: -22 [ 642.993238][ T1192] ieee802154 phy1 wpan1: encryption failed: -22 17:16:10 executing program 0: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'\x00', 0x5}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) 17:16:10 executing program 5: syz_emit_ethernet(0x2b, &(0x7f00000002c0)={@random="0f3c6e3aae15", @remote, @val, {@ipv4}}, 0x0) 17:16:10 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r4, 0xc00c5512, &(0x7f0000000380)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x200000000000000) 17:16:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000000)={0x40001}) 17:16:11 executing program 0: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'\x00', 0x5}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) 17:16:11 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f00000007c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) [ 644.499175][ T9755] hub 9-0:1.0: USB hub found [ 644.505056][ T9755] hub 9-0:1.0: 8 ports detected 17:16:12 executing program 1: syz_usb_connect$uac1(0x0, 0x93, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, "b7"}, @feature_unit={0xd, 0x24, 0x6, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x1}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x11, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 17:16:12 executing program 3: openat$dsp1(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) 17:16:12 executing program 0: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'\x00', 0x5}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) 17:16:12 executing program 5: syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000400)) syz_io_uring_setup(0x4ae8, &(0x7f0000000440), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) 17:16:12 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x53, 0xe2, 0xce, 0x40, 0x8ca, 0x109, 0xf43c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7e, 0x93, 0x81, 0x0, [], [{}]}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000b40)='\v') 17:16:12 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) 17:16:12 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'\x00', 0x5}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) 17:16:12 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) getpeername(r0, 0x0, 0x0) 17:16:12 executing program 3: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) sendmmsg(r1, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003980)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0) [ 645.822901][ T5090] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 646.072591][ T5090] usb 2-1: Using ep0 maxpacket: 8 17:16:13 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'\x00', 0x5}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) [ 646.203230][ T5090] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 646.212805][ T5090] usb 2-1: config 1 has no interface number 1 [ 646.222801][ T5090] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 646.232921][ T5090] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 17:16:13 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'dvmrp0\x00', 0x2501}) ioctl$TUNSETIFF(r0, 0x400454d8, 0x0) 17:16:13 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) [ 646.543179][ T5090] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 646.552801][ T5090] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.561057][ T5090] usb 2-1: Product: syz [ 646.565612][ T5090] usb 2-1: Manufacturer: syz [ 646.570434][ T5090] usb 2-1: SerialNumber: syz [ 646.933506][ T5090] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 647.076590][ T5090] usb 2-1: USB disconnect, device number 3 [ 647.233852][ T8376] udevd[8376]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 17:16:14 executing program 1: syz_usb_connect$uac1(0x0, 0x93, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, "b7"}, @feature_unit={0xd, 0x24, 0x6, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x1}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x11, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 17:16:14 executing program 5: syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000400)) syz_io_uring_setup(0x4ae8, &(0x7f0000000440), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) 17:16:14 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'\x00', 0x5}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) 17:16:14 executing program 3: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="31010000dccd5e08cb06070000e816952301090224000100007e000904340102d469e70009058acf65"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 647.753433][ T5084] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 647.983607][ T5090] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 648.002579][ T5084] usb 4-1: Using ep0 maxpacket: 8 [ 648.122665][ T5084] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 648.131128][ T5084] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 648.141751][ T5084] usb 4-1: config 0 has no interface number 0 [ 648.148148][ T5084] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 648.159534][ T5084] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 648.175508][ T5084] usb 4-1: config 0 interface 52 has no altsetting 0 [ 648.252454][ T5090] usb 2-1: Using ep0 maxpacket: 8 17:16:15 executing program 4: mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/43, 0x2b, 0x0, &(0x7f0000000040)) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) syz_io_uring_setup(0x4ae8, &(0x7f0000000440)={0x0, 0x0, 0x80}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) 17:16:15 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'dvmrp0\x00', 0x2501}) ioctl$TUNSETIFF(r0, 0x400454d8, 0x0) 17:16:15 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) 17:16:15 executing program 5: r0 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_inet_SIOCGARP(r0, 0x8940, &(0x7f0000000000)={{0x2, 0x0, @loopback}, {0x0, @multicast}, 0x0, {0x2, 0x0, @private}, 'team0\x00'}) [ 648.343022][ T5084] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice=e8.00 [ 648.352679][ T5084] usb 4-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 648.361304][ T5084] usb 4-1: Product: syz [ 648.366150][ T5084] usb 4-1: Manufacturer: syz [ 648.374247][ T5084] usb 4-1: SerialNumber: syz [ 648.413257][ T5090] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 648.423190][ T5090] usb 2-1: config 1 has no interface number 1 [ 648.429503][ T5090] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 648.438888][ T5090] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 648.480625][ T5084] usb 4-1: config 0 descriptor?? 17:16:15 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) 17:16:15 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12014000246b9f401320610475f36ff82a010902fcff0000000000090400000113ac820009058301"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) [ 648.704090][ T5090] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 648.713589][ T5090] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.721848][ T5090] usb 2-1: Product: syz [ 648.726392][ T5090] usb 2-1: Manufacturer: syz [ 648.731239][ T5090] usb 2-1: SerialNumber: syz [ 648.766874][ T5084] input: syz syz (Stick) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input5 17:16:15 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'dvmrp0\x00', 0x2501}) ioctl$TUNSETIFF(r0, 0x400454d8, 0x0) [ 649.013531][ T5084] usb 4-1: USB disconnect, device number 5 17:16:16 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) [ 649.273833][ T5090] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 649.455646][ T5090] usb 2-1: USB disconnect, device number 4 [ 649.605364][ T5089] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 649.774032][ T8442] udevd[8442]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 17:16:16 executing program 1: syz_usb_connect$uac1(0x0, 0x93, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, "b7"}, @feature_unit={0xd, 0x24, 0x6, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x1}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x11, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 17:16:17 executing program 3: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="31010000dccd5e08cb06070000e816952301090224000100007e000904340102d469e70009058acf65"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 17:16:17 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(0xffffffffffffffff, 0xc0245720, &(0x7f0000000400)) dup(0xffffffffffffffff) r0 = socket$inet6(0xa, 0x3, 0xff) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2811fdff) creat(0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffd8) 17:16:17 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'dvmrp0\x00', 0x2501}) ioctl$TUNSETIFF(r0, 0x400454d8, 0x0) 17:16:17 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) [ 650.004409][ T5089] usb 6-1: config index 0 descriptor too short (expected 65532, got 27) [ 650.013146][ T5089] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 650.021467][ T5089] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 650.030733][ T5089] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 17:16:17 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) [ 650.433675][ T5089] usb 6-1: New USB device found, idVendor=2013, idProduct=0461, bcdDevice=f3.75 [ 650.443160][ T5089] usb 6-1: New USB device strings: Mfr=111, Product=248, SerialNumber=42 [ 650.451920][ T5089] usb 6-1: Product: syz [ 650.456454][ T5089] usb 6-1: Manufacturer: syz [ 650.461286][ T5089] usb 6-1: SerialNumber: syz [ 650.482491][ T5084] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 650.620730][ T5089] usb 6-1: config 0 descriptor?? [ 650.673315][ T5090] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 650.737224][ T5084] usb 4-1: Using ep0 maxpacket: 8 17:16:17 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d8, 0x0) [ 650.845319][ T5089] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2013:0461, interface 0, class 0) [ 650.854940][ T5089] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 650.883345][ T5084] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 650.891722][ T5084] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 650.902459][ T5084] usb 4-1: config 0 has no interface number 0 [ 650.908786][ T5084] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 650.920136][ T5084] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 650.935560][ T5084] usb 4-1: config 0 interface 52 has no altsetting 0 [ 650.942500][ T5090] usb 2-1: Using ep0 maxpacket: 8 17:16:18 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) [ 651.083702][ T5090] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 651.093533][ T5090] usb 2-1: config 1 has no interface number 1 [ 651.099801][ T5090] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 651.109483][ T5090] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 651.263797][ T5084] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice=e8.00 [ 651.273575][ T5084] usb 4-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 651.282570][ T5084] usb 4-1: Product: syz [ 651.286944][ T5084] usb 4-1: Manufacturer: syz [ 651.291716][ T5084] usb 4-1: SerialNumber: syz [ 651.398626][ T5084] usb 4-1: config 0 descriptor?? [ 651.473672][ T5089] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 651.514850][ T5090] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 651.524579][ T5090] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.533299][ T5090] usb 2-1: Product: syz [ 651.537715][ T5090] usb 2-1: Manufacturer: syz [ 651.542709][ T5090] usb 2-1: SerialNumber: syz [ 651.554486][ T5089] em28xx 6-1:0.0: Config register raw data: 0xfffffffb 17:16:18 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d8, 0x0) [ 651.677032][ T5084] input: syz syz (Stick) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input6 [ 651.924605][ T7] usb 4-1: USB disconnect, device number 6 [ 651.973954][ T5090] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 652.189236][ T5090] usb 2-1: USB disconnect, device number 5 [ 652.265631][ T5089] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 652.339107][ T5089] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 652.447580][ T5089] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 652.487086][ T8442] udevd[8442]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 652.526122][ T5089] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 652.618283][ T5089] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 652.757617][ T5089] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 653.436611][ T5089] em28xx 6-1:0.0: couldn't setup AC97 register 20 [ 653.472804][ T5089] em28xx 6-1:0.0: couldn't setup AC97 register 16 [ 653.493891][ T5089] em28xx 6-1:0.0: couldn't setup AC97 register 12 [ 653.522740][ T5089] em28xx 6-1:0.0: couldn't setup AC97 register 14 [ 653.545563][ T5089] em28xx 6-1:0.0: couldn't setup AC97 register 18 [ 653.572622][ T5089] em28xx 6-1:0.0: couldn't setup AC97 register 22 [ 653.595555][ T5089] em28xx 6-1:0.0: couldn't setup AC97 register 24 [ 653.672882][ T5089] em28xx 6-1:0.0: Binding audio extension [ 653.678941][ T5089] em28xx 6-1:0.0: em28xx-audio.c: Copyright (C) 2006 Markus Rechberger [ 653.687577][ T5089] em28xx 6-1:0.0: em28xx-audio.c: Copyright (C) 2007-2016 Mauro Carvalho Chehab [ 653.708010][ T5089] em28xx 6-1:0.0: alt 0 doesn't exist on interface 7 [ 653.743434][ T5089] usb 6-1: USB disconnect, device number 2 [ 653.751994][ T5089] em28xx 6-1:0.0: Disconnecting em28xx [ 653.758602][ T5089] em28xx 6-1:0.0: Closing audio extension [ 653.777759][ T5089] em28xx 6-1:0.0: Freeing device 17:16:21 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12014000246b9f401320610475f36ff82a010902fcff0000000000090400000113ac820009058301"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 17:16:21 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d8, 0x0) 17:16:21 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'\x00', 0x5}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x308) 17:16:21 executing program 3: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="31010000dccd5e08cb06070000e816952301090224000100007e000904340102d469e70009058acf65"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 17:16:21 executing program 1: syz_usb_connect$uac1(0x0, 0x93, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, "b7"}, @feature_unit={0xd, 0x24, 0x6, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x1}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x11, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 17:16:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x1}) 17:16:21 executing program 2: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'dvmrp0\x00', 0x2501}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454d8, 0x0) [ 654.342972][ T5084] usb 2-1: new high-speed USB device number 6 using dummy_hcd 17:16:21 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'\x00', 0x5}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x308) 17:16:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x1}) [ 654.403636][ T5099] usb 4-1: new high-speed USB device number 7 using dummy_hcd 17:16:21 executing program 2: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'dvmrp0\x00', 0x2501}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454d8, 0x0) [ 654.562821][ T5092] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 654.583382][ T5084] usb 2-1: Using ep0 maxpacket: 8 [ 654.652683][ T5099] usb 4-1: Using ep0 maxpacket: 8 [ 654.703698][ T5084] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 654.713692][ T5084] usb 2-1: config 1 has no interface number 1 [ 654.723398][ T5084] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 654.733760][ T5084] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 654.783928][ T5099] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 654.792867][ T5099] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 654.803484][ T5099] usb 4-1: config 0 has no interface number 0 [ 654.809806][ T5099] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 654.824610][ T5099] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 654.838297][ T5099] usb 4-1: config 0 interface 52 has no altsetting 0 17:16:22 executing program 2: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'dvmrp0\x00', 0x2501}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454d8, 0x0) [ 654.963569][ T5092] usb 6-1: config index 0 descriptor too short (expected 65532, got 27) [ 654.972737][ T5092] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 654.986241][ T5092] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 654.995534][ T5092] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 655.044431][ T5084] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 655.054232][ T5084] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.062638][ T5084] usb 2-1: Product: syz [ 655.067038][ T5084] usb 2-1: Manufacturer: syz [ 655.071849][ T5084] usb 2-1: SerialNumber: syz 17:16:22 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'\x00', 0x5}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x308) [ 655.214040][ T5099] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice=e8.00 [ 655.223980][ T5099] usb 4-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 655.237346][ T5099] usb 4-1: Product: syz [ 655.241758][ T5099] usb 4-1: Manufacturer: syz [ 655.247108][ T5099] usb 4-1: SerialNumber: syz [ 655.253900][ T5092] usb 6-1: New USB device found, idVendor=2013, idProduct=0461, bcdDevice=f3.75 [ 655.263389][ T5092] usb 6-1: New USB device strings: Mfr=111, Product=248, SerialNumber=42 [ 655.272292][ T5092] usb 6-1: Product: syz [ 655.276654][ T5092] usb 6-1: Manufacturer: syz [ 655.281462][ T5092] usb 6-1: SerialNumber: syz [ 655.398875][ T5092] usb 6-1: config 0 descriptor?? [ 655.417819][ T5084] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 655.442949][ T5099] usb 4-1: config 0 descriptor?? [ 655.510733][ T5092] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2013:0461, interface 0, class 0) [ 655.520963][ T5092] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 655.578709][ T5084] usb 2-1: USB disconnect, device number 6 [ 655.706491][ T5099] input: syz syz (Stick) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input7 [ 655.807534][ T8376] udevd[8376]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 655.958403][ T5089] usb 4-1: USB disconnect, device number 7 [ 656.093162][ T5092] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 656.133972][ T5092] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 656.822775][ T5092] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 656.862648][ T5092] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 656.912669][ T5092] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 656.960136][ T5092] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 657.002767][ T5092] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 657.042666][ T5092] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 657.742649][ T5092] em28xx 6-1:0.0: couldn't setup AC97 register 20 [ 657.763087][ T5092] em28xx 6-1:0.0: couldn't setup AC97 register 16 [ 657.783238][ T5092] em28xx 6-1:0.0: couldn't setup AC97 register 12 [ 657.812814][ T5092] em28xx 6-1:0.0: couldn't setup AC97 register 14 [ 657.832662][ T5092] em28xx 6-1:0.0: couldn't setup AC97 register 18 [ 657.852523][ T5092] em28xx 6-1:0.0: couldn't setup AC97 register 22 [ 657.873170][ T5092] em28xx 6-1:0.0: couldn't setup AC97 register 24 [ 657.932557][ T5092] em28xx 6-1:0.0: Binding audio extension [ 657.938522][ T5092] em28xx 6-1:0.0: em28xx-audio.c: Copyright (C) 2006 Markus Rechberger [ 657.947197][ T5092] em28xx 6-1:0.0: em28xx-audio.c: Copyright (C) 2007-2016 Mauro Carvalho Chehab [ 657.960534][ T5092] em28xx 6-1:0.0: alt 0 doesn't exist on interface 7 [ 657.988735][ T5092] usb 6-1: USB disconnect, device number 3 [ 658.001026][ T5092] em28xx 6-1:0.0: Disconnecting em28xx [ 658.007365][ T5092] em28xx 6-1:0.0: Closing audio extension [ 658.061207][ T5092] em28xx 6-1:0.0: Freeing device 17:16:25 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12014000246b9f401320610475f36ff82a010902fcff0000000000090400000113ac820009058301"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 17:16:25 executing program 2: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'dvmrp0\x00', 0x2501}) ioctl$TUNSETIFF(r0, 0x400454d8, 0x0) 17:16:25 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) syz_io_uring_setup(0x27c6, &(0x7f0000000180)={0x0, 0x5675, 0x28a, 0x0, 0x220}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000007c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 17:16:25 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'\x00', 0x5}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) 17:16:25 executing program 1: 17:16:25 executing program 3: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="31010000dccd5e08cb06070000e816952301090224000100007e000904340102d469e70009058acf65"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 17:16:25 executing program 1: 17:16:25 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2b, 0xb9, 0xe4, 0x40, 0x9c0, 0x206, 0x1163, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe1, 0x2c, 0xa4}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000300)={0x0, 0x0, 0x1, ')'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000d40)={0x2c, &(0x7f0000000a00)={0x0, 0x0, 0x1, "13"}, 0x0, 0x0, 0x0, 0x0}) 17:16:25 executing program 2: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'dvmrp0\x00', 0x2501}) ioctl$TUNSETIFF(r0, 0x400454d8, 0x0) [ 658.702474][ T5092] usb 4-1: new high-speed USB device number 8 using dummy_hcd 17:16:25 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'\x00', 0x5}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) [ 658.902935][ T5084] usb 6-1: new high-speed USB device number 4 using dummy_hcd 17:16:26 executing program 1: [ 658.943299][ T5092] usb 4-1: Using ep0 maxpacket: 8 [ 659.063944][ T5092] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 659.072587][ T5092] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 659.083204][ T5092] usb 4-1: config 0 has no interface number 0 [ 659.089533][ T5092] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 659.100955][ T5092] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 17:16:26 executing program 2: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'dvmrp0\x00', 0x2501}) ioctl$TUNSETIFF(r0, 0x400454d8, 0x0) [ 659.114313][ T5092] usb 4-1: config 0 interface 52 has no altsetting 0 [ 659.303429][ T5084] usb 6-1: config index 0 descriptor too short (expected 65532, got 27) [ 659.312374][ T5084] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 659.320696][ T5084] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 659.333298][ T5084] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 659.493813][ T5092] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice=e8.00 [ 659.503716][ T5092] usb 4-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 659.512692][ T5092] usb 4-1: Product: syz [ 659.517066][ T5092] usb 4-1: Manufacturer: syz [ 659.521871][ T5092] usb 4-1: SerialNumber: syz [ 659.563488][ T5084] usb 6-1: New USB device found, idVendor=2013, idProduct=0461, bcdDevice=f3.75 [ 659.573047][ T5084] usb 6-1: New USB device strings: Mfr=111, Product=248, SerialNumber=42 [ 659.581725][ T5084] usb 6-1: Product: syz [ 659.586589][ T5084] usb 6-1: Manufacturer: syz [ 659.591411][ T5084] usb 6-1: SerialNumber: syz [ 659.667167][ T5092] usb 4-1: config 0 descriptor?? [ 659.682011][ T5084] usb 6-1: config 0 descriptor?? [ 659.744588][ T5084] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2013:0461, interface 0, class 0) [ 659.754244][ T5084] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 659.936913][ T5092] input: syz syz (Stick) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input8 [ 660.177133][ T5089] usb 4-1: USB disconnect, device number 8 [ 660.363370][ T5084] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 660.402750][ T5084] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 661.092725][ T5084] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 661.132947][ T5084] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 661.173116][ T5084] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 661.212622][ T5084] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 661.255714][ T5084] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 661.302760][ T5084] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 662.002965][ T5084] em28xx 6-1:0.0: couldn't setup AC97 register 20 [ 662.027758][ T5084] em28xx 6-1:0.0: couldn't setup AC97 register 16 [ 662.052528][ T5084] em28xx 6-1:0.0: couldn't setup AC97 register 12 [ 662.072629][ T5084] em28xx 6-1:0.0: couldn't setup AC97 register 14 [ 662.094673][ T5084] em28xx 6-1:0.0: couldn't setup AC97 register 18 [ 662.112840][ T5084] em28xx 6-1:0.0: couldn't setup AC97 register 22 [ 662.136594][ T5084] em28xx 6-1:0.0: couldn't setup AC97 register 24 [ 662.202637][ T5084] em28xx 6-1:0.0: Binding audio extension [ 662.208645][ T5084] em28xx 6-1:0.0: em28xx-audio.c: Copyright (C) 2006 Markus Rechberger [ 662.217310][ T5084] em28xx 6-1:0.0: em28xx-audio.c: Copyright (C) 2007-2016 Mauro Carvalho Chehab [ 662.231961][ T5084] em28xx 6-1:0.0: alt 0 doesn't exist on interface 7 [ 662.260032][ T5084] usb 6-1: USB disconnect, device number 4 [ 662.268860][ T5084] em28xx 6-1:0.0: Disconnecting em28xx [ 662.274761][ T5084] em28xx 6-1:0.0: Closing audio extension [ 662.306154][ T5084] em28xx 6-1:0.0: Freeing device 17:16:29 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12014000246b9f401320610475f36ff82a010902fcff0000000000090400000113ac820009058301"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 17:16:29 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'\x00', 0x5}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) 17:16:29 executing program 1: syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) 17:16:29 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'dvmrp0\x00', 0x2501}) ioctl$TUNSETIFF(r0, 0x400454d8, 0x0) 17:16:29 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="31010000dccd5e08cb06070000e816952301090224000100007e000904340102d469e70009058acf65"], 0x0) 17:16:29 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000004c0)=""/178, 0x26, 0xb2, 0x1}, 0x20) 17:16:29 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'dvmrp0\x00', 0x2501}) ioctl$TUNSETIFF(r0, 0x400454d8, 0x0) 17:16:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0xc23, 0x0, 0x4, 0x40, 0x1}, 0x48) [ 662.954775][ T5084] usb 4-1: new high-speed USB device number 9 using dummy_hcd 17:16:30 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0xffffff49, 0x10001, 0x4fa}) [ 663.204593][ T5084] usb 4-1: Using ep0 maxpacket: 8 [ 663.213318][ T9821] usb 6-1: new high-speed USB device number 5 using dummy_hcd 17:16:30 executing program 1: syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) 17:16:30 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'dvmrp0\x00', 0x2501}) ioctl$TUNSETIFF(r0, 0x400454d8, 0x0) [ 663.324889][ T5084] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 663.333627][ T5084] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 663.344296][ T5084] usb 4-1: config 0 has no interface number 0 [ 663.350617][ T5084] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 663.362225][ T5084] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 17:16:30 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@ipv6_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}, @RTA_MULTIPATH={0xc, 0x9, {0x100}}]}, 0x30}}, 0x0) [ 663.376288][ T5084] usb 4-1: config 0 interface 52 has no altsetting 0 [ 663.593207][ T9821] usb 6-1: config index 0 descriptor too short (expected 65532, got 27) [ 663.601837][ T9821] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 663.610917][ T9821] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 663.620243][ T9821] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 663.713307][ T5084] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice=e8.00 [ 663.722862][ T5084] usb 4-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 663.735043][ T5084] usb 4-1: Product: syz [ 663.739472][ T5084] usb 4-1: Manufacturer: syz [ 663.745064][ T5084] usb 4-1: SerialNumber: syz [ 663.850222][ T5084] usb 4-1: config 0 descriptor?? [ 663.941319][ T9821] usb 6-1: New USB device found, idVendor=2013, idProduct=0461, bcdDevice=f3.75 [ 663.950935][ T9821] usb 6-1: New USB device strings: Mfr=111, Product=248, SerialNumber=42 [ 663.960448][ T9821] usb 6-1: Product: syz [ 663.964911][ T9821] usb 6-1: Manufacturer: syz [ 663.969734][ T9821] usb 6-1: SerialNumber: syz [ 664.075497][ T9821] usb 6-1: config 0 descriptor?? [ 664.120717][ T9821] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2013:0461, interface 0, class 0) [ 664.123100][ T5084] usb 4-1: Can not set alternate setting to 1, error: -71 [ 664.130332][ T9821] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 664.137601][ T5084] synaptics_usb: probe of 4-1:0.52 failed with error -71 [ 664.251463][ T5084] usb 4-1: USB disconnect, device number 9 [ 664.762698][ T9821] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 664.812574][ T9821] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 665.522651][ T9821] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 665.568577][ T9821] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 665.612839][ T9821] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 665.652782][ T9821] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 665.698133][ T9821] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 665.742652][ T9821] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 666.442742][ T9821] em28xx 6-1:0.0: couldn't setup AC97 register 20 [ 666.462975][ T9821] em28xx 6-1:0.0: couldn't setup AC97 register 16 [ 666.482958][ T9821] em28xx 6-1:0.0: couldn't setup AC97 register 12 [ 666.510721][ T9821] em28xx 6-1:0.0: couldn't setup AC97 register 14 [ 666.532517][ T9821] em28xx 6-1:0.0: couldn't setup AC97 register 18 [ 666.552523][ T9821] em28xx 6-1:0.0: couldn't setup AC97 register 22 [ 666.572652][ T9821] em28xx 6-1:0.0: couldn't setup AC97 register 24 [ 666.642552][ T9821] em28xx 6-1:0.0: Binding audio extension [ 666.648444][ T9821] em28xx 6-1:0.0: em28xx-audio.c: Copyright (C) 2006 Markus Rechberger [ 666.657166][ T9821] em28xx 6-1:0.0: em28xx-audio.c: Copyright (C) 2007-2016 Mauro Carvalho Chehab [ 666.671006][ T9821] em28xx 6-1:0.0: alt 0 doesn't exist on interface 7 [ 666.707418][ T9821] usb 6-1: USB disconnect, device number 5 [ 666.716228][ T9821] em28xx 6-1:0.0: Disconnecting em28xx [ 666.721946][ T9821] em28xx 6-1:0.0: Closing audio extension [ 666.769476][ T9821] em28xx 6-1:0.0: Freeing device 17:16:34 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12014000246b9f401320610475f36ff82a010902fcff0000000000090400000113ac820009058301"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:34 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) r1 = socket(0x2, 0x3, 0x80000000002) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='veth1_virt_wifi\x00', 0x10) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x77) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0x40b8, 0x4) recvmmsg$unix(r1, &(0x7f0000000e40), 0x40003ac, 0x2, 0x0) 17:16:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x1, 0x0, 0x0, {{0x2}, {@void, @void}}}, 0x14}}, 0x0) 17:16:34 executing program 1: syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) 17:16:34 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETIFF(r0, 0x400454d8, 0x0) 17:16:34 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="31010000dccd5e08cb06070000e816952301090224000100007e000904340102d469e70009058acf65"], 0x0) 17:16:34 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv6_newaddrlabel={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}]}, 0x24}}, 0x0) 17:16:34 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETIFF(r0, 0x400454d8, 0x0) [ 667.383153][ T9821] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 667.624387][ T9821] usb 4-1: Using ep0 maxpacket: 8 [ 667.652547][ T5084] usb 6-1: new high-speed USB device number 6 using dummy_hcd 17:16:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_buf(r0, 0x88, 0x68, 0x0, &(0x7f00000000c0)) [ 667.745243][ T9821] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 667.753744][ T9821] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 667.764227][ T9821] usb 4-1: config 0 has no interface number 0 [ 667.770548][ T9821] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 667.782061][ T9821] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 17:16:34 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETIFF(r0, 0x400454d8, 0x0) 17:16:34 executing program 1: syz_usb_connect$uac1(0x0, 0x93, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, "b7"}, @feature_unit={0xd, 0x24, 0x6, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x1}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x11, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 17:16:34 executing program 0: openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) [ 667.795412][ T9821] usb 4-1: config 0 interface 52 has no altsetting 0 [ 668.037669][ T5084] usb 6-1: config index 0 descriptor too short (expected 65532, got 27) [ 668.046485][ T5084] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 668.055374][ T5084] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 668.064623][ T5084] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 668.173076][ T9821] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice=e8.00 [ 668.182935][ T9821] usb 4-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 668.191523][ T9821] usb 4-1: Product: syz [ 668.196062][ T9821] usb 4-1: Manufacturer: syz [ 668.200878][ T9821] usb 4-1: SerialNumber: syz [ 668.346025][ T5084] usb 6-1: New USB device found, idVendor=2013, idProduct=0461, bcdDevice=f3.75 [ 668.355759][ T5084] usb 6-1: New USB device strings: Mfr=111, Product=248, SerialNumber=42 [ 668.361910][ T9821] usb 4-1: config 0 descriptor?? [ 668.364587][ T5084] usb 6-1: Product: syz [ 668.374037][ T5084] usb 6-1: Manufacturer: syz [ 668.378843][ T5084] usb 6-1: SerialNumber: syz [ 668.454938][ T5084] usb 6-1: config 0 descriptor?? [ 668.480305][ T5099] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 668.546435][ T5084] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2013:0461, interface 0, class 0) [ 668.556300][ T5084] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 668.613128][ T9821] usb 4-1: Can not set alternate setting to 1, error: -71 [ 668.620613][ T9821] synaptics_usb: probe of 4-1:0.52 failed with error -71 [ 668.672548][ T5099] usb 2-1: device descriptor read/64, error 18 [ 668.718524][ T9821] usb 4-1: USB disconnect, device number 10 [ 668.955263][ T5099] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 669.163815][ T5099] usb 2-1: device descriptor read/64, error 18 [ 669.182712][ T5084] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 669.223376][ T5084] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 669.283082][ T5099] usb usb2-port1: attempt power cycle [ 669.702534][ T5099] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 669.792781][ T5099] usb 2-1: Invalid ep0 maxpacket: 0 [ 669.884684][ T5084] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 669.936505][ T5084] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 669.962635][ T5099] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 669.986842][ T5084] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 670.032648][ T5084] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 670.062774][ T5099] usb 2-1: Invalid ep0 maxpacket: 0 [ 670.069452][ T5099] usb usb2-port1: unable to enumerate USB device [ 670.076974][ T5084] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 670.122551][ T5084] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 670.662658][ T5084] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 670.669227][ T5084] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 670.675987][ T5084] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 670.682704][ T5084] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 670.689411][ T5084] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 670.706761][ T5084] usb 6-1: USB disconnect, device number 6 17:16:38 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12014000246b9f401320610475f36ff82a010902fcff0000000000090400000113ac820009058301"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:38 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'dvmrp0\x00'}) ioctl$TUNSETIFF(r0, 0x400454d8, 0x0) 17:16:38 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="31010000dccd5e08cb06070000e816952301090224000100007e000904340102d469e70009058acf65"], 0x0) 17:16:38 executing program 0: mkdir(&(0x7f0000000580)='./file0\x00', 0xaa6f6396d0ed07f2) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x80, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="3a4501ba4a"], &(0x7f0000000480)='./file0/../file0\x00', &(0x7f00000004c0)='coda\x00', 0x0, &(0x7f0000000500)='(*\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) fstat(0xffffffffffffffff, &(0x7f0000000240)) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000340)="ad", 0x1) r6 = accept4(r5, 0x0, 0x0, 0x80800) sendto$unix(r6, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000080)=""/252, 0x50000, 0x0, 0x0, 0x0) getpeername$unix(r0, &(0x7f0000000400)=@abs, &(0x7f0000000300)=0x6e) unshare(0x6c060000) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x8) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x8000002, 0x2}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0x2200c001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x4e21, 0x6, @mcast2, 0xfff}, 0x1c) socket(0x23, 0x2, 0x80000001) 17:16:38 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 17:16:38 executing program 1: syz_usb_connect$uac1(0x0, 0x93, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, "b7"}, @feature_unit={0xd, 0x24, 0x6, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x1}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x11, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 17:16:38 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'dvmrp0\x00'}) ioctl$TUNSETIFF(r0, 0x400454d8, 0x0) 17:16:38 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb0100180000000000000014000000140000000200000000000000010000060400000000f1"], &(0x7f00000004c0)=""/178, 0x2e, 0xb2, 0x1}, 0x20) [ 671.543277][ T9821] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 671.762438][ T5089] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 671.825963][ T9821] usb 4-1: Using ep0 maxpacket: 8 [ 671.944109][ T9821] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 671.952739][ T9821] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 671.963360][ T9821] usb 4-1: config 0 has no interface number 0 [ 671.969672][ T9821] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 671.981060][ T9821] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 671.994305][ T9821] usb 4-1: config 0 interface 52 has no altsetting 0 [ 672.012549][ T5089] usb 2-1: device descriptor read/64, error 18 [ 672.103498][ T5090] usb 6-1: new high-speed USB device number 7 using dummy_hcd 17:16:39 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x1}]}]}}, &(0x7f00000004c0)=""/178, 0x2e, 0xb2, 0x1}, 0x20) 17:16:39 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'dvmrp0\x00'}) ioctl$TUNSETIFF(r0, 0x400454d8, 0x0) [ 672.303903][ T5089] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 672.472820][ T5090] usb 6-1: config index 0 descriptor too short (expected 65532, got 27) [ 672.481577][ T5090] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 672.490142][ T5090] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 672.499368][ T5090] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 672.514019][ T5089] usb 2-1: device descriptor read/64, error 18 [ 672.563627][ T9821] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice=e8.00 [ 672.573247][ T9821] usb 4-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 672.581830][ T9821] usb 4-1: Product: syz [ 672.586353][ T9821] usb 4-1: Manufacturer: syz [ 672.591167][ T9821] usb 4-1: SerialNumber: syz 17:16:39 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'dvmrp0\x00', 0x2501}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454d8, 0x0) [ 672.633307][ T5089] usb usb2-port1: attempt power cycle [ 672.649158][ T9821] usb 4-1: config 0 descriptor?? 