbcc4, r0}, 0x38) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) 15:22:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x18, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 15:22:52 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x2, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3d, 0x0) 15:22:52 executing program 4: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02"], 0x24, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x1d) creat(&(0x7f0000000040)='./file0\x00', 0x0) 15:22:52 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) dup3(0xffffffffffffffff, r1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) dup2(r0, r2) 15:22:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x18, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) [ 1136.661974][ T27] audit: type=1326 audit(8038884172.769:63): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=17342 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45faba code=0x0 15:22:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 1136.826198][T17352] ================================================================== [ 1136.834317][T17352] BUG: KCSAN: data-race in __bpf_lru_list_rotate / __htab_lru_percpu_map_update_elem [ 1136.843750][T17352] [ 1136.846072][T17352] write to 0xffff88809fa52ce3 of 1 bytes by task 17345 on cpu 1: [ 1136.853774][T17352] __htab_lru_percpu_map_update_elem+0x6ea/0xa30 [ 1136.860083][T17352] bpf_percpu_hash_update+0x5a/0x90 [ 1136.865296][T17352] bpf_map_update_value+0x1d8/0x320 [ 1136.870480][T17352] generic_map_update_batch+0x336/0x450 [ 1136.876022][T17352] bpf_map_do_batch+0x286/0x2f0 [ 1136.880856][T17352] __do_sys_bpf+0xb00/0x98a0 [ 1136.885431][T17352] __x64_sys_bpf+0x3d/0x50 [ 1136.889867][T17352] do_syscall_64+0x51/0xb0 [ 1136.894369][T17352] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1136.900243][T17352] [ 1136.902559][T17352] read to 0xffff88809fa52ce3 of 1 bytes by task 17352 on cpu 0: [ 1136.910169][T17352] __bpf_lru_list_rotate+0xce/0x7b0 [ 1136.915379][T17352] bpf_lru_pop_free+0x7b7/0xeb0 [ 1136.920265][T17352] __htab_lru_percpu_map_update_elem+0xd0/0xa30 [ 1136.926572][T17352] bpf_percpu_hash_update+0x5a/0x90 [ 1136.931756][T17352] bpf_map_update_value+0x1d8/0x320 [ 1136.936994][T17352] generic_map_update_batch+0x336/0x450 [ 1136.942527][T17352] bpf_map_do_batch+0x286/0x2f0 [ 1136.947361][T17352] __do_sys_bpf+0xb00/0x98a0 [ 1136.951936][T17352] __x64_sys_bpf+0x3d/0x50 [ 1136.956342][T17352] do_syscall_64+0x51/0xb0 [ 1136.960776][T17352] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1136.966639][T17352] [ 1136.968982][T17352] Reported by Kernel Concurrency Sanitizer on: [ 1136.975120][T17352] CPU: 0 PID: 17352 Comm: syz-executor.0 Not tainted 5.8.0-rc7-syzkaller #0 [ 1136.983766][T17352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1136.993806][T17352] ================================================================== [ 1137.001845][T17352] Kernel panic - not syncing: panic_on_warn set ... [ 1137.008419][T17352] CPU: 0 PID: 17352 Comm: syz-executor.0 Not tainted 5.8.0-rc7-syzkaller #0 [ 1137.017071][T17352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1137.027107][T17352] Call Trace: [ 1137.030387][T17352] dump_stack+0x10f/0x19d [ 1137.034755][T17352] panic+0x207/0x64a [ 1137.038644][T17352] ? vprintk_emit+0x44a/0x4f0 [ 1137.043311][T17352] kcsan_report+0x684/0x690 [ 1137.047803][T17352] ? kcsan_setup_watchpoint+0x453/0x4d0 [ 1137.053336][T17352] ? __bpf_lru_list_rotate+0xce/0x7b0 [ 1137.058695][T17352] ? bpf_lru_pop_free+0x7b7/0xeb0 [ 1137.063709][T17352] ? __htab_lru_percpu_map_update_elem+0xd0/0xa30 [ 1137.070110][T17352] ? bpf_percpu_hash_update+0x5a/0x90 [ 1137.075482][T17352] ? bpf_map_update_value+0x1d8/0x320 [ 1137.080862][T17352] ? generic_map_update_batch+0x336/0x450 [ 1137.086566][T17352] ? bpf_map_do_batch+0x286/0x2f0 [ 1137.091574][T17352] ? __do_sys_bpf+0xb00/0x98a0 [ 1137.096343][T17352] ? __x64_sys_bpf+0x3d/0x50 [ 1137.100919][T17352] ? do_syscall_64+0x51/0xb0 [ 1137.105533][T17352] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1137.111597][T17352] ? __list_add_valid+0x28/0x90 [ 1137.116434][T17352] ? __list_add_valid+0x28/0x90 [ 1137.121288][T17352] kcsan_setup_watchpoint+0x453/0x4d0 [ 1137.126677][T17352] ? __list_del_entry_valid+0x54/0xc0 [ 1137.132031][T17352] ? __list_add_valid+0x28/0x90 [ 1137.136878][T17352] __bpf_lru_list_rotate+0xce/0x7b0 [ 1137.142061][T17352] bpf_lru_pop_free+0x7b7/0xeb0 [ 1137.146899][T17352] __htab_lru_percpu_map_update_elem+0xd0/0xa30 [ 1137.153132][T17352] ? __rcu_read_unlock+0x4b/0x260 [ 1137.158145][T17352] bpf_percpu_hash_update+0x5a/0x90 [ 1137.163330][T17352] bpf_map_update_value+0x1d8/0x320 [ 1137.168518][T17352] generic_map_update_batch+0x336/0x450 [ 1137.174051][T17352] ? generic_map_delete_batch+0x360/0x360 [ 1137.179755][T17352] bpf_map_do_batch+0x286/0x2f0 [ 1137.184594][T17352] __do_sys_bpf+0xb00/0x98a0 [ 1137.189189][T17352] ? __srcu_read_unlock+0x1f/0x40 [ 1137.194199][T17352] ? tomoyo_path_number_perm+0x286/0x2d0 [ 1137.199825][T17352] ? ktime_get_ts64+0x2d9/0x310 [ 1137.204663][T17352] ? set_normalized_timespec64+0x104/0x130 [ 1137.210453][T17352] ? check_preemption_disabled+0x51/0x140 [ 1137.216156][T17352] ? debug_smp_processor_id+0x18/0x20 [ 1137.221519][T17352] ? fpregs_assert_state_consistent+0x7e/0x90 [ 1137.227576][T17352] __x64_sys_bpf+0x3d/0x50 [ 1137.231984][T17352] do_syscall_64+0x51/0xb0 [ 1137.236404][T17352] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1137.242277][T17352] RIP: 0033:0x45cc79 [ 1137.246176][T17352] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1137.265761][T17352] RSP: 002b:00007f601249fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1137.274172][T17352] RAX: ffffffffffffffda RBX: 0000000000001a80 RCX: 000000000045cc79 [ 1137.282140][T17352] RDX: 0000000000000038 RSI: 0000000020000080 RDI: 000000000000001a [ 1137.290102][T17352] RBP: 000000000078bfe0 R08: 0000000000000000 R09: 0000000000000000 [ 1137.298052][T17352] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 1137.306007][T17352] R13: 00007ffdabbd236f R14: 00007f60124a09c0 R15: 000000000078bfac [ 1137.315030][T17352] Kernel Offset: disabled [ 1137.319375][T17352] Rebooting in 86400 seconds..