17:16:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv6_newaddrlabel={0x1c, 0x1a, 0x1}, 0x1c}}, 0x0) [ 672.783614][ T5090] usb 6-1: New USB device found, idVendor=2013, idProduct=0461, bcdDevice=f3.75 [ 672.793431][ T5090] usb 6-1: New USB device strings: Mfr=111, Product=248, SerialNumber=42 [ 672.802659][ T5090] usb 6-1: Product: syz [ 672.807049][ T5090] usb 6-1: Manufacturer: syz [ 672.811856][ T5090] usb 6-1: SerialNumber: syz [ 672.913555][ T9821] usb 4-1: Can not set alternate setting to 1, error: -71 [ 672.920957][ T9821] synaptics_usb: probe of 4-1:0.52 failed with error -71 [ 672.989455][ T5090] usb 6-1: config 0 descriptor?? [ 673.004475][ T9821] usb 4-1: USB disconnect, device number 11 [ 673.056470][ T5090] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2013:0461, interface 0, class 0) [ 673.066102][ T5090] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 673.078322][ T5089] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 673.173547][ T5089] usb 2-1: Invalid ep0 maxpacket: 0 [ 673.332412][ T5089] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 673.433196][ T5089] usb 2-1: Invalid ep0 maxpacket: 0 [ 673.445459][ T5089] usb usb2-port1: unable to enumerate USB device [ 673.702562][ T5090] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 673.742856][ T5090] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 674.426714][ T5090] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 674.472835][ T5090] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 674.513003][ T5090] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 674.553208][ T5090] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 674.592991][ T5090] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 674.637382][ T5090] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 675.212807][ T5090] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 675.219539][ T5090] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 675.226261][ T5090] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 675.233003][ T5090] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 675.239621][ T5090] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 675.343563][ T5090] usb 6-1: USB disconnect, device number 7 17:16:42 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12014000246b9f401320610475f36ff82a010902fcff0000000000090400000113ac820009058301"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:42 executing program 3: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 17:16:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_buf(r0, 0x0, 0x9, 0x0, &(0x7f00000000c0)) 17:16:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000014000100af7089077b5798c306"], 0x30}}, 0x0) 17:16:43 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'dvmrp0\x00', 0x2501}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454d8, 0x0) 17:16:43 executing program 1: syz_usb_connect$uac1(0x0, 0x93, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, "b7"}, @feature_unit={0xd, 0x24, 0x6, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x1}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x11, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 676.162376][ T5090] usb 6-1: new high-speed USB device number 8 using dummy_hcd 17:16:43 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x1f, 0xe7, 0x9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x5, 0x3, 0x2}) 17:16:43 executing program 3: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 17:16:43 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'dvmrp0\x00', 0x2501}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454d8, 0x0) [ 676.563378][ T5090] usb 6-1: config index 0 descriptor too short (expected 65532, got 27) [ 676.572805][ T5090] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 676.581169][ T5090] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 676.590451][ T5090] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 676.672823][ T7] usb 2-1: new high-speed USB device number 15 using dummy_hcd 17:16:43 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x4020940d, &(0x7f0000000080)={0x5}) 17:16:43 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000380), r1) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r2, 0x1}, 0x14}}, 0x0) [ 676.872708][ T7] usb 2-1: device descriptor read/64, error 18 [ 676.904529][ T5090] usb 6-1: New USB device found, idVendor=2013, idProduct=0461, bcdDevice=f3.75 [ 676.914119][ T5090] usb 6-1: New USB device strings: Mfr=111, Product=248, SerialNumber=42 [ 676.923159][ T5090] usb 6-1: Product: syz [ 676.927553][ T5090] usb 6-1: Manufacturer: syz [ 676.932527][ T5090] usb 6-1: SerialNumber: syz [ 677.033373][ T5090] usb 6-1: config 0 descriptor?? [ 677.089848][ T5090] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2013:0461, interface 0, class 0) [ 677.099650][ T5090] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 677.142395][ T7] usb 2-1: new high-speed USB device number 16 using dummy_hcd 17:16:44 executing program 0: syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffff66c9fc65127608060001080006040008aaaaaaaaaabbac1400bb"], 0x0) [ 677.375912][ T7] usb 2-1: device descriptor read/64, error 18 [ 677.503179][ T7] usb usb2-port1: attempt power cycle [ 677.743504][ T5090] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 677.782732][ T5090] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 677.922398][ T7] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 678.030629][ T7] usb 2-1: Invalid ep0 maxpacket: 0 [ 678.192481][ T7] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 678.293489][ T7] usb 2-1: Invalid ep0 maxpacket: 0 [ 678.299937][ T7] usb usb2-port1: unable to enumerate USB device [ 678.462724][ T5090] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 678.512791][ T5090] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 678.572766][ T5090] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 678.632648][ T5090] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 678.676747][ T5090] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 678.726703][ T5090] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 679.273030][ T5090] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 679.279636][ T5090] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 679.286378][ T5090] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 679.293064][ T5090] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 679.304997][ T5090] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 679.330722][ T5090] usb 6-1: USB disconnect, device number 8 17:16:46 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12014000246b9f401320610475f36ff82a010902fcff0000000000090400000113ac820009058301"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 17:16:46 executing program 2: r0 = socket(0x18, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) 17:16:46 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCGARP(r0, 0x8912, &(0x7f0000000240)={{0x2, 0x0, @dev}, {0x0, @dev}, 0x0, {0x2, 0x0, @dev}, 'team_slave_0\x00'}) 17:16:46 executing program 3: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 17:16:46 executing program 0: openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000e40), 0x2, 0x0) 17:16:46 executing program 1: syz_usb_connect$uac1(0x0, 0x86, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, "b7"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x1}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x11, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 17:16:46 executing program 4: r0 = epoll_create1(0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000480)={0xf000001e}) 17:16:47 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x1c, r1, 0x1, 0x0, 0x0, {0x7}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) 17:16:47 executing program 2: r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x82, &(0x7f00000000c0), 0x10) [ 680.140317][ T5090] usb 2-1: new high-speed USB device number 19 using dummy_hcd 17:16:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x440c1) [ 680.372788][ T7] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 680.393180][ T5090] usb 2-1: Using ep0 maxpacket: 8 17:16:47 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x14, r1, 0x1}, 0x14}}, 0x0) 17:16:47 executing program 3: r0 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 680.519682][ T5090] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 680.534239][ T5090] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 680.544136][ T5090] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 680.744749][ T5090] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 680.754210][ T5090] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.762973][ T5090] usb 2-1: Product: syz [ 680.767341][ T5090] usb 2-1: Manufacturer: syz [ 680.773024][ T5090] usb 2-1: SerialNumber: syz [ 680.779486][ T7] usb 6-1: config index 0 descriptor too short (expected 65532, got 27) [ 680.788268][ T7] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 680.796777][ T7] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 680.806166][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 681.074313][ T7] usb 6-1: New USB device found, idVendor=2013, idProduct=0461, bcdDevice=f3.75 [ 681.083984][ T7] usb 6-1: New USB device strings: Mfr=111, Product=248, SerialNumber=42 [ 681.093539][ T7] usb 6-1: Product: syz [ 681.098101][ T7] usb 6-1: Manufacturer: syz [ 681.103109][ T7] usb 6-1: SerialNumber: syz [ 681.188227][ T7] usb 6-1: config 0 descriptor?? [ 681.251543][ T7] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2013:0461, interface 0, class 0) [ 681.262181][ T7] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 681.271107][ T5090] usb 2-1: 0:2 : does not exist [ 681.331356][ T5090] usb 2-1: USB disconnect, device number 19 [ 681.420318][ T8376] udevd[8376]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 681.898153][ T7] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 681.952825][ T7] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 682.652706][ T7] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 682.702688][ T7] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 682.746582][ T7] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 682.792717][ T7] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 682.832690][ T7] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 682.872696][ T7] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 683.212791][ T7] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 683.219641][ T7] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 683.226555][ T7] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 683.233433][ T7] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 683.240378][ T7] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 683.270647][ T7] usb 6-1: USB disconnect, device number 9 17:16:50 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12014000246b9f401320610475f36ff82a010902fcff0000000000090400000113ac820009058301"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 17:16:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x14, r1, 0x9, 0x0, 0x0, {0x9}}, 0x14}}, 0x0) 17:16:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000006c0)=@add_del={0x2, 0x0}) 17:16:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xb000000c}) 17:16:50 executing program 3: r0 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 17:16:50 executing program 1: syz_usb_connect$uac1(0x0, 0x86, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, "b7"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x1}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x11, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 17:16:50 executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCGARP(r0, 0x541b, 0x0) 17:16:51 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008"], 0x1c}}, 0x0) 17:16:51 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x1c, r1, 0x1, 0x0, 0x0, {0x9}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) [ 684.082818][ T5084] usb 2-1: new high-speed USB device number 20 using dummy_hcd 17:16:51 executing program 3: r0 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 684.318422][ T5099] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 684.332699][ T5084] usb 2-1: Using ep0 maxpacket: 8 17:16:51 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) [ 684.453900][ T5084] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 684.464596][ T5084] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 684.474144][ T5084] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping 17:16:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, r1, 0x9, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x28}}, 0x0) [ 684.683835][ T5099] usb 6-1: config index 0 descriptor too short (expected 65532, got 27) [ 684.693242][ T5099] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 684.701570][ T5099] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 684.710927][ T5099] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 684.763242][ T5084] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 684.772768][ T5084] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.781032][ T5084] usb 2-1: Product: syz [ 684.786039][ T5084] usb 2-1: Manufacturer: syz [ 684.790848][ T5084] usb 2-1: SerialNumber: syz [ 685.003523][ T5099] usb 6-1: New USB device found, idVendor=2013, idProduct=0461, bcdDevice=f3.75 [ 685.013231][ T5099] usb 6-1: New USB device strings: Mfr=111, Product=248, SerialNumber=42 [ 685.021905][ T5099] usb 6-1: Product: syz [ 685.026659][ T5099] usb 6-1: Manufacturer: syz [ 685.034799][ T5099] usb 6-1: SerialNumber: syz [ 685.115669][ T5099] usb 6-1: config 0 descriptor?? [ 685.162054][ T5099] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2013:0461, interface 0, class 0) [ 685.171821][ T5099] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 685.223591][ T5084] usb 2-1: 0:2 : does not exist [ 685.278300][ T5084] usb 2-1: USB disconnect, device number 20 [ 685.363972][ T8376] udevd[8376]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 685.802743][ T5099] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 685.846337][ T5099] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 686.542717][ T5099] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 686.582733][ T5099] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 686.622546][ T5099] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 686.662762][ T5099] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 686.712799][ T5099] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 686.752975][ T5099] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 687.072749][ T5099] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 687.084711][ T5099] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 687.091262][ T5099] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 687.098482][ T5099] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 687.105144][ T5099] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 687.121384][ T5099] usb 6-1: USB disconnect, device number 10 17:16:54 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12014000246b9f401320610475f36ff82a010902fcff0000000000090400000113ac820009058301"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 17:16:54 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x9cad3f55079db7af}]}, 0x38}}, 0x0) 17:16:54 executing program 4: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000009c0)) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) 17:16:54 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) 17:16:54 executing program 3: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 17:16:54 executing program 1: syz_usb_connect$uac1(0x0, 0x86, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, "b7"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x1}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x11, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 17:16:54 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 17:16:54 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x9cad3f55079db7af}]}, 0x38}}, 0x0) 17:16:54 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000980), 0x10) [ 687.912697][ T7] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 687.943739][ T5099] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 688.122515][ T7] usb 4-1: device descriptor read/64, error 18 17:16:55 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) [ 688.172621][ T5084] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 688.182694][ T5099] usb 2-1: Using ep0 maxpacket: 8 17:16:55 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x9cad3f55079db7af}]}, 0x38}}, 0x0) 17:16:55 executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCGARP(r0, 0x541b, 0x0) [ 688.313164][ T5099] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 688.323868][ T5099] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 688.333343][ T5099] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 688.403811][ T7] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 688.534736][ T5084] usb 6-1: config index 0 descriptor too short (expected 65532, got 27) [ 688.543713][ T5084] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 688.552029][ T5084] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 688.561526][ T5084] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 688.594796][ T5099] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 688.604481][ T5099] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.616238][ T7] usb 4-1: device descriptor read/64, error 18 [ 688.623270][ T5099] usb 2-1: Product: syz [ 688.627686][ T5099] usb 2-1: Manufacturer: syz [ 688.632584][ T5099] usb 2-1: SerialNumber: syz [ 688.740521][ T7] usb usb4-port1: attempt power cycle [ 688.825261][ T5084] usb 6-1: New USB device found, idVendor=2013, idProduct=0461, bcdDevice=f3.75 [ 688.835026][ T5084] usb 6-1: New USB device strings: Mfr=111, Product=248, SerialNumber=42 [ 688.843910][ T5084] usb 6-1: Product: syz [ 688.848296][ T5084] usb 6-1: Manufacturer: syz [ 688.853453][ T5084] usb 6-1: SerialNumber: syz [ 688.943282][ T5084] usb 6-1: config 0 descriptor?? [ 688.993492][ T5084] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2013:0461, interface 0, class 0) [ 689.003190][ T5084] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 689.043329][ T5099] usb 2-1: 0:2 : does not exist [ 689.152536][ T7] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 689.167656][ T5099] usb 2-1: USB disconnect, device number 21 [ 689.271843][ T8340] udevd[8340]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 689.377494][ T7] usb 4-1: device descriptor read/8, error -61 [ 689.632763][ T5084] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 689.662522][ T7] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 689.682903][ T5084] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 689.845414][ T7] usb 4-1: device descriptor read/8, error -61 [ 689.969057][ T7] usb usb4-port1: unable to enumerate USB device [ 690.372514][ T5084] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 690.412810][ T5084] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 690.452595][ T5084] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 690.502758][ T5084] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 690.542530][ T5084] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 690.582828][ T5084] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 690.902552][ T5084] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 690.909064][ T5084] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 690.915751][ T5084] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 690.922415][ T5084] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 690.929041][ T5084] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 690.945977][ T5084] usb 6-1: USB disconnect, device number 11 17:16:58 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12014000246b9f401320610475f36ff82a010902fcff0000000000090400000113ac820009058301"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 17:16:58 executing program 4: syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket(0x18, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x14}, 0x14}}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000001040)={0x8, 'bridge0\x00', {'lo\x00'}}) 17:16:58 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 17:16:58 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x9cad3f55079db7af}]}, 0x38}}, 0x0) 17:16:58 executing program 1: syz_usb_connect$uac1(0x0, 0x91, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7f, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, "b7"}, @feature_unit={0xb, 0x24, 0x6, 0x0, 0x0, 0x2, [0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x1}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x11, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 17:16:58 executing program 3: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 17:16:58 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCGARP(r0, 0x8915, &(0x7f0000000240)={{0x2, 0x0, @dev}, {0x0, @dev}, 0x0, {0x2, 0x0, @dev}, 'team_slave_0\x00'}) 17:16:58 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x38, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x9cad3f55079db7af}]}, 0x38}}, 0x0) 17:16:58 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) [ 691.742562][ T5084] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 691.784156][ T5099] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 691.943006][ T5084] usb 4-1: device descriptor read/64, error 18 [ 692.034068][ T5099] usb 2-1: Using ep0 maxpacket: 8 [ 692.066392][ T5092] usb 6-1: new high-speed USB device number 12 using dummy_hcd 17:16:59 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x38, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x9cad3f55079db7af}]}, 0x38}}, 0x0) [ 692.153603][ T5099] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 692.164263][ T5099] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 692.173690][ T5099] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping 17:16:59 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) [ 692.253613][ T5084] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 692.353852][ T5099] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 692.363584][ T5099] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.371829][ T5099] usb 2-1: Product: syz [ 692.376545][ T5099] usb 2-1: Manufacturer: syz [ 692.381361][ T5099] usb 2-1: SerialNumber: syz [ 692.454521][ T5084] usb 4-1: device descriptor read/64, error 18 [ 692.463759][ T5092] usb 6-1: config index 0 descriptor too short (expected 65532, got 27) [ 692.472625][ T5092] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 692.480953][ T5092] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 692.490352][ T5092] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 692.573648][ T5084] usb usb4-port1: attempt power cycle [ 692.703102][ T5092] usb 6-1: New USB device found, idVendor=2013, idProduct=0461, bcdDevice=f3.75 [ 692.715924][ T5092] usb 6-1: New USB device strings: Mfr=111, Product=248, SerialNumber=42 [ 692.725992][ T5092] usb 6-1: Product: syz [ 692.730385][ T5092] usb 6-1: Manufacturer: syz [ 692.735352][ T5092] usb 6-1: SerialNumber: syz 17:16:59 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x38, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x9cad3f55079db7af}]}, 0x38}}, 0x0) [ 692.837209][ T5092] usb 6-1: config 0 descriptor?? [ 692.844251][ T5099] usb 2-1: 0:2 : does not exist [ 692.920615][ T5092] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2013:0461, interface 0, class 0) [ 692.930673][ T5092] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 692.947332][ T5099] usb 2-1: USB disconnect, device number 22 [ 693.010382][ T5084] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 693.140279][ T8340] udevd[8340]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 693.217564][ T5084] usb 4-1: device descriptor read/8, error -61 [ 693.492621][ T5084] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 693.543831][ T5092] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 693.585460][ T5092] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 693.672795][ T5084] usb 4-1: device descriptor read/8, error -61 [ 693.792989][ T5084] usb usb4-port1: unable to enumerate USB device [ 694.282909][ T5092] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 694.323020][ T5092] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 694.362570][ T5092] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 694.411888][ T5092] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 694.456208][ T5092] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 694.502838][ T5092] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 694.822564][ T5092] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 694.829206][ T5092] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 694.835980][ T5092] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 694.842710][ T5092] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 694.849304][ T5092] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 694.873134][ T5092] usb 6-1: USB disconnect, device number 12 17:17:02 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 17:17:02 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, 0x0, &(0x7f00000002c0)) 17:17:02 executing program 2: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x38, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x9cad3f55079db7af}]}, 0x38}}, 0x0) 17:17:02 executing program 1: syz_usb_connect$uac1(0x0, 0x91, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7f, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, "b7"}, @feature_unit={0xb, 0x24, 0x6, 0x0, 0x0, 0x2, [0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x1}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x11, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 17:17:02 executing program 3: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 17:17:02 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12014000246b9f401320610475f36ff82a010902fcff0000000000090400000113ac820009058301"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 17:17:02 executing program 2: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x38, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x9cad3f55079db7af}]}, 0x38}}, 0x0) 17:17:02 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r0, 0xffffffffffffffff, 0x25}, 0x10) 17:17:02 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) [ 695.682622][ T5092] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 695.685897][ T5090] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 695.893828][ T5090] usb 4-1: device descriptor read/64, error 18 [ 695.923029][ T5092] usb 2-1: Using ep0 maxpacket: 8 [ 695.982515][ T7] usb 6-1: new high-speed USB device number 13 using dummy_hcd 17:17:03 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) [ 696.044178][ T5092] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 696.054863][ T5092] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 696.064201][ T5092] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping 17:17:03 executing program 2: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x38, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x9cad3f55079db7af}]}, 0x38}}, 0x0) 17:17:03 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x0) [ 696.174740][ T5090] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 696.333729][ T5092] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 696.343348][ T5092] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.351582][ T5092] usb 2-1: Product: syz [ 696.356535][ T5092] usb 2-1: Manufacturer: syz [ 696.361367][ T5092] usb 2-1: SerialNumber: syz [ 696.373121][ T5090] usb 4-1: device descriptor read/64, error 18 [ 696.393058][ T7] usb 6-1: config index 0 descriptor too short (expected 65532, got 27) [ 696.405121][ T7] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 696.414164][ T7] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 696.423491][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 696.502720][ T5090] usb usb4-port1: attempt power cycle 17:17:03 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x0) 17:17:03 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x9cad3f55079db7af}]}, 0x38}}, 0x0) [ 696.709634][ T7] usb 6-1: New USB device found, idVendor=2013, idProduct=0461, bcdDevice=f3.75 [ 696.719900][ T7] usb 6-1: New USB device strings: Mfr=111, Product=248, SerialNumber=42 [ 696.728817][ T7] usb 6-1: Product: syz [ 696.733405][ T7] usb 6-1: Manufacturer: syz [ 696.738335][ T7] usb 6-1: SerialNumber: syz [ 696.794141][ T5092] usb 2-1: 0:2 : does not exist [ 696.895841][ T5092] usb 2-1: USB disconnect, device number 23 [ 696.913841][ T5090] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 696.939658][ T7] usb 6-1: config 0 descriptor?? [ 696.999215][ T7] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2013:0461, interface 0, class 0) [ 697.009415][ T7] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 697.086835][ T8376] udevd[8376]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 697.121015][ T5090] usb 4-1: device descriptor read/8, error -61 17:17:04 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x0) 17:17:04 executing program 1: syz_usb_connect$uac1(0x0, 0x91, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7f, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, "b7"}, @feature_unit={0xb, 0x24, 0x6, 0x0, 0x0, 0x2, [0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x1}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x11, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 697.402744][ T5090] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 697.594955][ T5090] usb 4-1: device descriptor read/8, error -61 [ 697.653387][ T7] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 697.698955][ T7] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 697.724251][ T5090] usb usb4-port1: unable to enumerate USB device [ 698.082494][ T5092] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 698.330486][ T5092] usb 2-1: Using ep0 maxpacket: 8 17:17:05 executing program 3: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 698.382797][ T7] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 698.423947][ T7] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 698.453420][ T5092] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 698.463969][ T5092] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 698.473331][ T5092] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 698.473754][ T7] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 698.532874][ T7] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 698.582707][ T7] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 698.632753][ T7] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 698.643615][ T5092] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 698.656364][ T5092] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.665393][ T5092] usb 2-1: Product: syz [ 698.669765][ T5092] usb 2-1: Manufacturer: syz [ 698.674669][ T5092] usb 2-1: SerialNumber: syz [ 698.832398][ T5090] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 698.973400][ T7] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 698.980246][ T7] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 698.987088][ T7] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 698.993760][ T7] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 699.000745][ T7] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 699.003511][ T5092] usb 2-1: 0:2 : does not exist [ 699.100676][ T5090] usb 4-1: device descriptor read/64, error 18 [ 699.108408][ T5092] usb 2-1: USB disconnect, device number 24 [ 699.114291][ T7] usb 6-1: USB disconnect, device number 13 [ 699.216295][ T8376] udevd[8376]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 17:17:06 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12014000246b9f401320610475f36ff82a010902fcff0000000000090400000113ac820009058301"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) [ 699.392442][ T5090] usb 4-1: new high-speed USB device number 25 using dummy_hcd 17:17:06 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x9cad3f55079db7af}]}, 0x38}}, 0x0) 17:17:06 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) 17:17:06 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x1c, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x0) 17:17:06 executing program 1: syz_usb_connect$uac1(0x0, 0x91, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7f, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, "b7"}, @feature_unit={0xb, 0x24, 0x6, 0x0, 0x0, 0x2, [0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x1}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x11, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 699.603848][ T5090] usb 4-1: device descriptor read/64, error 18 17:17:06 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x1c, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x0) 17:17:06 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x9cad3f55079db7af}]}, 0x38}}, 0x0) [ 699.724073][ T5090] usb usb4-port1: attempt power cycle [ 700.043173][ T5084] usb 6-1: new high-speed USB device number 14 using dummy_hcd 17:17:07 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x1c, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x0) [ 700.152709][ T5090] usb 4-1: new high-speed USB device number 26 using dummy_hcd 17:17:07 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x38, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x9cad3f55079db7af}]}, 0x38}}, 0x0) [ 700.294290][ T7] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 700.335738][ T5090] usb 4-1: device descriptor read/8, error -61 17:17:07 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) [ 700.403042][ T5084] usb 6-1: config index 0 descriptor too short (expected 65532, got 27) [ 700.411957][ T5084] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 700.420544][ T5084] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 700.430760][ T5084] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 700.576676][ T7] usb 2-1: Using ep0 maxpacket: 8 17:17:07 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) [ 700.613693][ T5090] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 700.704835][ T7] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 700.716200][ T7] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 700.725636][ T7] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 700.782948][ T5084] usb 6-1: New USB device found, idVendor=2013, idProduct=0461, bcdDevice=f3.75 [ 700.792676][ T5084] usb 6-1: New USB device strings: Mfr=111, Product=248, SerialNumber=42 [ 700.804674][ T5084] usb 6-1: Product: syz [ 700.809075][ T5084] usb 6-1: Manufacturer: syz [ 700.814696][ T5084] usb 6-1: SerialNumber: syz [ 700.825939][ T5090] usb 4-1: device descriptor read/8, error -61 [ 700.924450][ T5084] usb 6-1: config 0 descriptor?? [ 700.957459][ T5090] usb usb4-port1: unable to enumerate USB device [ 700.971807][ T5084] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2013:0461, interface 0, class 0) [ 700.981808][ T5084] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 700.993382][ T7] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 701.006188][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.015095][ T7] usb 2-1: Product: syz [ 701.019588][ T7] usb 2-1: Manufacturer: syz [ 701.024577][ T7] usb 2-1: SerialNumber: syz [ 701.453525][ T7] usb 2-1: 0:2 : does not exist [ 701.493173][ T7] usb 2-1: USB disconnect, device number 25 17:17:08 executing program 3: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 701.601383][ T8340] udevd[8340]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 701.644510][ T5084] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 701.683431][ T5084] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 702.174951][ T5092] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 702.372638][ T5084] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 702.380277][ T5092] usb 4-1: device descriptor read/64, error 18 [ 702.412757][ T5084] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 702.452544][ T5084] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 702.492588][ T5084] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 702.532693][ T5084] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 702.584045][ T5084] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 702.652605][ T5092] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 702.844331][ T5092] usb 4-1: device descriptor read/64, error 18 [ 702.902600][ T5084] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 702.909262][ T5084] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 702.916052][ T5084] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 702.922715][ T5084] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 702.929315][ T5084] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 702.955675][ T5084] usb 6-1: USB disconnect, device number 14 [ 702.973268][ T5092] usb usb4-port1: attempt power cycle 17:17:10 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12014000246b9f401320610475f36ff82a010902fcff0000000000090400000113ac820009058301"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 17:17:10 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 17:17:10 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x38, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x9cad3f55079db7af}]}, 0x38}}, 0x0) 17:17:10 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) 17:17:10 executing program 1: syz_usb_connect$uac1(0x0, 0x91, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7f, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, "b7"}, @feature_unit={0xb, 0x24, 0x6, 0x0, 0x0, 0x2, [0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x1}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x11, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 703.401630][ T5092] usb 4-1: new high-speed USB device number 30 using dummy_hcd 17:17:10 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) [ 703.573455][ T5092] usb 4-1: device descriptor read/8, error -61 17:17:10 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x38, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x9cad3f55079db7af}]}, 0x38}}, 0x0) [ 703.743021][ T7] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 703.843160][ T5092] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 703.992853][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 704.013178][ T5092] usb 4-1: device descriptor read/8, error -61 17:17:11 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 17:17:11 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, 0x0, 0x0) [ 704.133264][ T5092] usb usb4-port1: unable to enumerate USB device [ 704.143415][ T5089] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 704.151667][ T7] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 704.163178][ T7] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 704.172500][ T7] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 704.376337][ T7] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 704.385936][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.394399][ T7] usb 2-1: Product: syz [ 704.398881][ T7] usb 2-1: Manufacturer: syz [ 704.403867][ T7] usb 2-1: SerialNumber: syz 17:17:11 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) [ 704.436004][ T1192] ieee802154 phy0 wpan0: encryption failed: -22 [ 704.442801][ T1192] ieee802154 phy1 wpan1: encryption failed: -22 [ 704.573330][ T5089] usb 6-1: config index 0 descriptor too short (expected 65532, got 27) [ 704.581967][ T5089] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 704.593820][ T5089] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 704.603553][ T5089] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 17:17:11 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) [ 704.904883][ T5089] usb 6-1: New USB device found, idVendor=2013, idProduct=0461, bcdDevice=f3.75 [ 704.914367][ T5089] usb 6-1: New USB device strings: Mfr=111, Product=248, SerialNumber=42 [ 704.923204][ T5089] usb 6-1: Product: syz [ 704.927591][ T5089] usb 6-1: Manufacturer: syz [ 704.932576][ T5089] usb 6-1: SerialNumber: syz 17:17:12 executing program 3: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 705.013873][ T7] usb 2-1: 0:2 : does not exist [ 705.121875][ T7] usb 2-1: USB disconnect, device number 26 [ 705.134690][ T5089] usb 6-1: config 0 descriptor?? [ 705.184689][ T5089] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2013:0461, interface 0, class 0) [ 705.194342][ T5089] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 705.381954][ T8340] udevd[8340]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 705.786190][ T7] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 705.812906][ T5089] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 705.866433][ T5089] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 705.992340][ T7] usb 4-1: device descriptor read/64, error 18 [ 706.272377][ T7] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 706.472465][ T7] usb 4-1: device descriptor read/64, error 18 [ 706.562740][ T5089] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 706.593155][ T7] usb usb4-port1: attempt power cycle [ 706.612585][ T5089] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 706.657473][ T5089] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 706.722752][ T5089] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 706.766627][ T5089] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 706.823029][ T5089] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 707.042481][ T7] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 707.152876][ T5089] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 707.159500][ T5089] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 707.166234][ T5089] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 707.172855][ T5089] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 707.179515][ T5089] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 707.206430][ T5089] usb 6-1: USB disconnect, device number 15 [ 707.275181][ T7] usb 4-1: device descriptor read/8, error -61 17:17:14 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12014000246b9f401320610475f36ff82a010902fcff0000000000090400000113ac820009058301"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 17:17:14 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, 0x0, 0x0) 17:17:14 executing program 4: syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) 17:17:14 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 17:17:14 executing program 1: syz_usb_connect$uac1(0x0, 0x91, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7f, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, "b7"}, @feature_unit={0xb, 0x24, 0x6, 0x0, 0x0, 0x2, [0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x1}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x11, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 707.562354][ T7] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 707.753348][ T7] usb 4-1: device descriptor read/8, error -61 17:17:14 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) [ 707.874617][ T7] usb usb4-port1: unable to enumerate USB device 17:17:15 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, 0x0, 0x0) [ 707.984755][ T5092] usb 2-1: new high-speed USB device number 27 using dummy_hcd 17:17:15 executing program 4: syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r0) [ 708.233347][ T5092] usb 2-1: Using ep0 maxpacket: 8 17:17:15 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)="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", 0x171}], 0x1, 0x0, 0x58}, 0x0) recvmmsg(r0, &(0x7f0000000800), 0x10, 0x0, &(0x7f0000000840)={0x0, 0x7ff}) [ 708.277328][ T7] usb 6-1: new high-speed USB device number 16 using dummy_hcd 17:17:15 executing program 3: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="31010000dccd5e08cb06070000e816952301090224"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 708.353620][ T5092] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 708.364173][ T5092] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 708.374152][ T5092] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping 17:17:15 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 17:17:15 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) [ 708.633530][ T5092] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 708.643647][ T5092] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.651887][ T5092] usb 2-1: Product: syz [ 708.656413][ T5092] usb 2-1: Manufacturer: syz [ 708.661229][ T5092] usb 2-1: SerialNumber: syz [ 708.664934][ T7] usb 6-1: config index 0 descriptor too short (expected 65532, got 27) [ 708.674664][ T7] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 708.683240][ T7] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 708.692539][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 708.895925][ T7] usb 6-1: New USB device found, idVendor=2013, idProduct=0461, bcdDevice=f3.75 [ 708.906257][ T7] usb 6-1: New USB device strings: Mfr=111, Product=248, SerialNumber=42 [ 708.915228][ T7] usb 6-1: Product: syz [ 708.919758][ T7] usb 6-1: Manufacturer: syz [ 708.924816][ T7] usb 6-1: SerialNumber: syz [ 709.004728][ T7] usb 6-1: config 0 descriptor?? [ 709.050968][ T7] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2013:0461, interface 0, class 0) [ 709.061076][ T7] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 709.123666][ T5092] usb 2-1: 0:2 : does not exist [ 709.243939][ T5092] usb 2-1: USB disconnect, device number 27 [ 709.294084][ T5084] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 709.330536][ T8340] udevd[8340]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 709.552721][ T5084] usb 4-1: Using ep0 maxpacket: 8 [ 709.683638][ T7] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 709.702945][ T5084] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 709.717092][ T5084] usb 4-1: config 0 has no interfaces? [ 709.733088][ T7] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 709.882996][ T5084] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice=e8.00 [ 709.892452][ T5084] usb 4-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 709.901036][ T5084] usb 4-1: Product: syz [ 709.905650][ T5084] usb 4-1: Manufacturer: syz [ 709.910457][ T5084] usb 4-1: SerialNumber: syz [ 709.930522][ T5084] usb 4-1: config 0 descriptor?? [ 710.422751][ T7] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 710.478288][ T7] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 710.522948][ T7] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 710.572897][ T7] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 710.613102][ T7] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 710.652759][ T7] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 710.962681][ T7] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 710.969552][ T7] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 710.976547][ T7] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 710.983553][ T7] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 710.990410][ T7] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 711.002479][ T7] usb 6-1: USB disconnect, device number 16 17:17:18 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12014000246b9f401320610475f36ff82a010902fcff0000000000090400000113ac820009058301"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 17:17:18 executing program 1: syz_usb_connect$uac1(0x0, 0x91, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7f, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, "b7"}, @feature_unit={0xb, 0x24, 0x6, 0x0, 0x0, 0x2, [0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x1}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x11, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 17:17:18 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 17:17:18 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) 17:17:18 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r1, &(0x7f0000000140)="c614a5212ef6c070f55b8fb3559fb38b7217bfd70441770e7b8e884ebfa876e3e051ca2ec4503b7ae1349a223b7b13bf88ba93dc859b1b29498d868f8b17c14ca4e4dc939eebe487ed43f6ed5dbe3b7d55c971a6647b67d200", 0x59, 0x0, 0x0, 0x0) recvfrom(r0, &(0x7f0000000080)=""/88, 0x58, 0x6, 0x0, 0x0) 17:17:18 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 17:17:18 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r0) writev(r1, &(0x7f0000000380)=[{0x0}], 0x1) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 17:17:18 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) [ 711.912853][ T5084] usb 2-1: new high-speed USB device number 28 using dummy_hcd 17:17:19 executing program 3: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="31010000dccd5e08cb06070000e816952301090224"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 712.052577][ T5099] usb 4-1: USB disconnect, device number 36 [ 712.132815][ T5092] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 712.153804][ T5084] usb 2-1: Using ep0 maxpacket: 8 [ 712.272862][ T5084] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 712.283714][ T5084] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 712.293504][ T5084] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 712.494758][ T5092] usb 6-1: config index 0 descriptor too short (expected 65532, got 27) [ 712.503512][ T5092] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 712.511869][ T5092] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 712.521138][ T5092] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 712.577536][ T5084] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 712.587001][ T5084] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.595378][ T5084] usb 2-1: Product: syz [ 712.599760][ T5084] usb 2-1: Manufacturer: syz [ 712.604737][ T5084] usb 2-1: SerialNumber: syz 17:17:19 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 17:17:19 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0}}, 0x0) [ 712.873748][ T5092] usb 6-1: New USB device found, idVendor=2013, idProduct=0461, bcdDevice=f3.75 [ 712.886468][ T5092] usb 6-1: New USB device strings: Mfr=111, Product=248, SerialNumber=42 [ 712.896247][ T5092] usb 6-1: Product: syz [ 712.900652][ T5092] usb 6-1: Manufacturer: syz [ 712.905590][ T5092] usb 6-1: SerialNumber: syz [ 712.982703][ T5099] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 713.041333][ T5092] usb 6-1: config 0 descriptor?? [ 713.073373][ T5084] usb 2-1: 0:2 : does not exist [ 713.113270][ T5092] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2013:0461, interface 0, class 0) [ 713.122970][ T5092] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 713.242535][ T5099] usb 4-1: Using ep0 maxpacket: 8 17:17:20 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000840)="07630d4c0dce319590485082bd83600f01", 0x11}], 0x1, 0x0, 0xfef0}, 0x0) recvmmsg(r0, &(0x7f0000000800), 0x10, 0x0, 0x0) [ 713.287135][ T5084] usb 2-1: USB disconnect, device number 28 [ 713.363949][ T5099] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 713.374637][ T5099] usb 4-1: config 0 has no interfaces? [ 713.431164][ T8340] udevd[8340]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 713.575371][ T5099] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice=e8.00 [ 713.585495][ T5099] usb 4-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 713.594422][ T5099] usb 4-1: Product: syz [ 713.602848][ T5099] usb 4-1: Manufacturer: syz [ 713.608106][ T5099] usb 4-1: SerialNumber: syz [ 713.653209][ T5099] usb 4-1: config 0 descriptor?? [ 713.733069][ T5092] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 713.772800][ T5092] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 714.472702][ T5092] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 714.513344][ T5092] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 714.562768][ T5092] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 714.602666][ T5092] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 714.647134][ T5092] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 714.693264][ T5092] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 715.012517][ T5092] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 715.019128][ T5092] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 715.025860][ T5092] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 715.037826][ T5092] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 715.044961][ T5092] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 715.072808][ T5092] usb 6-1: USB disconnect, device number 17 17:17:22 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12014000246b9f401320610475f36ff82a010902fcff0000000000090400000113ac820009058301"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 17:17:22 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 17:17:22 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0}}, 0x0) 17:17:22 executing program 1: syz_usb_connect$uac1(0x0, 0x91, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7f, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, "b7"}, @feature_unit={0xb, 0x24, 0x6, 0x0, 0x0, 0x2, [0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x1}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x11, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 17:17:22 executing program 4: r0 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0x0) poll(&(0x7f0000001780)=[{r0, 0x4}], 0x1, 0x0) [ 715.622731][ T5092] usb 4-1: USB disconnect, device number 37 17:17:22 executing program 4: r0 = socket(0x18, 0x3, 0x0) getsockopt$sock_int(r0, 0xffff, 0x20, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 17:17:22 executing program 3: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="31010000dccd5e08cb06070000e816952301090224"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 17:17:22 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0}}, 0x0) 17:17:22 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, 0x0, 0x0) [ 715.863231][ T7] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 716.112702][ T7] usb 2-1: Using ep0 maxpacket: 8 17:17:23 executing program 4: syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000100)='./file1\x00', 0x1010814, &(0x7f0000000040)=ANY=[], 0x1, 0x666, &(0x7f0000000640)="$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") listxattr(&(0x7f00000000c0)='./file1\x00', 0x0, 0x2) [ 716.194485][ T5089] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 716.234011][ T7] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 716.244571][ T7] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 716.253958][ T7] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping 17:17:23 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x38, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x9cad3f55079db7af}]}, 0x38}}, 0x0) [ 716.403162][ T5092] usb 4-1: new high-speed USB device number 38 using dummy_hcd 17:17:23 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, 0x0, 0x0) [ 716.533165][ T7] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 716.542799][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.551170][ T7] usb 2-1: Product: syz [ 716.555887][ T7] usb 2-1: Manufacturer: syz [ 716.560827][ T7] usb 2-1: SerialNumber: syz [ 716.642841][ T5092] usb 4-1: Using ep0 maxpacket: 8 [ 716.663449][ T5089] usb 6-1: config index 0 descriptor too short (expected 65532, got 27) [ 716.675564][ T5089] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 716.684684][ T5089] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 716.693971][ T5089] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 716.763832][ T5092] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 716.768572][T10273] loop4: detected capacity change from 0 to 1024 [ 716.778461][ T5092] usb 4-1: config 0 has no interfaces? [ 716.943289][ T5092] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice=e8.00 [ 716.953811][ T5092] usb 4-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 716.962542][ T5092] usb 4-1: Product: syz [ 716.965370][ T5089] usb 6-1: New USB device found, idVendor=2013, idProduct=0461, bcdDevice=f3.75 [ 716.966827][ T5092] usb 4-1: Manufacturer: syz [ 716.977456][ T5089] usb 6-1: New USB device strings: Mfr=111, Product=248, SerialNumber=42 [ 716.980651][ T5092] usb 4-1: SerialNumber: syz [ 716.989242][ T5089] usb 6-1: Product: syz [ 716.998543][ T5089] usb 6-1: Manufacturer: syz [ 717.003424][ T5089] usb 6-1: SerialNumber: syz [ 717.013086][ T7] usb 2-1: 0:2 : does not exist [ 717.146898][ T7] usb 2-1: USB disconnect, device number 29 [ 717.251443][ T5089] usb 6-1: config 0 descriptor?? [ 717.280850][ T8376] udevd[8376]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 717.306147][ T5092] usb 4-1: config 0 descriptor?? [ 717.352480][ T5089] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2013:0461, interface 0, class 0) [ 717.362044][ T5089] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 717.962656][ T5089] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 718.005769][ T5089] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 718.682938][ T5089] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 718.742891][ T5089] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 718.792656][ T5089] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 718.832681][ T5089] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 718.875011][ T5089] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 718.932913][ T5089] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 719.073085][ T7] usb 4-1: USB disconnect, device number 38 [ 719.272667][ T5089] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 719.279236][ T5089] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 719.285991][ T5089] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 719.292679][ T5089] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 719.299283][ T5089] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 719.312813][ T5089] usb 6-1: USB disconnect, device number 18 17:17:26 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12014000246b9f401320610475f36ff82a010902fcff0000000000090400000113ac820009058301"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 17:17:26 executing program 4: syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000100)='./file1\x00', 0x1010814, &(0x7f0000000040)=ANY=[], 0x1, 0x666, &(0x7f0000000640)="$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") listxattr(&(0x7f00000000c0)='./file1\x00', 0x0, 0x2) 17:17:26 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x38, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x9cad3f55079db7af}]}, 0x38}}, 0x0) 17:17:26 executing program 1: syz_usb_connect$uac1(0x0, 0x91, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7f, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, "b7"}, @feature_unit={0xb, 0x24, 0x6, 0x0, 0x0, 0x2, [0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x1}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x11, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 17:17:26 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, 0x0, 0x0) 17:17:26 executing program 3: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="31010000dccd5e08cb06070000e816952301090224000100007e0009043401"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 17:17:27 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) 17:17:27 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x38, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x9cad3f55079db7af}]}, 0x38}}, 0x0) [ 720.011856][T10287] loop4: detected capacity change from 0 to 1024 [ 720.102815][ T5092] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 720.133094][ T7] usb 4-1: new high-speed USB device number 39 using dummy_hcd 17:17:27 executing program 4: syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000100)='./file1\x00', 0x1010814, &(0x7f0000000040)=ANY=[], 0x1, 0x666, &(0x7f0000000640)="$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") listxattr(&(0x7f00000000c0)='./file1\x00', 0x0, 0x2) [ 720.342492][ T5092] usb 2-1: Using ep0 maxpacket: 8 [ 720.413530][ T7] usb 4-1: Using ep0 maxpacket: 8 17:17:27 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) [ 720.454297][ T5089] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 720.467517][ T5092] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 720.478349][ T5092] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 720.487692][ T5092] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 720.548232][ T7] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 720.557254][ T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 720.571465][ T7] usb 4-1: config 0 has no interface number 0 [ 720.577985][ T7] usb 4-1: config 0 interface 52 has no altsetting 0 17:17:27 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x38, r1, 0x0, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x9cad3f55079db7af}]}, 0x38}}, 0x0) [ 720.763337][ T7] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice=e8.00 [ 720.774075][ T5092] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 720.774224][ T5092] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.774407][ T5092] usb 2-1: Product: syz [ 720.774498][ T5092] usb 2-1: Manufacturer: syz [ 720.774591][ T5092] usb 2-1: SerialNumber: syz [ 720.807606][ T7] usb 4-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 720.816436][ T7] usb 4-1: Product: syz [ 720.820918][ T7] usb 4-1: Manufacturer: syz [ 720.825952][ T7] usb 4-1: SerialNumber: syz [ 720.905925][ T7] usb 4-1: config 0 descriptor?? [ 720.924449][ T5089] usb 6-1: config index 0 descriptor too short (expected 65532, got 27) [ 720.933653][ T5089] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 720.941984][ T5089] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 720.951312][ T5089] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 17:17:28 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) [ 721.008522][T10297] loop4: detected capacity change from 0 to 1024 [ 721.113256][ T5092] usb 2-1: 0:2 : does not exist [ 721.233839][ T5089] usb 6-1: New USB device found, idVendor=2013, idProduct=0461, bcdDevice=f3.75 [ 721.243597][ T5089] usb 6-1: New USB device strings: Mfr=111, Product=248, SerialNumber=42 [ 721.252469][ T5089] usb 6-1: Product: syz [ 721.256846][ T5089] usb 6-1: Manufacturer: syz [ 721.261735][ T5089] usb 6-1: SerialNumber: syz [ 721.264648][ T5092] usb 2-1: USB disconnect, device number 30 [ 721.407399][ T8376] udevd[8376]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 721.419055][ T5090] usb 4-1: USB disconnect, device number 39 [ 721.488199][ T5089] usb 6-1: config 0 descriptor?? [ 721.570808][ T5089] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2013:0461, interface 0, class 0) [ 721.581066][ T5089] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 722.192672][ T5089] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 722.252729][ T5089] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 722.922582][ T5089] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 722.972650][ T5089] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 723.051848][ T5089] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 723.096571][ T5089] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 723.142811][ T5089] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 723.182646][ T5089] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 723.510068][ T5089] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 723.516768][ T5089] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 723.523385][ T5089] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 723.529933][ T5089] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 723.541045][ T5089] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 723.556935][ T5089] usb 6-1: USB disconnect, device number 19 17:17:31 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12014000246b9f401320610475f36ff82a010902fcff0000000000090400000113ac820009058301"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 17:17:31 executing program 4: syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000100)='./file1\x00', 0x1010814, &(0x7f0000000040)=ANY=[], 0x1, 0x666, &(0x7f0000000640)="$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") listxattr(&(0x7f00000000c0)='./file1\x00', 0x0, 0x2) 17:17:31 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x38, r1, 0x0, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x9cad3f55079db7af}]}, 0x38}}, 0x0) 17:17:31 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0}}, 0x0) 17:17:31 executing program 1: syz_usb_connect$uac1(0x0, 0x8d, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0xd, 0x24, 0x6, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x1}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x11, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 17:17:31 executing program 3: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="31010000dccd5e08cb06070000e816952301090224000100007e0009043401"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 17:17:31 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x38, r1, 0x0, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x9cad3f55079db7af}]}, 0x38}}, 0x0) 17:17:31 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0}}, 0x0) [ 724.290641][T10313] loop4: detected capacity change from 0 to 1024 [ 724.333063][ T5092] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 724.373096][ T5099] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 724.575671][ T5092] usb 2-1: Using ep0 maxpacket: 8 [ 724.614395][ T5099] usb 4-1: Using ep0 maxpacket: 8 17:17:31 executing program 4: syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000640)='./file0\x00', 0x10000, &(0x7f0000000080)=ANY=[@ANYBLOB="0091fc98368ca7a527e3ac062c70d160f472217a7191e1857a0480bab634e9259b648e9593cb3f84dfca74a3e8948052c39e6883d0feeb558226c7325490cfe38a888f0ce01ff21063aafd432bc87b6195ed06abc321f3db188f6a8f090006bb"], 0x0, 0x5f8, &(0x7f0000001280)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002240)='cpuset.effective_mems\x00', 0x26e1, 0x0) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r0, r1, 0x25}, 0x10) bpf$ITER_CREATE(0x22, &(0x7f0000000100)={r2}, 0x8) [ 724.682840][ T5089] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 724.693883][ T5092] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 724.704463][ T5092] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 724.753981][ T5099] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 724.765800][ T5099] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 724.777493][ T5099] usb 4-1: config 0 has no interface number 0 [ 724.783991][ T5099] usb 4-1: config 0 interface 52 has no altsetting 0 17:17:31 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x2c}}, 0x0) 17:17:31 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0}}, 0x0) [ 724.962996][ T5092] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 724.975746][ T5092] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.984498][ T5092] usb 2-1: Product: syz [ 724.988875][ T5092] usb 2-1: Manufacturer: syz [ 724.993798][ T5092] usb 2-1: SerialNumber: syz [ 725.043895][ T5089] usb 6-1: config index 0 descriptor too short (expected 65532, got 27) [ 725.053075][ T5089] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 725.062901][ T5089] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 725.073689][ T5099] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice=e8.00 [ 725.073838][ T5099] usb 4-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 725.074025][ T5099] usb 4-1: Product: syz [ 725.074117][ T5099] usb 4-1: Manufacturer: syz [ 725.074210][ T5099] usb 4-1: SerialNumber: syz [ 725.078772][ T5099] usb 4-1: config 0 descriptor?? [ 725.084910][ T5089] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 725.342232][T10322] loop4: detected capacity change from 0 to 1024 [ 725.423365][ T5089] usb 6-1: New USB device found, idVendor=2013, idProduct=0461, bcdDevice=f3.75 [ 725.423957][ T5092] usb 2-1: 0:2 : does not exist [ 725.432689][ T5089] usb 6-1: New USB device strings: Mfr=111, Product=248, SerialNumber=42 [ 725.432813][ T5089] usb 6-1: Product: syz [ 725.432900][ T5089] usb 6-1: Manufacturer: syz [ 725.433012][ T5089] usb 6-1: SerialNumber: syz 17:17:32 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x0) [ 725.558667][ T5089] usb 6-1: config 0 descriptor?? [ 725.652801][ T5099] usb 4-1: USB disconnect, device number 40 [ 725.655694][ T5089] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2013:0461, interface 0, class 0) [ 725.669556][ T5089] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 725.676866][ T5092] usb 2-1: USB disconnect, device number 31 [ 725.851414][ T8340] udevd[8340]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 726.252887][ T5089] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 726.303556][ T5089] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 726.992794][ T5089] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 727.032772][ T5089] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 727.090422][ T5089] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 727.143118][ T5089] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 727.199367][ T5089] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 727.242594][ T5089] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 727.602669][ T5089] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 727.609237][ T5089] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 727.616121][ T5089] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 727.622735][ T5089] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 727.634606][ T5089] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 727.664806][ T5089] usb 6-1: USB disconnect, device number 20 17:17:35 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12014000246b9f401320610475f36ff82a010902fcff0000000000090400000113ac820009058301"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 17:17:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)={0x14, 0x0, 0x1}, 0x14}}, 0x20008040) 17:17:35 executing program 1: syz_usb_connect$uac1(0x0, 0x8d, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0xd, 0x24, 0x6, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x1}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x11, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 17:17:35 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x0) 17:17:35 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x2c}}, 0x0) 17:17:35 executing program 3: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="31010000dccd5e08cb06070000e816952301090224000100007e0009043401"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 17:17:35 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x2c}}, 0x0) 17:17:35 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x0) 17:17:35 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, &(0x7f0000000e40)) [ 728.452631][ T5089] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 728.463737][ T5092] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 728.692746][ T5099] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 728.702420][ T5089] usb 4-1: Using ep0 maxpacket: 8 [ 728.703403][ T5092] usb 2-1: Using ep0 maxpacket: 8 [ 728.823498][ T5089] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 728.831929][ T5089] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 728.833694][ T5092] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 728.842375][ T5089] usb 4-1: config 0 has no interface number 0 [ 728.842494][ T5089] usb 4-1: config 0 interface 52 has no altsetting 0 17:17:35 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000016c0), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000001800)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x0, 0x1000000000000}]}) 17:17:35 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x1c, r1, 0x0, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) [ 728.852831][ T5092] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 17:17:35 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x38}}, 0x0) [ 729.035137][ T5092] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 729.044961][ T5092] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.053661][ T5092] usb 2-1: Product: syz [ 729.058052][ T5092] usb 2-1: Manufacturer: syz [ 729.066242][ T5092] usb 2-1: SerialNumber: syz [ 729.073553][ T5099] usb 6-1: config index 0 descriptor too short (expected 65532, got 27) [ 729.082345][ T5099] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 729.090659][ T5099] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 729.099943][ T5099] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 729.113455][ T5089] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice=e8.00 [ 729.123159][ T5089] usb 4-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 729.131745][ T5089] usb 4-1: Product: syz [ 729.136284][ T5089] usb 4-1: Manufacturer: syz [ 729.141088][ T5089] usb 4-1: SerialNumber: syz [ 729.260382][ T5089] usb 4-1: config 0 descriptor?? [ 729.294250][ T5099] usb 6-1: New USB device found, idVendor=2013, idProduct=0461, bcdDevice=f3.75 [ 729.304052][ T5099] usb 6-1: New USB device strings: Mfr=111, Product=248, SerialNumber=42 [ 729.312931][ T5099] usb 6-1: Product: syz [ 729.317333][ T5099] usb 6-1: Manufacturer: syz [ 729.322295][ T5099] usb 6-1: SerialNumber: syz [ 729.345779][ T5099] usb 6-1: config 0 descriptor?? [ 729.400534][ T5099] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2013:0461, interface 0, class 0) [ 729.410220][ T5099] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 729.513416][ T5092] usb 2-1: 0:2 : does not exist [ 729.645530][ T5092] usb 2-1: USB disconnect, device number 32 [ 729.776399][ T8376] udevd[8376]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 729.806623][ T5084] usb 4-1: USB disconnect, device number 41 [ 730.023147][ T5099] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 730.063088][ T5099] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 730.752738][ T5099] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 730.792945][ T5099] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 730.832570][ T5099] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 730.872570][ T5099] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 730.912798][ T5099] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 730.955360][ T5099] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 731.286493][ T5099] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 731.298432][ T5099] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 731.305156][ T5099] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 731.311716][ T5099] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 731.323956][ T5099] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 731.342429][ T5099] usb 6-1: USB disconnect, device number 21 17:17:38 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12014000246b9f401320610475f36ff82a010902fcff0000000000090400000113ac820009058301"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 17:17:38 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x1c, r1, 0x0, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 17:17:38 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x38}}, 0x0) 17:17:38 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000080)) 17:17:38 executing program 1: syz_usb_connect$uac1(0x0, 0x8d, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0xd, 0x24, 0x6, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x1}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x11, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 17:17:38 executing program 3: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="31010000dccd5e08cb06070000e816952301090224000100007e000904340102d469e700"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 17:17:39 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x1c, r1, 0x0, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 17:17:39 executing program 4: bpf$BPF_BTF_LOAD(0x14, 0x0, 0x0) 17:17:39 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x38}}, 0x0) [ 732.138316][ T5089] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 732.193424][ T5090] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 732.362858][ T7] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 732.402869][ T5089] usb 4-1: Using ep0 maxpacket: 8 [ 732.452882][ T5090] usb 2-1: Using ep0 maxpacket: 8 17:17:39 executing program 4: bpf$BPF_BTF_LOAD(0xd, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) [ 732.535636][ T5089] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 732.548511][ T5089] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 732.559929][ T5089] usb 4-1: config 0 has no interface number 0 [ 732.566326][ T5089] usb 4-1: config 0 interface 52 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 17:17:39 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x14, r1, 0x1}, 0x14}}, 0x0) 17:17:39 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x9cad3f55079db7af}]}, 0x30}}, 0x0) [ 732.579626][ T5089] usb 4-1: config 0 interface 52 has no altsetting 0 [ 732.603623][ T5090] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 732.614299][ T5090] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 732.794391][ T7] usb 6-1: config index 0 descriptor too short (expected 65532, got 27) [ 732.803323][ T7] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 732.811760][ T7] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 732.821195][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 732.833886][ T5090] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 732.843355][ T5090] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.854855][ T5090] usb 2-1: Product: syz [ 732.859245][ T5090] usb 2-1: Manufacturer: syz [ 732.865582][ T5090] usb 2-1: SerialNumber: syz [ 732.960224][ T5089] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice=e8.00 [ 732.969917][ T5089] usb 4-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 732.979082][ T5089] usb 4-1: Product: syz [ 732.986091][ T5089] usb 4-1: Manufacturer: syz [ 732.990923][ T5089] usb 4-1: SerialNumber: syz [ 733.073636][ T7] usb 6-1: New USB device found, idVendor=2013, idProduct=0461, bcdDevice=f3.75 [ 733.083307][ T7] usb 6-1: New USB device strings: Mfr=111, Product=248, SerialNumber=42 [ 733.093432][ T7] usb 6-1: Product: syz [ 733.097936][ T7] usb 6-1: Manufacturer: syz [ 733.102972][ T7] usb 6-1: SerialNumber: syz [ 733.119206][ T5089] usb 4-1: config 0 descriptor?? [ 733.194111][ T7] usb 6-1: config 0 descriptor?? [ 733.251076][ T7] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2013:0461, interface 0, class 0) [ 733.267109][ T7] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 733.278035][ T5090] usb 2-1: 0:2 : does not exist [ 733.352655][ T5090] usb 2-1: USB disconnect, device number 33 [ 733.550349][ T8376] udevd[8376]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 733.583156][ T5099] usb 4-1: USB disconnect, device number 42 [ 733.952650][ T7] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 734.006609][ T7] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 734.696248][ T7] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 734.762638][ T7] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 734.806404][ T7] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 734.862643][ T7] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 734.929978][ T7] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 734.992793][ T7] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 735.322658][ T7] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 735.329435][ T7] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 735.336360][ T7] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 735.343246][ T7] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 735.350101][ T7] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 735.365408][ T7] usb 6-1: USB disconnect, device number 22 17:17:42 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12014000246b9f401320610475f36ff82a010902fcff0000000000090400000113ac820009058301"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 17:17:42 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const={0xffff8000}]}}, &(0x7f0000000140)=""/144, 0x26, 0x90, 0x1}, 0x20) 17:17:42 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x14, r1, 0x1}, 0x14}}, 0x0) 17:17:42 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x9cad3f55079db7af}]}, 0x30}}, 0x0) 17:17:42 executing program 1: syz_usb_connect$uac1(0x0, 0x92, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x80, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}, @feature_unit={0xd, 0x24, 0x6, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x1}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x11, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 17:17:42 executing program 3: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="31010000dccd5e08cb06070000e816952301090224000100007e000904340102d469e700"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 17:17:43 executing program 4: r0 = request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0) r1 = add_key$fscrypt_v1(&(0x7f00000003c0), &(0x7f0000000400)={'fscrypt:', @desc1}, &(0x7f0000000440)={0x0, "f758d1f139fd0495c4e8e74adad77fd0e2ce9b4bc95ee48f1dab371e643765fa70e421f6547f844e232e3149b5b6113d3345c5f76a920808ae8f06d4197f5277"}, 0x48, r0) keyctl$link(0x8, 0x0, r1) 17:17:43 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x9cad3f55079db7af}]}, 0x30}}, 0x0) 17:17:43 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 736.182560][ T5099] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 736.224736][ T7] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 736.423146][ T5099] usb 4-1: Using ep0 maxpacket: 8 [ 736.472885][ T5089] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 736.483098][ T7] usb 2-1: Using ep0 maxpacket: 8 17:17:43 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x9cad3f55079db7af}]}, 0x30}}, 0x0) [ 736.543360][ T5099] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 736.551819][ T5099] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 736.562757][ T5099] usb 4-1: config 0 has no interface number 0 [ 736.569086][ T5099] usb 4-1: config 0 interface 52 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 736.582605][ T5099] usb 4-1: config 0 interface 52 has no altsetting 0 17:17:43 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) [ 736.632725][ T7] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 736.645189][ T7] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 736.656196][ T7] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 736.665535][ T7] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping 17:17:43 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0x301}) [ 736.893236][ T5099] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice=e8.00 [ 736.894483][ T5089] usb 6-1: config index 0 descriptor too short (expected 65532, got 27) [ 736.902774][ T5099] usb 4-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 736.911181][ T5089] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 736.919691][ T5099] usb 4-1: Product: syz [ 736.927954][ T5089] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 736.932362][ T5099] usb 4-1: Manufacturer: syz [ 736.941153][ T5089] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 736.949350][ T5099] usb 4-1: SerialNumber: syz [ 736.961579][ T7] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 736.975034][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.983441][ T7] usb 2-1: Product: syz [ 736.987931][ T7] usb 2-1: Manufacturer: syz [ 736.992920][ T7] usb 2-1: SerialNumber: syz [ 737.037783][ T5099] usb 4-1: config 0 descriptor?? [ 737.334253][ T5089] usb 6-1: New USB device found, idVendor=2013, idProduct=0461, bcdDevice=f3.75 [ 737.343784][ T5089] usb 6-1: New USB device strings: Mfr=111, Product=248, SerialNumber=42 [ 737.353261][ T5089] usb 6-1: Product: syz [ 737.360797][ T5089] usb 6-1: Manufacturer: syz [ 737.366094][ T5089] usb 6-1: SerialNumber: syz [ 737.403098][ T7] usb 2-1: 0:2 : does not exist [ 737.517644][ T5099] usb 4-1: USB disconnect, device number 43 [ 737.526545][ T7] usb 2-1: USB disconnect, device number 34 [ 737.544576][ T5089] usb 6-1: config 0 descriptor?? [ 737.595685][ T5089] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2013:0461, interface 0, class 0) [ 737.605394][ T5089] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 737.687285][ T8340] udevd[8340]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 738.222582][ T5089] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 738.272620][ T5089] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 738.962699][ T5089] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 739.012838][ T5089] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 739.062689][ T5089] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 739.105840][ T5089] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 739.162558][ T5089] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 739.234070][ T5089] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 739.562619][ T5089] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 739.569192][ T5089] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 739.575867][ T5089] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 739.582491][ T5089] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 739.589183][ T5089] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 739.626531][ T5089] usb 6-1: USB disconnect, device number 23 17:17:47 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12014000246b9f401320610475f36ff82a010902fcff0000000000090400000113ac820009058301"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 17:17:47 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x9cad3f55079db7af}]}, 0x28}}, 0x0) 17:17:47 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 17:17:47 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0x301}) 17:17:47 executing program 1: syz_usb_connect$uac1(0x0, 0x92, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x80, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}, @feature_unit={0xd, 0x24, 0x6, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x1}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x11, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 17:17:47 executing program 3: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="31010000dccd5e08cb06070000e816952301090224000100007e000904340102d469e700"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 17:17:47 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0x301}) 17:17:47 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 17:17:47 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000240)=""/145, 0x26, 0x91, 0x1}, 0x20) [ 740.420607][ T5090] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 740.432773][ T7] usb 2-1: new high-speed USB device number 35 using dummy_hcd 17:17:47 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0x301}) [ 740.682477][ T5099] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 740.693481][ T5090] usb 4-1: Using ep0 maxpacket: 8 [ 740.699064][ T7] usb 2-1: Using ep0 maxpacket: 8 17:17:47 executing program 0: bpf$BPF_BTF_LOAD(0x21, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) [ 740.833503][ T5090] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 740.845225][ T5090] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 740.856306][ T5090] usb 4-1: config 0 has no interface number 0 [ 740.862736][ T5090] usb 4-1: config 0 interface 52 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 740.876096][ T5090] usb 4-1: config 0 interface 52 has no altsetting 0 17:17:47 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "b79800df22f92890"}) [ 740.883549][ T7] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 740.892706][ T7] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 740.903210][ T7] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 740.912571][ T7] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 741.044888][ T5099] usb 6-1: config index 0 descriptor too short (expected 65532, got 27) [ 741.053901][ T5099] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 741.062600][ T5099] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 741.071745][ T5099] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 741.243617][ T7] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 741.256966][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.266013][ T7] usb 2-1: Product: syz [ 741.270581][ T7] usb 2-1: Manufacturer: syz [ 741.275568][ T7] usb 2-1: SerialNumber: syz [ 741.323359][ T5090] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice=e8.00 [ 741.332973][ T5090] usb 4-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 741.341583][ T5090] usb 4-1: Product: syz [ 741.346365][ T5090] usb 4-1: Manufacturer: syz [ 741.354380][ T5099] usb 6-1: New USB device found, idVendor=2013, idProduct=0461, bcdDevice=f3.75 [ 741.354442][ T5090] usb 4-1: SerialNumber: syz [ 741.368537][ T5099] usb 6-1: New USB device strings: Mfr=111, Product=248, SerialNumber=42 [ 741.377329][ T5099] usb 6-1: Product: syz [ 741.381708][ T5099] usb 6-1: Manufacturer: syz [ 741.386842][ T5099] usb 6-1: SerialNumber: syz [ 741.478645][ T5090] usb 4-1: config 0 descriptor?? [ 741.568951][ T5099] usb 6-1: config 0 descriptor?? [ 741.678378][ T5099] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2013:0461, interface 0, class 0) [ 741.688370][ T5099] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 741.813799][ T7] usb 2-1: 0:2 : does not exist [ 741.898689][ T7] usb 2-1: USB disconnect, device number 35 [ 741.954567][ T5089] usb 4-1: USB disconnect, device number 44 [ 742.263135][ T5099] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 742.313456][ T5099] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 743.002757][ T5099] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 743.045967][ T5099] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 743.093613][ T5099] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 743.132678][ T5099] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 743.172623][ T5099] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 743.220087][ T5099] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 743.542836][ T5099] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 743.549434][ T5099] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 743.556161][ T5099] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 743.562831][ T5099] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 743.569437][ T5099] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 743.586141][ T5099] usb 6-1: USB disconnect, device number 24 17:17:51 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x0, 0xfffffffb, 0x1, 0x0, 0x836}) 17:17:51 executing program 4: bpf$BPF_BTF_LOAD(0x1e, 0x0, 0x0) 17:17:51 executing program 0: mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x61) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='veth1_virt_wifi\x00', 0x10) 17:17:51 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12014000246b9f401320610475f36ff82a010902fcff0000000000090400000113ac820009058301"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 17:17:51 executing program 3: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="31010000dccd5e08cb06070000e816952301090224000100007e000904340102d469e70009058a"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 17:17:51 executing program 1: syz_usb_connect$uac1(0x0, 0x92, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x80, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}, @feature_unit={0xd, 0x24, 0x6, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x1}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x11, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 17:17:51 executing program 2: bpf$BPF_BTF_LOAD(0x10, &(0x7f0000000200)={0x0, &(0x7f0000000140)=""/144, 0x0, 0x90}, 0x20) 17:17:51 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000001640)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002"], &(0x7f0000000140)=""/144, 0x26, 0x90, 0x1}, 0x20) [ 744.413053][ T5099] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 744.443479][ T5092] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 744.653723][ T7] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 744.663709][ T5099] usb 4-1: Using ep0 maxpacket: 8 [ 744.683703][ T5092] usb 2-1: Using ep0 maxpacket: 8 17:17:51 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x61) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x0, 0x0) [ 744.784678][ T5099] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 744.793247][ T5099] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 744.803722][ T5099] usb 4-1: config 0 has no interface number 0 [ 744.810038][ T5099] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 744.820226][ T5099] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 17:17:51 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="90", 0x1}], 0x1) [ 744.833566][ T5099] usb 4-1: config 0 interface 52 has no altsetting 0 [ 744.844212][ T5092] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 744.854592][ T5092] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 744.865084][ T5092] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 744.874326][ T5092] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 745.043638][ T7] usb 6-1: config index 0 descriptor too short (expected 65532, got 27) [ 745.052649][ T7] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 745.061090][ T7] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 745.070603][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 17:17:52 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const={0x1, 0x0, 0x0, 0x8}]}}, &(0x7f0000000140)=""/144, 0x26, 0x90, 0x1}, 0x20) [ 745.113863][ T5092] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 745.123391][ T5092] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.131621][ T5092] usb 2-1: Product: syz [ 745.136273][ T5092] usb 2-1: Manufacturer: syz [ 745.144419][ T5092] usb 2-1: SerialNumber: syz [ 745.223718][ T5099] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice=e8.00 [ 745.233354][ T5099] usb 4-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 745.245291][ T5099] usb 4-1: Product: syz [ 745.249686][ T5099] usb 4-1: Manufacturer: syz [ 745.255255][ T5099] usb 4-1: SerialNumber: syz [ 745.376101][ T7] usb 6-1: New USB device found, idVendor=2013, idProduct=0461, bcdDevice=f3.75 [ 745.385733][ T7] usb 6-1: New USB device strings: Mfr=111, Product=248, SerialNumber=42 [ 745.394656][ T7] usb 6-1: Product: syz [ 745.399150][ T7] usb 6-1: Manufacturer: syz [ 745.400469][ T5099] usb 4-1: config 0 descriptor?? [ 745.404013][ T7] usb 6-1: SerialNumber: syz [ 745.523129][ T7] usb 6-1: config 0 descriptor?? 17:17:52 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="90", 0x1}], 0x1) [ 745.605612][ T7] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2013:0461, interface 0, class 0) [ 745.615804][ T7] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 745.623512][ T5092] usb 2-1: 0:2 : does not exist [ 745.746481][ T5092] usb 2-1: USB disconnect, device number 36 17:17:52 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x4}]}]}}, &(0x7f0000000240)=""/145, 0x32, 0x91, 0x1}, 0x20) [ 745.871330][ T5090] usb 4-1: USB disconnect, device number 45 17:17:53 executing program 2: bpf$BPF_BTF_LOAD(0x16, 0x0, 0x0) [ 746.025966][ T8340] udevd[8340]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 17:17:53 executing program 1: syz_usb_connect$uac1(0x0, 0x8b, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x79, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, "b7"}, @feature_unit={0xd, 0x24, 0x6, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 746.233976][ T7] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 746.282917][ T7] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 746.972781][ T7] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 747.002574][ T5090] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 747.033105][ T7] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 747.082789][ T7] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 747.128733][ T7] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 747.193028][ T7] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 747.233126][ T7] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 747.262330][ T5090] usb 2-1: Using ep0 maxpacket: 8 [ 747.382767][ T5090] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 747.395405][ T5090] usb 2-1: config 1 has no interface number 1 [ 747.401706][ T5090] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 747.411604][ T5090] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 747.562895][ T7] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 747.569734][ T7] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 747.576727][ T7] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 747.583583][ T7] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 747.590666][ T7] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 747.633042][ T7] usb 6-1: USB disconnect, device number 25 [ 747.663948][ T5090] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 747.673487][ T5090] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.681730][ T5090] usb 2-1: Product: syz [ 747.686517][ T5090] usb 2-1: Manufacturer: syz [ 747.691441][ T5090] usb 2-1: SerialNumber: syz 17:17:55 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12014000246b9f401320610475f36ff82a010902fcff0000000000090400000113ac820009058301"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 17:17:55 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="90", 0x1}], 0x1) 17:17:55 executing program 3: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="31010000dccd5e08cb06070000e816952301090224000100007e000904340102d469e70009058a"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 17:17:55 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0xa0f}, 0x48) 17:17:55 executing program 2: bpf$BPF_BTF_LOAD(0x6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) [ 748.063332][ T5090] usb 2-1: 2:1 : no UAC_FORMAT_TYPE desc [ 748.176623][ T5090] usb 2-1: USB disconnect, device number 37 17:17:55 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0x10, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000140)=""/144, 0x1a, 0x90, 0x1}, 0x20) 17:17:55 executing program 2: r0 = epoll_create1(0x0) writev(r0, 0x0, 0x0) 17:17:55 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="90", 0x1}], 0x1) [ 748.364521][ T8376] udevd[8376]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 748.452298][ T5092] usb 4-1: new high-speed USB device number 46 using dummy_hcd 17:17:55 executing program 1: syz_usb_connect$uac1(0x0, 0x8b, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x79, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, "b7"}, @feature_unit={0xd, 0x24, 0x6, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 748.702454][ T5092] usb 4-1: Using ep0 maxpacket: 8 17:17:55 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0xed800) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000000080)) 17:17:55 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x200008, &(0x7f0000000d80)=ANY=[@ANYRES32=0x0], 0x4, 0x610, &(0x7f0000000340)="$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") [ 748.762488][ T7] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 748.823219][ T5092] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 748.836442][ T5092] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 748.846988][ T5092] usb 4-1: config 0 has no interface number 0 [ 748.853398][ T5092] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 748.863594][ T5092] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 748.878071][ T5092] usb 4-1: config 0 interface 52 has no altsetting 0 17:17:56 executing program 4: r0 = getpid() pidfd_open(r0, 0x0) r1 = epoll_create1(0x0) socket$netlink(0x10, 0x3, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) syncfs(r7) creat(0x0, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x0, 'queue1\x00', 0x109}) write$sndseq(r8, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0x9, &(0x7f0000000040)={[0x7]}, 0x8) [ 749.144536][ T7] usb 6-1: config index 0 descriptor too short (expected 65532, got 27) [ 749.153556][ T7] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 749.162003][ T7] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 749.171405][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 749.183149][ T5092] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice=e8.00 [ 749.192752][ T5092] usb 4-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 749.201370][ T5092] usb 4-1: Product: syz [ 749.205888][ T5092] usb 4-1: Manufacturer: syz [ 749.210694][ T5092] usb 4-1: SerialNumber: syz [ 749.293114][ T5099] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 749.351620][ T5092] usb 4-1: config 0 descriptor?? [ 749.482757][ T7] usb 6-1: New USB device found, idVendor=2013, idProduct=0461, bcdDevice=f3.75 [ 749.492486][ T7] usb 6-1: New USB device strings: Mfr=111, Product=248, SerialNumber=42 [ 749.501281][ T7] usb 6-1: Product: syz [ 749.506650][ T7] usb 6-1: Manufacturer: syz [ 749.511588][ T7] usb 6-1: SerialNumber: syz [ 749.548240][ T5099] usb 2-1: Using ep0 maxpacket: 8 [ 749.673321][ T5099] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 749.683009][ T5099] usb 2-1: config 1 has no interface number 1 [ 749.689328][ T5099] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 749.698943][ T5099] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 749.699541][ T7] usb 6-1: config 0 descriptor?? [ 749.848907][ T5092] usb 4-1: USB disconnect, device number 46 [ 749.924647][ T5099] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 749.931350][ T7] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2013:0461, interface 0, class 0) [ 749.934861][ T5099] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.934983][ T5099] usb 2-1: Product: syz [ 749.935080][ T5099] usb 2-1: Manufacturer: syz [ 749.944377][ T7] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 749.969340][ T5099] usb 2-1: SerialNumber: syz [ 750.393556][ T5099] usb 2-1: 2:1 : no UAC_FORMAT_TYPE desc [ 750.423056][ T7] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 750.466293][ T7] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 750.490397][ T5099] usb 2-1: USB disconnect, device number 38 [ 750.693893][ T8376] udevd[8376]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 751.172649][ T7] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 751.222647][ T7] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 751.272616][ T7] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 751.322614][ T7] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 751.362833][ T7] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 751.410599][ T7] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 751.752819][ T7] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 751.759672][ T7] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 751.767508][ T7] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 751.774374][ T7] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 751.781225][ T7] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 751.819652][ T7] usb 6-1: USB disconnect, device number 26 17:17:59 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12014000246b9f401320610475f36ff82a010902fcff0000000000090400000113ac820009058301"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 17:17:59 executing program 2: bpf$BPF_BTF_LOAD(0x19, 0x0, 0x0) 17:17:59 executing program 3: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="31010000dccd5e08cb06070000e816952301090224000100007e000904340102d469e70009058a"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 17:17:59 executing program 0: bpf$BPF_BTF_LOAD(0x11, 0x0, 0x0) 17:17:59 executing program 1: syz_usb_connect$uac1(0x0, 0x8b, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x79, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, "b7"}, @feature_unit={0xd, 0x24, 0x6, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 17:17:59 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1269, 0x20000000) 17:17:59 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f00000001c0)) [ 752.682443][ T5099] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 752.703256][ T7] usb 2-1: new high-speed USB device number 39 using dummy_hcd 17:17:59 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x40081271, 0x20000000) [ 752.903375][ T5092] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 752.923680][ T5099] usb 4-1: Using ep0 maxpacket: 8 [ 752.983221][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 753.043711][ T5099] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 753.053124][ T5099] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 753.063804][ T5099] usb 4-1: config 0 has no interface number 0 [ 753.070131][ T5099] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 753.080441][ T5099] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 17:18:00 executing program 0: socket(0x2, 0x1, 0x2) [ 753.093917][ T5099] usb 4-1: config 0 interface 52 has no altsetting 0 [ 753.133596][ T7] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 17:18:00 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) [ 753.143048][ T7] usb 2-1: config 1 has no interface number 1 [ 753.149477][ T7] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 753.159028][ T7] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 753.283743][ T5092] usb 6-1: config index 0 descriptor too short (expected 65532, got 27) [ 753.292584][ T5092] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 753.300911][ T5092] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 753.310196][ T5092] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 753.473546][ T7] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 753.473891][ T5099] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice=e8.00 [ 753.483217][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.483339][ T7] usb 2-1: Product: syz [ 753.483426][ T7] usb 2-1: Manufacturer: syz [ 753.483515][ T7] usb 2-1: SerialNumber: syz 17:18:00 executing program 4: r0 = socket(0x0, 0x6, 0xffffffe0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}]}, 0x5c}}, 0x4041) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r2, 0x20, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x9, 0x7f}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f00000002c0)="b56540823938b3cca1", 0x9) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) [ 753.515906][ T5099] usb 4-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 753.524674][ T5099] usb 4-1: Product: syz [ 753.529049][ T5099] usb 4-1: Manufacturer: syz [ 753.537367][ T5099] usb 4-1: SerialNumber: syz [ 753.583242][ T5092] usb 6-1: New USB device found, idVendor=2013, idProduct=0461, bcdDevice=f3.75 [ 753.592753][ T5092] usb 6-1: New USB device strings: Mfr=111, Product=248, SerialNumber=42 [ 753.601439][ T5092] usb 6-1: Product: syz [ 753.606240][ T5092] usb 6-1: Manufacturer: syz [ 753.611060][ T5092] usb 6-1: SerialNumber: syz [ 753.717738][ T5092] usb 6-1: config 0 descriptor?? 17:18:00 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) [ 753.770910][ T5092] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2013:0461, interface 0, class 0) [ 753.781299][ T5092] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 753.849643][ T7] usb 2-1: 2:1 : no UAC_FORMAT_TYPE desc [ 753.889512][ T5099] usb 4-1: config 0 descriptor?? [ 754.041451][ T7] usb 2-1: USB disconnect, device number 39 [ 754.291779][ T8376] udevd[8376]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 754.398941][ T5099] usb 4-1: USB disconnect, device number 47 [ 754.413386][ T5092] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 754.464521][ T5092] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 755.153654][ T5092] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 755.192931][ T5092] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 755.238167][ T5092] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 755.282675][ T5092] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 755.322835][ T5092] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 755.362691][ T5092] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 755.682611][ T5092] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 755.694420][ T5092] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 755.700990][ T5092] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 755.708186][ T5092] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 755.714923][ T5092] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 755.743677][ T5092] usb 6-1: USB disconnect, device number 27 17:18:03 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12014000246b9f401320610475f36ff82a010902fcff0000000000090400000113ac820009058301"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 17:18:03 executing program 1: syz_usb_connect$uac1(0x0, 0x93, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, "b7"}, @feature_unit={0xd, 0x24, 0x6, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x1}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x0, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 17:18:03 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:18:03 executing program 0: recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0xf5f571f0a76bdf53) 17:18:03 executing program 3: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="31010000dccd5e08cb06070000e816952301090224000100007e000904340102d469e70009058acf"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 17:18:03 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 17:18:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 17:18:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xb) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newtfilter={0x24}, 0x24}}, 0x0) 17:18:03 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) [ 756.522339][ T7] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 756.532662][ T5092] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 756.770028][T10528] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 756.780109][T10528] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 756.790723][ T5092] usb 4-1: Using ep0 maxpacket: 8 [ 756.803833][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 756.873506][ T5099] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 756.922182][ T5092] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 756.930546][ T5092] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 756.941077][ T5092] usb 4-1: config 0 has no interface number 0 [ 756.945179][ T7] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 756.947419][ T5092] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 756.956907][ T7] usb 2-1: config 1 has no interface number 1 [ 756.967558][ T5092] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 756.973839][ T7] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 756.983710][ T5092] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 756.983862][ T5092] usb 4-1: config 0 interface 52 has no altsetting 0 17:18:03 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) [ 756.993091][ T7] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 17:18:04 executing program 4: r0 = socket$caif_stream(0x25, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) [ 757.227684][ T7] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 757.237221][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.245729][ T7] usb 2-1: Product: syz [ 757.250215][ T7] usb 2-1: Manufacturer: syz [ 757.255389][ T7] usb 2-1: SerialNumber: syz [ 757.344498][ T5099] usb 6-1: config index 0 descriptor too short (expected 65532, got 27) [ 757.353615][ T5099] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 757.361940][ T5099] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 757.371602][ T5099] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 17:18:04 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="5a2be00069c864a1bd474d8e7e2ca96d58b2d74d7336a4ebf240b4455ac5c4b9e118eeadb2d00c7d84a5acb093700cae0e6851556a6a3e09cb241a5789689d15e863dd248d602f274656586736e1a5f9c6364bb3f651ce6fd220e23a50f69328c4c5888b802c6f0b0591c7f1f523a8a2f782f326a8cf66f92f722fac28386a2a29c76e49386382fcf94a0fa561228c76d55f2cc78f75c7d0b84d5958f6657489fc0bf35b08ee461b361400301d1c7a31269d0ae1a058b5bbf00849b87822e6cfa55d3bc0d9968087c17dcb5f41881f2804bb65caea90eacdaf88282a0ecb234d87ff29765c299b6b35c09c83e0ef6f3ada60a2c8e05217512500f13ba8ef32fa9d600493d0489dd99f9204421483ad277e1c865936339ce48ac8e74ae345125066828efbab591780b2f887f5c842a689012f6c7bf8da4eff4ad68b78e292f78d3a17fbd0d10e1e5d879afb5ccf10fe23849f84cc5bc45f1bbfc72f27d3b8c69c59921e41882283c302bec3addccf3c2d00", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) [ 757.524254][ T5092] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice=e8.00 [ 757.537134][ T5092] usb 4-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 757.546268][ T5092] usb 4-1: Product: syz [ 757.550653][ T5092] usb 4-1: Manufacturer: syz [ 757.555573][ T5092] usb 4-1: SerialNumber: syz [ 757.562728][ T5099] usb 6-1: New USB device found, idVendor=2013, idProduct=0461, bcdDevice=f3.75 [ 757.572053][ T5099] usb 6-1: New USB device strings: Mfr=111, Product=248, SerialNumber=42 [ 757.580853][ T5099] usb 6-1: Product: syz [ 757.585347][ T5099] usb 6-1: Manufacturer: syz [ 757.590176][ T5099] usb 6-1: SerialNumber: syz [ 757.668077][ T5092] usb 4-1: config 0 descriptor?? [ 757.706429][ T5099] usb 6-1: config 0 descriptor?? [ 757.730864][ T7] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 757.743952][ T7] usb 2-1: 2:1 : invalid channels 0 [ 757.770195][ T5099] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2013:0461, interface 0, class 0) [ 757.779955][ T5099] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 757.920349][ T7] usb 2-1: USB disconnect, device number 40 [ 757.927222][ T5092] input: syz syz (Stick) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input9 [ 757.953607][ T4366] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 757.974833][ T4366] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 758.094806][ T8375] udevd[8375]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 758.160746][ T5092] usb 4-1: USB disconnect, device number 48 [ 758.433170][ T5099] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 758.473108][ T5099] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 759.182706][ T5099] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 759.223230][ T5099] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 759.265708][ T5099] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 759.312652][ T5099] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 759.352581][ T5099] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 759.402870][ T5099] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 759.726312][ T5099] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 759.732965][ T5099] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 759.739518][ T5099] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 759.746225][ T5099] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 759.753035][ T5099] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 759.768146][ T5099] usb 6-1: USB disconnect, device number 28 17:18:07 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12014000246b9f401320610475f36ff82a010902fcff0000000000090400000113ac820009058301"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 17:18:07 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@private, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}, {{@in=@remote, 0x0, 0x2b}, 0xa, @in=@multicast2}}, 0xe8) 17:18:07 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@private, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in=@multicast2}}, 0xe8) 17:18:07 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:18:07 executing program 1: syz_usb_connect$uac1(0x0, 0x93, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, "b7"}, @feature_unit={0xd, 0x24, 0x6, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x1}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x0, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 17:18:07 executing program 3: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="31010000dccd5e08cb06070000e816952301090224000100007e000904340102d469e70009058acf"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 17:18:07 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:18:07 executing program 0: socketpair(0x28, 0x2, 0x0, &(0x7f0000000b80)) 17:18:07 executing program 4: clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000440), &(0x7f0000000480), 0x0, &(0x7f0000000540)={0x0, r0+10000000}, 0x0) [ 760.592504][ T5099] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 760.633477][ T5092] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 760.812833][ T5084] usb 6-1: new high-speed USB device number 29 using dummy_hcd 17:18:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 760.863012][ T5099] usb 2-1: Using ep0 maxpacket: 8 [ 760.882836][ T5092] usb 4-1: Using ep0 maxpacket: 8 17:18:08 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) [ 760.983950][ T5099] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 760.993813][ T5099] usb 2-1: config 1 has no interface number 1 [ 761.000142][ T5099] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 761.013628][ T5099] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 761.026929][ T5092] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 761.035469][ T5092] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 761.045934][ T5092] usb 4-1: config 0 has no interface number 0 [ 761.052334][ T5092] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 761.063641][ T5092] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 761.073808][ T5092] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 761.087024][ T5092] usb 4-1: config 0 interface 52 has no altsetting 0 [ 761.283648][T10558] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 761.293684][T10558] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 761.304343][ T5084] usb 6-1: config index 0 descriptor too short (expected 65532, got 27) [ 761.313496][ T5084] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 761.325159][ T5084] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 761.334791][ T5084] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 761.346750][ T5099] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 761.356129][ T5099] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.364419][ T5099] usb 2-1: Product: syz [ 761.368782][ T5099] usb 2-1: Manufacturer: syz [ 761.373665][ T5099] usb 2-1: SerialNumber: syz [ 761.380239][ T5092] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice=e8.00 [ 761.389872][ T5092] usb 4-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 761.398525][ T5092] usb 4-1: Product: syz [ 761.402973][ T5092] usb 4-1: Manufacturer: syz [ 761.407814][ T5092] usb 4-1: SerialNumber: syz 17:18:08 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="5a2be00069c864a1bd474d8e7e2ca96d58b2d74d7336a4ebf240b4455ac5c4b9e118eeadb2d00c7d84a5acb093700cae0e6851556a6a3e09cb241a5789689d15e863dd248d602f274656586736e1a5f9c6364bb3f651ce6fd220e23a50f69328c4c5888b802c6f0b0591c7f1f523a8a2f782f326a8cf66f92f722fac28386a2a29c76e49386382fcf94a0fa561228c76d55f2cc78f75c7d0b84d5958f6657489fc0bf35b08ee461b361400301d1c7a31269d0ae1a058b5bbf00849b87822e6cfa55d3bc0d9968087c17dcb5f41881f2804bb65caea90eacdaf88282a0ecb234d87ff29765c299b6b35c09c83e0ef6f3ada60a2c8e05217512500f13ba8ef32fa9d600493d0489dd99f9204421483ad277e1c865936339ce48ac8e74ae345125066828efbab591780b2f887f5c842a689012f6c7bf8da4eff4ad68b78e292f78d3a17fbd0d10e1e5d879afb5ccf10fe23849f84cc5bc45f1bbfc72f27d3b8c69c59921e41882283c302bec3addccf3c2d00", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) [ 761.458145][ T5092] usb 4-1: config 0 descriptor?? [ 761.614014][ T5084] usb 6-1: New USB device found, idVendor=2013, idProduct=0461, bcdDevice=f3.75 [ 761.627427][ T5084] usb 6-1: New USB device strings: Mfr=111, Product=248, SerialNumber=42 [ 761.636718][ T5084] usb 6-1: Product: syz [ 761.641118][ T5084] usb 6-1: Manufacturer: syz [ 761.646091][ T5084] usb 6-1: SerialNumber: syz [ 761.734176][ T5092] input: syz syz (Stick) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input10 [ 761.748244][ T4366] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 761.792719][ T4366] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 761.804058][ T5099] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 761.810389][ T5099] usb 2-1: 2:1 : invalid channels 0 [ 761.844746][ T5084] usb 6-1: config 0 descriptor?? [ 761.911142][ T5084] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2013:0461, interface 0, class 0) [ 761.920953][ T5084] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 762.001400][ T5092] usb 4-1: USB disconnect, device number 49 [ 762.016130][ T5099] usb 2-1: USB disconnect, device number 41 [ 762.187554][ T8340] udevd[8340]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 762.563116][ T5084] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 762.613464][ T5084] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 763.302724][ T5084] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 763.342699][ T5084] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 763.382643][ T5084] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 763.422600][ T5084] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 763.462647][ T5084] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 763.512606][ T5084] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 763.832643][ T5084] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 763.839232][ T5084] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 763.846025][ T5084] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 763.852730][ T5084] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 763.859370][ T5084] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 763.870923][ T5084] usb 6-1: USB disconnect, device number 29 [ 763.897768][ T8375] udevd[8375]: setting owner of /dev/bus/usb/006/029 to uid=0, gid=0 failed: No such file or directory 17:18:11 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12014000246b9f401320610475f36ff82a010902fcff0000000000090400000113ac820009058301"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 17:18:11 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0x0, @private=0xa010100, 0x0, 0x1, 'dh\x00', 0x12}, 0x2c) 17:18:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x8, 0x4) 17:18:11 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:18:11 executing program 1: syz_usb_connect$uac1(0x0, 0x93, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, "b7"}, @feature_unit={0xd, 0x24, 0x6, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x1}, @format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 17:18:11 executing program 3: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="31010000dccd5e08cb06070000e816952301090224000100007e000904340102d469e70009058acf"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 764.441636][T10569] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:0 17:18:11 executing program 0: unshare(0x2010600) 17:18:11 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:18:11 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000780)={0x0, {0x2, 0x0, @rand_addr=0x64010101}, {0x2, 0x0, @loopback}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}) [ 764.672706][ T5084] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 764.693308][T10057] usb 2-1: new high-speed USB device number 42 using dummy_hcd 17:18:12 executing program 0: pselect6(0x40, &(0x7f0000000440), 0x0, &(0x7f00000004c0)={0x100000001}, 0x0, 0x0) [ 764.923294][ T5084] usb 4-1: Using ep0 maxpacket: 8 [ 764.943130][T10057] usb 2-1: Using ep0 maxpacket: 8 [ 765.006113][ T7] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 765.043898][ T5084] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 765.052627][ T5084] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 765.063501][ T5084] usb 4-1: config 0 has no interface number 0 [ 765.069848][ T5084] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 765.081235][ T5084] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 765.091460][ T5084] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 765.104813][ T5084] usb 4-1: config 0 interface 52 has no altsetting 0 [ 765.119903][T10057] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 765.129241][T10057] usb 2-1: config 1 has no interface number 1 [ 765.140457][T10057] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping 17:18:12 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) [ 765.149865][T10057] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 17:18:12 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000022c0), 0x4) [ 765.333132][T10057] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 765.342945][T10057] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.351191][T10057] usb 2-1: Product: syz [ 765.355768][T10057] usb 2-1: Manufacturer: syz [ 765.360589][T10057] usb 2-1: SerialNumber: syz [ 765.403736][ T7] usb 6-1: config index 0 descriptor too short (expected 65532, got 27) [ 765.416892][ T7] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 765.425852][ T7] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 765.435186][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 765.454048][ T5084] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice=e8.00 [ 765.463557][ T5084] usb 4-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 765.472486][ T5084] usb 4-1: Product: syz [ 765.476875][ T5084] usb 4-1: Manufacturer: syz [ 765.481690][ T5084] usb 4-1: SerialNumber: syz [ 765.633901][ T7] usb 6-1: New USB device found, idVendor=2013, idProduct=0461, bcdDevice=f3.75 [ 765.644334][ T7] usb 6-1: New USB device strings: Mfr=111, Product=248, SerialNumber=42 [ 765.649374][ T5084] usb 4-1: config 0 descriptor?? [ 765.653171][ T7] usb 6-1: Product: syz [ 765.653268][ T7] usb 6-1: Manufacturer: syz [ 765.667688][ T7] usb 6-1: SerialNumber: syz [ 765.708594][ T7] usb 6-1: config 0 descriptor?? [ 765.769123][ T7] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2013:0461, interface 0, class 0) [ 765.779580][ T7] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 765.879903][ T1192] ieee802154 phy0 wpan0: encryption failed: -22 [ 765.886822][ T1192] ieee802154 phy1 wpan1: encryption failed: -22 [ 765.899454][T10057] usb 2-1: 2:1 : unsupported sample bitwidth 0 in 0 bytes [ 765.916788][ T5084] input: syz syz (Stick) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input11 [ 765.935446][ T4366] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 766.013490][ T4366] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 766.081787][T10057] usb 2-1: USB disconnect, device number 42 [ 766.127113][ T5089] usb 4-1: USB disconnect, device number 50 [ 766.238084][ T8442] udevd[8442]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 766.402671][ T7] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 766.452695][ T7] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 767.172702][ T7] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 767.222680][ T7] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 767.272726][ T7] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 767.325650][ T7] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 767.392789][ T7] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 767.432642][ T7] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 767.773759][ T7] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 767.780540][ T7] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 767.787471][ T7] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 767.794417][ T7] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 767.801216][ T7] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 767.826094][ T7] usb 6-1: USB disconnect, device number 30 17:18:15 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12014000246b9f401320610475f36ff82a010902fcff0000000000090400000113ac820009058301"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 17:18:15 executing program 0: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={0x0}}, 0x400008d) getsockname$llc(0xffffffffffffffff, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000001c0)=0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x20000000) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000002200)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) getpeername$llc(0xffffffffffffffff, &(0x7f0000002240)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000002280)=0x10) r0 = socket$netlink(0x10, 0x3, 0x14) accept4$llc(r0, &(0x7f0000002b80)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x0, 0x80800) getsockname$llc(0xffffffffffffffff, &(0x7f0000002c00)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000002c40)=0x10) socket$inet_udp(0x2, 0x2, 0x0) r1 = accept4$llc(0xffffffffffffffff, &(0x7f0000002e00)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000002e40)=0x10, 0x80000) getpeername$llc(r1, &(0x7f0000002e80)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000002ec0)=0x10) pipe(&(0x7f0000002f00)) 17:18:15 executing program 2: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="5a2be00069c864a1bd474d8e7e2ca96d58b2d74d7336a4ebf240b4455ac5c4b9e118eeadb2d00c7d84a5acb093700cae0e6851556a6a3e09cb241a5789689d15e863dd248d602f274656586736e1a5f9c6364bb3f651ce6fd220e23a50f69328c4c5888b802c6f0b0591c7f1f523a8a2f782f326a8cf66f92f722fac28386a2a29c76e49386382fcf94a0fa561228c76d55f2cc78f75c7d0b84d5958f6657489fc0bf35b08ee461b361400301d1c7a31269d0ae1a058b5bbf00849b87822e6cfa55d3bc0d9968087c17dcb5f41881f2804bb65caea90eacdaf88282a0ecb234d87ff29765c299b6b35c09c83e0ef6f3ada60a2c8e05217512500f13ba8ef32fa9d600493d0489dd99f9204421483ad277e1c865936339ce48ac8e74ae345125066828efbab591780b2f887f5c842a689012f6c7bf8da4eff4ad68b78e292f78d3a17fbd0d10e1e5d879afb5ccf10fe23849f84cc5bc45f1bbfc72f27d3b8c69c59921e41882283c302bec3addccf3c2d00", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:18:15 executing program 1: syz_usb_connect$uac1(0x0, 0x93, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, "b7"}, @feature_unit={0xd, 0x24, 0x6, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x1}, @format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 17:18:15 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000000)=0x6, 0x4) 17:18:15 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="31010000dccd5e08cb06070000e816952301090224000100007e000904340102d469e70009058acf65"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 17:18:15 executing program 2: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:18:15 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0x0, 0x1}, 0x14}}, 0x0) [ 768.603619][T10057] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 768.627170][ T5084] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 768.852338][T10057] usb 4-1: Using ep0 maxpacket: 8 [ 768.858246][ T5099] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 768.877769][ T5084] usb 2-1: Using ep0 maxpacket: 8 [ 768.974010][T10057] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 768.982786][T10057] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 768.993438][T10057] usb 4-1: config 0 has no interface number 0 [ 769.003045][T10057] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 17:18:16 executing program 2: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) [ 769.015072][T10057] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 769.028405][T10057] usb 4-1: config 0 interface 52 has no altsetting 0 [ 769.045502][ T5084] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 769.055490][ T5084] usb 2-1: config 1 has no interface number 1 [ 769.061820][ T5084] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping 17:18:16 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff}) accept4$phonet_pipe(r0, 0x0, 0x0, 0x0) [ 769.071326][ T5084] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 17:18:16 executing program 4: socket(0x28, 0x0, 0x2) [ 769.273832][ T5084] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 769.283910][ T5084] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.293067][ T5084] usb 2-1: Product: syz [ 769.297491][ T5084] usb 2-1: Manufacturer: syz [ 769.302596][ T5084] usb 2-1: SerialNumber: syz 17:18:16 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="5a2be00069c864a1bd474d8e7e2ca96d58b2d74d7336a4ebf240b4455ac5c4b9e118eeadb2d00c7d84a5acb093700cae0e6851556a6a3e09cb241a5789689d15e863dd248d602f274656586736e1a5f9c6364bb3f651ce6fd220e23a50f69328c4c5888b802c6f0b0591c7f1f523a8a2f782f326a8cf66f92f722fac28386a2a29c76e49386382fcf94a0fa561228c76d55f2cc78f75c7d0b84d5958f6657489fc0bf35b08ee461b361400301d1c7a31269d0ae1a058b5bbf00849b87822e6cfa55d3bc0d9968087c17dcb5f41881f2804bb65caea90eacdaf88282a0ecb234d87ff29765c299b6b35c09c83e0ef6f3ada60a2c8e05217512500f13ba8ef32fa9d600493d0489dd99f9204421483ad277e1c865936339ce48ac8e74ae345125066828efbab591780b2f887f5c842a689012f6c7bf8da4eff4ad68b78e292f78d3a17fbd0d10e1e5d879afb5ccf10fe23849f84cc5bc45f1bbfc72f27d3b8c69c59921e41882283c302bec3addccf3c2d00", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) [ 769.364210][ T5099] usb 6-1: config index 0 descriptor too short (expected 65532, got 27) [ 769.373184][ T5099] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 769.381526][ T5099] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 769.390960][ T5099] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 769.403089][T10057] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice=e8.00 [ 769.415870][T10057] usb 4-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 769.425768][T10057] usb 4-1: Product: syz [ 769.430159][T10057] usb 4-1: Manufacturer: syz [ 769.435134][T10057] usb 4-1: SerialNumber: syz [ 769.458687][T10057] usb 4-1: config 0 descriptor?? [ 769.583718][ T5099] usb 6-1: New USB device found, idVendor=2013, idProduct=0461, bcdDevice=f3.75 [ 769.593478][ T5099] usb 6-1: New USB device strings: Mfr=111, Product=248, SerialNumber=42 [ 769.602389][ T5099] usb 6-1: Product: syz [ 769.606765][ T5099] usb 6-1: Manufacturer: syz [ 769.614851][ T5099] usb 6-1: SerialNumber: syz [ 769.654660][ T5099] usb 6-1: config 0 descriptor?? [ 769.722999][T10057] usb 4-1: Can not set alternate setting to 1, error: -71 [ 769.730400][T10057] synaptics_usb: probe of 4-1:0.52 failed with error -71 [ 769.767017][ T5099] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2013:0461, interface 0, class 0) [ 769.776826][ T5099] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 769.814264][T10057] usb 4-1: USB disconnect, device number 51 [ 769.834565][ T5084] usb 2-1: 2:1 : unsupported sample bitwidth 0 in 0 bytes [ 769.916697][ T5084] usb 2-1: USB disconnect, device number 43 [ 770.115282][ T8340] udevd[8340]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 770.373687][ T5099] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 770.414649][ T5099] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 771.112645][ T5099] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 771.156869][ T5099] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 771.202567][ T5099] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 771.242840][ T5099] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 771.292584][ T5099] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 771.334274][ T5099] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 771.652696][ T5099] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 771.664849][ T5099] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 771.671424][ T5099] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 771.678793][ T5099] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 771.685481][ T5099] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 771.715701][ T5099] usb 6-1: USB disconnect, device number 31 17:18:19 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12014000246b9f401320610475f36ff82a010902fcff0000000000090400000113ac820009058301"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 17:18:19 executing program 0: bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001480)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 17:18:19 executing program 4: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = gettid() syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/ipc\x00') 17:18:19 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="31010000dccd5e08cb06070000e816952301090224000100007e000904340102d469e70009058acf65"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 17:18:19 executing program 1: syz_usb_connect$uac1(0x0, 0x93, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, "b7"}, @feature_unit={0xd, 0x24, 0x6, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x1}, @format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 17:18:19 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:18:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c}, 0x1c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x68, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @media='ib\x00'}}}}, 0x68}}, 0x0) 17:18:19 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, 0x0) [ 772.482648][ T7] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 772.532521][ T5099] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 772.752706][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 772.774213][ T5099] usb 2-1: Using ep0 maxpacket: 8 [ 772.813811][ T5089] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 772.895991][ T5099] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 772.897820][ T7] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 772.905480][ T5099] usb 2-1: config 1 has no interface number 1 [ 772.913640][ T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 772.919729][ T5099] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 772.929990][ T7] usb 4-1: config 0 has no interface number 0 [ 772.939302][ T5099] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 772.945520][ T7] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 772.968398][ T7] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 772.982156][ T7] usb 4-1: config 0 interface 52 has no altsetting 0 17:18:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x28, r1, 0x1, 0x0, 0x0, {{0x3}, {@val={0x8}, @val={0xc, 0x142}}}}, 0x28}}, 0x0) 17:18:20 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:18:20 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80004800}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x1c, 0x0, 0x300, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1c}}, 0x0) [ 773.262749][ T5089] usb 6-1: config index 0 descriptor too short (expected 65532, got 27) [ 773.271406][ T5089] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 773.279967][ T5089] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 773.289158][ T5089] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 773.333310][ T5099] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 773.342981][ T5099] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.351217][ T5099] usb 2-1: Product: syz [ 773.355835][ T5099] usb 2-1: Manufacturer: syz [ 773.360648][ T5099] usb 2-1: SerialNumber: syz 17:18:20 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, 0x0, 0x20) [ 773.597957][ T5089] usb 6-1: New USB device found, idVendor=2013, idProduct=0461, bcdDevice=f3.75 [ 773.610635][ T5089] usb 6-1: New USB device strings: Mfr=111, Product=248, SerialNumber=42 [ 773.620047][ T5089] usb 6-1: Product: syz [ 773.624499][ T5089] usb 6-1: Manufacturer: syz [ 773.629308][ T5089] usb 6-1: SerialNumber: syz [ 773.640975][ T7] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice=e8.00 [ 773.650966][ T7] usb 4-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 773.659823][ T7] usb 4-1: Product: syz [ 773.664423][ T7] usb 4-1: Manufacturer: syz [ 773.669338][ T7] usb 4-1: SerialNumber: syz [ 773.818937][ T5089] usb 6-1: config 0 descriptor?? [ 773.848465][ T7] usb 4-1: config 0 descriptor?? [ 773.858062][ T5099] usb 2-1: 2:1 : unsupported sample bitwidth 0 in 0 bytes [ 773.931903][ T5089] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2013:0461, interface 0, class 0) [ 773.942863][ T5089] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 774.079801][ T5099] usb 2-1: USB disconnect, device number 44 [ 774.121504][ T7] usb 4-1: Can not set alternate setting to 1, error: -71 [ 774.129531][ T7] synaptics_usb: probe of 4-1:0.52 failed with error -71 [ 774.229515][ T8376] udevd[8376]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 774.287087][ T7] usb 4-1: USB disconnect, device number 52 [ 774.534293][ T5089] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 774.573289][ T5089] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 775.282732][ T5089] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 775.342714][ T5089] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 775.402563][ T5089] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 775.442622][ T5089] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 775.492685][ T5089] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 775.540069][ T5089] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 775.892743][ T5089] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 775.899432][ T5089] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 775.906147][ T5089] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 775.912756][ T5089] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 775.919354][ T5089] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 775.932363][ T5089] usb 6-1: USB disconnect, device number 32 [ 775.950016][ T8375] udevd[8375]: setting mode of /dev/bus/usb/006/032 to 020664 failed: No such file or directory [ 775.970304][ T8375] udevd[8375]: setting owner of /dev/bus/usb/006/032 to uid=0, gid=0 failed: No such file or directory 17:18:23 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12014000246b9f401320610475f36ff82a010902fcff0000000000090400000113ac820009058301"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 17:18:23 executing program 0: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r1, r0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0xd, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f00000001c0)=0x40) 17:18:23 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101dc0, 0x0) r0 = inotify_init() r1 = inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x280) inotify_rm_watch(r0, r1) 17:18:23 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:18:23 executing program 1: syz_usb_connect$uac1(0x0, 0x8c, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, "b7"}, @feature_unit={0xd, 0x24, 0x6, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x0, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 17:18:23 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="31010000dccd5e08cb06070000e816952301090224000100007e000904340102d469e70009058acf65"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 17:18:23 executing program 4: openat$incfs(0xffffffffffffff9c, &(0x7f0000000280)='.pending_reads\x00', 0x6840, 0x33) 17:18:23 executing program 0: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) 17:18:23 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) [ 776.762714][ T5099] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 776.803767][ T5084] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 776.887491][ T24] audit: type=1800 audit(1679505503.943:9): pid=10661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=".pending_reads" dev="sda1" ino=1173 res=0 errno=0 [ 776.942426][ T5089] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 777.013523][ T5099] usb 4-1: Using ep0 maxpacket: 8 [ 777.042621][ T5084] usb 2-1: Using ep0 maxpacket: 8 17:18:24 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101dc0, 0xcf) 17:18:24 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x40401, 0x0) write$tcp_mem(r0, 0x0, 0x0) [ 777.133642][ T5099] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 777.142494][ T5099] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 777.153637][ T5099] usb 4-1: config 0 has no interface number 0 [ 777.159989][ T5099] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 777.171404][ T5099] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 777.184749][ T5099] usb 4-1: config 0 interface 52 has no altsetting 0 [ 777.212982][ T5084] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 777.222931][ T5084] usb 2-1: config 1 has no interface number 1 [ 777.229264][ T5084] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 777.238756][ T5084] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 17:18:24 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) [ 777.323374][ T5089] usb 6-1: config index 0 descriptor too short (expected 65532, got 27) [ 777.332328][ T5089] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 777.340657][ T5089] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 777.350036][ T5089] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 777.444200][ T5099] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice=e8.00 [ 777.453938][ T5099] usb 4-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 777.462927][ T5099] usb 4-1: Product: syz [ 777.467319][ T5099] usb 4-1: Manufacturer: syz [ 777.472688][ T5099] usb 4-1: SerialNumber: syz [ 777.479487][ T5084] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 777.489139][ T5084] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.500927][ T5084] usb 2-1: Product: syz [ 777.505929][ T5084] usb 2-1: Manufacturer: syz [ 777.510759][ T5084] usb 2-1: SerialNumber: syz [ 777.612800][ T5099] usb 4-1: config 0 descriptor?? [ 777.623039][ T5089] usb 6-1: New USB device found, idVendor=2013, idProduct=0461, bcdDevice=f3.75 [ 777.632578][ T5089] usb 6-1: New USB device strings: Mfr=111, Product=248, SerialNumber=42 [ 777.641252][ T5089] usb 6-1: Product: syz [ 777.645804][ T5089] usb 6-1: Manufacturer: syz [ 777.650608][ T5089] usb 6-1: SerialNumber: syz [ 777.764005][ T5089] usb 6-1: config 0 descriptor?? [ 777.846481][ T5089] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2013:0461, interface 0, class 0) [ 777.856157][ T5089] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 777.885629][ T5099] usb 4-1: Can not set alternate setting to 1, error: -71 [ 777.893934][ T5099] synaptics_usb: probe of 4-1:0.52 failed with error -71 [ 777.964010][ T5084] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 778.048668][ T5099] usb 4-1: USB disconnect, device number 53 [ 778.105050][ T5084] usb 2-1: USB disconnect, device number 45 [ 778.230335][ T8340] udevd[8340]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 778.472857][ T5089] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 778.516876][ T5089] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 778.992664][ T5089] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 778.999829][ T5089] em28xx 6-1:0.0: No AC97 audio processor 17:18:27 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12014000246b9f401320610475f36ff82a010902fcff0000000000090400000113ac820009058301"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 17:18:27 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a7942, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) statx(r0, &(0x7f0000000400)='./file0\x00', 0x100, 0x40, &(0x7f0000000640)) 17:18:27 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a7942, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) statx(r0, &(0x7f0000000000)='./file0\x00', 0x100, 0x80, &(0x7f0000000280)) 17:18:27 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:18:27 executing program 1: syz_usb_connect$uac1(0x0, 0x8c, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, "b7"}, @feature_unit={0xd, 0x24, 0x6, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x0, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 17:18:27 executing program 3: r0 = epoll_create1(0x0) write$P9_RAUTH(r0, 0x0, 0x0) [ 780.013730][ T5084] usb 6-1: USB disconnect, device number 33 [ 780.022664][ T5084] em28xx 6-1:0.0: Disconnecting em28xx [ 780.132661][ T5084] em28xx 6-1:0.0: Freeing device [ 780.172457][ T24] audit: type=1800 audit(1679505507.223:10): pid=10678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=1175 res=0 errno=0 17:18:27 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="5a2be00069c864a1bd474d8e7e2ca96d58b2d74d7336a4ebf240b4455ac5c4b9e118eeadb2d00c7d84a5acb093700cae0e6851556a6a3e09cb241a5789689d15e863dd248d602f274656586736e1a5f9c6364bb3f651ce6fd220e23a50f69328c4c5888b802c6f0b0591c7f1f523a8a2f782f326a8cf66f92f722fac28386a2a29c76e49386382fcf94a0fa561228c76d55f2cc78f75c7d0b84d5958f6657489fc0bf35b08ee461b361400301d1c7a31269d0ae1a058b5bbf00849b87822e6cfa55d3bc0d9968087c17dcb5f41881f2804bb65caea90eacdaf88282a0ecb234d87ff29765c299b6b35c09c83e0ef6f3ada60a2c8e05217512500f13ba8ef32fa9d600493d0489dd99f9204421483ad277e1c865936339ce48ac8e74ae345125066828efbab591780b2f887f5c842a689012f6c7bf8da4eff4ad68b78e292f78d3a17fbd0d10e1e5d879afb5ccf10fe23849f84cc5bc45f1bbfc72f27d3b8c69c59921e41882283c302bec3addccf3c2d00", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) [ 780.278209][ T24] audit: type=1800 audit(1679505507.263:11): pid=10681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=1177 res=0 errno=0 17:18:27 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x0, 0xffffffffffffffff, 0x0) 17:18:27 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a7942, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) statx(r0, &(0x7f0000000000)='./file0\x00', 0x2000, 0x8, &(0x7f0000000280)) 17:18:27 executing program 3: msgget$private(0x0, 0x158) [ 780.462575][ T5099] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 780.712704][ T5099] usb 2-1: Using ep0 maxpacket: 8 [ 780.721394][ T24] audit: type=1800 audit(1679505507.773:12): pid=10690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=1177 res=0 errno=0 [ 780.777361][ T5084] usb 6-1: new high-speed USB device number 34 using dummy_hcd 17:18:27 executing program 0: pipe(&(0x7f0000002100)={0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) 17:18:28 executing program 4: r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x0) [ 780.880446][ T5099] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 780.890726][ T5099] usb 2-1: config 1 has no interface number 1 [ 780.897200][ T5099] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 780.906584][ T5099] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 781.164344][ T5084] usb 6-1: config index 0 descriptor too short (expected 65532, got 27) [ 781.173230][ T5084] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 781.181654][ T5084] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 781.195347][ T5084] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 781.219355][ T5099] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 781.229034][ T5099] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.237442][ T5099] usb 2-1: Product: syz [ 781.241811][ T5099] usb 2-1: Manufacturer: syz [ 781.246722][ T5099] usb 2-1: SerialNumber: syz [ 781.414135][ T5084] usb 6-1: New USB device found, idVendor=2013, idProduct=0461, bcdDevice=f3.75 [ 781.423719][ T5084] usb 6-1: New USB device strings: Mfr=111, Product=248, SerialNumber=42 [ 781.432616][ T5084] usb 6-1: Product: syz [ 781.436991][ T5084] usb 6-1: Manufacturer: syz [ 781.441805][ T5084] usb 6-1: SerialNumber: syz [ 781.497494][ T5084] usb 6-1: config 0 descriptor?? [ 781.572722][ T5084] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2013:0461, interface 0, class 0) [ 781.582402][ T5084] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 781.643659][ T5099] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 781.784076][ T5099] usb 2-1: USB disconnect, device number 46 [ 782.202706][ T5084] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 782.262778][ T5084] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 782.742755][ T5084] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 782.749961][ T5084] em28xx 6-1:0.0: No AC97 audio processor 17:18:30 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000001640), 0x0, 0x0) timerfd_gettime(r0, 0x0) 17:18:30 executing program 1: syz_usb_connect$uac1(0x0, 0x8c, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, "b7"}, @feature_unit={0xd, 0x24, 0x6, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x0, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 17:18:30 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="5a2be00069c864a1bd474d8e7e2ca96d58b2d74d7336a4ebf240b4455ac5c4b9e118eeadb2d00c7d84a5acb093700cae0e6851556a6a3e09cb241a5789689d15e863dd248d602f274656586736e1a5f9c6364bb3f651ce6fd220e23a50f69328c4c5888b802c6f0b0591c7f1f523a8a2f782f326a8cf66f92f722fac28386a2a29c76e49386382fcf94a0fa561228c76d55f2cc78f75c7d0b84d5958f6657489fc0bf35b08ee461b361400301d1c7a31269d0ae1a058b5bbf00849b87822e6cfa55d3bc0d9968087c17dcb5f41881f2804bb65caea90eacdaf88282a0ecb234d87ff29765c299b6b35c09c83e0ef6f3ada60a2c8e05217512500f13ba8ef32fa9d600493d0489dd99f9204421483ad277e1c865936339ce48ac8e74ae345125066828efbab591780b2f887f5c842a689012f6c7bf8da4eff4ad68b78e292f78d3a17fbd0d10e1e5d879afb5ccf10fe23849f84cc5bc45f1bbfc72f27d3b8c69c59921e41882283c302bec3addccf3c2d00", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:18:30 executing program 4: r0 = semget(0x1, 0x0, 0x0) semctl$GETVAL(r0, 0x0, 0xc, 0x0) 17:18:30 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12014000246b9f401320610475f36ff82a010902fcff0000000000090400000113ac820009058301"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 17:18:30 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) recvfrom$unix(r0, &(0x7f0000000300)=""/246, 0xf6, 0x0, 0x0, 0x0) [ 783.759117][ T7] usb 6-1: USB disconnect, device number 34 [ 783.767986][ T7] em28xx 6-1:0.0: Disconnecting em28xx [ 783.784256][ T7] em28xx 6-1:0.0: Freeing device 17:18:31 executing program 4: pipe(&(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, 0x0) 17:18:31 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x4000) 17:18:31 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) [ 784.192673][ T5089] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 784.432492][ T5089] usb 2-1: Using ep0 maxpacket: 8 [ 784.493506][ T5084] usb 6-1: new high-speed USB device number 35 using dummy_hcd 17:18:31 executing program 3: r0 = eventfd2(0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) [ 784.553505][ T5089] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 784.566348][ T5089] usb 2-1: config 1 has no interface number 1 [ 784.573495][ T5089] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 784.582874][ T5089] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 17:18:31 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$watch_queue(r0, 0x0, 0x0) 17:18:31 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) recvfrom$unix(r0, &(0x7f00000000c0)=""/206, 0xce, 0x40, 0x0, 0x0) [ 784.833419][ T5089] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 784.842930][ T5089] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.851182][ T5089] usb 2-1: Product: syz [ 784.853315][ T5084] usb 6-1: config index 0 descriptor too short (expected 65532, got 27) [ 784.855994][ T5089] usb 2-1: Manufacturer: syz [ 784.864038][ T5084] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 17:18:32 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) [ 784.872242][ T5089] usb 2-1: SerialNumber: syz [ 784.880518][ T5084] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 784.894067][ T5084] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 785.244215][ T5084] usb 6-1: New USB device found, idVendor=2013, idProduct=0461, bcdDevice=f3.75 [ 785.253950][ T5084] usb 6-1: New USB device strings: Mfr=111, Product=248, SerialNumber=42 [ 785.262911][ T5084] usb 6-1: Product: syz [ 785.267285][ T5084] usb 6-1: Manufacturer: syz [ 785.272213][ T5084] usb 6-1: SerialNumber: syz [ 785.403643][ T5084] usb 6-1: config 0 descriptor?? [ 785.404327][ T5089] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 785.451345][ T5084] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2013:0461, interface 0, class 0) [ 785.461196][ T5084] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 785.521240][ T5089] usb 2-1: USB disconnect, device number 47 [ 785.619336][ T8376] udevd[8376]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 786.082571][ T5084] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 786.122877][ T5084] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 786.592554][ T5084] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 786.599687][ T5084] em28xx 6-1:0.0: No AC97 audio processor 17:18:34 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12014000246b9f401320610475f36ff82a010902fcff0000000000090400000113ac820009058301"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 17:18:34 executing program 3: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x7000) 17:18:34 executing program 4: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4042, 0x0) fcntl$getownex(r0, 0x10, 0x0) 17:18:34 executing program 1: syz_usb_connect$uac1(0x0, 0x93, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, "b7"}, @feature_unit={0xd, 0x24, 0x6, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x0, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 17:18:34 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:18:34 executing program 0: readlinkat(0xffffffffffffffff, &(0x7f0000001180)='./file0\x00', &(0x7f00000021c0)=""/29, 0x1d) [ 787.610295][ T5089] usb 6-1: USB disconnect, device number 35 [ 787.619332][ T5089] em28xx 6-1:0.0: Disconnecting em28xx [ 787.671483][ T5089] em28xx 6-1:0.0: Freeing device [ 787.771852][ T24] audit: type=1800 audit(1679505514.823:13): pid=10734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=1177 res=0 errno=0 17:18:34 executing program 3: pselect6(0x0, 0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000500)={0x0, 0x989680}, 0x0) 17:18:34 executing program 4: semget(0x1, 0x3, 0x126) 17:18:35 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="5a2be00069c864a1bd474d8e7e2ca96d58b2d74d7336a4ebf240b4455ac5c4b9e118eeadb2d00c7d84a5acb093700cae0e6851556a6a3e09cb241a5789689d15e863dd248d602f274656586736e1a5f9c6364bb3f651ce6fd220e23a50f69328c4c5888b802c6f0b0591c7f1f523a8a2f782f326a8cf66f92f722fac28386a2a29c76e49386382fcf94a0fa561228c76d55f2cc78f75c7d0b84d5958f6657489fc0bf35b08ee461b361400301d1c7a31269d0ae1a058b5bbf00849b87822e6cfa55d3bc0d9968087c17dcb5f41881f2804bb65caea90eacdaf88282a0ecb234d87ff29765c299b6b35c09c83e0ef6f3ada60a2c8e05217512500f13ba8ef32fa9d600493d0489dd99f9204421483ad277e1c865936339ce48ac8e74ae345125066828efbab591780b2f887f5c842a689012f6c7bf8da4eff4ad68b78e292f78d3a17fbd0d10e1e5d879afb5ccf10fe23849f84cc5bc45f1bbfc72f27d3b8c69c59921e41882283c302bec3addccf3c2d00", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:18:35 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000100), 0x2, 0x0) [ 788.072572][ T5084] usb 2-1: new high-speed USB device number 48 using dummy_hcd 17:18:35 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, 0x0) [ 788.313121][ T5084] usb 2-1: Using ep0 maxpacket: 8 [ 788.332412][ T5089] usb 6-1: new high-speed USB device number 36 using dummy_hcd 17:18:35 executing program 0: recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x11000, 0x0, 0x0) [ 788.433498][ T5084] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 788.442927][ T5084] usb 2-1: config 1 has no interface number 1 [ 788.449237][ T5084] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 788.462003][ T5084] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 788.713852][ T5084] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 788.723403][ T5084] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.731638][ T5084] usb 2-1: Product: syz [ 788.734080][ T5089] usb 6-1: config index 0 descriptor too short (expected 65532, got 27) [ 788.736162][ T5084] usb 2-1: Manufacturer: syz [ 788.744437][ T5089] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 788.749029][ T5084] usb 2-1: SerialNumber: syz [ 788.757512][ T5089] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 788.775160][ T5089] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 789.013744][ T5089] usb 6-1: New USB device found, idVendor=2013, idProduct=0461, bcdDevice=f3.75 [ 789.023413][ T5089] usb 6-1: New USB device strings: Mfr=111, Product=248, SerialNumber=42 [ 789.032214][ T5089] usb 6-1: Product: syz [ 789.036595][ T5089] usb 6-1: Manufacturer: syz [ 789.041404][ T5089] usb 6-1: SerialNumber: syz [ 789.143317][ T5089] usb 6-1: config 0 descriptor?? [ 789.210507][ T5089] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2013:0461, interface 0, class 0) [ 789.220218][ T5089] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 789.303351][ T5084] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 789.310983][ T5084] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 789.317560][ T5084] usb 2-1: 2:1 : invalid channels 0 [ 789.384680][ T5084] usb 2-1: USB disconnect, device number 48 [ 789.466385][ T8340] udevd[8340]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 789.863497][ T5089] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 789.903327][ T5089] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 790.392637][ T5089] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 790.404604][ T5089] em28xx 6-1:0.0: No AC97 audio processor 17:18:38 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12014000246b9f401320610475f36ff82a010902fcff0000000000090400000113ac820009058301"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 17:18:38 executing program 4: openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) 17:18:38 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:18:38 executing program 3: inotify_init1(0x43d9066c42864f27) 17:18:38 executing program 0: semget$private(0x0, 0x4, 0x62) 17:18:38 executing program 1: syz_usb_connect$uac1(0x0, 0x93, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, "b7"}, @feature_unit={0xd, 0x24, 0x6, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x0, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 791.405738][ T5084] usb 6-1: USB disconnect, device number 36 [ 791.441678][ T5084] em28xx 6-1:0.0: Disconnecting em28xx [ 791.533609][ T5084] em28xx 6-1:0.0: Freeing device 17:18:38 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000000)={0x0, 0x2710}, 0x10) 17:18:38 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:18:38 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, 0x0, 0x0) 17:18:38 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000040), 0x4) [ 791.837879][ T5099] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 792.082779][ T5099] usb 2-1: Using ep0 maxpacket: 8 17:18:39 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, 0x0) [ 792.192755][ T5084] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 792.205540][ T5099] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 792.215457][ T5099] usb 2-1: config 1 has no interface number 1 [ 792.221789][ T5099] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 792.231289][ T5099] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 17:18:39 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, 0x0) [ 792.543945][ T5099] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 792.556815][ T5099] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.565643][ T5099] usb 2-1: Product: syz [ 792.570030][ T5099] usb 2-1: Manufacturer: syz [ 792.575015][ T5099] usb 2-1: SerialNumber: syz [ 792.623955][ T5084] usb 6-1: config index 0 descriptor too short (expected 65532, got 27) [ 792.632937][ T5084] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 792.641296][ T5084] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 792.650788][ T5084] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 792.898896][ T5084] usb 6-1: New USB device found, idVendor=2013, idProduct=0461, bcdDevice=f3.75 [ 792.908546][ T5084] usb 6-1: New USB device strings: Mfr=111, Product=248, SerialNumber=42 [ 792.917810][ T5084] usb 6-1: Product: syz [ 792.922393][ T5084] usb 6-1: Manufacturer: syz [ 792.927203][ T5084] usb 6-1: SerialNumber: syz [ 792.984147][ T5084] usb 6-1: config 0 descriptor?? [ 793.031234][ T5084] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2013:0461, interface 0, class 0) [ 793.042021][ T5084] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 793.083760][ T5099] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 793.091507][ T5099] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 793.097995][ T5099] usb 2-1: 2:1 : invalid channels 0 [ 793.189476][ T5099] usb 2-1: USB disconnect, device number 49 [ 793.672797][ T5084] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 793.722802][ T5084] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 794.192888][ T5084] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 794.200084][ T5084] em28xx 6-1:0.0: No AC97 audio processor 17:18:42 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12014000246b9f401320610475f36ff82a010902fcff0000000000090400000113ac820009058301"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 17:18:42 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$sock_void(r0, 0x1, 0x0, 0x0, 0x0) 17:18:42 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, 0x0) 17:18:42 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x0, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:18:42 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x43, 0x0, 0x0) 17:18:42 executing program 1: syz_usb_connect$uac1(0x0, 0x93, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, "b7"}, @feature_unit={0xd, 0x24, 0x6, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x0, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 795.218480][ T5084] usb 6-1: USB disconnect, device number 37 [ 795.227361][ T5084] em28xx 6-1:0.0: Disconnecting em28xx [ 795.249585][ T5084] em28xx 6-1:0.0: Freeing device 17:18:42 executing program 3: semget$private(0x0, 0x2, 0x401) 17:18:42 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, 0x0) 17:18:42 executing program 0: statx(0xffffffffffffffff, &(0x7f0000003600)='./file0\x00', 0x0, 0x0, 0x0) 17:18:42 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x0, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) [ 795.702505][ T5089] usb 2-1: new high-speed USB device number 50 using dummy_hcd 17:18:43 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$P9_RMKNOD(r0, 0x0, 0x0) [ 795.953132][ T5089] usb 2-1: Using ep0 maxpacket: 8 17:18:43 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0xe41, 0xe3) [ 795.982731][ T5099] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 796.083555][ T5089] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 796.093502][ T5089] usb 2-1: config 1 has no interface number 1 [ 796.099849][ T5089] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 796.109391][ T5089] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 796.343519][ T5099] usb 6-1: config index 0 descriptor too short (expected 65532, got 27) [ 796.352735][ T5099] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 796.361058][ T5099] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 796.361951][ T5089] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 796.370278][ T5099] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 796.379327][ T5089] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.399088][ T5089] usb 2-1: Product: syz [ 796.403556][ T5089] usb 2-1: Manufacturer: syz [ 796.408387][ T5089] usb 2-1: SerialNumber: syz [ 796.633810][ T5099] usb 6-1: New USB device found, idVendor=2013, idProduct=0461, bcdDevice=f3.75 [ 796.643527][ T5099] usb 6-1: New USB device strings: Mfr=111, Product=248, SerialNumber=42 [ 796.655658][ T5099] usb 6-1: Product: syz [ 796.660059][ T5099] usb 6-1: Manufacturer: syz [ 796.665379][ T5099] usb 6-1: SerialNumber: syz [ 796.792329][ T5099] usb 6-1: config 0 descriptor?? [ 796.854192][ T5099] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2013:0461, interface 0, class 0) [ 796.864451][ T5099] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 796.893545][ T5089] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 796.901236][ T5089] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 796.907755][ T5089] usb 2-1: 2:1 : invalid channels 0 [ 796.981489][ T5089] usb 2-1: USB disconnect, device number 50 [ 797.049979][ T8340] udevd[8340]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 797.512736][ T5099] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 797.552758][ T5099] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 798.024174][ T5099] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 798.031378][ T5099] em28xx 6-1:0.0: No AC97 audio processor 17:18:46 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12014000246b9f401320610475f36ff82a010902fcff0000000000090400000113ac820009058301"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 17:18:46 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x0, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:18:46 executing program 4: r0 = semget$private(0x0, 0x7, 0x0) semctl$GETVAL(r0, 0x3, 0xc, &(0x7f0000000280)=""/4096) 17:18:46 executing program 3: semget$private(0x0, 0x3, 0x408) 17:18:46 executing program 0: semget$private(0x0, 0x2, 0x4d) 17:18:46 executing program 1: syz_usb_connect$uac1(0x0, 0x93, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, "b7"}, @feature_unit={0xd, 0x24, 0x6, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x1}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x0, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 799.035331][ T5090] usb 6-1: USB disconnect, device number 38 [ 799.094013][ T5090] em28xx 6-1:0.0: Disconnecting em28xx [ 799.111604][ T5090] em28xx 6-1:0.0: Freeing device 17:18:46 executing program 4: syz_mount_image$fuse(0x0, &(0x7f00000010c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000001300)='./file0\x00', 0x0, 0x0, &(0x7f0000001440)) 17:18:46 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="5a2be00069c864a1bd474d8e7e2ca96d58b2d74d7336a4ebf240b4455ac5c4b9e118eeadb2d00c7d84a5acb093700cae0e6851556a6a3e09cb241a5789689d15e863dd248d602f274656586736e1a5f9c6364bb3f651ce6fd220e23a50f69328c4c5888b802c6f0b0591c7f1f523a8a2f782f326a8cf66f92f722fac28386a2a29c76e49386382fcf94a0fa561228c76d55f2cc78f75c7d0b84d5958f6657489fc0bf35b08ee461b361400301d1c7a31269d0ae1a058b5bbf00849b87822e6cfa55d3bc0d9968087c17dcb5f41881f2804bb65caea90eacdaf88282a0ecb234d87ff29765c299b6b35c09c83e0ef6f3ada60a2c8e05217512500f13ba8ef32fa9d600493d0489dd99f9204421483ad277e1c865936339ce48ac8e74ae345125066828efbab591780b2f887f5c842a689012f6c7bf8da4eff4ad68b78e292f78d3a17fbd0d10e1e5d879afb5ccf10fe23849f84cc5bc45f1bbfc72f27d3b8c69c59921e41882283c302bec3addccf3c2d00", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:18:46 executing program 3: pipe(&(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x0) 17:18:46 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) [ 799.442613][ T5099] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 799.682822][ T5099] usb 2-1: Using ep0 maxpacket: 8 [ 799.736792][ T5089] usb 6-1: new high-speed USB device number 39 using dummy_hcd 17:18:46 executing program 4: semget$private(0x0, 0x4, 0x4e3) [ 799.802893][ T5099] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 799.812326][ T5099] usb 2-1: config 1 has no interface number 1 [ 799.822683][ T5099] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 799.831988][ T5099] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 799.843347][ T5099] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 17:18:46 executing program 0: pipe2$9p(&(0x7f0000000300), 0x80800) [ 800.153491][ T5089] usb 6-1: config index 0 descriptor too short (expected 65532, got 27) [ 800.162468][ T5089] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 800.170794][ T5089] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 800.173848][ T5099] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 800.181593][ T5089] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 800.189132][ T5099] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.208552][ T5099] usb 2-1: Product: syz [ 800.213222][ T5099] usb 2-1: Manufacturer: syz [ 800.218039][ T5099] usb 2-1: SerialNumber: syz [ 800.513423][ T5089] usb 6-1: New USB device found, idVendor=2013, idProduct=0461, bcdDevice=f3.75 [ 800.523012][ T5089] usb 6-1: New USB device strings: Mfr=111, Product=248, SerialNumber=42 [ 800.531729][ T5089] usb 6-1: Product: syz [ 800.539634][ T5089] usb 6-1: Manufacturer: syz [ 800.544883][ T5089] usb 6-1: SerialNumber: syz [ 800.575269][ T5089] usb 6-1: config 0 descriptor?? [ 800.619847][ T5089] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2013:0461, interface 0, class 0) [ 800.629531][ T5089] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 800.833104][ T5099] usb 2-1: USB disconnect, device number 51 [ 800.903454][ T8376] udevd[8376]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 801.272806][ T5089] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 801.312906][ T5089] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 801.363021][ T5089] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 801.370299][ T5089] em28xx 6-1:0.0: No AC97 audio processor 17:18:49 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12014000246b9f401320610475f36ff82a010902fcff0000000000090400000113ac820009058301"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 17:18:49 executing program 3: syz_clone(0x11001800, 0x0, 0x0, 0x0, 0x0, 0x0) 17:18:49 executing program 4: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x1000) 17:18:49 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:18:49 executing program 0: syz_mount_image$fuse(&(0x7f0000000440), 0x0, 0x1000008, &(0x7f0000002500)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xee00}}, 0x0, 0x0, 0x0) 17:18:49 executing program 1: syz_usb_connect$uac1(0x0, 0x93, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, "b7"}, @feature_unit={0xd, 0x24, 0x6, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x1}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x0, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 802.393981][ T5099] usb 6-1: USB disconnect, device number 39 [ 802.413056][ T5099] em28xx 6-1:0.0: Disconnecting em28xx [ 802.486521][ T5099] em28xx 6-1:0.0: Freeing device 17:18:49 executing program 0: r0 = semget$private(0x0, 0x2, 0x0) semctl$SEM_INFO(r0, 0x0, 0x13, &(0x7f0000000040)=""/100) 17:18:49 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:18:49 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0) 17:18:49 executing program 4: openat$null(0xffffffffffffff9c, &(0x7f0000004000), 0x100, 0x0) [ 802.898494][ T5089] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 803.132745][ T5099] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 803.142908][ T5089] usb 2-1: Using ep0 maxpacket: 8 17:18:50 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x0, 0x0}) 17:18:50 executing program 4: pipe(&(0x7f0000002100)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) [ 803.264025][ T5089] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 803.273341][ T5089] usb 2-1: config 1 has no interface number 1 [ 803.279658][ T5089] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 803.289075][ T5089] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 803.300272][ T5089] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 803.500133][ T5099] usb 6-1: config index 0 descriptor too short (expected 65532, got 27) [ 803.512615][ T5099] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 803.520961][ T5099] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 803.530265][ T5099] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 803.615371][ T5089] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 803.625127][ T5089] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.633629][ T5089] usb 2-1: Product: syz [ 803.638007][ T5089] usb 2-1: Manufacturer: syz [ 803.642914][ T5089] usb 2-1: SerialNumber: syz [ 803.773644][ T5099] usb 6-1: New USB device found, idVendor=2013, idProduct=0461, bcdDevice=f3.75 [ 803.783367][ T5099] usb 6-1: New USB device strings: Mfr=111, Product=248, SerialNumber=42 [ 803.792047][ T5099] usb 6-1: Product: syz [ 803.796613][ T5099] usb 6-1: Manufacturer: syz [ 803.801418][ T5099] usb 6-1: SerialNumber: syz [ 803.852621][ T5099] usb 6-1: config 0 descriptor?? [ 803.901444][ T5099] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2013:0461, interface 0, class 0) [ 803.911379][ T5099] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 804.196220][ T5089] usb 2-1: USB disconnect, device number 52 [ 804.295321][ T8376] udevd[8376]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 804.533038][ T5099] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 804.581844][ T5099] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 804.623007][ T5099] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 804.630205][ T5099] em28xx 6-1:0.0: No AC97 audio processor 17:18:52 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12014000246b9f401320610475f36ff82a010902fcff0000000000090400000113ac820009058301"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 17:18:52 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0), 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="5a2be00069c864a1bd474d8e7e2ca96d58b2d74d7336a4ebf240b4455ac5c4b9e118eeadb2d00c7d84a5acb093700cae0e6851556a6a3e09cb241a5789689d15e863dd248d602f274656586736e1a5f9c6364bb3f651ce6fd220e23a50f69328c4c5888b802c6f0b0591c7f1f523a8a2f782f326a8cf66f92f722fac28386a2a29c76e49386382fcf94a0fa561228c76d55f2cc78f75c7d0b84d5958f6657489fc0bf35b08ee461b361400301d1c7a31269d0ae1a058b5bbf00849b87822e6cfa55d3bc0d9968087c17dcb5f41881f2804bb65caea90eacdaf88282a0ecb234d87ff29765c299b6b35c09c83e0ef6f3ada60a2c8e05217512500f13ba8ef32fa9d600493d0489dd99f9204421483ad277e1c865936339ce48ac8e74ae345125066828efbab591780b2f887f5c842a689012f6c7bf8da4eff4ad68b78e292f78d3a17fbd0d10e1e5d879afb5ccf10fe23849f84cc5bc45f1bbfc72f27d3b8c69c59921e41882283c302bec3addccf3c2d00", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:18:52 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0x0, 0x0, 0x0) 17:18:52 executing program 4: syz_mount_image$fuse(0x0, &(0x7f00000010c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000001300)='./file0\x00', 0x100, 0x20, &(0x7f0000001440)) 17:18:52 executing program 0: r0 = msgget$private(0x0, 0x0) msgctl$IPC_STAT(r0, 0x2, 0x0) r1 = msgget$private(0x0, 0x0) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000100)=""/15) msgget(0x0, 0x68a) msgget$private(0x0, 0x4) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000140)=""/103) r2 = msgget$private(0x0, 0x0) msgctl$IPC_INFO(r2, 0x3, &(0x7f0000000100)=""/15) msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000080)=""/56) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000000)=""/84) msgget(0x2, 0x0) 17:18:52 executing program 1: syz_usb_connect$uac1(0x0, 0x93, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, "b7"}, @feature_unit={0xd, 0x24, 0x6, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x1}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x0, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 805.707034][ T5099] usb 6-1: USB disconnect, device number 40 [ 805.720744][ T5099] em28xx 6-1:0.0: Disconnecting em28xx [ 805.747852][ T5099] em28xx 6-1:0.0: Freeing device 17:18:53 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0), 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="5a2be00069c864a1bd474d8e7e2ca96d58b2d74d7336a4ebf240b4455ac5c4b9e118eeadb2d00c7d84a5acb093700cae0e6851556a6a3e09cb241a5789689d15e863dd248d602f274656586736e1a5f9c6364bb3f651ce6fd220e23a50f69328c4c5888b802c6f0b0591c7f1f523a8a2f782f326a8cf66f92f722fac28386a2a29c76e49386382fcf94a0fa561228c76d55f2cc78f75c7d0b84d5958f6657489fc0bf35b08ee461b361400301d1c7a31269d0ae1a058b5bbf00849b87822e6cfa55d3bc0d9968087c17dcb5f41881f2804bb65caea90eacdaf88282a0ecb234d87ff29765c299b6b35c09c83e0ef6f3ada60a2c8e05217512500f13ba8ef32fa9d600493d0489dd99f9204421483ad277e1c865936339ce48ac8e74ae345125066828efbab591780b2f887f5c842a689012f6c7bf8da4eff4ad68b78e292f78d3a17fbd0d10e1e5d879afb5ccf10fe23849f84cc5bc45f1bbfc72f27d3b8c69c59921e41882283c302bec3addccf3c2d00", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:18:53 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0x4b4d, &(0x7f0000000000)) 17:18:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID(r2, 0xaea2, &(0x7f0000000140)) 17:18:53 executing program 4: socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000100), 0xffffffffffffff5d, 0x0, 0x0, 0x429) recvfrom$unix(r1, &(0x7f0000000080)=""/252, 0x50000, 0x0, 0x0, 0x0) sendto$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) getpgrp(0x0) fstat(0xffffffffffffffff, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_open(r2, 0x0) getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) r3 = getegid() setfsgid(r3) lstat(0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000003f80)) stat(&(0x7f0000003fc0)='./file0\x00', 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000004080), 0x4000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) ptrace$setsig(0x4203, r4, 0x20, &(0x7f0000000200)={0xe, 0x3, 0x1f}) pipe2$9p(&(0x7f00000040c0), 0x800) openat$procfs(0xffffffffffffff9c, &(0x7f0000004100)='/proc/consoles\x00', 0x0, 0x0) lstat(&(0x7f0000004140)='\x00', &(0x7f0000004180)) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) [ 806.202505][ T5084] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 806.442651][ T5084] usb 2-1: Using ep0 maxpacket: 8 [ 806.473747][ T5090] usb 6-1: new high-speed USB device number 41 using dummy_hcd 17:18:53 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0), 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="5a2be00069c864a1bd474d8e7e2ca96d58b2d74d7336a4ebf240b4455ac5c4b9e118eeadb2d00c7d84a5acb093700cae0e6851556a6a3e09cb241a5789689d15e863dd248d602f274656586736e1a5f9c6364bb3f651ce6fd220e23a50f69328c4c5888b802c6f0b0591c7f1f523a8a2f782f326a8cf66f92f722fac28386a2a29c76e49386382fcf94a0fa561228c76d55f2cc78f75c7d0b84d5958f6657489fc0bf35b08ee461b361400301d1c7a31269d0ae1a058b5bbf00849b87822e6cfa55d3bc0d9968087c17dcb5f41881f2804bb65caea90eacdaf88282a0ecb234d87ff29765c299b6b35c09c83e0ef6f3ada60a2c8e05217512500f13ba8ef32fa9d600493d0489dd99f9204421483ad277e1c865936339ce48ac8e74ae345125066828efbab591780b2f887f5c842a689012f6c7bf8da4eff4ad68b78e292f78d3a17fbd0d10e1e5d879afb5ccf10fe23849f84cc5bc45f1bbfc72f27d3b8c69c59921e41882283c302bec3addccf3c2d00", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:18:53 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001140)=[{&(0x7f0000000140)="bac961fa41eb70483e6f54b15dabff9f523f6b1f97a81ae7cb3d6470be9662efeb4d39009ed6c166071d986013426967fbf1599d7563c39d7b749e60bec548411e2a299ee3315b7c5e1455a8c2fcef7fb793416f510c40176c44bcb0eaacf34dba62b38f39416669215b8c5a85e26f3a55a2e5cea84afb06e1181788ac26b9a80635c6a725ec8949d35c641cbec9d78c92f13135178a1706fdacb2393bde46cc9d2e4247c3ed5668a2269e325153d594480299c6256a9e89b4f2c23fba7ae0dd68d7edc30ea0681b3d", 0xc9}], 0x1) [ 806.563601][ T5084] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 806.573746][ T5084] usb 2-1: config 1 has no interface number 1 [ 806.580097][ T5084] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 806.589650][ T5084] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 806.600901][ T5084] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 806.888531][ T5090] usb 6-1: config index 0 descriptor too short (expected 65532, got 27) [ 806.897573][ T5090] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 806.906027][ T5090] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 806.915230][ T5090] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 807.034102][ T5084] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 807.043740][ T5084] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.051988][ T5084] usb 2-1: Product: syz [ 807.057431][ T5084] usb 2-1: Manufacturer: syz [ 807.062400][ T5084] usb 2-1: SerialNumber: syz [ 807.213658][ T5090] usb 6-1: New USB device found, idVendor=2013, idProduct=0461, bcdDevice=f3.75 [ 807.223274][ T5090] usb 6-1: New USB device strings: Mfr=111, Product=248, SerialNumber=42 [ 807.231945][ T5090] usb 6-1: Product: syz [ 807.236474][ T5090] usb 6-1: Manufacturer: syz [ 807.241278][ T5090] usb 6-1: SerialNumber: syz [ 807.425042][ T5090] usb 6-1: config 0 descriptor?? [ 807.504495][ T5090] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2013:0461, interface 0, class 0) [ 807.514251][ T5090] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 807.701579][ T5084] usb 2-1: USB disconnect, device number 53 [ 807.887215][ T8376] udevd[8376]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 808.143311][ T5090] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 808.182913][ T5090] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 808.233444][ T5090] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 808.240651][ T5090] em28xx 6-1:0.0: No AC97 audio processor 17:18:56 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12014000246b9f401320610475f36ff82a010902fcff0000000000090400000113ac820009058301"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 17:18:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) 17:18:56 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001140)=[{&(0x7f0000000140)="bac961fa41eb70483e6f54b15dabff9f523f6b1f97a81ae7cb3d6470be9662efeb4d39009ed6c166071d986013426967fbf1599d7563c39d7b749e60bec548411e2a299ee3315b7c5e1455a8c2fcef7fb793416f510c40176c44bcb0eaacf34dba62b38f39416669215b8c5a85e26f3a55a2e5cea84afb06e1181788ac26b9a80635c6a725ec8949d35c641cbec9d78c92f13135178a1706fdacb2393bde46cc9d2e4247c3ed5668a2269e325153d594480299c6256a9e89b4f2c23fba7ae0dd68d7edc30ea0681b3d", 0xc9}], 0x1) 17:18:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4004ae8b, &(0x7f0000000140)) 17:18:56 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:18:56 executing program 1: fsopen(&(0x7f0000000640)='hfs\x00', 0x0) [ 809.258526][ T5084] usb 6-1: USB disconnect, device number 41 [ 809.267302][ T5084] em28xx 6-1:0.0: Disconnecting em28xx [ 809.325927][ T5084] em28xx 6-1:0.0: Freeing device 17:18:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4188aea7, &(0x7f0000000140)={0x0, 0x2}) 17:18:56 executing program 1: syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='mode=00000000003,\x00'], 0x4, 0x4a4, &(0x7f0000000a40)="$eJzs20tsG1UXwPFzPLbruPk+nDSkLaqKJZAILU2TOKStgoTyIAKpbSBpQFQ8FGInmDhxFKeQVC3NEtix6JIlWxasEFtUiSVigYJQd6UbNl5RdkV3PC+7eTgk8TTN/1e1d2Z87N57j8f3XCsRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMvjaQFe3ht0LAADQSJfHx7oyrP8AABwoV9j/AwAAHCQqlvwhKmdmy3rJPq9IXMzPX1ueGB5Z/2lNKioRsex48zfR3ZPpfbnv3Hm33fz5u+24jI5fGUgPFecWFnOlUi6bnpjPTxWzubpfYafPr3XKnoD03Oy17PR0Kd3Tmal6eDl1/9Dh9lR/3/tDcTd2YnhkZDwQE4395//9ERtV+HGx5EVR+eSH7/SyiERk53OxxXtnrzXZgzhlD2JieMQeSCE/Ob9kHtSIExWpnpO4O0cNyMWORERMvzS+O3u2mFjyo6gMni3rqIhY7jyctr8Yrqs/YYiarauIdMg+yNlj7JBY8qGo3DmbkjedebXzHxe5EXbnsOeizv1f1LK+ZX8emPvJfGxefDv9xvx0MRCrEeeO2u/rQyM95p9NCbFk1L7jyzoWdmfQcE1iyZyoxL/+1K4rxK5Ln+o/d/LZC8EK4+gWr2NiO52bq541OeaUDhoxf3Z/XKhPQi35U1Qe/J6wzzvcNUBk9WG4XUMjqCUFUfnnZlm1Zl9qBfb3nv2+9u9t/5sSQ8WFlcX8zMdL6z6eTAx8VFpanJxa/+HK3tUKXtlqH1srsr0tWVIrO74vPit7z3P2AP+rnPm9+faG/17oqGldwfdPPcd172K3UUeZPqlack9Upj84VllnJLntuTkITP5HRKVU/kXdTDv5j1bOAvl/xZ+/hFa3Hju3/698r+XWEsevtm10fS/yb/pk8v+uqAz+fcz5TqOSf6sm1sS1i8p7t084cZG4iYu6w6m84nS+kOsysQ9FpfVnN1bs2KQTe8SP7TaxJVH58k517GEnts2P7TGxa6Jy97f1Y5/2YzMmdsXk627ajU2a2JNObLsf2zlVLGS3mlaT/x5ReefW6+qOecP8B+7/1ZrW80jONz/erfynAtdWnbxedfIf3SL/X4nKyl8n3HHbc+++rVrsf/38m1r5+9vVse6GstWP7a53WGEz+W8RlfuvrnljdsbmnPoZCub/mWh1681rSPlvCVxLOf2Kb3MuDqLSyvXZyUIht8gBBxxw4B2E/cmERjDr/5hZ1fssdesYZ/1vrpz5FdODz/31v7+m9YS0/rcGrvU7VUssKpJYmluIHRVJlFaun8nPTc7kZnLzmd6+rp4LvV2Z87G4W9z5R3XP3ZPA5P+0qNz86VdvH1Nd/61f/ydrWk9I+T8SHFNVXVP3VBxIJv/NotJ3b83bb25W/7v7/47nqlvv/gsp/22BaymnX83bnAsAAAAAAAAAAAAAAAAA2E+SasnzorI89pK6v0NUz8//ZWtaT0g//9UeuJZt0O811D3JAAAAAAAAAAAADRQRS74RlRekrLfMhWaRS8EWT7R/AwAA///zSUb4") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x147042, 0x0) ftruncate(r1, 0x2007fff) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) close(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1145042, 0x0) sendfile(r3, r2, 0x0, 0x800000a1) 17:18:56 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:18:56 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001140)=[{&(0x7f0000000140)="bac961fa41eb70483e6f54b15dabff9f523f6b1f97a81ae7cb3d6470be9662efeb4d39009ed6c166071d986013426967fbf1599d7563c39d7b749e60bec548411e2a299ee3315b7c5e1455a8c2fcef7fb793416f510c40176c44bcb0eaacf34dba62b38f39416669215b8c5a85e26f3a55a2e5cea84afb06e1181788ac26b9a80635c6a725ec8949d35c641cbec9d78c92f13135178a1706fdacb2393bde46cc9d2e4247c3ed5668a2269e325153d594480299c6256a9e89b4f2c23fba7ae0dd68d7edc30ea0681b3d", 0xc9}], 0x1) 17:18:56 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f00000012c0)=""/172) 17:18:57 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001140)=[{&(0x7f0000000140)="bac961fa41eb70483e6f54b15dabff9f523f6b1f97a81ae7cb3d6470be9662efeb4d39009ed6c166071d986013426967fbf1599d7563c39d7b749e60bec548411e2a299ee3315b7c5e1455a8c2fcef7fb793416f510c40176c44bcb0eaacf34dba62b38f39416669215b8c5a85e26f3a55a2e5cea84afb06e1181788ac26b9a80635c6a725ec8949d35c641cbec9d78c92f13135178a1706fdacb2393bde46cc9d2e4247c3ed5668a2269e325153d594480299c6256a9e89b4f2c23fba7ae0dd68d7edc30ea0681b3d", 0xc9}], 0x1) [ 810.003060][ T5099] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 810.040981][T10919] loop1: detected capacity change from 0 to 128 [ 810.205423][T10919] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 810.275254][T10919] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 810.363788][ T5099] usb 6-1: config index 0 descriptor too short (expected 65532, got 27) [ 810.372571][ T5099] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 810.372693][ T5099] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 810.372833][ T5099] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 810.537465][ T5099] usb 6-1: New USB device found, idVendor=2013, idProduct=0461, bcdDevice=f3.75 [ 810.554127][ T5099] usb 6-1: New USB device strings: Mfr=111, Product=248, SerialNumber=42 [ 810.563015][ T5099] usb 6-1: Product: syz [ 810.567429][ T5099] usb 6-1: Manufacturer: syz [ 810.575748][ T5099] usb 6-1: SerialNumber: syz [ 810.651401][ T5099] usb 6-1: config 0 descriptor?? [ 810.702884][ T5099] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2013:0461, interface 0, class 0) [ 810.712582][ T5099] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 811.342549][ T5099] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 811.394072][ T5099] em28xx 6-1:0.0: Config register raw data: 0x00 17:18:59 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12014000246b9f401320610475f36ff82a010902fcff0000000000090400000113ac820009058301"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 17:18:59 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:18:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) openat$bsg(0xffffffffffffff9c, 0x0, 0x200000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000080)="66b8000001000f23c00f21f86635030002000f23f8360f01c326d88c2b00360f2111d0dc26640fc76b00660f3882420dbad104b80200ef660f380672d2b8fc008ec0", 0x42}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:18:59 executing program 4: r0 = syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='mode=00000000003,\x00'], 0x4, 0x4a4, &(0x7f0000000a40)="$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") r1 = open(&(0x7f0000000040)='./bus\x00', 0x147042, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 17:18:59 executing program 0: writev(0xffffffffffffffff, &(0x7f0000001140)=[{&(0x7f0000000140)="bac961fa41eb70483e6f54b15dabff9f523f6b1f97a81ae7cb3d6470be9662efeb4d39009ed6c166071d986013426967fbf1599d7563c39d7b749e60bec548411e2a299ee3315b7c5e1455a8c2fcef7fb793416f510c40176c44bcb0eaacf34dba62b38f39416669215b8c5a85e26f3a55a2e5cea84afb06e1181788ac26b9a80635c6a725ec8949d35c641cbec9d78c92f13135178a1706fdacb2393bde46cc9d2e4247c3ed5668a2269e325153d594480299c6256a9e89b4f2c23fba7ae0dd68d7edc30ea0681b3d", 0xc9}], 0x1) 17:18:59 executing program 1: syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='mode=00000000003,\x00'], 0x4, 0x4a4, &(0x7f0000000a40)="$eJzs20tsG1UXwPFzPLbruPk+nDSkLaqKJZAILU2TOKStgoTyIAKpbSBpQFQ8FGInmDhxFKeQVC3NEtix6JIlWxasEFtUiSVigYJQd6UbNl5RdkV3PC+7eTgk8TTN/1e1d2Z87N57j8f3XCsRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMvjaQFe3ht0LAADQSJfHx7oyrP8AABwoV9j/AwAAHCQqlvwhKmdmy3rJPq9IXMzPX1ueGB5Z/2lNKioRsex48zfR3ZPpfbnv3Hm33fz5u+24jI5fGUgPFecWFnOlUi6bnpjPTxWzubpfYafPr3XKnoD03Oy17PR0Kd3Tmal6eDl1/9Dh9lR/3/tDcTd2YnhkZDwQE4395//9ERtV+HGx5EVR+eSH7/SyiERk53OxxXtnrzXZgzhlD2JieMQeSCE/Ob9kHtSIExWpnpO4O0cNyMWORERMvzS+O3u2mFjyo6gMni3rqIhY7jyctr8Yrqs/YYiarauIdMg+yNlj7JBY8qGo3DmbkjedebXzHxe5EXbnsOeizv1f1LK+ZX8emPvJfGxefDv9xvx0MRCrEeeO2u/rQyM95p9NCbFk1L7jyzoWdmfQcE1iyZyoxL/+1K4rxK5Ln+o/d/LZC8EK4+gWr2NiO52bq541OeaUDhoxf3Z/XKhPQi35U1Qe/J6wzzvcNUBk9WG4XUMjqCUFUfnnZlm1Zl9qBfb3nv2+9u9t/5sSQ8WFlcX8zMdL6z6eTAx8VFpanJxa/+HK3tUKXtlqH1srsr0tWVIrO74vPit7z3P2AP+rnPm9+faG/17oqGldwfdPPcd172K3UUeZPqlack9Upj84VllnJLntuTkITP5HRKVU/kXdTDv5j1bOAvl/xZ+/hFa3Hju3/698r+XWEsevtm10fS/yb/pk8v+uqAz+fcz5TqOSf6sm1sS1i8p7t084cZG4iYu6w6m84nS+kOsysQ9FpfVnN1bs2KQTe8SP7TaxJVH58k517GEnts2P7TGxa6Jy97f1Y5/2YzMmdsXk627ajU2a2JNObLsf2zlVLGS3mlaT/x5ReefW6+qOecP8B+7/1ZrW80jONz/erfynAtdWnbxedfIf3SL/X4nKyl8n3HHbc+++rVrsf/38m1r5+9vVse6GstWP7a53WGEz+W8RlfuvrnljdsbmnPoZCub/mWh1681rSPlvCVxLOf2Kb3MuDqLSyvXZyUIht8gBBxxw4B2E/cmERjDr/5hZ1fssdesYZ/1vrpz5FdODz/31v7+m9YS0/rcGrvU7VUssKpJYmluIHRVJlFaun8nPTc7kZnLzmd6+rp4LvV2Z87G4W9z5R3XP3ZPA5P+0qNz86VdvH1Nd/61f/ydrWk9I+T8SHFNVXVP3VBxIJv/NotJ3b83bb25W/7v7/47nqlvv/gsp/22BaymnX83bnAsAAAAAAAAAAAAAAAAA2E+SasnzorI89pK6v0NUz8//ZWtaT0g//9UeuJZt0O811D3JAAAAAAAAAAAADRQRS74RlRekrLfMhWaRS8EWT7R/AwAA///zSUb4") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x147042, 0x0) ftruncate(r1, 0x2007fff) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) close(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1145042, 0x0) sendfile(r3, r2, 0x0, 0x800000a1) [ 812.645001][ T5099] usb 6-1: USB disconnect, device number 42 [ 812.655071][ T5099] em28xx 6-1:0.0: Disconnecting em28xx [ 812.734876][ T5099] em28xx 6-1:0.0: Freeing device 17:18:59 executing program 0: writev(0xffffffffffffffff, &(0x7f0000001140)=[{&(0x7f0000000140)="bac961fa41eb70483e6f54b15dabff9f523f6b1f97a81ae7cb3d6470be9662efeb4d39009ed6c166071d986013426967fbf1599d7563c39d7b749e60bec548411e2a299ee3315b7c5e1455a8c2fcef7fb793416f510c40176c44bcb0eaacf34dba62b38f39416669215b8c5a85e26f3a55a2e5cea84afb06e1181788ac26b9a80635c6a725ec8949d35c641cbec9d78c92f13135178a1706fdacb2393bde46cc9d2e4247c3ed5668a2269e325153d594480299c6256a9e89b4f2c23fba7ae0dd68d7edc30ea0681b3d", 0xc9}], 0x1) 17:19:00 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, 0x0, 0x0, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) [ 812.915339][T10940] loop4: detected capacity change from 0 to 128 [ 812.924672][T10941] loop1: detected capacity change from 0 to 128 [ 813.040135][T10941] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 813.065936][T10940] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 813.118064][T10940] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 813.160893][T10941] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 813.201636][ T24] audit: type=1800 audit(1679505540.253:14): pid=10940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=115 res=0 errno=0 17:19:00 executing program 3: syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='mode=00000000003,\x00'], 0x4, 0x4a4, &(0x7f0000000a40)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x147042, 0x0) ftruncate(r1, 0x2007fff) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) close(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1145042, 0x0) sendfile(r3, r2, 0x0, 0x800000a1) [ 813.302840][ T5099] usb 6-1: new high-speed USB device number 43 using dummy_hcd 17:19:00 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001140)=[{&(0x7f0000000080)="2e70798c4035f09d5ca72db3515985a08f3c8143ec5f8d50527efbeea8a581049eefddcb8d09b9fcabf34badff92ac2b8a9f1c2bb14d1e79374f108a9f56c620347aedd202279db233bb42902d5f6e5548a20d2324ba632ebc6e70466f8ce2a456784475d79de38f5bab6304c21d16feae27e7908736c603ba51c0c5ec2f29be9ff0483f0fe03ec3289731c5f52d1b0c7b01d30a", 0x94}], 0x1) 17:19:00 executing program 0: writev(0xffffffffffffffff, &(0x7f0000001140)=[{&(0x7f0000000140)="bac961fa41eb70483e6f54b15dabff9f523f6b1f97a81ae7cb3d6470be9662efeb4d39009ed6c166071d986013426967fbf1599d7563c39d7b749e60bec548411e2a299ee3315b7c5e1455a8c2fcef7fb793416f510c40176c44bcb0eaacf34dba62b38f39416669215b8c5a85e26f3a55a2e5cea84afb06e1181788ac26b9a80635c6a725ec8949d35c641cbec9d78c92f13135178a1706fdacb2393bde46cc9d2e4247c3ed5668a2269e325153d594480299c6256a9e89b4f2c23fba7ae0dd68d7edc30ea0681b3d", 0xc9}], 0x1) 17:19:00 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, 0x0, 0x0, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) [ 813.662833][ T5099] usb 6-1: config index 0 descriptor too short (expected 65532, got 27) [ 813.671563][ T5099] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 813.680112][ T5099] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 813.689584][ T5099] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 813.882863][T10956] loop3: detected capacity change from 0 to 128 [ 813.925244][T10956] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 813.964511][T10956] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 814.017325][ T5099] usb 6-1: New USB device found, idVendor=2013, idProduct=0461, bcdDevice=f3.75 [ 814.017473][ T5099] usb 6-1: New USB device strings: Mfr=111, Product=248, SerialNumber=42 [ 814.017593][ T5099] usb 6-1: Product: syz [ 814.017680][ T5099] usb 6-1: Manufacturer: syz [ 814.017771][ T5099] usb 6-1: SerialNumber: syz [ 814.023775][ T5099] usb 6-1: config 0 descriptor?? [ 814.070536][ T5099] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2013:0461, interface 0, class 0) [ 814.070709][ T5099] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 814.713166][ T5099] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 814.752934][ T5099] em28xx 6-1:0.0: Config register raw data: 0x00 17:19:03 executing program 3: syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='mode=00000000003,\x00'], 0x4, 0x4a4, &(0x7f0000000a40)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x147042, 0x0) ftruncate(r1, 0x2007fff) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) close(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1145042, 0x0) sendfile(r3, r2, 0x0, 0x800000a1) [ 815.986153][ T5099] usb 6-1: USB disconnect, device number 43 [ 815.995082][ T5099] em28xx 6-1:0.0: Disconnecting em28xx 17:19:03 executing program 1: syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='mode=00000000003,\x00'], 0x4, 0x4a4, &(0x7f0000000a40)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x147042, 0x0) ftruncate(r1, 0x2007fff) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) close(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1145042, 0x0) sendfile(r3, r2, 0x0, 0x800000a1) 17:19:03 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, 0x0, 0x0, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:19:03 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001140)=[{&(0x7f0000000080)="2e70798c4035f09d5ca72db3515985a08f3c8143ec5f8d50527efbeea8a581049eefddcb8d09b9fcabf34badff92ac2b8a9f1c2bb14d1e79374f108a9f56c620347aedd202279db233bb42902d5f6e5548a20d2324ba632ebc6e70466f8ce2a456784475d79de38f5bab6304c21d16feae27e7908736c603ba51c0c5ec2f29be9ff0483f0fe03ec3289731c5f52d1b0c7b01d30a", 0x94}], 0x1) 17:19:03 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001140)=[{&(0x7f0000000140)="bac961fa41eb70483e6f54b15dabff9f523f6b1f97a81ae7cb3d6470be9662efeb4d39009ed6c166071d986013426967fbf1599d7563c39d7b749e60bec548411e2a299ee3315b7c5e1455a8c2fcef7fb793416f510c40176c44bcb0eaacf34dba62b38f39416669215b8c5a85e26f3a55a2e5cea84afb06e1181788ac26b9a80635c6a725ec8949d35c641cbec9d78c92f13135178a1706fdacb2393bde46cc9d2e4247c3ed5668a2269e325153d594480299c6256a9e89b4f2c23fba7ae0dd68d7edc30ea0681b3d", 0xc9}], 0x1) 17:19:03 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12014000246b9f401320610475f36ff82a010902fcff0000000000090400000113ac820009058301"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) [ 816.083512][ T5099] em28xx 6-1:0.0: Freeing device [ 816.239162][T10973] loop1: detected capacity change from 0 to 128 [ 816.250523][T10971] loop3: detected capacity change from 0 to 128 [ 816.266570][T10973] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 17:19:03 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}], 0x1, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) [ 816.323958][T10973] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 816.326980][T10971] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 816.377082][T10971] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 816.753560][ T5084] usb 6-1: new high-speed USB device number 44 using dummy_hcd 17:19:03 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001140)=[{&(0x7f0000000080)="2e70798c4035f09d5ca72db3515985a08f3c8143ec5f8d50527efbeea8a581049eefddcb8d09b9fcabf34badff92ac2b8a9f1c2bb14d1e79374f108a9f56c620347aedd202279db233bb42902d5f6e5548a20d2324ba632ebc6e70466f8ce2a456784475d79de38f5bab6304c21d16feae27e7908736c603ba51c0c5ec2f29be9ff0483f0fe03ec3289731c5f52d1b0c7b01d30a", 0x94}], 0x1) 17:19:03 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) writev(0xffffffffffffffff, &(0x7f0000001140)=[{&(0x7f0000000140)="bac961fa41eb70483e6f54b15dabff9f523f6b1f97a81ae7cb3d6470be9662efeb4d39009ed6c166071d986013426967fbf1599d7563c39d7b749e60bec548411e2a299ee3315b7c5e1455a8c2fcef7fb793416f510c40176c44bcb0eaacf34dba62b38f39416669215b8c5a85e26f3a55a2e5cea84afb06e1181788ac26b9a80635c6a725ec8949d35c641cbec9d78c92f13135178a1706fdacb2393bde46cc9d2e4247c3ed5668a2269e325153d594480299c6256a9e89b4f2c23fba7ae0dd68d7edc30ea0681b3d", 0xc9}], 0x1) [ 817.112848][ T5084] usb 6-1: config index 0 descriptor too short (expected 65532, got 27) [ 817.121684][ T5084] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 817.134444][ T5084] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 817.144811][ T5084] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 17:19:04 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}], 0x1, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:19:04 executing program 3: syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='mode=00000000003,\x00'], 0x4, 0x4a4, &(0x7f0000000a40)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x147042, 0x0) ftruncate(r1, 0x2007fff) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) close(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1145042, 0x0) sendfile(r3, r2, 0x0, 0x800000a1) 17:19:04 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) writev(0xffffffffffffffff, &(0x7f0000001140)=[{&(0x7f0000000140)="bac961fa41eb70483e6f54b15dabff9f523f6b1f97a81ae7cb3d6470be9662efeb4d39009ed6c166071d986013426967fbf1599d7563c39d7b749e60bec548411e2a299ee3315b7c5e1455a8c2fcef7fb793416f510c40176c44bcb0eaacf34dba62b38f39416669215b8c5a85e26f3a55a2e5cea84afb06e1181788ac26b9a80635c6a725ec8949d35c641cbec9d78c92f13135178a1706fdacb2393bde46cc9d2e4247c3ed5668a2269e325153d594480299c6256a9e89b4f2c23fba7ae0dd68d7edc30ea0681b3d", 0xc9}], 0x1) [ 817.412804][ T5084] usb 6-1: New USB device found, idVendor=2013, idProduct=0461, bcdDevice=f3.75 [ 817.422786][ T5084] usb 6-1: New USB device strings: Mfr=111, Product=248, SerialNumber=42 [ 817.435315][ T5084] usb 6-1: Product: syz [ 817.439694][ T5084] usb 6-1: Manufacturer: syz [ 817.445091][ T5084] usb 6-1: SerialNumber: syz 17:19:04 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001140)=[{&(0x7f0000000080)="2e70798c4035f09d5ca72db3515985a08f3c8143ec5f8d50527efbeea8a581049eefddcb8d09b9fcabf34badff92ac2b8a9f1c2bb14d1e79374f108a9f56c620347aedd202279db233bb42902d5f6e5548a20d2324ba632ebc6e70466f8ce2a456784475d79de38f5bab6304c21d16feae27e7908736c603ba51c0c5ec2f29be9ff0483f0fe03ec3289731c5f52d1b0c7b01d30a", 0x94}], 0x1) 17:19:04 executing program 1: syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='mode=00000000003,\x00'], 0x4, 0x4a4, &(0x7f0000000a40)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x147042, 0x0) ftruncate(r1, 0x2007fff) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) close(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1145042, 0x0) sendfile(r3, r2, 0x0, 0x800000a1) [ 817.595875][ T5084] usb 6-1: config 0 descriptor?? [ 817.660983][ T5084] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2013:0461, interface 0, class 0) [ 817.670999][ T5084] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) 17:19:05 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}], 0x1, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:19:05 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) writev(0xffffffffffffffff, &(0x7f0000001140)=[{&(0x7f0000000140)="bac961fa41eb70483e6f54b15dabff9f523f6b1f97a81ae7cb3d6470be9662efeb4d39009ed6c166071d986013426967fbf1599d7563c39d7b749e60bec548411e2a299ee3315b7c5e1455a8c2fcef7fb793416f510c40176c44bcb0eaacf34dba62b38f39416669215b8c5a85e26f3a55a2e5cea84afb06e1181788ac26b9a80635c6a725ec8949d35c641cbec9d78c92f13135178a1706fdacb2393bde46cc9d2e4247c3ed5668a2269e325153d594480299c6256a9e89b4f2c23fba7ae0dd68d7edc30ea0681b3d", 0xc9}], 0x1) 17:19:05 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001040)=[{&(0x7f0000000040)="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", 0x9a9}], 0x1) [ 818.239069][T10992] loop3: detected capacity change from 0 to 128 [ 818.283421][ T5084] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 818.303534][T10992] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 818.324231][ T5084] em28xx 6-1:0.0: Config register raw data: 0x00 [ 818.413762][T10992] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 818.538317][T10998] loop1: detected capacity change from 0 to 128 [ 818.572465][T10998] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 818.677393][T10998] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) 17:19:06 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12014000246b9f401320610475f36ff82a010902fcff0000000000090400000113ac820009058301"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 17:19:06 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, 0x0, 0x0) 17:19:06 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="5a2be00069c864a1bd474d8e7e2ca96d58b2d74d7336a4ebf240b4455ac5c4b9e118eeadb2d00c7d84a5acb093700cae0e6851556a6a3e09cb241a5789689d15e863dd248d602f274656586736e1a5f9c6364bb3f651ce6fd220e23a50f69328c4c5888b802c6f0b0591c7f1f523a8a2f782f326a8cf66f92f722fac28386a2a29c76e49386382fcf94a0fa561228c76d55f2cc78f75c7d0b84d5958f6657489fc0bf35b08ee461b361400301d1c7a31269d0ae1a058b5bbf00849b87822e6cfa55d3bc0d9968087c17dcb5f41881f2804bb65caea90eacdaf88282a0ecb234d87ff29765c299b6b35c09c83e0ef6f3ada60a2c8e05217512500f13ba8ef32fa9d600493d0489dd99f9204421483ad277e1c865936339ce48ac8e74ae345125066828efbab591780b2f887f5c842a689012f6c7bf8da4eff4ad68b78e292f78d3a17fbd0d10e1e5d879afb5ccf10fe23849f84cc5bc45f1bbfc72f27d3b8c69c59921e41882283c302bec3addccf3c2d00", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:19:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x18, 0x0, 0x0) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000080)="26660f38805200f2d8b10e0000000f01dfb8010000000f01d90f01c2666536f30fc776d90f07640f35660f3882467c8fe9e801f4", 0x34}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:19:06 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = getpid() process_vm_readv(r0, 0x0, 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x20) ptrace$cont(0x9, 0x0, 0xf86, 0x3) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013001118680907070000000f0000ff3f04000000170a001700000000040037000a00030001302564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x10132) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}, 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f0000000ac0)=""/10, 0xa}, {&(0x7f0000000b00)=""/127, 0x7f}, {&(0x7f0000001180)=""/4096, 0x1000}], 0x4, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) open(0x0, 0x400, 0xdb) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000001100)={'wg0\x00'}) process_vm_writev(r3, &(0x7f0000000900)=[{&(0x7f0000000c80)=""/246, 0xf6}], 0x1, 0x0, 0x0, 0x0) 17:19:07 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, 0x0, 0x0) 17:19:07 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:19:07 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, 0x0, 0x0) 17:19:07 executing program 3: openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) 17:19:07 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:19:07 executing program 1: bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000007c40)) [ 819.652598][ T5084] usb 6-1: USB disconnect, device number 44 [ 819.655175][ T5084] em28xx 6-1:0.0: Disconnecting em28xx [ 819.659403][ T5084] em28xx 6-1:0.0: Freeing device [ 820.473456][ T5084] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 820.490423][T11020] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. [ 820.493923][T11020] gretap0: entered promiscuous mode [ 820.534511][T11020] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. [ 820.534970][T11020] 0ªX: renamed from gretap0 [ 820.546606][T11020] 0ªX: left promiscuous mode [ 820.546689][T11020] 0ªX: entered allmulticast mode [ 820.553895][T11020] A link change request failed with some changes committed already. Interface 00ªX may have been left with an inconsistent configuration, please check. [ 820.833246][ T5084] usb 6-1: config index 0 descriptor too short (expected 65532, got 27) [ 820.833381][ T5084] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 820.833496][ T5084] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 820.833637][ T5084] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 820.993276][ T5084] usb 6-1: New USB device found, idVendor=2013, idProduct=0461, bcdDevice=f3.75 [ 820.993425][ T5084] usb 6-1: New USB device strings: Mfr=111, Product=248, SerialNumber=42 [ 820.993550][ T5084] usb 6-1: Product: syz [ 820.993638][ T5084] usb 6-1: Manufacturer: syz [ 820.993729][ T5084] usb 6-1: SerialNumber: syz [ 821.050953][ T5084] usb 6-1: config 0 descriptor?? [ 821.091150][ T5084] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2013:0461, interface 0, class 0) [ 821.091322][ T5084] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 821.737224][ T5084] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 821.773371][ T5084] em28xx 6-1:0.0: Config register raw data: 0x00 [ 823.163546][ T5090] usb 6-1: USB disconnect, device number 45 [ 823.170287][ T5090] em28xx 6-1:0.0: Disconnecting em28xx [ 823.173835][ T5090] em28xx 6-1:0.0: Freeing device 17:19:12 executing program 4: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0}, 0x38) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001c80)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001d40)={&(0x7f0000001d00)='./file0\x00'}, 0x10) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) 17:19:12 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001140), 0x0) 17:19:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1}) 17:19:12 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="5a2be00069c864a1bd474d8e7e2ca96d58b2d74d7336a4ebf240b4455ac5c4b9e118eeadb2d00c7d84a5acb093700cae0e6851556a6a3e09cb241a5789689d15e863dd248d602f274656586736e1a5f9c6364bb3f651ce6fd220e23a50f69328c4c5888b802c6f0b0591c7f1f523a8a2f782f326a8cf66f92f722fac28386a2a29c76e49386382fcf94a0fa561228c76d55f2cc78f75c7d0b84d5958f6657489fc0bf35b08ee461b361400301d1c7a31269d0ae1a058b5bbf00849b87822e6cfa55d3bc0d9968087c17dcb5f41881f2804bb65caea90eacdaf88282a0ecb234d87ff29765c299b6b35c09c83e0ef6f3ada60a2c8e05217512500f13ba8ef32fa9d600493d0489dd99f9204421483ad277e1c865936339ce48ac8e74ae345125066828efbab591780b2f887f5c842a689012f6c7bf8da4eff4ad68b78e292f78d3a17fbd0d10e1e5d879afb5ccf10fe23849f84cc5bc45f1bbfc72f27d3b8c69c59921e41882283c302bec3addccf3c2d00", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:19:12 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) 17:19:12 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12014000246b9f401320610475f36ff82a010902fcff0000000000090400000113ac820009058301"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 17:19:12 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001140), 0x0) 17:19:12 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="5a2be00069c864a1bd474d8e7e2ca96d58b2d74d7336a4ebf240b4455ac5c4b9e118eeadb2d00c7d84a5acb093700cae0e6851556a6a3e09cb241a5789689d15e863dd248d602f274656586736e1a5f9c6364bb3f651ce6fd220e23a50f69328c4c5888b802c6f0b0591c7f1f523a8a2f782f326a8cf66f92f722fac28386a2a29c76e49386382fcf94a0fa561228c76d55f2cc78f75c7d0b84d5958f6657489fc0bf35b08ee461b361400301d1c7a31269d0ae1a058b5bbf00849b87822e6cfa55d3bc0d9968087c17dcb5f41881f2804bb65caea90eacdaf88282a0ecb234d87ff29765c299b6b35c09c83e0ef6f3ada60a2c8e05217512500f13ba8ef32fa9d600493d0489dd99f9204421483ad277e1c865936339ce48ac8e74ae345125066828efbab591780b2f887f5c842a689012f6c7bf8da4eff4ad68b78e292f78d3a17fbd0d10e1e5d879afb5ccf10fe23849f84cc5bc45f1bbfc72f27d3b8c69c59921e41882283c302bec3addccf3c2d00", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) [ 825.852806][ T5084] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 825.953003][ T5090] usb 2-1: new high-speed USB device number 54 using dummy_hcd 17:19:13 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001140), 0x0) 17:19:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1}) 17:19:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001800010000000000000000000a00000000000000000000001400050000000000000000000000000000000001"], 0x30}}, 0x0) [ 826.223565][ T5084] usb 6-1: config index 0 descriptor too short (expected 65532, got 27) [ 826.232557][ T5084] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 826.244432][ T5084] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 826.254170][ T5084] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 17:19:13 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="5a2be00069c864a1bd474d8e7e2ca96d58b2d74d7336a4ebf240b4455ac5c4b9e118eeadb2d00c7d84a5acb093700cae0e6851556a6a3e09cb241a5789689d15e863dd248d602f274656586736e1a5f9c6364bb3f651ce6fd220e23a50f69328c4c5888b802c6f0b0591c7f1f523a8a2f782f326a8cf66f92f722fac28386a2a29c76e49386382fcf94a0fa561228c76d55f2cc78f75c7d0b84d5958f6657489fc0bf35b08ee461b361400301d1c7a31269d0ae1a058b5bbf00849b87822e6cfa55d3bc0d9968087c17dcb5f41881f2804bb65caea90eacdaf88282a0ecb234d87ff29765c299b6b35c09c83e0ef6f3ada60a2c8e05217512500f13ba8ef32fa9d600493d0489dd99f9204421483ad277e1c865936339ce48ac8e74ae345125066828efbab591780b2f887f5c842a689012f6c7bf8da4eff4ad68b78e292f78d3a17fbd0d10e1e5d879afb5ccf10fe23849f84cc5bc45f1bbfc72f27d3b8c69c59921e41882283c302bec3addccf3c2d00", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) [ 826.352793][ T5090] usb 2-1: unable to get BOS descriptor or descriptor too short 17:19:13 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001140)=[{0x0}], 0x1) [ 826.422735][ T5090] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 826.430630][ T5090] usb 2-1: can't read configurations, error -71 [ 826.562879][ T5084] usb 6-1: New USB device found, idVendor=2013, idProduct=0461, bcdDevice=f3.75 [ 826.572947][ T5084] usb 6-1: New USB device strings: Mfr=111, Product=248, SerialNumber=42 [ 826.581661][ T5084] usb 6-1: Product: syz [ 826.586236][ T5084] usb 6-1: Manufacturer: syz [ 826.591042][ T5084] usb 6-1: SerialNumber: syz 17:19:13 executing program 4: openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x101201, 0x0) [ 826.785206][ T5084] usb 6-1: config 0 descriptor?? [ 826.846080][ T5084] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2013:0461, interface 0, class 0) [ 826.855738][ T5084] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) 17:19:13 executing program 1: openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000004a00), 0x2, 0x0) 17:19:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1}) 17:19:14 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{0x0}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="5a2be00069c864a1bd474d8e7e2ca96d58b2d74d7336a4ebf240b4455ac5c4b9e118eeadb2d00c7d84a5acb093700cae0e6851556a6a3e09cb241a5789689d15e863dd248d602f274656586736e1a5f9c6364bb3f651ce6fd220e23a50f69328c4c5888b802c6f0b0591c7f1f523a8a2f782f326a8cf66f92f722fac28386a2a29c76e49386382fcf94a0fa561228c76d55f2cc78f75c7d0b84d5958f6657489fc0bf35b08ee461b361400301d1c7a31269d0ae1a058b5bbf00849b87822e6cfa55d3bc0d9968087c17dcb5f41881f2804bb65caea90eacdaf88282a0ecb234d87ff29765c299b6b35c09c83e0ef6f3ada60a2c8e05217512500f13ba8ef32fa9d600493d0489dd99f9204421483ad277e1c865936339ce48ac8e74ae345125066828efbab591780b2f887f5c842a689012f6c7bf8da4eff4ad68b78e292f78d3a17fbd0d10e1e5d879afb5ccf10fe23849f84cc5bc45f1bbfc72f27d3b8c69c59921e41882283c302bec3addccf3c2d00", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) [ 827.303733][ T1192] ieee802154 phy0 wpan0: encryption failed: -22 [ 827.310399][ T1192] ieee802154 phy1 wpan1: encryption failed: -22 [ 827.502579][ T5084] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 827.543465][ T5084] em28xx 6-1:0.0: Config register raw data: 0x00 17:19:15 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12014000246b9f401320610475f36ff82a010902fcff0000000000090400000113ac820009058301"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 17:19:15 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001140)=[{0x0}], 0x1) 17:19:15 executing program 4: mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 17:19:15 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{0x0}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="5a2be00069c864a1bd474d8e7e2ca96d58b2d74d7336a4ebf240b4455ac5c4b9e118eeadb2d00c7d84a5acb093700cae0e6851556a6a3e09cb241a5789689d15e863dd248d602f274656586736e1a5f9c6364bb3f651ce6fd220e23a50f69328c4c5888b802c6f0b0591c7f1f523a8a2f782f326a8cf66f92f722fac28386a2a29c76e49386382fcf94a0fa561228c76d55f2cc78f75c7d0b84d5958f6657489fc0bf35b08ee461b361400301d1c7a31269d0ae1a058b5bbf00849b87822e6cfa55d3bc0d9968087c17dcb5f41881f2804bb65caea90eacdaf88282a0ecb234d87ff29765c299b6b35c09c83e0ef6f3ada60a2c8e05217512500f13ba8ef32fa9d600493d0489dd99f9204421483ad277e1c865936339ce48ac8e74ae345125066828efbab591780b2f887f5c842a689012f6c7bf8da4eff4ad68b78e292f78d3a17fbd0d10e1e5d879afb5ccf10fe23849f84cc5bc45f1bbfc72f27d3b8c69c59921e41882283c302bec3addccf3c2d00", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:19:15 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000040)={0x0, 0x0, 0x7fff, 0x0, 0x0, "c319e2c2881bae9a"}) 17:19:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1}) [ 828.779597][ T5084] usb 6-1: USB disconnect, device number 46 [ 828.788736][ T5084] em28xx 6-1:0.0: Disconnecting em28xx [ 828.888861][ T5084] em28xx 6-1:0.0: Freeing device 17:19:16 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001140)=[{0x0}], 0x1) 17:19:16 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{0x0}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:19:16 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000040)={0x0, 0x0, 0x7fff, 0x0, 0x0, "c319e2c2881bae9a"}) 17:19:16 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000001b80), 0x802, 0x0) 17:19:16 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001140)=[{&(0x7f0000000140)}], 0x1) [ 829.453144][ T5084] usb 6-1: new high-speed USB device number 47 using dummy_hcd 17:19:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc008ae88, &(0x7f0000000140)) [ 829.815149][ T5084] usb 6-1: config index 0 descriptor too short (expected 65532, got 27) [ 829.823873][ T5084] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 829.832341][ T5084] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 829.841512][ T5084] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 830.203292][ T5084] usb 6-1: New USB device found, idVendor=2013, idProduct=0461, bcdDevice=f3.75 [ 830.213596][ T5084] usb 6-1: New USB device strings: Mfr=111, Product=248, SerialNumber=42 [ 830.222405][ T5084] usb 6-1: Product: syz [ 830.226795][ T5084] usb 6-1: Manufacturer: syz [ 830.231622][ T5084] usb 6-1: SerialNumber: syz [ 830.272874][ T5084] usb 6-1: config 0 descriptor?? [ 830.330984][ T5084] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2013:0461, interface 0, class 0) [ 830.345807][ T5084] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 830.972894][ T5084] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 831.013154][ T5084] em28xx 6-1:0.0: Config register raw data: 0x00 17:19:19 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12014000246b9f401320610475f36ff82a010902fcff0000000000090400000113ac820009058301"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 17:19:19 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000040)={0x0, 0x0, 0x7fff, 0x0, 0x0, "c319e2c2881bae9a"}) 17:19:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000f00)=@delchain={0xec4, 0x65, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_tcindex={{0xc}, {0xe94, 0x2, [@TCA_TCINDEX_ACT={0xe90, 0x7, [@m_gact={0x138, 0x0, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc}, @TCA_GACT_PROB={0xc}, @TCA_GACT_PROB={0xc}, @TCA_GACT_PROB={0xc}]}, {0xc1, 0x6, "7ce67336043c1c4469e3fcdd8a43cf2554e8445f18ba05024817002ff7e490c886a18c53b9704f248808276e76f747aadd7d0414938d20ca20a053100c3d93aeef7feab5ad9e94d7c7cdca6cd192a57374e2e0de26bda3a01a364b25ee7fb6f11396ec166e597ba74fa586b22d797453331965915d737acacc4e547c0b7dd095cccad93311af45ac70904a364b0fe27dc1483e35ac12aed8187a897f9ace6cfc56e29c7106c91c09918fe5ada2808f8e273f7dd449ab8b77c072c9ebcd"}, {0xc}, {0xc}}}, @m_nat={0x1b8, 0x0, 0x0, 0x0, {{0x8}, {0x11c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @loopback, @remote}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @remote, @multicast2}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @loopback, @multicast2}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @loopback, @dev}}]}, {0x75, 0x6, "9c348ced25ec53fae819aa0b6c9ec3c8890ebf1354af76e4151cc8f89cf706dfcb2c59a255d527aeb43cfef960e337f7225b76ec548a40550ab8520c9a50492a028017900ffb67248ffb513ac5e1b198b55ea21092264b034ac81a09031aebfcf5043ea9a909cdfa9a261fa394a4306a12"}, {0xc}, {0xc}}}, @m_xt={0xb9c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0xb71, 0x6, "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"}, {0xc}, {0xc}}}]}]}}]}, 0xec4}}, 0x0) 17:19:19 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:19:19 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001140)=[{&(0x7f0000000140)}], 0x1) 17:19:19 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x5412, &(0x7f0000000000)) [ 832.257177][ T5084] usb 6-1: USB disconnect, device number 47 [ 832.265934][ T5084] em28xx 6-1:0.0: Disconnecting em28xx [ 832.343326][ T5084] em28xx 6-1:0.0: Freeing device 17:19:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r2, 0x4068aea3, &(0x7f0000000080)={0xbe}) 17:19:19 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001140)=[{&(0x7f0000000140)}], 0x1) 17:19:19 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:19:19 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000040)={0x0, 0x0, 0x7fff, 0x0, 0x0, "c319e2c2881bae9a"}) 17:19:19 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000300)={0x0, 0x0, 0xc, &(0x7f0000000240)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x16}]}}) 17:19:20 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000005600), 0xffffffffffffffff) [ 832.983287][ T5090] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 833.373720][ T5090] usb 6-1: config index 0 descriptor too short (expected 65532, got 27) [ 833.382702][ T5090] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 833.391021][ T5090] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 833.400419][ T5090] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 833.617052][ T5090] usb 6-1: New USB device found, idVendor=2013, idProduct=0461, bcdDevice=f3.75 [ 833.627396][ T5090] usb 6-1: New USB device strings: Mfr=111, Product=248, SerialNumber=42 [ 833.636283][ T5090] usb 6-1: Product: syz [ 833.640677][ T5090] usb 6-1: Manufacturer: syz [ 833.645637][ T5090] usb 6-1: SerialNumber: syz [ 833.719269][ T5090] usb 6-1: config 0 descriptor?? [ 833.771220][ T5090] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2013:0461, interface 0, class 0) [ 833.780939][ T5090] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 834.412669][ T5090] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 834.452840][ T5090] em28xx 6-1:0.0: Config register raw data: 0x00 17:19:22 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12014000246b9f401320610475f36ff82a010902fcff0000000000090400000113ac820009058301"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 17:19:22 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:19:22 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="ed000000000180140002007665c500005f766972745f00"/33], 0x2c}}, 0x4008000) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0xa002c000, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=0x0, @ANYBLOB="000000cb70040000a4c3aaf5e69e90fed25d118f0c4073f1553a828f5bd1503ab79677d913e0097e459488b1e19e5626858535c98d837af03f12a38b9de42ae7a60ed82e469f9daf16387018744bfec2c528a989d9b6d64735369353413cbaf68c4b6176fca48ede"], 0x20}}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000500)=@req3={0x9, 0x401, 0x2, 0x7, 0x4, 0x200, 0x3}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x8011}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, 0x18, 0xa01, 0x0, 0x0, {0x4}, [@typed={0x8, 0x11, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) 17:19:22 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x101201, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000640)="9e", 0x1}], 0x1) 17:19:22 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001140)=[{&(0x7f0000000140)="bac961fa41eb70483e6f54b15dabff9f523f6b1f97a81ae7cb3d6470be9662efeb4d39009ed6c166071d986013426967fbf1599d7563c39d7b749e60bec548411e2a299ee3315b7c5e1455a8c2fcef7fb793416f510c40176c44bcb0eaacf34dba62b38f39", 0x65}], 0x1) [ 835.696152][ T5090] usb 6-1: USB disconnect, device number 48 [ 835.705202][ T5090] em28xx 6-1:0.0: Disconnecting em28xx [ 835.799866][ T5090] em28xx 6-1:0.0: Freeing device 17:19:23 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x4200) 17:19:23 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000000)=""/79) 17:19:23 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8e", 0x22}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:19:23 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x6, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 17:19:23 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8e", 0x22}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:19:24 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x6, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x8c, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 17:19:24 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8e", 0x22}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="5a2be00069c864a1bd474d8e7e2ca96d58b2d74d7336a4ebf240b4455ac5c4b9e118eeadb2d00c7d84a5acb093700cae0e6851556a6a3e09cb241a5789689d15e863dd248d602f274656586736e1a5f9c6364bb3f651ce6fd220e23a50f69328c4c5888b802c6f0b0591c7f1f523a8a2f782f326a8cf66f92f722fac28386a2a29c76e49386382fcf94a0fa561228c76d55f2cc78f75c7d0b84d5958f6657489fc0bf35b08ee461b361400301d1c7a31269d0ae1a058b5bbf00849b87822e6cfa55d3bc0d9968087c17dcb5f41881f2804bb65caea90eacdaf88282a0ecb234d87ff29765c299b6b35c09c83e0ef6f3ada60a2c8e05217512500f13ba8ef32fa9d600493d0489dd99f9204421483ad277e1c865936339ce48ac8e74ae345125066828efbab591780b2f887f5c842a689012f6c7bf8da4eff4ad68b78e292f78d3a17fbd0d10e1e5d879afb5ccf10fe23849f84cc5bc45f1bbfc72f27d3b8c69c59921e41882283c302bec3addccf3c2d00", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) [ 836.542504][ T5089] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 836.963831][ T5089] usb 6-1: config index 0 descriptor too short (expected 65532, got 27) [ 836.963963][ T5089] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 836.964084][ T5089] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 836.964217][ T5089] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 837.221063][ T5089] usb 6-1: New USB device found, idVendor=2013, idProduct=0461, bcdDevice=f3.75 [ 837.221167][ T5089] usb 6-1: New USB device strings: Mfr=111, Product=248, SerialNumber=42 [ 837.221244][ T5089] usb 6-1: Product: syz [ 837.221303][ T5089] usb 6-1: Manufacturer: syz [ 837.221363][ T5089] usb 6-1: SerialNumber: syz [ 837.231851][ T5089] usb 6-1: config 0 descriptor?? [ 837.280962][ T5089] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2013:0461, interface 0, class 0) [ 837.281141][ T5089] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 837.923485][ T5089] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 837.963455][ T5089] em28xx 6-1:0.0: Config register raw data: 0x00 17:19:26 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12014000246b9f401320610475f36ff82a010902fcff0000000000090400000113ac820009058301"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 17:19:26 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f", 0x33}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="5a2be00069c864a1bd474d8e7e2ca96d58b2d74d7336a4ebf240b4455ac5c4b9e118eeadb2d00c7d84a5acb093700cae0e6851556a6a3e09cb241a5789689d15e863dd248d602f274656586736e1a5f9c6364bb3f651ce6fd220e23a50f69328c4c5888b802c6f0b0591c7f1f523a8a2f782f326a8cf66f92f722fac28386a2a29c76e49386382fcf94a0fa561228c76d55f2cc78f75c7d0b84d5958f6657489fc0bf35b08ee461b361400301d1c7a31269d0ae1a058b5bbf00849b87822e6cfa55d3bc0d9968087c17dcb5f41881f2804bb65caea90eacdaf88282a0ecb234d87ff29765c299b6b35c09c83e0ef6f3ada60a2c8e05217512500f13ba8ef32fa9d600493d0489dd99f9204421483ad277e1c865936339ce48ac8e74ae345125066828efbab591780b2f887f5c842a689012f6c7bf8da4eff4ad68b78e292f78d3a17fbd0d10e1e5d879afb5ccf10fe23849f84cc5bc45f1bbfc72f27d3b8c69c59921e41882283c302bec3addccf3c2d00", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:19:26 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x2800) 17:19:26 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001140)=[{&(0x7f0000000140)="bac961fa41eb70483e6f54b15dabff9f523f6b1f97a81ae7cb3d6470be9662efeb4d39009ed6c166071d986013426967fbf1599d7563c39d7b749e60bec548411e2a299ee3315b7c5e1455a8c2fcef7fb793416f510c40176c44bcb0eaacf34dba62b38f39", 0x65}], 0x1) 17:19:26 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b62, &(0x7f0000000000)) 17:19:26 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/platform', 0x4c6202, 0x0) [ 839.230639][ T5089] usb 6-1: USB disconnect, device number 49 [ 839.239646][ T5089] em28xx 6-1:0.0: Disconnecting em28xx [ 839.252881][ T5089] em28xx 6-1:0.0: Freeing device 17:19:26 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x2800) 17:19:26 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f0000008500000050000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000240)='kfree\x00', r1}, 0x10) flistxattr(r0, 0x0, 0x0) 17:19:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) r2 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000340)={{0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) 17:19:26 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f", 0x33}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:19:27 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x2800) 17:19:27 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x9) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) [ 840.034153][ T5084] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 840.394307][ T5084] usb 6-1: config index 0 descriptor too short (expected 65532, got 27) [ 840.394442][ T5084] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 840.394554][ T5084] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 840.394730][ T5084] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 840.553491][ T5084] usb 6-1: New USB device found, idVendor=2013, idProduct=0461, bcdDevice=f3.75 [ 840.553643][ T5084] usb 6-1: New USB device strings: Mfr=111, Product=248, SerialNumber=42 [ 840.553765][ T5084] usb 6-1: Product: syz [ 840.553854][ T5084] usb 6-1: Manufacturer: syz [ 840.553946][ T5084] usb 6-1: SerialNumber: syz [ 840.558519][ T5084] usb 6-1: config 0 descriptor?? [ 840.614924][ T5084] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2013:0461, interface 0, class 0) [ 840.615107][ T5084] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 841.242597][ T5084] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 841.282775][ T5084] em28xx 6-1:0.0: Config register raw data: 0x00 17:19:29 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12014000246b9f401320610475f36ff82a010902fcff0000000000090400000113ac820009058301"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 17:19:29 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x0) fchown(r0, 0x0, 0x0) 17:19:29 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f", 0x33}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:19:29 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x2800) 17:19:29 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x9) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 17:19:29 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001140)=[{&(0x7f0000000140)="bac961fa41eb70483e6f54b15dabff9f523f6b1f97a81ae7cb3d6470be9662efeb4d39009ed6c166071d986013426967fbf1599d7563c39d7b749e60bec548411e2a299ee3315b7c5e1455a8c2fcef7fb793416f510c40176c44bcb0eaacf34dba62b38f39", 0x65}], 0x1) [ 842.692709][ T5084] usb 6-1: USB disconnect, device number 50 [ 842.701380][ T5084] em28xx 6-1:0.0: Disconnecting em28xx [ 842.749114][ T5084] em28xx 6-1:0.0: Freeing device 17:19:30 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) flistxattr(r0, &(0x7f0000000140)=""/207, 0xcf) 17:19:30 executing program 4: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) 17:19:30 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd05299", 0x3b}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:19:30 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x9) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 17:19:30 executing program 4: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) 17:19:30 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) [ 843.372815][ T5084] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 843.742543][ T5084] usb 6-1: config index 0 descriptor too short (expected 65532, got 27) [ 843.742694][ T5084] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 843.742806][ T5084] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 843.742946][ T5084] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 843.903978][ T5084] usb 6-1: New USB device found, idVendor=2013, idProduct=0461, bcdDevice=f3.75 [ 843.904145][ T5084] usb 6-1: New USB device strings: Mfr=111, Product=248, SerialNumber=42 [ 843.904261][ T5084] usb 6-1: Product: syz [ 843.904350][ T5084] usb 6-1: Manufacturer: syz [ 843.904441][ T5084] usb 6-1: SerialNumber: syz [ 843.912699][ T5084] usb 6-1: config 0 descriptor?? [ 843.966872][ T5084] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2013:0461, interface 0, class 0) [ 843.967046][ T5084] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 844.602785][ T5084] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 844.648127][ T5084] em28xx 6-1:0.0: Config register raw data: 0x00 17:19:33 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x9) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 17:19:33 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12014000246b9f401320610475f36ff82a010902fcff0000000000090400000113ac820009058301"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 17:19:33 executing program 4: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) 17:19:33 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001300)={0x11, 0x1, &(0x7f0000000180)=@raw=[@alu={0x4}], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:19:33 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001140)=[{&(0x7f0000000140)="bac961fa41eb70483e6f54b15dabff9f523f6b1f97a81ae7cb3d6470be9662efeb4d39009ed6c166071d986013426967fbf1599d7563c39d7b749e60bec548411e2a299ee3315b7c5e1455a8c2fcef7fb793416f510c40176c44bcb0eaacf34dba62b38f39416669215b8c5a85e26f3a55a2e5cea84afb06e1181788ac26b9a80635c6a725ec8949d35c641cbec9d78c92f13135178a17", 0x97}], 0x1) 17:19:33 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd05299", 0x3b}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) [ 845.998173][ T5089] usb 6-1: USB disconnect, device number 51 [ 846.006855][ T5089] em28xx 6-1:0.0: Disconnecting em28xx [ 846.110187][ T5089] em28xx 6-1:0.0: Freeing device 17:19:33 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'veth0_vlan\x00', 0x8000}) 17:19:33 executing program 4: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x2800) 17:19:33 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd05299", 0x3b}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:19:33 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 17:19:33 executing program 4: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x2800) 17:19:33 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETIFINDEX(r0, 0x400454da, 0x0) 17:19:34 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d", 0x3f}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) [ 846.693313][ T5084] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 847.061987][ T5084] usb 6-1: config index 0 descriptor too short (expected 65532, got 27) [ 847.062311][ T5084] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 847.062426][ T5084] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 847.062564][ T5084] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 847.222999][ T5084] usb 6-1: New USB device found, idVendor=2013, idProduct=0461, bcdDevice=f3.75 [ 847.223150][ T5084] usb 6-1: New USB device strings: Mfr=111, Product=248, SerialNumber=42 [ 847.223267][ T5084] usb 6-1: Product: syz [ 847.223354][ T5084] usb 6-1: Manufacturer: syz [ 847.223445][ T5084] usb 6-1: SerialNumber: syz [ 847.228274][ T5084] usb 6-1: config 0 descriptor?? [ 847.270475][ T5084] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2013:0461, interface 0, class 0) [ 847.270649][ T5084] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 847.913554][ T5084] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 847.953449][ T5084] em28xx 6-1:0.0: Config register raw data: 0x00 17:19:36 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12014000246b9f401320610475f36ff82a010902fcff0000000000090400000113ac820009058301"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 17:19:36 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 17:19:36 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d", 0x3f}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:19:36 executing program 4: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x2800) 17:19:36 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x28011, 0xffffffffffffffff, 0x1000) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000a00)=@framed, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000700)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000140)=@raw=[@generic], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1f, r2, r1}, 0x80) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000280), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x80, 0x54, 0x5, 0x90, 0xffffffffffffffff, 0x5, '\x00', 0x0, r4, 0x3, 0x1, 0x2, 0x7}, 0x77) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000280), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/diskstats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xd, 0x7, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, [@ldst={0x2, 0x1, 0x1, 0x8, 0x5, 0x2, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x15, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0xb, 0x100, 0x5}, 0x10, r2, r0, 0x0, &(0x7f0000000340)=[r3, 0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff, r5, r6, 0x1, 0xffffffffffffffff]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80040, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000000040)={0x50, 0x0, r9, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r8, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000008dceba394fc9d73b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e7ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea2105600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000f87c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r8, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0xa0842, 0x103) writev(r10, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) read$FUSE(r10, &(0x7f0000006200)={0x2020}, 0x2020) dup3(r7, r8, 0x0) 17:19:36 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001140)=[{&(0x7f0000000140)="bac961fa41eb70483e6f54b15dabff9f523f6b1f97a81ae7cb3d6470be9662efeb4d39009ed6c166071d986013426967fbf1599d7563c39d7b749e60bec548411e2a299ee3315b7c5e1455a8c2fcef7fb793416f510c40176c44bcb0eaacf34dba62b38f39416669215b8c5a85e26f3a55a2e5cea84afb06e1181788ac26b9a80635c6a725ec8949d35c641cbec9d78c92f13135178a17", 0x97}], 0x1) [ 849.357426][ T5084] usb 6-1: USB disconnect, device number 52 [ 849.386730][ T5084] em28xx 6-1:0.0: Disconnecting em28xx [ 849.435796][ T5084] em28xx 6-1:0.0: Freeing device 17:19:36 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d", 0x3f}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:19:36 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) 17:19:36 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 17:19:37 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x0) ioctl$LOOP_CLR_FD(r0, 0x80081270) 17:19:37 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) 17:19:37 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5c", 0x41}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) [ 850.122330][ T5089] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 850.483332][ T5089] usb 6-1: config index 0 descriptor too short (expected 65532, got 27) [ 850.483474][ T5089] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 850.483584][ T5089] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 850.483728][ T5089] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 850.642868][ T5089] usb 6-1: New USB device found, idVendor=2013, idProduct=0461, bcdDevice=f3.75 [ 850.643091][ T5089] usb 6-1: New USB device strings: Mfr=111, Product=248, SerialNumber=42 [ 850.643277][ T5089] usb 6-1: Product: syz [ 850.643368][ T5089] usb 6-1: Manufacturer: syz [ 850.643465][ T5089] usb 6-1: SerialNumber: syz [ 850.648832][ T5089] usb 6-1: config 0 descriptor?? [ 850.690364][ T5089] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2013:0461, interface 0, class 0) [ 850.690542][ T5089] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 851.352750][ T5089] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 851.400191][ T5089] em28xx 6-1:0.0: Config register raw data: 0x00 17:19:39 executing program 5: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 17:19:39 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x9) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 17:19:39 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x407, 0x100000) write$tcp_mem(r1, &(0x7f0000000140), 0x48) close_range(r0, 0xffffffffffffffff, 0x0) 17:19:39 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) 17:19:39 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5c", 0x41}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:19:39 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001140)=[{&(0x7f0000000140)="bac961fa41eb70483e6f54b15dabff9f523f6b1f97a81ae7cb3d6470be9662efeb4d39009ed6c166071d986013426967fbf1599d7563c39d7b749e60bec548411e2a299ee3315b7c5e1455a8c2fcef7fb793416f510c40176c44bcb0eaacf34dba62b38f39416669215b8c5a85e26f3a55a2e5cea84afb06e1181788ac26b9a80635c6a725ec8949d35c641cbec9d78c92f13135178a17", 0x97}], 0x1) [ 852.795201][ T5089] usb 6-1: USB disconnect, device number 53 [ 852.803994][ T5089] em28xx 6-1:0.0: Disconnecting em28xx [ 852.822857][ T5089] em28xx 6-1:0.0: Freeing device 17:19:40 executing program 1: setsockopt$sock_timeval(0xffffffffffffff9c, 0xffff, 0x0, 0x0, 0x0) 17:19:40 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x9) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 17:19:40 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5c", 0x41}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:19:40 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x0) 17:19:40 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0xa) 17:19:40 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x0) 17:19:40 executing program 5: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 17:19:40 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad", 0x42}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:19:40 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x9) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 17:19:41 executing program 1: socket(0x1e, 0x0, 0x1f) 17:19:41 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x0) 17:19:42 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001140)=[{&(0x7f0000000140)="bac961fa41eb70483e6f54b15dabff9f523f6b1f97a81ae7cb3d6470be9662efeb4d39009ed6c166071d986013426967fbf1599d7563c39d7b749e60bec548411e2a299ee3315b7c5e1455a8c2fcef7fb793416f510c40176c44bcb0eaacf34dba62b38f39416669215b8c5a85e26f3a55a2e5cea84afb06e1181788ac26b9a80635c6a725ec8949d35c641cbec9d78c92f13135178a1706fdacb2393bde46cc9d2e4247c3ed5668a2269e325153d594", 0xb0}], 0x1) 17:19:42 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad", 0x42}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:19:42 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x9) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 17:19:42 executing program 1: setitimer(0x0, &(0x7f0000001240), 0x0) 17:19:42 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) recvmmsg(r0, &(0x7f0000000300), 0x10, 0x0, 0x0) 17:19:42 executing program 5: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 17:19:42 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad", 0x42}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:19:42 executing program 1: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) readlinkat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 17:19:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5}]}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[], 0x0, 0xe02}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:19:42 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x9) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 17:19:42 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 17:19:42 executing program 1: ptrace(0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r0, 0x0) r1 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r1, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000}, 0x1c) accept4$inet6(r0, 0x0, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f0000000640)={&(0x7f0000000300), 0x10, &(0x7f0000000500)=[{&(0x7f0000000340)='Z', 0x1}], 0x1}, 0x0) 17:19:43 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001140)=[{&(0x7f0000000140)="bac961fa41eb70483e6f54b15dabff9f523f6b1f97a81ae7cb3d6470be9662efeb4d39009ed6c166071d986013426967fbf1599d7563c39d7b749e60bec548411e2a299ee3315b7c5e1455a8c2fcef7fb793416f510c40176c44bcb0eaacf34dba62b38f39416669215b8c5a85e26f3a55a2e5cea84afb06e1181788ac26b9a80635c6a725ec8949d35c641cbec9d78c92f13135178a1706fdacb2393bde46cc9d2e4247c3ed5668a2269e325153d594", 0xb0}], 0x1) 17:19:43 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x1, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:19:43 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x9) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 17:19:43 executing program 1: socket$inet_sctp(0x2, 0x0, 0x84) syz_open_dev$sndmidi(0x0, 0x2, 0x0) dup(0xffffffffffffffff) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4c6) syz_io_uring_setup(0x4aa8, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000d6000/0x3000)=nil, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f00000004c0), 0x5, 0x262000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x5) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2200]}}], 0xffc8) 17:19:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5}]}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[], 0x0, 0xe02}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:19:43 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 17:19:44 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x1, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:19:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5}]}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[], 0x0, 0xe02}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:19:44 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x9) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) 17:19:44 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x1, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="5a2be00069c864a1bd474d8e7e2ca96d58b2d74d7336a4ebf240b4455ac5c4b9e118eeadb2d00c7d84a5acb093700cae0e6851556a6a3e09cb241a5789689d15e863dd248d602f274656586736e1a5f9c6364bb3f651ce6fd220e23a50f69328c4c5888b802c6f0b0591c7f1f523a8a2f782f326a8cf66f92f722fac28386a2a29c76e49386382fcf94a0fa561228c76d55f2cc78f75c7d0b84d5958f6657489fc0bf35b08ee461b361400301d1c7a31269d0ae1a058b5bbf00849b87822e6cfa55d3bc0d9968087c17dcb5f41881f2804bb65caea90eacdaf88282a0ecb234d87ff29765c299b6b35c09c83e0ef6f3ada60a2c8e05217512500f13ba8ef32fa9d600493d0489dd99f9204421483ad277e1c865936339ce48ac8e74ae345125066828efbab591780b2f887f5c842a689012f6c7bf8da4eff4ad68b78e292f78d3a17fbd0d10e1e5d879afb5ccf10fe23849f84cc5bc45f1bbfc72f27d3b8c69c59921e41882283c302bec3addccf3c2d00", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:19:45 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 17:19:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5}]}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[], 0x0, 0xe02}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:19:46 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001140)=[{&(0x7f0000000140)="bac961fa41eb70483e6f54b15dabff9f523f6b1f97a81ae7cb3d6470be9662efeb4d39009ed6c166071d986013426967fbf1599d7563c39d7b749e60bec548411e2a299ee3315b7c5e1455a8c2fcef7fb793416f510c40176c44bcb0eaacf34dba62b38f39416669215b8c5a85e26f3a55a2e5cea84afb06e1181788ac26b9a80635c6a725ec8949d35c641cbec9d78c92f13135178a1706fdacb2393bde46cc9d2e4247c3ed5668a2269e325153d594", 0xb0}], 0x1) 17:19:46 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x9) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) 17:19:46 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="5a2be00069c864a1bd474d8e7e2ca96d58b2d74d7336a4ebf240b4455ac5c4b9e118eeadb2d00c7d84a5acb093700cae0e6851556a6a3e09cb241a5789689d15e863dd248d602f274656586736e1a5f9c6364bb3f651ce6fd220e23a50f69328c4c5888b802c6f0b0591c7f1f523a8a2f782f326a8cf66f92f722fac28386a2a29c76e49386382fcf94a0fa561228c76d55f2cc78f75c7d0b84d5958f6657489fc0bf35b08ee461b361400301d1c7a31269d0ae1a058b5bbf00849b87822e6cfa55d3bc0d9968087c17dcb5f41881f2804bb65caea90eacdaf88282a0ecb234d87ff29765c299b6b35c09c83e0ef6f3ada60a2c8e05217512500f13ba8ef32fa9d600493d0489dd99f9204421483ad277e1c865936339ce48ac8e74ae345125066828efbab591780b2f887f5c842a689012f6c7bf8da4eff4ad68b78e292f78d3a17fbd0d10e1e5d879afb5ccf10fe23849f84cc5bc45f1bbfc72f27d3b8c69c59921e41882283c302bec3addccf3c2d00", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:19:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5}]}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[], 0x0, 0xe02}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:19:46 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 17:19:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5}]}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[], 0x0, 0xe02}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 858.226483][T11370] 9pnet_fd: Insufficient options for proto=fd [ 859.383192][T11395] 9pnet_fd: Insufficient options for proto=fd 17:19:46 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x9) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) 17:19:46 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) [ 859.612896][ T5089] usb 6-1: new high-speed USB device number 54 using dummy_hcd 17:19:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5}]}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[], 0x0, 0xe02}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 859.778656][T11404] 9pnet_fd: Insufficient options for proto=fd 17:19:46 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x9) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 17:19:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5}]}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[], 0x0, 0xe02}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:19:47 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="5a2be00069c864a1bd474d8e7e2ca96d58b2d74d7336a4ebf240b4455ac5c4b9e118eeadb2d00c7d84a5acb093700cae0e6851556a6a3e09cb241a5789689d15e863dd248d602f274656586736e1a5f9c6364bb3f651ce6fd220e23a50f69328c4c5888b802c6f0b0591c7f1f523a8a2f782f326a8cf66f92f722fac28386a2a29c76e49386382fcf94a0fa561228c76d55f2cc78f75c7d0b84d5958f6657489fc0bf35b08ee461b361400301d1c7a31269d0ae1a058b5bbf00849b87822e6cfa55d3bc0d9968087c17dcb5f41881f2804bb65caea90eacdaf88282a0ecb234d87ff29765c299b6b35c09c83e0ef6f3ada60a2c8e05217512500f13ba8ef32fa9d600493d0489dd99f9204421483ad277e1c865936339ce48ac8e74ae345125066828efbab591780b2f887f5c842a689012f6c7bf8da4eff4ad68b78e292f78d3a17fbd0d10e1e5d879afb5ccf10fe23849f84cc5bc45f1bbfc72f27d3b8c69c59921e41882283c302bec3addccf3c2d00", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) [ 859.830558][ T5089] usb 6-1: device descriptor read/64, error 18 [ 860.102642][ T5089] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 860.312904][ T5089] usb 6-1: device descriptor read/64, error 18 [ 860.433116][ T5089] usb usb6-port1: attempt power cycle [ 860.842701][ T5089] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 861.027032][ T5089] usb 6-1: device descriptor read/8, error -61 17:19:48 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001140)=[{&(0x7f0000000140)="bac961fa41eb70483e6f54b15dabff9f523f6b1f97a81ae7cb3d6470be9662efeb4d39009ed6c166071d986013426967fbf1599d7563c39d7b749e60bec548411e2a299ee3315b7c5e1455a8c2fcef7fb793416f510c40176c44bcb0eaacf34dba62b38f39416669215b8c5a85e26f3a55a2e5cea84afb06e1181788ac26b9a80635c6a725ec8949d35c641cbec9d78c92f13135178a1706fdacb2393bde46cc9d2e4247c3ed5668a2269e325153d594480299c6256a9e89b4f2c23fba", 0xbd}], 0x1) 17:19:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5}]}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[], 0x0, 0xe02}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:19:48 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x9) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 17:19:48 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x0, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="5a2be00069c864a1bd474d8e7e2ca96d58b2d74d7336a4ebf240b4455ac5c4b9e118eeadb2d00c7d84a5acb093700cae0e6851556a6a3e09cb241a5789689d15e863dd248d602f274656586736e1a5f9c6364bb3f651ce6fd220e23a50f69328c4c5888b802c6f0b0591c7f1f523a8a2f782f326a8cf66f92f722fac28386a2a29c76e49386382fcf94a0fa561228c76d55f2cc78f75c7d0b84d5958f6657489fc0bf35b08ee461b361400301d1c7a31269d0ae1a058b5bbf00849b87822e6cfa55d3bc0d9968087c17dcb5f41881f2804bb65caea90eacdaf88282a0ecb234d87ff29765c299b6b35c09c83e0ef6f3ada60a2c8e05217512500f13ba8ef32fa9d600493d0489dd99f9204421483ad277e1c865936339ce48ac8e74ae345125066828efbab591780b2f887f5c842a689012f6c7bf8da4eff4ad68b78e292f78d3a17fbd0d10e1e5d879afb5ccf10fe23849f84cc5bc45f1bbfc72f27d3b8c69c59921e41882283c302bec3addccf3c2d00", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) [ 861.293585][ T5089] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 861.463119][ T5089] usb 6-1: device descriptor read/8, error -61 [ 861.593589][ T5089] usb usb6-port1: unable to enumerate USB device 17:19:49 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 17:19:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5}]}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[], 0x0, 0xe02}) 17:19:49 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x9) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 17:19:49 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x0, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="5a2be00069c864a1bd474d8e7e2ca96d58b2d74d7336a4ebf240b4455ac5c4b9e118eeadb2d00c7d84a5acb093700cae0e6851556a6a3e09cb241a5789689d15e863dd248d602f274656586736e1a5f9c6364bb3f651ce6fd220e23a50f69328c4c5888b802c6f0b0591c7f1f523a8a2f782f326a8cf66f92f722fac28386a2a29c76e49386382fcf94a0fa561228c76d55f2cc78f75c7d0b84d5958f6657489fc0bf35b08ee461b361400301d1c7a31269d0ae1a058b5bbf00849b87822e6cfa55d3bc0d9968087c17dcb5f41881f2804bb65caea90eacdaf88282a0ecb234d87ff29765c299b6b35c09c83e0ef6f3ada60a2c8e05217512500f13ba8ef32fa9d600493d0489dd99f9204421483ad277e1c865936339ce48ac8e74ae345125066828efbab591780b2f887f5c842a689012f6c7bf8da4eff4ad68b78e292f78d3a17fbd0d10e1e5d879afb5ccf10fe23849f84cc5bc45f1bbfc72f27d3b8c69c59921e41882283c302bec3addccf3c2d00", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:19:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5}]}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[], 0x0, 0xe02}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:19:49 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001140)=[{&(0x7f0000000140)="bac961fa41eb70483e6f54b15dabff9f523f6b1f97a81ae7cb3d6470be9662efeb4d39009ed6c166071d986013426967fbf1599d7563c39d7b749e60bec548411e2a299ee3315b7c5e1455a8c2fcef7fb793416f510c40176c44bcb0eaacf34dba62b38f39416669215b8c5a85e26f3a55a2e5cea84afb06e1181788ac26b9a80635c6a725ec8949d35c641cbec9d78c92f13135178a1706fdacb2393bde46cc9d2e4247c3ed5668a2269e325153d594480299c6256a9e89b4f2c23fba", 0xbd}], 0x1) 17:19:49 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x0, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:19:49 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x9) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) 17:19:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5}]}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[], 0x0, 0xe02}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:19:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5}]}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[], 0x0, 0xe02}) 17:19:49 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x9) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) 17:19:50 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) [ 862.793581][T11452] 9pnet_fd: Insufficient options for proto=fd [ 863.008416][ T5084] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 863.193527][ T5084] usb 6-1: device descriptor read/64, error 18 [ 863.463605][ T5084] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 863.468028][T11465] 9pnet_fd: Insufficient options for proto=fd [ 863.652873][ T5084] usb 6-1: device descriptor read/64, error 18 [ 863.776709][ T5084] usb usb6-port1: attempt power cycle [ 864.182651][ T5084] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 864.382707][ T5084] usb 6-1: device descriptor read/8, error -61 [ 864.652525][ T5084] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 864.842814][ T5084] usb 6-1: device descriptor read/8, error -61 [ 864.973265][ T5084] usb usb6-port1: unable to enumerate USB device 17:19:52 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 17:19:52 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:19:52 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x9) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) 17:19:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5}]}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[], 0x0, 0xe02}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:19:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5}]}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[], 0x0, 0xe02}) 17:19:52 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001140)=[{&(0x7f0000000140)="bac961fa41eb70483e6f54b15dabff9f523f6b1f97a81ae7cb3d6470be9662efeb4d39009ed6c166071d986013426967fbf1599d7563c39d7b749e60bec548411e2a299ee3315b7c5e1455a8c2fcef7fb793416f510c40176c44bcb0eaacf34dba62b38f39416669215b8c5a85e26f3a55a2e5cea84afb06e1181788ac26b9a80635c6a725ec8949d35c641cbec9d78c92f13135178a1706fdacb2393bde46cc9d2e4247c3ed5668a2269e325153d594480299c6256a9e89b4f2c23fba", 0xbd}], 0x1) 17:19:53 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:19:53 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x9) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 17:19:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5}]}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:19:53 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x0, 0x0) r1 = dup(r0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x15) 17:19:53 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x9) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 17:19:53 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="5a2be00069c864a1bd474d8e7e2ca96d58b2d74d7336a4ebf240b4455ac5c4b9e118eeadb2d00c7d84a5acb093700cae0e6851556a6a3e09cb241a5789689d15e863dd248d602f274656586736e1a5f9c6364bb3f651ce6fd220e23a50f69328c4c5888b802c6f0b0591c7f1f523a8a2f782f326a8cf66f92f722fac28386a2a29c76e49386382fcf94a0fa561228c76d55f2cc78f75c7d0b84d5958f6657489fc0bf35b08ee461b361400301d1c7a31269d0ae1a058b5bbf00849b87822e6cfa55d3bc0d9968087c17dcb5f41881f2804bb65caea90eacdaf88282a0ecb234d87ff29765c299b6b35c09c83e0ef6f3ada60a2c8e05217512500f13ba8ef32fa9d600493d0489dd99f9204421483ad277e1c865936339ce48ac8e74ae345125066828efbab591780b2f887f5c842a689012f6c7bf8da4eff4ad68b78e292f78d3a17fbd0d10e1e5d879afb5ccf10fe23849f84cc5bc45f1bbfc72f27d3b8c69c59921e41882283c302bec3addccf3c2d00", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) [ 865.845795][T11475] 9pnet_fd: Insufficient options for proto=fd [ 866.413140][ T7] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 866.612431][ T7] usb 6-1: device descriptor read/64, error 18 [ 866.895762][ T7] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 867.093113][ T7] usb 6-1: device descriptor read/64, error 18 [ 867.213274][ T7] usb usb6-port1: attempt power cycle [ 867.633398][ T7] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 867.823293][ T7] usb 6-1: device descriptor read/8, error -61 [ 868.102367][ T7] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 868.302807][ T7] usb 6-1: device descriptor read/8, error -61 [ 868.423009][ T7] usb usb6-port1: unable to enumerate USB device 17:19:56 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 17:19:56 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:19:56 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r1 = open(&(0x7f0000000a40)='./bus\x00', 0x141a42, 0x0) sendfile(r1, r0, 0x0, 0x800000080000016) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) 17:19:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:19:56 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x9) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 17:19:56 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001140)=[{&(0x7f0000000140)="bac961fa41eb70483e6f54b15dabff9f523f6b1f97a81ae7cb3d6470be9662efeb4d39009ed6c166071d986013426967fbf1599d7563c39d7b749e60bec548411e2a299ee3315b7c5e1455a8c2fcef7fb793416f510c40176c44bcb0eaacf34dba62b38f39416669215b8c5a85e26f3a55a2e5cea84afb06e1181788ac26b9a80635c6a725ec8949d35c641cbec9d78c92f13135178a1706fdacb2393bde46cc9d2e4247c3ed5668a2269e325153d594480299c6256a9e89b4f2c23fba7ae0dd68d7ed", 0xc3}], 0x1) 17:19:56 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:19:56 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) sendfile(r0, r0, 0x0, 0x24002da8) 17:19:56 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, 0x0, 0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x9) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 17:19:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:19:56 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, 0x0, 0x0) 17:19:56 executing program 4: socket$inet_sctp(0x2, 0x0, 0x84) syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000345000/0x4000)=nil, &(0x7f00003aa000/0x2000)=nil, 0x0, &(0x7f0000000480)) syz_open_dev$sndmidi(0x0, 0x2, 0x0) dup(0xffffffffffffffff) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4c6) syz_io_uring_setup(0x4aa8, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000d6000/0x3000)=nil, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f00000004c0), 0x5, 0x262000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, {0x13}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x5) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2200]}}], 0xffc8) syz_emit_ethernet(0x0, 0x0, 0x0) [ 869.445146][ T5099] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 869.633399][ T5099] usb 6-1: device descriptor read/64, error 18 [ 869.902773][ T5099] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 870.092605][ T5099] usb 6-1: device descriptor read/64, error 18 [ 870.216856][ T5099] usb usb6-port1: attempt power cycle [ 870.624147][ T5099] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 870.796038][ T5099] usb 6-1: device descriptor read/8, error -61 [ 871.062964][ T5099] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 871.236864][ T5099] usb 6-1: device descriptor read/8, error -61 [ 871.353682][ T5099] usb usb6-port1: unable to enumerate USB device 17:19:59 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 17:19:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:19:59 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, 0x0, 0x0) 17:19:59 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, 0x0, 0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x9) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 17:19:59 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, 0x0) 17:19:59 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001140)=[{&(0x7f0000000140)="bac961fa41eb70483e6f54b15dabff9f523f6b1f97a81ae7cb3d6470be9662efeb4d39009ed6c166071d986013426967fbf1599d7563c39d7b749e60bec548411e2a299ee3315b7c5e1455a8c2fcef7fb793416f510c40176c44bcb0eaacf34dba62b38f39416669215b8c5a85e26f3a55a2e5cea84afb06e1181788ac26b9a80635c6a725ec8949d35c641cbec9d78c92f13135178a1706fdacb2393bde46cc9d2e4247c3ed5668a2269e325153d594480299c6256a9e89b4f2c23fba7ae0dd68d7ed", 0xc3}], 0x1) 17:19:59 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, 0x0, 0x0) 17:19:59 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, 0x0, 0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x9) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 17:19:59 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, 0x0) 17:19:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:20:00 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}], 0x3) 17:20:00 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x9) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) [ 872.962486][ T5089] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 873.173550][ T5089] usb 6-1: device descriptor read/64, error 18 [ 873.442855][ T5089] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 873.642743][ T5089] usb 6-1: device descriptor read/64, error 18 [ 873.763124][ T5089] usb usb6-port1: attempt power cycle [ 874.172486][ T5089] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 874.372579][ T5089] usb 6-1: device descriptor read/8, error -61 [ 874.652470][ T5089] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 874.842585][ T5089] usb 6-1: device descriptor read/8, error -61 [ 874.962863][ T5089] usb usb6-port1: unable to enumerate USB device 17:20:02 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 17:20:02 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, 0x0) 17:20:02 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="5a2be00069c864a1bd474d8e7e2ca96d58b2d74d7336a4ebf240b4455ac5c4b9e118eeadb2d00c7d84a5acb093700cae0e6851556a6a3e09cb241a5789689d15e863dd248d602f274656586736e1a5f9c6364bb3f651ce6fd220e23a50f69328c4c5888b802c6f0b0591c7f1f523a8a2f782f326a8cf66f92f722fac28386a2a29c76e49386382fcf94a0fa561228c76d55f2cc78f75c7d0b84d5958f6657489fc0bf35b08ee461b361400301d1c7a31269d0ae1a058b5bbf00849b87822e6cfa55d3bc0d9968087c17dcb5f41881f2804bb65caea90eacdaf88282a0ecb234d87ff29765c299b6b35c09c83e0ef6f3ada60a2c8e05217512500f13ba8ef32fa9d600493d0489dd99f9204421483ad277e1c865936339ce48ac8e74ae345125066828efbab591780b2f887f5c842a689012f6c7bf8da4eff4ad68b78e292f78d3a17fbd0d10e1e5d879afb5ccf10fe23849f84cc5bc45f1bbfc72f27d3b8c69c59921e41882283c302bec3addccf3c2d00", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}], 0x3) 17:20:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5}]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 17:20:02 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x9) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 17:20:02 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001140)=[{&(0x7f0000000140)="bac961fa41eb70483e6f54b15dabff9f523f6b1f97a81ae7cb3d6470be9662efeb4d39009ed6c166071d986013426967fbf1599d7563c39d7b749e60bec548411e2a299ee3315b7c5e1455a8c2fcef7fb793416f510c40176c44bcb0eaacf34dba62b38f39416669215b8c5a85e26f3a55a2e5cea84afb06e1181788ac26b9a80635c6a725ec8949d35c641cbec9d78c92f13135178a1706fdacb2393bde46cc9d2e4247c3ed5668a2269e325153d594480299c6256a9e89b4f2c23fba7ae0dd68d7ed", 0xc3}], 0x1) 17:20:02 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, 0x0) 17:20:02 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}], 0x3) 17:20:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5}]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 17:20:03 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x9) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 17:20:03 executing program 4: ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) 17:20:03 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {0x0}], 0x4) [ 876.183279][ T5099] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 876.372438][ T5099] usb 6-1: device descriptor read/64, error 18 [ 876.642549][ T5099] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 876.834065][ T5099] usb 6-1: device descriptor read/64, error 18 [ 876.956634][ T5099] usb usb6-port1: attempt power cycle [ 877.362615][ T5099] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 877.533248][ T5099] usb 6-1: device descriptor read/8, error -61 [ 877.802445][ T5099] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 877.983054][ T5099] usb 6-1: device descriptor read/8, error -61 [ 878.102700][ T5099] usb usb6-port1: unable to enumerate USB device 17:20:05 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12014000246b9f401320610475f36ff82a010902"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 17:20:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5}]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 17:20:05 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x9) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 17:20:05 executing program 4: ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) 17:20:05 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {0x0}], 0x4) 17:20:05 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001140)=[{&(0x7f0000000140)="bac961fa41eb70483e6f54b15dabff9f523f6b1f97a81ae7cb3d6470be9662efeb4d39009ed6c166071d986013426967fbf1599d7563c39d7b749e60bec548411e2a299ee3315b7c5e1455a8c2fcef7fb793416f510c40176c44bcb0eaacf34dba62b38f39416669215b8c5a85e26f3a55a2e5cea84afb06e1181788ac26b9a80635c6a725ec8949d35c641cbec9d78c92f13135178a1706fdacb2393bde46cc9d2e4247c3ed5668a2269e325153d594480299c6256a9e89b4f2c23fba7ae0dd68d7edc30ea0", 0xc6}], 0x1) 17:20:06 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {0x0}], 0x4) 17:20:06 executing program 4: ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) 17:20:06 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x9) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 17:20:06 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="5a2be00069c864a1bd474d8e7e2ca96d58b2d74d7336a4ebf240b4455ac5c4b9e118eeadb2d00c7d84a5acb093700cae0e6851556a6a3e09cb241a5789689d15e863dd248d602f274656586736e1a5f9c6364bb3f651ce6fd220e23a50f69328c4c5888b802c6f0b0591c7f1f523a8a2f782f326a8cf66f92f722fac28386a2a29c76e49386382fcf94a0fa561228c76d55f2cc78f75c7d0b84d5958f6657489fc0bf35b08ee461b361400301d1c7a31269d0ae1a058b5bbf00849b87822e6cfa55d3bc0d9968087c17dcb5f41881f2804bb65caea90eacdaf88282a0ecb234d87ff29765c299b6b35c09c83e0ef6f3ada60a2c8e05217512500f13ba8ef32fa9d600493d0489dd99f9204421483ad277e1c865936339ce48ac8e74ae345125066828efbab591780b2f887f5c842a689012f6c7bf8da4eff4ad68b78e292f78d3a17fbd0d10e1e5d879afb5ccf10fe23849f84cc5bc45f1bbfc72f27d3b8c69c59921e41882283c302bec3addccf3c2d00", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)}], 0x4) 17:20:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:20:06 executing program 4: r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, 0x0) [ 879.494041][ T5099] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 879.853244][ T5099] usb 6-1: config 0 has no interfaces? [ 880.016223][ T5099] usb 6-1: New USB device found, idVendor=2013, idProduct=0461, bcdDevice=f3.75 [ 880.016375][ T5099] usb 6-1: New USB device strings: Mfr=111, Product=248, SerialNumber=42 [ 880.016501][ T5099] usb 6-1: Product: syz [ 880.016591][ T5099] usb 6-1: Manufacturer: syz [ 880.016683][ T5099] usb 6-1: SerialNumber: syz [ 880.026361][ T5099] usb 6-1: config 0 descriptor?? 17:20:09 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12014000246b9f401320610475f36ff82a010902"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 17:20:09 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x9) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 17:20:09 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)}], 0x4) 17:20:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:20:09 executing program 4: r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, 0x0) 17:20:09 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001140)=[{&(0x7f0000000140)="bac961fa41eb70483e6f54b15dabff9f523f6b1f97a81ae7cb3d6470be9662efeb4d39009ed6c166071d986013426967fbf1599d7563c39d7b749e60bec548411e2a299ee3315b7c5e1455a8c2fcef7fb793416f510c40176c44bcb0eaacf34dba62b38f39416669215b8c5a85e26f3a55a2e5cea84afb06e1181788ac26b9a80635c6a725ec8949d35c641cbec9d78c92f13135178a1706fdacb2393bde46cc9d2e4247c3ed5668a2269e325153d594480299c6256a9e89b4f2c23fba7ae0dd68d7edc30ea0", 0xc6}], 0x1) [ 882.190077][ T5089] usb 6-1: USB disconnect, device number 78 17:20:09 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff01800000"], 0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x9) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 17:20:09 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001140)=[{&(0x7f0000000140)="bac961fa41eb70483e6f54b15dabff9f523f6b1f97a81ae7cb3d6470be9662efeb4d39009ed6c166071d986013426967fbf1599d7563c39d7b749e60bec548411e2a299ee3315b7c5e1455a8c2fcef7fb793416f510c40176c44bcb0eaacf34dba62b38f39416669215b8c5a85e26f3a55a2e5cea84afb06e1181788ac26b9a80635c6a725ec8949d35c641cbec9d78c92f13135178a1706fdacb2393bde46cc9d2e4247c3ed5668a2269e325153d594480299c6256a9e89b4f2c23fba7ae0dd68d7edc30ea0", 0xc6}], 0x1) 17:20:09 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)}], 0x4) 17:20:09 executing program 4: r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, 0x0) 17:20:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:20:10 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) [ 882.912537][ T5099] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 883.283410][ T5099] usb 6-1: config 0 has no interfaces? [ 883.453061][ T5099] usb 6-1: New USB device found, idVendor=2013, idProduct=0461, bcdDevice=f3.75 [ 883.453235][ T5099] usb 6-1: New USB device strings: Mfr=111, Product=248, SerialNumber=42 [ 883.453349][ T5099] usb 6-1: Product: syz [ 883.453440][ T5099] usb 6-1: Manufacturer: syz [ 883.453531][ T5099] usb 6-1: SerialNumber: syz [ 883.460513][ T5099] usb 6-1: config 0 descriptor?? 17:20:12 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12014000246b9f401320610475f36ff82a010902"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 17:20:12 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="5a2be00069c864a1bd474d8e7e2ca96d58b2d74d7336a4ebf240b4455ac5c4b9e118eeadb2d00c7d84a5acb093700cae0e6851556a6a3e09cb241a5789689d15e863dd248d602f274656586736e1a5f9c6364bb3f651ce6fd220e23a50f69328c4c5888b802c6f0b0591c7f1f523a8a2f782f326a8cf66f92f722fac28386a2a29c76e49386382fcf94a0fa561228c76d55f2cc78f75c7d0b84d5958f6657489fc0bf35b08ee461b361400301d1c7a31269d0ae1a058b5bbf00849b87822e6cfa55d3bc0d9968087c17dcb5f41881f2804bb65caea90eacdaf88282a0ecb234d87ff29765c299b6b35c09c83e0ef6f3ada60a2c8e05217512500f13ba8ef32fa9d600493d0489dd99f9204421483ad277e1c865936339ce48ac8e74ae345125066828efbab591780b2f887f5c842a689012f6c7bf8da4eff4ad68b78e292f78d3a17fbd0d10e1e5d879afb5ccf10fe23849f84cc5bc45f1bbfc72f27d3b8c69c59921e41882283c302bec3addccf3c2d00", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f6", 0x8}], 0x4) 17:20:12 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff01800000"], 0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x9) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 17:20:12 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000080)={[{0x5}]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 17:20:12 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) 17:20:12 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001140)=[{&(0x7f0000000140)="bac961fa41eb70483e6f54b15dabff9f523f6b1f97a81ae7cb3d6470be9662efeb4d39009ed6c166071d986013426967fbf1599d7563c39d7b749e60bec548411e2a299ee3315b7c5e1455a8c2fcef7fb793416f510c40176c44bcb0eaacf34dba62b38f39416669215b8c5a85e26f3a55a2e5cea84afb06e1181788ac26b9a80635c6a725ec8949d35c641cbec9d78c92f13135178a1706fdacb2393bde46cc9d2e4247c3ed5668a2269e325153d594480299c6256a9e89b4f2c23fba7ae0dd68d7edc30ea0681b", 0xc8}], 0x1) [ 885.585653][ T5084] usb 6-1: USB disconnect, device number 79 17:20:12 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000080)={[{0x5}]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 17:20:12 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f6", 0x8}], 0x4) 17:20:12 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff01800000"], 0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x9) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 17:20:13 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) 17:20:13 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000080)={[{0x5}]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 17:20:13 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f6", 0x8}], 0x4) [ 886.333635][ T7] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 886.703323][ T7] usb 6-1: config 0 has no interfaces? [ 886.865556][ T7] usb 6-1: New USB device found, idVendor=2013, idProduct=0461, bcdDevice=f3.75 [ 886.865707][ T7] usb 6-1: New USB device strings: Mfr=111, Product=248, SerialNumber=42 [ 886.865828][ T7] usb 6-1: Product: syz [ 886.865917][ T7] usb 6-1: Manufacturer: syz [ 886.866009][ T7] usb 6-1: SerialNumber: syz [ 886.871165][ T7] usb 6-1: config 0 descriptor?? [ 888.753155][ T1192] ieee802154 phy0 wpan0: encryption failed: -22 [ 888.759752][ T1192] ieee802154 phy1 wpan1: encryption failed: -22 17:20:16 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032"], 0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x9) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 17:20:16 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, 0x0) 17:20:16 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12014000246b9f401320610475f36ff82a010902fcff0000000000090400"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 17:20:16 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001140)=[{&(0x7f0000000140)="bac961fa41eb70483e6f54b15dabff9f523f6b1f97a81ae7cb3d6470be9662efeb4d39009ed6c166071d986013426967fbf1599d7563c39d7b749e60bec548411e2a299ee3315b7c5e1455a8c2fcef7fb793416f510c40176c44bcb0eaacf34dba62b38f39416669215b8c5a85e26f3a55a2e5cea84afb06e1181788ac26b9a80635c6a725ec8949d35c641cbec9d78c92f13135178a1706fdacb2393bde46cc9d2e4247c3ed5668a2269e325153d594480299c6256a9e89b4f2c23fba7ae0dd68d7edc30ea0681b", 0xc8}], 0x1) 17:20:16 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c090000", 0xc}], 0x4) 17:20:16 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000000080)={[{0x5}]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 888.954222][ T7] usb 6-1: USB disconnect, device number 80 17:20:16 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c090000", 0xc}], 0x4) 17:20:16 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000000080)={[{0x5}]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 17:20:16 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032"], 0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x9) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 17:20:17 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000000080)={[{0x5}]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 17:20:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000013000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000040)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c7], 0x0, 0xe02}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:20:17 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c090000", 0xc}], 0x4) 17:20:17 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032"], 0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x9) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) [ 889.654137][ T5084] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 890.013507][ T5084] usb 6-1: config index 0 descriptor too short (expected 65532, got 27) [ 890.013633][ T5084] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 890.013743][ T5084] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 890.013846][ T5084] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 890.173690][ T5084] usb 6-1: New USB device found, idVendor=2013, idProduct=0461, bcdDevice=f3.75 [ 890.173840][ T5084] usb 6-1: New USB device strings: Mfr=111, Product=248, SerialNumber=42 [ 890.173973][ T5084] usb 6-1: Product: syz [ 890.174062][ T5084] usb 6-1: Manufacturer: syz [ 890.174155][ T5084] usb 6-1: SerialNumber: syz [ 890.178974][ T5084] usb 6-1: config 0 descriptor?? 17:20:19 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12014000246b9f401320610475f36ff82a010902fcff0000000000090400"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 17:20:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:20:19 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x9) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 17:20:19 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="5a2be00069c864a1bd474d8e7e2ca96d58b2d74d7336a4ebf240b4455ac5c4b9e118eeadb2d00c7d84a5acb093700cae0e6851556a6a3e09cb241a5789689d15e863dd248d602f274656586736e1a5f9c6364bb3f651ce6fd220e23a50f69328c4c5888b802c6f0b0591c7f1f523a8a2f782f326a8cf66f92f722fac28386a2a29c76e49386382fcf94a0fa561228c76d55f2cc78f75c7d0b84d5958f6657489fc0bf35b08ee461b361400301d1c7a31269d0ae1a058b5bbf00849b87822e6cfa55d3bc0d9968087c17dcb5f41881f2804bb65caea90eacdaf88282a0ecb234d87ff29765c299b6b35c09c83e0ef6f3ada60a2c8e05217512500f13ba8ef32fa9d600493d0489dd99f9204421483ad277e1c865936339ce48ac8e74ae345125066828efbab591780b2f887f5c842a689012f6c7bf8da4eff4ad68b78e292f78d3a17fbd0d10e1e5d879afb5ccf10fe23849f84cc5bc45f1bbfc72f27d3b8c69c59921e41882283c302bec3addccf3c2d00", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098", 0xe}], 0x4) 17:20:19 executing program 4: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000000)={0x0, 0x0, 0xa}) 17:20:19 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001140)=[{&(0x7f0000000140)="bac961fa41eb70483e6f54b15dabff9f523f6b1f97a81ae7cb3d6470be9662efeb4d39009ed6c166071d986013426967fbf1599d7563c39d7b749e60bec548411e2a299ee3315b7c5e1455a8c2fcef7fb793416f510c40176c44bcb0eaacf34dba62b38f39416669215b8c5a85e26f3a55a2e5cea84afb06e1181788ac26b9a80635c6a725ec8949d35c641cbec9d78c92f13135178a1706fdacb2393bde46cc9d2e4247c3ed5668a2269e325153d594480299c6256a9e89b4f2c23fba7ae0dd68d7edc30ea0681b", 0xc8}], 0x1) [ 892.310493][ T5089] usb 6-1: USB disconnect, device number 81 17:20:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:20:19 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098", 0xe}], 0x4) 17:20:19 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r2, 0x1}, 0x14}}, 0x0) 17:20:19 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff01800000080039503230"], 0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x9) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 17:20:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:20:20 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r2, 0x1}, 0x14}}, 0x0) [ 893.034757][ T5089] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 893.423743][ T5089] usb 6-1: config index 0 descriptor too short (expected 65532, got 27) [ 893.423875][ T5089] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 893.423989][ T5089] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 893.424095][ T5089] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 893.603073][ T5089] usb 6-1: New USB device found, idVendor=2013, idProduct=0461, bcdDevice=f3.75 [ 893.603223][ T5089] usb 6-1: New USB device strings: Mfr=111, Product=248, SerialNumber=42 [ 893.603339][ T5089] usb 6-1: Product: syz [ 893.603428][ T5089] usb 6-1: Manufacturer: syz [ 893.603520][ T5089] usb 6-1: SerialNumber: syz [ 893.611551][ T5089] usb 6-1: config 0 descriptor?? 17:20:22 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12014000246b9f401320610475f36ff82a010902fcff0000000000090400"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 17:20:22 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff01800000080039503230"], 0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x9) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 17:20:22 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098", 0xe}], 0x4) 17:20:22 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000000080)={[{0x5}]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 17:20:22 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r2, 0x1}, 0x14}}, 0x0) 17:20:22 executing program 0: socket$inet_sctp(0x2, 0x0, 0x84) syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000345000/0x4000)=nil, &(0x7f00003aa000/0x2000)=nil, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x0) dup(0xffffffffffffffff) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4c6) syz_io_uring_setup(0x4aa8, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000d6000/0x3000)=nil, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f00000004c0), 0x5, 0x262000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, {0x13}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x5) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2200]}}], 0xffc8) [ 895.680265][ T5084] usb 6-1: USB disconnect, device number 82 17:20:23 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000000080)={[{0x5}]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 17:20:23 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r2, 0x1}, 0x14}}, 0x0) 17:20:23 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f5", 0xf}], 0x4) 17:20:23 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff01800000080039503230"], 0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x9) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 17:20:23 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, 0x0, 0x1}, 0x14}}, 0x0) [ 896.463518][ T5089] usb 6-1: new high-speed USB device number 83 using dummy_hcd 17:20:23 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000000080)={[{0x5}]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 896.823654][ T5089] usb 6-1: config index 0 descriptor too short (expected 65532, got 27) [ 896.832686][ T5089] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 896.841038][ T5089] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 896.851707][ T5089] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 897.134613][ T5089] usb 6-1: New USB device found, idVendor=2013, idProduct=0461, bcdDevice=f3.75 [ 897.144072][ T5089] usb 6-1: New USB device strings: Mfr=111, Product=248, SerialNumber=42 [ 897.152903][ T5089] usb 6-1: Product: syz [ 897.157270][ T5089] usb 6-1: Manufacturer: syz [ 897.162222][ T5089] usb 6-1: SerialNumber: syz [ 897.288611][ T5089] usb 6-1: config 0 descriptor?? 17:20:26 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x22, &(0x7f0000000180), 0xc) 17:20:26 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f5", 0xf}], 0x4) 17:20:26 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030"], 0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x9) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 17:20:26 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 17:20:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 899.139645][ T5089] usb 6-1: USB disconnect, device number 83 17:20:26 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12014000246b9f401320610475f36ff82a010902fcff0000000000090400000113ac82"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 17:20:26 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 17:20:26 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = dup2(r1, r0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0xf, &(0x7f00000000c0), 0xc) 17:20:26 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="5a2be00069c864a1bd474d8e7e2ca96d58b2d74d7336a4ebf240b4455ac5c4b9e118eeadb2d00c7d84a5acb093700cae0e6851556a6a3e09cb241a5789689d15e863dd248d602f274656586736e1a5f9c6364bb3f651ce6fd220e23a50f69328c4c5888b802c6f0b0591c7f1f523a8a2f782f326a8cf66f92f722fac28386a2a29c76e49386382fcf94a0fa561228c76d55f2cc78f75c7d0b84d5958f6657489fc0bf35b08ee461b361400301d1c7a31269d0ae1a058b5bbf00849b87822e6cfa55d3bc0d9968087c17dcb5f41881f2804bb65caea90eacdaf88282a0ecb234d87ff29765c299b6b35c09c83e0ef6f3ada60a2c8e05217512500f13ba8ef32fa9d600493d0489dd99f9204421483ad277e1c865936339ce48ac8e74ae345125066828efbab591780b2f887f5c842a689012f6c7bf8da4eff4ad68b78e292f78d3a17fbd0d10e1e5d879afb5ccf10fe23849f84cc5bc45f1bbfc72f27d3b8c69c59921e41882283c302bec3addccf3c2d00", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc132d", 0xc2}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f5", 0xf}], 0x4) 17:20:26 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030"], 0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x9) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 17:20:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 899.852963][ T5084] usb 6-1: new high-speed USB device number 84 using dummy_hcd 17:20:27 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r0) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 900.213444][ T5084] usb 6-1: config index 0 descriptor too short (expected 65532, got 27) [ 900.222288][ T5084] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 900.230648][ T5084] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 900.241341][ T5084] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 900.250663][ T5084] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 17:20:27 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x3) 17:20:27 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030"], 0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x9) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 17:20:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 900.664150][ T5084] usb 6-1: New USB device found, idVendor=2013, idProduct=0461, bcdDevice=f3.75 [ 900.673594][ T5084] usb 6-1: New USB device strings: Mfr=111, Product=248, SerialNumber=42 [ 900.682447][ T5084] usb 6-1: Product: syz [ 900.686829][ T5084] usb 6-1: Manufacturer: syz [ 900.691653][ T5084] usb 6-1: SerialNumber: syz 17:20:27 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r0) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 900.874911][ T5084] usb 6-1: config 0 descriptor?? 17:20:28 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = dup2(r0, r1) sendto$inet6(r2, &(0x7f0000000080)='|', 0x1, 0x0, &(0x7f0000000140)={0x1c, 0x1c}, 0x1c) 17:20:29 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12014000246b9f401320610475f36ff82a010902fcff0000000000090400000113ac82"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 17:20:29 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x9) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 17:20:29 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x3) 17:20:29 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r0) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r1, 0x1}, 0x14}}, 0x0) 17:20:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:20:29 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x101, &(0x7f0000000040), &(0x7f0000000100)=0x98) [ 902.567013][ T7] usb 6-1: USB disconnect, device number 84 17:20:29 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x3) 17:20:29 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r1, 0x1}, 0x14}}, 0x0) 17:20:30 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = dup2(r1, r0) sendmsg$inet_sctp(r2, &(0x7f0000000740)={&(0x7f00000000c0)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000000900)=[@init={0x14}, @sndrcv={0x2c}, @sndrcv={0x2c}, @authinfo={0x10}, @sndinfo={0x1c}, @sndinfo={0x1c}], 0xb4}, 0x0) 17:20:30 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x9) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 17:20:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 903.249729][ T5084] usb 6-1: new high-speed USB device number 85 using dummy_hcd 17:20:30 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {0x0}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) [ 903.613501][ T5084] usb 6-1: config index 0 descriptor too short (expected 65532, got 27) [ 903.622517][ T5084] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 903.630841][ T5084] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 903.641364][ T5084] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 903.651253][ T5084] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 903.887826][ T5084] usb 6-1: New USB device found, idVendor=2013, idProduct=0461, bcdDevice=f3.75 [ 903.897371][ T5084] usb 6-1: New USB device strings: Mfr=111, Product=248, SerialNumber=42 [ 903.906231][ T5084] usb 6-1: Product: syz [ 903.910604][ T5084] usb 6-1: Manufacturer: syz [ 903.915555][ T5084] usb 6-1: SerialNumber: syz [ 904.085664][ T5084] usb 6-1: config 0 descriptor?? 17:20:33 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12014000246b9f401320610475f36ff82a010902fcff0000000000090400000113ac82"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 17:20:33 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r1, 0x1}, 0x14}}, 0x0) 17:20:33 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x9) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 17:20:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:20:33 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {0x0}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:20:33 executing program 0: ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x2000556c, &(0x7f0000000000)) syz_emit_ethernet(0x16, &(0x7f0000000000)={@local}, 0x0) [ 905.939708][ T5084] usb 6-1: USB disconnect, device number 85 17:20:33 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r1, 0x1}, 0x14}}, 0x0) 17:20:33 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x57) 17:20:33 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {0x0}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:20:33 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x9) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 17:20:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 906.653391][ T7] usb 6-1: new high-speed USB device number 86 using dummy_hcd 17:20:33 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, r0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r2, 0x1}, 0x14}}, 0x0) [ 907.013173][ T7] usb 6-1: config index 0 descriptor too short (expected 65532, got 27) [ 907.021948][ T7] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 907.030565][ T7] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 907.044627][ T7] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 907.054469][ T7] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 907.373758][ T7] usb 6-1: New USB device found, idVendor=2013, idProduct=0461, bcdDevice=f3.75 [ 907.384356][ T7] usb 6-1: New USB device strings: Mfr=111, Product=248, SerialNumber=42 [ 907.393869][ T7] usb 6-1: Product: syz [ 907.398364][ T7] usb 6-1: Manufacturer: syz [ 907.403446][ T7] usb 6-1: SerialNumber: syz [ 907.461849][ T7] usb 6-1: config 0 descriptor?? 17:20:36 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12014000246b9f401320610475f36ff82a010902fcff0000000000090400000113ac82000905"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) [ 909.263412][ T5084] usb 6-1: USB disconnect, device number 86 17:20:36 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:20:36 executing program 0: setgroups(0x5, &(0x7f0000000280)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0]) 17:20:36 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x9) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 17:20:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:20:36 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, r0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r2, 0x1}, 0x14}}, 0x0) 17:20:36 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, r0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r2, 0x1}, 0x14}}, 0x0) 17:20:36 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x901, &(0x7f0000000200), 0x8) 17:20:36 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:20:36 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x9) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 17:20:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:20:37 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) setsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000000040), 0x10) [ 910.023070][ T5089] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 910.386372][ T5089] usb 6-1: config index 0 descriptor too short (expected 65532, got 27) [ 910.396030][ T5089] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 910.404546][ T5089] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 910.413774][ T5089] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 910.692898][ T5089] usb 6-1: New USB device found, idVendor=2013, idProduct=0461, bcdDevice=f3.75 [ 910.702355][ T5089] usb 6-1: New USB device strings: Mfr=111, Product=248, SerialNumber=42 [ 910.711025][ T5089] usb 6-1: Product: syz [ 910.715587][ T5089] usb 6-1: Manufacturer: syz [ 910.723712][ T5089] usb 6-1: SerialNumber: syz [ 910.753370][ T5089] usb 6-1: config 0 descriptor?? 17:20:39 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12014000246b9f401320610475f36ff82a010902fcff0000000000090400000113ac82000905"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 17:20:39 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r1, 0x1}, 0x14}}, 0x0) 17:20:39 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:20:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000080)={[{0x5}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:20:39 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x9) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 17:20:39 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x22, &(0x7f00000004c0), &(0x7f0000000600)=0xc) [ 912.610605][ T5089] usb 6-1: USB disconnect, device number 87 17:20:40 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r1, 0x1}, 0x14}}, 0x0) 17:20:40 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6b", 0x61}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:20:40 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x9) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 17:20:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000080)={[{0x5}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 913.192437][ T5084] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 913.573517][ T5084] usb 6-1: config index 0 descriptor too short (expected 65532, got 27) [ 913.582310][ T5084] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 913.594112][ T5084] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 913.605022][ T5084] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping 17:20:40 executing program 0: symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file1\x00') 17:20:40 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 913.863929][ T5084] usb 6-1: New USB device found, idVendor=2013, idProduct=0461, bcdDevice=f3.75 [ 913.873412][ T5084] usb 6-1: New USB device strings: Mfr=111, Product=248, SerialNumber=42 [ 913.882242][ T5084] usb 6-1: Product: syz [ 913.886627][ T5084] usb 6-1: Manufacturer: syz [ 913.891429][ T5084] usb 6-1: SerialNumber: syz [ 914.019353][ T5084] usb 6-1: config 0 descriptor?? 17:20:43 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6b", 0x61}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:20:43 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x9) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 17:20:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000080)={[{0x5}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:20:43 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0xffffffffffffffcc, 0x1c, 0x1}, 0x1c) r1 = dup(r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f0000000700)={0x1, [0x0]}, &(0x7f0000000200)=0x8) r2 = socket$inet6_sctp(0x1c, 0x5, 0x84) r3 = dup(r2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x105, &(0x7f0000000700)={0x1, [0x0]}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x1a, &(0x7f0000000040)={r4}, 0x8) [ 915.946405][ T5084] usb 6-1: USB disconnect, device number 88 17:20:43 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r0) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r1, 0x1}, 0x14}}, 0x0) 17:20:43 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12014000246b9f401320610475f36ff82a010902fcff0000000000090400000113ac82000905"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 17:20:43 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6b", 0x61}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:20:43 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r0) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r1, 0x1}, 0x14}}, 0x0) 17:20:43 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x9) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 17:20:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 916.782519][ T5089] usb 6-1: new high-speed USB device number 89 using dummy_hcd 17:20:44 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = dup2(r0, r1) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x1a, &(0x7f0000000000), 0x5) 17:20:44 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="5a2be00069c864a1bd474d8e7e2ca96d58b2d74d7336a4ebf240b4455ac5c4b9e118eeadb2d00c7d84a5acb093700cae0e6851556a6a3e09cb241a5789689d15e863dd248d602f274656586736e1a5f9c6364bb3f651ce6fd220e23a50f69328c4c5888b802c6f0b0591c7f1f523a8a2f782f326a8cf66f92f722fac28386a2a29c76e49386382fcf94a0fa561228c76d55f2cc78f75c7d0b84d5958f6657489fc0bf35b08ee461b361400301d1c7a31269d0ae1a058b5bbf00849b87822e6cfa55d3bc0d9968087c17dcb5f41881f2804bb65caea90eacdaf88282a0ecb234d87ff29765c299b6b35c09c83e0ef6f3ada60a2c8e05217512500f13ba8ef32fa9d600493d0489dd99f9204421483ad277e1c865936339ce48ac8e74ae345125066828efbab591780b2f887f5c842a689012f6c7bf8da4eff4ad68b78e292f78d3a17fbd0d10e1e5d879afb5ccf10fe23849f84cc5bc45f1bbfc72f27d3b8c69c59921e41882283c302bec3addccf3c2d00", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615", 0x92}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:20:44 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x9) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 17:20:44 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r0) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 917.162715][ T5089] usb 6-1: config index 0 descriptor too short (expected 65532, got 27) [ 917.174753][ T5089] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 917.184163][ T5089] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 917.193393][ T5089] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 917.404005][ T5089] usb 6-1: New USB device found, idVendor=2013, idProduct=0461, bcdDevice=f3.75 [ 917.413520][ T5089] usb 6-1: New USB device strings: Mfr=111, Product=248, SerialNumber=42 [ 917.422327][ T5089] usb 6-1: Product: syz [ 917.426692][ T5089] usb 6-1: Manufacturer: syz [ 917.431506][ T5089] usb 6-1: SerialNumber: syz [ 917.604400][ T5089] usb 6-1: config 0 descriptor?? 17:20:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:20:44 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="5a2be00069c864a1bd474d8e7e2ca96d58b2d74d7336a4ebf240b4455ac5c4b9e118eeadb2d00c7d84a5acb093700cae0e6851556a6a3e09cb241a5789689d15e863dd248d602f274656586736e1a5f9c6364bb3f651ce6fd220e23a50f69328c4c5888b802c6f0b0591c7f1f523a8a2f782f326a8cf66f92f722fac28386a2a29c76e49386382fcf94a0fa561228c76d55f2cc78f75c7d0b84d5958f6657489fc0bf35b08ee461b361400301d1c7a31269d0ae1a058b5bbf00849b87822e6cfa55d3bc0d9968087c17dcb5f41881f2804bb65caea90eacdaf88282a0ecb234d87ff29765c299b6b35c09c83e0ef6f3ada60a2c8e05217512500f13ba8ef32fa9d600493d0489dd99f9204421483ad277e1c865936339ce48ac8e74ae345125066828efbab591780b2f887f5c842a689012f6c7bf8da4eff4ad68b78e292f78d3a17fbd0d10e1e5d879afb5ccf10fe23849f84cc5bc45f1bbfc72f27d3b8c69c59921e41882283c302bec3addccf3c2d00", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615", 0x92}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:20:44 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, 0x0, 0x0) 17:20:46 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000080), 0x88) 17:20:46 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x9) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 17:20:46 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12014000246b9f401320610475f36ff82a010902fcff0000000000090400000113ac8200090583"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 17:20:46 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, 0x0, 0x0) 17:20:46 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615", 0x92}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:20:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 919.385362][ T5084] usb 6-1: USB disconnect, device number 89 17:20:46 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x9) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 17:20:46 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = dup2(r1, r0) r3 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r3, &(0x7f0000000000)={0xffffffffffffffcc, 0x1c, 0x1}, 0x1c) r4 = dup(r3) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x105, &(0x7f0000000700)={0x1, [0x0]}, &(0x7f0000000200)=0x8) r5 = socket$inet6_sctp(0x1c, 0x5, 0x84) r6 = dup(r5) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x105, &(0x7f0000000700)={0x1, [0x0]}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x26, &(0x7f0000000340)={r7}, &(0x7f0000000380)=0x8) 17:20:46 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="5a2be00069c864a1bd474d8e7e2ca96d58b2d74d7336a4ebf240b4455ac5c4b9e118eeadb2d00c7d84a5acb093700cae0e6851556a6a3e09cb241a5789689d15e863dd248d602f274656586736e1a5f9c6364bb3f651ce6fd220e23a50f69328c4c5888b802c6f0b0591c7f1f523a8a2f782f326a8cf66f92f722fac28386a2a29c76e49386382fcf94a0fa561228c76d55f2cc78f75c7d0b84d5958f6657489fc0bf35b08ee461b361400301d1c7a31269d0ae1a058b5bbf00849b87822e6cfa55d3bc0d9968087c17dcb5f41881f2804bb65caea90eacdaf88282a0ecb234d87ff29765c299b6b35c09c83e0ef6f3ada60a2c8e05217512500f13ba8ef32fa9d600493d0489dd99f9204421483ad277e1c865936339ce48ac8e74ae345125066828efbab591780b2f887f5c842a689012f6c7bf8da4eff4ad68b78e292f78d3a17fbd0d10e1e5d879afb5ccf10fe23849f84cc5bc45f1bbfc72f27d3b8c69c59921e41882283c302bec3addccf3c2d00", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095d", 0xaa}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:20:46 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, 0x0, 0x0) 17:20:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 920.073631][ T5089] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 920.453194][ T5089] usb 6-1: config index 0 descriptor too short (expected 65532, got 27) [ 920.461842][ T5089] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 920.470344][ T5089] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 920.479649][ T5089] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 17:20:47 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095d", 0xaa}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:20:47 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x9) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) [ 920.872720][ T5089] usb 6-1: New USB device found, idVendor=2013, idProduct=0461, bcdDevice=f3.75 [ 920.882537][ T5089] usb 6-1: New USB device strings: Mfr=111, Product=248, SerialNumber=42 [ 920.891217][ T5089] usb 6-1: Product: syz [ 920.895751][ T5089] usb 6-1: Manufacturer: syz [ 920.900560][ T5089] usb 6-1: SerialNumber: syz [ 921.064891][ T5089] usb 6-1: config 0 descriptor?? [ 921.115745][ T5089] em28xx 6-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! 17:20:49 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12014000246b9f401320610475f36ff82a010902fcff0000000000090400000113ac8200090583"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 17:20:49 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000200)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="2cfccb8d29b2b286a43193c890a5b1d59e269a2f6306375f8915a2dfd800ef18f05911aa1c765160ca871b9ed88c19843f6961b96166b76b5c23", 0x3a}, {&(0x7f0000001900)="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", 0x573}], 0x2}, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f00000002c0)="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", 0x5a8}], 0x1}, 0x180) 17:20:49 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 17:20:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:20:49 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x9) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 17:20:49 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095d", 0xaa}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) [ 922.685508][ T5089] usb 6-1: USB disconnect, device number 90 17:20:50 executing program 0: faccessat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0) 17:20:50 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff01000085"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x9) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 17:20:50 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="5a2be00069c864a1bd474d8e7e2ca96d58b2d74d7336a4ebf240b4455ac5c4b9e118eeadb2d00c7d84a5acb093700cae0e6851556a6a3e09cb241a5789689d15e863dd248d602f274656586736e1a5f9c6364bb3f651ce6fd220e23a50f69328c4c5888b802c6f0b0591c7f1f523a8a2f782f326a8cf66f92f722fac28386a2a29c76e49386382fcf94a0fa561228c76d55f2cc78f75c7d0b84d5958f6657489fc0bf35b08ee461b361400301d1c7a31269d0ae1a058b5bbf00849b87822e6cfa55d3bc0d9968087c17dcb5f41881f2804bb65caea90eacdaf88282a0ecb234d87ff29765c299b6b35c09c83e0ef6f3ada60a2c8e05217512500f13ba8ef32fa9d600493d0489dd99f9204421483ad277e1c865936339ce48ac8e74ae345125066828efbab591780b2f887f5c842a689012f6c7bf8da4eff4ad68b78e292f78d3a17fbd0d10e1e5d879afb5ccf10fe23849f84cc5bc45f1bbfc72f27d3b8c69c59921e41882283c302bec3addccf3c2d00", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610", 0xb6}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:20:50 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 17:20:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:20:50 executing program 0: r0 = socket(0x2, 0x5, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x10, 0x2}, 0xb) [ 923.492993][ T5084] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 923.873392][ T5084] usb 6-1: config index 0 descriptor too short (expected 65532, got 27) [ 923.882032][ T5084] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 923.890735][ T5084] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 923.900672][ T5084] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 924.073497][ T5084] usb 6-1: New USB device found, idVendor=2013, idProduct=0461, bcdDevice=f3.75 [ 924.083632][ T5084] usb 6-1: New USB device strings: Mfr=111, Product=248, SerialNumber=42 [ 924.092516][ T5084] usb 6-1: Product: syz [ 924.096889][ T5084] usb 6-1: Manufacturer: syz [ 924.101700][ T5084] usb 6-1: SerialNumber: syz [ 924.180351][ T5084] usb 6-1: config 0 descriptor?? [ 924.244881][ T5084] em28xx 6-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! 17:20:53 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12014000246b9f401320610475f36ff82a010902fcff0000000000090400000113ac8200090583"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 17:20:53 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff01000085"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x9) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 17:20:53 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610", 0xb6}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:20:53 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 17:20:53 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000100)={0x1c, 0x1c, 0x1}, 0x1c) 17:20:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5}]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 926.195773][ T5084] usb 6-1: USB disconnect, device number 91 17:20:53 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610", 0xb6}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:20:53 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 17:20:53 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff01000085"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x9) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 17:20:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5}]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 926.882742][ T7] usb 6-1: new high-speed USB device number 92 using dummy_hcd 17:20:54 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000180)={0x10, 0x2}, 0x10) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet(r0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) r2 = dup2(r0, r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000000080)=0x8) 17:20:54 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) [ 927.243058][ T7] usb 6-1: config index 0 descriptor too short (expected 65532, got 27) [ 927.251808][ T7] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 927.260379][ T7] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 927.269824][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 927.563833][ T7] usb 6-1: New USB device found, idVendor=2013, idProduct=0461, bcdDevice=f3.75 [ 927.573726][ T7] usb 6-1: New USB device strings: Mfr=111, Product=248, SerialNumber=42 [ 927.582642][ T7] usb 6-1: Product: syz [ 927.587131][ T7] usb 6-1: Manufacturer: syz [ 927.592048][ T7] usb 6-1: SerialNumber: syz [ 927.731367][ T7] usb 6-1: config 0 descriptor?? [ 927.800123][ T7] em28xx 6-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! 17:20:56 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12014000246b9f401320610475f36ff82a010902fcff0000000000090400000113ac820009058301"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 17:20:56 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72be", 0xbc}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:20:56 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = socket(0x1c, 0x10000001, 0x84) connect$inet6(r1, &(0x7f0000000280)={0x1c, 0x1c, 0x2}, 0x1c) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x1203, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRES64=r0], 0x3ef) 17:20:56 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e00000085"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x9) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 17:20:56 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 17:20:56 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind(r0, &(0x7f0000000280)=@in6={0x1c, 0x1c}, 0x1c) [ 929.603417][ T7] usb 6-1: USB disconnect, device number 92 17:20:56 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72be", 0xbc}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:20:57 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 17:20:57 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e00000085"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x9) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) [ 930.383155][ T5084] usb 6-1: new high-speed USB device number 93 using dummy_hcd 17:20:57 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f00000000c0)="98fd3e37effe04fe0fd61f0f4d40d4057b09dde92d8294868ffb64bc284b90ee1b459a1165ffb6b348bfd8ab3ec7de1d59cc4644f3f0ef9eb983b557dbe6b79de7f8cad3fe104d3a60d04e2366e18f5b20cede7cd14ff6df62fc7c3a77259f4793d7ad6139da4241acfe2efba988e05373e52ba1517324d0d584450eb5021e9b41689cadc3d723d44d120f1e49cca8196980470055128e0da304d1f7f92abd20c0", 0xa1, 0x100, &(0x7f0000000180)={0x10, 0x2}, 0x10) 17:20:57 executing program 0: clock_gettime(0xe, &(0x7f0000000040)) 17:20:57 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, 0x0, 0x1}, 0x14}}, 0x0) [ 930.743680][ T5084] usb 6-1: config index 0 descriptor too short (expected 65532, got 27) [ 930.752519][ T5084] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 930.760848][ T5084] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 930.770294][ T5084] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 931.043091][ T5084] usb 6-1: New USB device found, idVendor=2013, idProduct=0461, bcdDevice=f3.75 [ 931.052868][ T5084] usb 6-1: New USB device strings: Mfr=111, Product=248, SerialNumber=42 [ 931.061549][ T5084] usb 6-1: Product: syz [ 931.066077][ T5084] usb 6-1: Manufacturer: syz [ 931.070924][ T5084] usb 6-1: SerialNumber: syz [ 931.169648][ T5084] usb 6-1: config 0 descriptor?? [ 931.221486][ T5084] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2013:0461, interface 0, class 0) [ 931.231256][ T5084] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 931.862668][ T5084] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 931.902811][ T5084] em28xx 6-1:0.0: Config register raw data: 0x00 17:21:00 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12014000246b9f401320610475f36ff82a010902fcff0000000000090400000113ac820009058301"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) [ 933.133923][ T5099] usb 6-1: USB disconnect, device number 93 [ 933.143214][ T5099] em28xx 6-1:0.0: Disconnecting em28xx 17:21:00 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 17:21:00 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="5a2be00069c864a1bd474d8e7e2ca96d58b2d74d7336a4ebf240b4455ac5c4b9e118eeadb2d00c7d84a5acb093700cae0e6851556a6a3e09cb241a5789689d15e863dd248d602f274656586736e1a5f9c6364bb3f651ce6fd220e23a50f69328c4c5888b802c6f0b0591c7f1f523a8a2f782f326a8cf66f92f722fac28386a2a29c76e49386382fcf94a0fa561228c76d55f2cc78f75c7d0b84d5958f6657489fc0bf35b08ee461b361400301d1c7a31269d0ae1a058b5bbf00849b87822e6cfa55d3bc0d9968087c17dcb5f41881f2804bb65caea90eacdaf88282a0ecb234d87ff29765c299b6b35c09c83e0ef6f3ada60a2c8e05217512500f13ba8ef32fa9d600493d0489dd99f9204421483ad277e1c865936339ce48ac8e74ae345125066828efbab591780b2f887f5c842a689012f6c7bf8da4eff4ad68b78e292f78d3a17fbd0d10e1e5d879afb5ccf10fe23849f84cc5bc45f1bbfc72f27d3b8c69c59921e41882283c302bec3addccf3c2d00", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72be", 0xbc}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:21:00 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e00000085"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x9) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 17:21:00 executing program 0: symlinkat(&(0x7f0000001e00)='./file1/file0\x00', 0xffffffffffffff9c, &(0x7f0000001e40)='./file1\x00') 17:21:00 executing program 1: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) sendto(r0, 0x0, 0x0, 0x20104, &(0x7f0000000180)=@in6={0x1c, 0x1c, 0x2}, 0x1c) [ 933.198193][ T5099] em28xx 6-1:0.0: Freeing device 17:21:00 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0x101, &(0x7f0000000000), &(0x7f00000000c0)=0x98) 17:21:00 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r2}, 0x14}}, 0x0) 17:21:00 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7c", 0xbf}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:21:00 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e0000008500000050"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x9) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 17:21:01 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r2}, 0x14}}, 0x0) [ 934.053110][ T5099] usb 6-1: new high-speed USB device number 94 using dummy_hcd 17:21:01 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7c", 0xbf}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) [ 934.414838][ T5099] usb 6-1: config index 0 descriptor too short (expected 65532, got 27) [ 934.423635][ T5099] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 934.431958][ T5099] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 934.441294][ T5099] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 934.733812][ T5099] usb 6-1: New USB device found, idVendor=2013, idProduct=0461, bcdDevice=f3.75 [ 934.744151][ T5099] usb 6-1: New USB device strings: Mfr=111, Product=248, SerialNumber=42 [ 934.753040][ T5099] usb 6-1: Product: syz [ 934.757418][ T5099] usb 6-1: Manufacturer: syz [ 934.762374][ T5099] usb 6-1: SerialNumber: syz [ 934.899510][ T5099] usb 6-1: config 0 descriptor?? [ 934.950785][ T5099] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2013:0461, interface 0, class 0) [ 934.960707][ T5099] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 935.592548][ T5099] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 935.632838][ T5099] em28xx 6-1:0.0: Config register raw data: 0x00 17:21:03 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12014000246b9f401320610475f36ff82a010902fcff0000000000090400000113ac820009058301"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 17:21:03 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind(r0, &(0x7f00000002c0)=@in={0x0, 0x2}, 0x33) 17:21:03 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e0000008500000050"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x9) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 17:21:03 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0xffffffffffffffcc, 0x1c, 0x1}, 0x1c) r1 = dup(r0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x0, 0x1, "e5"}, 0x9) 17:21:03 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r2}, 0x14}}, 0x0) 17:21:03 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7c", 0xbf}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) [ 936.857196][ T7] usb 6-1: USB disconnect, device number 94 [ 936.921911][ T7] em28xx 6-1:0.0: Disconnecting em28xx [ 936.961185][ T7] em28xx 6-1:0.0: Freeing device 17:21:04 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc13", 0xc1}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:21:04 executing program 1: recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x18}, 0xc) 17:21:04 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e0000008500000050"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x9) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 17:21:04 executing program 4: r0 = syz_open_pts(0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x2010, r0, 0x0) [ 937.622980][ T5099] usb 6-1: new high-speed USB device number 95 using dummy_hcd 17:21:04 executing program 4: r0 = socket$inet(0x2, 0x3, 0x0) getsockopt$sock_linger(r0, 0xffff, 0x80, 0x0, 0x0) 17:21:04 executing program 1: setuid(0xffffffffffffffff) socket$unix(0x1, 0x5, 0x0) [ 937.983208][ T5099] usb 6-1: config index 0 descriptor too short (expected 65532, got 27) [ 937.991848][ T5099] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 938.000902][ T5099] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 938.010139][ T5099] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 938.267578][ T5099] usb 6-1: New USB device found, idVendor=2013, idProduct=0461, bcdDevice=f3.75 [ 938.277099][ T5099] usb 6-1: New USB device strings: Mfr=111, Product=248, SerialNumber=42 [ 938.286615][ T5099] usb 6-1: Product: syz [ 938.290989][ T5099] usb 6-1: Manufacturer: syz [ 938.296007][ T5099] usb 6-1: SerialNumber: syz [ 938.421811][ T5099] usb 6-1: config 0 descriptor?? [ 938.477779][ T5099] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2013:0461, interface 0, class 0) [ 938.488216][ T5099] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 939.102536][ T5099] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 939.142781][ T5099] em28xx 6-1:0.0: Config register raw data: 0x00 17:21:07 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12014000246b9f401320610475f36ff82a010902fcff0000000000090400000113ac820009058301"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB='vB%'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 17:21:07 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="5a2be00069c864a1bd474d8e7e2ca96d58b2d74d7336a4ebf240b4455ac5c4b9e118eeadb2d00c7d84a5acb093700cae0e6851556a6a3e09cb241a5789689d15e863dd248d602f274656586736e1a5f9c6364bb3f651ce6fd220e23a50f69328c4c5888b802c6f0b0591c7f1f523a8a2f782f326a8cf66f92f722fac28386a2a29c76e49386382fcf94a0fa561228c76d55f2cc78f75c7d0b84d5958f6657489fc0bf35b08ee461b361400301d1c7a31269d0ae1a058b5bbf00849b87822e6cfa55d3bc0d9968087c17dcb5f41881f2804bb65caea90eacdaf88282a0ecb234d87ff29765c299b6b35c09c83e0ef6f3ada60a2c8e05217512500f13ba8ef32fa9d600493d0489dd99f9204421483ad277e1c865936339ce48ac8e74ae345125066828efbab591780b2f887f5c842a689012f6c7bf8da4eff4ad68b78e292f78d3a17fbd0d10e1e5d879afb5ccf10fe23849f84cc5bc45f1bbfc72f27d3b8c69c59921e41882283c302bec3addccf3c2d00", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc13", 0xc1}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:21:07 executing program 0: syz_emit_ethernet(0x2e, &(0x7f0000000100)={@broadcast, @random="4440867072a7", @val, {@ipv4}}, 0x0) 17:21:07 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e00000085000000500000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x9) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 17:21:07 executing program 1: open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) stat(&(0x7f0000000100)='./file0\x00', 0x0) 17:21:07 executing program 4: open(&(0x7f0000000100)='.\x00', 0x0, 0x0) [ 940.371082][ T5099] usb 6-1: USB disconnect, device number 95 [ 940.384356][ T5099] em28xx 6-1:0.0: Disconnecting em28xx [ 940.498631][ T5099] em28xx 6-1:0.0: Freeing device 17:21:07 executing program 0: openat$damon_target_ids(0xffffffffffffff9c, &(0x7f00000000c0), 0x3, 0x0) 17:21:07 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) move_mount(r1, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) 17:21:07 executing program 1: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x531101, 0x0) 17:21:07 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2e4, 0x4) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="f22e564e701cee3d69d4236e745a439db4d5e79f86e58db1e60c0aae3f544538db8eb26771b092215835b84d8d134fdfc07b1f9b9b559e6cd052995066611d2c5cad0e", 0x43}], 0x1}}], 0x2, 0x20048040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="b91412af701292c9b171c626a089e5c5e19f828bb16160e15bc8628a6700a792feb7008d40ff3b8d3b51349539b5ffd36419f1f2609f071120c64a3e7ba1c5ebe27f000000040b6d128a27485a7c8a92d12465af3a5a7c0d245e3d729f7d54", 0x5f}, {&(0x7f0000000640)="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", 0x171}, {&(0x7f0000000240)="418d10ad379150885d2899238c767a6fd21e332b248405523c96f5a2a8120aba5cce8a119a7c6c3a46f263ceeb8f3c3dda4bf2143d6146a0d6f110941c6e363c520eef0522106500b9127c16caea2c769bbaaad4650ea41e8795a0e3a7448b4a6badcf23df504cccb507671bcc2376c8259da74b8add2d7e34b053e9d0d5bbb5e06743f7ebb877aed5dff6ba5ad55a97b615044a03c61bf4ee56c2d4bda2cd475dacc5930275a827095de1667378547f4982e0f94610717074ea72beea1d7ccc13", 0xc1}, {&(0x7f0000001a00)="0befd5aaac5d98f60c0900000098f52b", 0x10}], 0x4) 17:21:07 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e00000085000000500000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x9) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) [ 941.063979][T12284] damon-dbgfs: DAMON debugfs interface is deprecated, so users should move to DAMON_SYSFS. If you cannot, please report your usecase to damon@lists.linux.dev and linux-mm@kvack.org. [ 941.141021][ T7] usb 6-1: new high-speed USB device number 96 using dummy_hcd 17:21:08 executing program 4: syz_mount_image$gfs2(&(0x7f00000124c0), &(0x7f0000000000)='./file0\x00', 0x20400f, &(0x7f0000000080)={[{@localflocks}, {@errors_withdraw}]}, 0x1, 0x124dc, &(0x7f0000036f40)="$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") [ 941.522633][ T7] usb 6-1: config index 0 descriptor too short (expected 65532, got 27) [ 941.531378][ T7] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 941.540562][ T7] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 941.549891][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 941.783642][ T7] usb 6-1: New USB device found, idVendor=2013, idProduct=0461, bcdDevice=f3.75 [ 941.793394][ T7] usb 6-1: New USB device strings: Mfr=111, Product=248, SerialNumber=42 [ 941.802327][ T7] usb 6-1: Product: syz [ 941.806825][ T7] usb 6-1: Manufacturer: syz [ 941.811836][ T7] usb 6-1: SerialNumber: syz [ 941.868586][ T7] usb 6-1: config 0 descriptor?? [ 941.945444][ T7] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2013:0461, interface 0, class 0) [ 941.960303][ T7] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 942.647670][ T7] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 942.692925][ T7] em28xx 6-1:0.0: Config register raw data: 0x00 [ 942.766053][T12293] loop4: detected capacity change from 0 to 32768 [ 942.799562][T12293] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 942.808223][T12293] gfs2: fsid=syz:syz: Now mounting FS (format 1802)... [ 942.836843][T12293] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 942.836843][T12293] inode = 1 19 [ 942.836843][T12293] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 463 [ 942.856721][T12293] gfs2: fsid=syz:syz.0: G: s:SH n:2/13 f:qobnN t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 942.866257][T12293] gfs2: fsid=syz:syz.0: H: s:SH f:eEcH e:0 p:0 [(none)] init_inodes+0x125/0x510 [ 942.876176][T12293] ===================================================== [ 942.883666][T12293] BUG: KMSAN: uninit-value in inode_go_dump+0x49d/0x4d0 [ 942.890806][T12293] inode_go_dump+0x49d/0x4d0 [ 942.895742][T12293] gfs2_dump_glock+0x229d/0x23e0 [ 942.900838][T12293] gfs2_consist_inode_i+0x19f/0x220 [ 942.906412][T12293] gfs2_inode_refresh+0x10de/0x14e0 [ 942.911801][T12293] inode_go_instantiate+0x6e/0xc0 [ 942.917136][T12293] gfs2_instantiate+0x26f/0x4b0 [ 942.922251][T12293] gfs2_glock_wait+0x2a4/0x3e0 [ 942.927189][T12293] gfs2_glock_nq+0x207e/0x2eb0 [ 942.932273][T12293] init_journal+0x11f2/0x3910 [ 942.937118][T12293] init_inodes+0x125/0x510 [ 942.941684][T12293] gfs2_fill_super+0x3d55/0x45e0 [ 942.946939][T12293] get_tree_bdev+0x890/0xd10 [ 942.951721][T12293] gfs2_get_tree+0x5c/0x340 [ 942.956543][T12293] vfs_get_tree+0xa5/0x500 [ 942.961127][T12293] do_new_mount+0x69a/0x1580 [ 942.966003][T12293] path_mount+0x725/0x1ee0 [ 942.970604][T12293] __se_sys_mount+0x734/0x840 [ 942.975613][T12293] __ia32_sys_mount+0xe3/0x150 [ 942.980566][T12293] __do_fast_syscall_32+0xa2/0x100 [ 942.986006][T12293] do_fast_syscall_32+0x37/0x80 [ 942.991036][T12293] do_SYSENTER_32+0x1f/0x30 [ 942.995828][T12293] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 943.002426][T12293] [ 943.004831][T12293] Uninit was created at: [ 943.009278][T12293] __alloc_pages+0x9f6/0xe90 [ 943.014182][T12293] alloc_pages+0xab0/0xd80 [ 943.018747][T12293] new_slab+0x425/0x15f0 [ 943.023260][T12293] ___slab_alloc+0x109c/0x32d0 [ 943.028205][T12293] kmem_cache_alloc_lru+0x5fb/0xa50 [ 943.033725][T12293] gfs2_alloc_inode+0x66/0x210 [ 943.038675][T12293] alloc_inode+0x83/0x440 [ 943.043279][T12293] iget5_locked+0xa9/0x210 [ 943.047890][T12293] gfs2_inode_lookup+0xcb/0x1590 [ 943.053142][T12293] gfs2_dir_search+0x2d3/0x420 [ 943.058210][T12293] gfs2_lookupi+0x6e6/0x9d0 [ 943.063012][T12293] init_journal+0x70e/0x3910 [ 943.067771][T12293] init_inodes+0x125/0x510 [ 943.072493][T12293] gfs2_fill_super+0x3d55/0x45e0 [ 943.077602][T12293] get_tree_bdev+0x890/0xd10 [ 943.082473][T12293] gfs2_get_tree+0x5c/0x340 [ 943.087176][T12293] vfs_get_tree+0xa5/0x500 [ 943.091779][T12293] do_new_mount+0x69a/0x1580 [ 943.096673][T12293] path_mount+0x725/0x1ee0 [ 943.101246][T12293] __se_sys_mount+0x734/0x840 [ 943.106199][T12293] __ia32_sys_mount+0xe3/0x150 [ 943.111130][T12293] __do_fast_syscall_32+0xa2/0x100 [ 943.116507][T12293] do_fast_syscall_32+0x37/0x80 [ 943.121529][T12293] do_SYSENTER_32+0x1f/0x30 [ 943.126323][T12293] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 943.132931][T12293] [ 943.135337][T12293] CPU: 0 PID: 12293 Comm: syz-executor.4 Not tainted 6.3.0-rc3-syzkaller-g90ea0df61c98 #0 [ 943.145534][T12293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 943.155837][T12293] ===================================================== [ 943.163022][T12293] Disabling lock debugging due to kernel taint [ 943.169284][T12293] Kernel panic - not syncing: kmsan.panic set ... [ 943.175817][T12293] CPU: 0 PID: 12293 Comm: syz-executor.4 Tainted: G B 6.3.0-rc3-syzkaller-g90ea0df61c98 #0 [ 943.187374][T12293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 943.197551][T12293] Call Trace: [ 943.200907][T12293] [ 943.203935][T12293] dump_stack_lvl+0x1cc/0x260 [ 943.208790][T12293] dump_stack+0x1e/0x20 [ 943.213071][T12293] panic+0x4e2/0xc70 [ 943.217286][T12293] ? add_taint+0x108/0x1a0 [ 943.221848][T12293] kmsan_report+0x2d0/0x2d0 [ 943.226472][T12293] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 943.232940][T12293] ? __msan_warning+0x96/0x110 [ 943.237860][T12293] ? inode_go_dump+0x49d/0x4d0 [ 943.242814][T12293] ? gfs2_dump_glock+0x229d/0x23e0 [ 943.248101][T12293] ? gfs2_consist_inode_i+0x19f/0x220 [ 943.253642][T12293] ? gfs2_inode_refresh+0x10de/0x14e0 [ 943.259210][T12293] ? inode_go_instantiate+0x6e/0xc0 [ 943.264602][T12293] ? gfs2_instantiate+0x26f/0x4b0 [ 943.269805][T12293] ? gfs2_glock_wait+0x2a4/0x3e0 [ 943.274911][T12293] ? gfs2_glock_nq+0x207e/0x2eb0 [ 943.280020][T12293] ? init_journal+0x11f2/0x3910 [ 943.285021][T12293] ? init_inodes+0x125/0x510 [ 943.289754][T12293] ? gfs2_fill_super+0x3d55/0x45e0 [ 943.294983][T12293] ? get_tree_bdev+0x890/0xd10 [ 943.299938][T12293] ? gfs2_get_tree+0x5c/0x340 [ 943.304779][T12293] ? vfs_get_tree+0xa5/0x500 [ 943.309548][T12293] ? do_new_mount+0x69a/0x1580 [ 943.314466][T12293] ? path_mount+0x725/0x1ee0 [ 943.319157][T12293] ? __se_sys_mount+0x734/0x840 [ 943.324131][T12293] ? __ia32_sys_mount+0xe3/0x150 [ 943.329253][T12293] ? __do_fast_syscall_32+0xa2/0x100 [ 943.334716][T12293] ? do_fast_syscall_32+0x37/0x80 [ 943.339921][T12293] ? do_SYSENTER_32+0x1f/0x30 [ 943.344774][T12293] ? entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 943.351475][T12293] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 943.357472][T12293] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 943.363499][T12293] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 943.369482][T12293] __msan_warning+0x96/0x110 [ 943.374225][T12293] inode_go_dump+0x49d/0x4d0 [ 943.379032][T12293] ? inode_go_held+0x350/0x350 [ 943.383989][T12293] gfs2_dump_glock+0x229d/0x23e0 [ 943.389195][T12293] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 943.395187][T12293] gfs2_consist_inode_i+0x19f/0x220 [ 943.400571][T12293] gfs2_inode_refresh+0x10de/0x14e0 [ 943.405964][T12293] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 943.412278][T12293] inode_go_instantiate+0x6e/0xc0 [ 943.417501][T12293] ? inode_go_demote_ok+0x170/0x170 [ 943.422893][T12293] gfs2_instantiate+0x26f/0x4b0 [ 943.427938][T12293] gfs2_glock_wait+0x2a4/0x3e0 [ 943.432896][T12293] gfs2_glock_nq+0x207e/0x2eb0 [ 943.437911][T12293] init_journal+0x11f2/0x3910 [ 943.442795][T12293] ? init_inodes+0x125/0x510 [ 943.447551][T12293] ? snprintf+0x1b5/0x200 [ 943.452044][T12293] ? init_inodes+0x125/0x510 [ 943.456810][T12293] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 943.462801][T12293] init_inodes+0x125/0x510 [ 943.467401][T12293] gfs2_fill_super+0x3d55/0x45e0 [ 943.472989][T12293] ? init_locking+0xf0/0x510 [ 943.477745][T12293] ? sb_set_blocksize+0x132/0x170 [ 943.483098][T12293] get_tree_bdev+0x890/0xd10 [ 943.487873][T12293] ? gfs2_reconfigure+0x15a0/0x15a0 [ 943.493262][T12293] gfs2_get_tree+0x5c/0x340 [ 943.497975][T12293] ? gfs2_parse_param+0x14d0/0x14d0 [ 943.503364][T12293] ? gfs2_parse_param+0x14d0/0x14d0 [ 943.508714][T12293] vfs_get_tree+0xa5/0x500 [ 943.513311][T12293] ? mount_capable+0x97/0x120 [ 943.518172][T12293] do_new_mount+0x69a/0x1580 [ 943.522950][T12293] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 943.528954][T12293] path_mount+0x725/0x1ee0 [ 943.533517][T12293] ? user_path_at_empty+0x323/0x3a0 [ 943.538892][T12293] __se_sys_mount+0x734/0x840 [ 943.543818][T12293] __ia32_sys_mount+0xe3/0x150 [ 943.548761][T12293] __do_fast_syscall_32+0xa2/0x100 [ 943.554000][T12293] ? irqentry_exit+0x16/0x40 [ 943.558788][T12293] ? exc_page_fault+0x38a/0x600 [ 943.563777][T12293] do_fast_syscall_32+0x37/0x80 [ 943.568781][T12293] do_SYSENTER_32+0x1f/0x30 [ 943.573403][T12293] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 943.579887][T12293] RIP: 0023:0xf7ff5579 [ 943.584041][T12293] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 943.603853][T12293] RSP: 002b:00000000f7ff0410 EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 943.612435][T12293] RAX: ffffffffffffffda RBX: 00000000f7ff0480 RCX: 0000000020000000 [ 943.620552][T12293] RDX: 00000000200124c0 RSI: 000000000020400f RDI: 00000000f7ff04c0 [ 943.628666][T12293] RBP: 00000000f7ff04c0 R08: 0000000000000000 R09: 0000000000000000 [ 943.636776][T12293] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 943.644881][T12293] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 943.653013][T12293] [ 943.656345][T12293] Kernel Offset: disabled [ 943.660734][T12293] Rebooting in 86400 seconds..